<oval_definitions xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" xmlns:aix-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#aix" xmlns:hpux-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#hpux" xmlns:ind-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" xmlns:independent-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" xmlns:linux-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" xmlns:macos-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#macos" xmlns:oval="http://oval.mitre.org/XMLSchema/oval-common-5" xmlns:oval-def="http://oval.mitre.org/XMLSchema/oval-definitions-5" xmlns:sol-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris" xmlns:unix-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" xmlns:win-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://oval.mitre.org/XMLSchema/oval-definitions-5 mcafee-pa-oval-definitions-schema-1.0.xsd http://oval.mitre.org/XMLSchema/oval-definitions-5#windows windows-definitions-schema.xsd http://oval.mitre.org/XMLSchema/oval-definitions-5#independent independent-definitions-schema.xsd http://oval.mitre.org/XMLSchema/oval-common-5 oval-common-schema.xsd http://oval.mitre.org/XMLSchema/oval-definitions-5#unix unix-definitions-schema.xsd http://oval.mitre.org/XMLSchema/oval-definitions-5#linux linux-definitions-schema.xsd http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris solaris-definitions-schema.xsd http://oval.mitre.org/XMLSchema/oval-definitions-5#macos macos-definitions-schema.xsd http://oval.mitre.org/XMLSchema/oval-definitions-5#hpux hpux-definitions-schema.xsd http://oval.mitre.org/XMLSchema/oval-definitions-5#aix aix-definitions-schema.xsd">
  <generator>
    <oval:product_name>McAfee's OvalZilla</oval:product_name>
    <oval:product_version>Version 1.0</oval:product_version>
    <oval:schema_version>5.3</oval:schema_version>
    <oval:timestamp>2026-03-01T05:50:30-06:00</oval:timestamp>
  </generator>
  <definitions>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:326503" version="24">
      <metadata>
        <title>Test for libmysql55client18 On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
This MySQL update provides the following:   * upgrade to version 5.5.39, [bnc#887580]   * CVEs fixed: CVE-2014-2484, CVE-2014-4258, CVE-2014-4260,   CVE-2014-2494, CVE-2014-4238, CVE-2014-4207, CVE-2014-4233,   CVE-2014-4240, CVE-2014-4214, CVE-2014-4243   See also:   http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html   /www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html   Security Issues:   * CVE-2014-2484   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2484   * CVE-2014-4258   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4258   * CVE-2014-4260   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4260   * CVE-2014-2494   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2494   * CVE-2014-4238   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4238   * CVE-2014-4207   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4207   * CVE-2014-4233   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4233   * CVE-2014-4240   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4240   * CVE-2014-4214   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4214   * CVE-2014-4243   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4243Patch Instructions:   To install this SUSE Security Update use YaST online_update. Refer to Advisory for further details. 
</description>
        <affected family="unix">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:1072-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2014-2484" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2484" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4258" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4258" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4260" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4260" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-2494" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2494" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4238" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4238" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4207" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4207" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4233" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4233" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4240" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4240" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4214" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4214" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4243" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4243" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-2484" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2484" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-2484" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2484" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4258" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4258" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4258" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4258" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4260" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4260" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4260" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4260" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-2494" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2494" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-2494" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2494" source="SUSE Advisory Releases" />
        <reference ref_id="CVE" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:326500" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:326499" version="24">
      <metadata>
        <title>Test for mysql-tools On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
This MySQL update provides the following:   * upgrade to version 5.5.39, [bnc#887580]   * CVEs fixed: CVE-2014-2484, CVE-2014-4258, CVE-2014-4260,   CVE-2014-2494, CVE-2014-4238, CVE-2014-4207, CVE-2014-4233,   CVE-2014-4240, CVE-2014-4214, CVE-2014-4243   See also:   http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html   /www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html   Security Issues:   * CVE-2014-2484   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2484   * CVE-2014-4258   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4258   * CVE-2014-4260   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4260   * CVE-2014-2494   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2494   * CVE-2014-4238   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4238   * CVE-2014-4207   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4207   * CVE-2014-4233   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4233   * CVE-2014-4240   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4240   * CVE-2014-4214   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4214   * CVE-2014-4243   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4243Patch Instructions:   To install this SUSE Security Update use YaST online_update. Refer to Advisory for further details. 
</description>
        <affected family="unix">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:1072-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2014-2484" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2484" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4258" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4258" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4260" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4260" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-2494" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2494" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4238" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4238" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4207" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4207" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4233" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4233" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4240" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4240" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4214" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4214" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4243" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4243" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-2484" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2484" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-2484" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2484" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4258" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4258" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4258" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4258" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4260" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4260" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4260" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4260" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-2494" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2494" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-2494" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2494" source="SUSE Advisory Releases" />
        <reference ref_id="CVE" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:326496" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:326495" version="24">
      <metadata>
        <title>Test for libmysqlclient15 On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
This MySQL update provides the following:   * upgrade to version 5.5.39, [bnc#887580]   * CVEs fixed: CVE-2014-2484, CVE-2014-4258, CVE-2014-4260,   CVE-2014-2494, CVE-2014-4238, CVE-2014-4207, CVE-2014-4233,   CVE-2014-4240, CVE-2014-4214, CVE-2014-4243   See also:   http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html   /www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html   Security Issues:   * CVE-2014-2484   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2484   * CVE-2014-4258   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4258   * CVE-2014-4260   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4260   * CVE-2014-2494   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2494   * CVE-2014-4238   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4238   * CVE-2014-4207   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4207   * CVE-2014-4233   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4233   * CVE-2014-4240   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4240   * CVE-2014-4214   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4214   * CVE-2014-4243   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4243Patch Instructions:   To install this SUSE Security Update use YaST online_update. Refer to Advisory for further details. 
</description>
        <affected family="unix">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:1072-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2014-2484" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2484" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4258" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4258" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4260" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4260" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-2494" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2494" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4238" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4238" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4207" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4207" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4233" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4233" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4240" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4240" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4214" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4214" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4243" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4243" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-2484" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2484" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-2484" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2484" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4258" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4258" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4258" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4258" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4260" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4260" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4260" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4260" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-2494" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2494" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-2494" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2494" source="SUSE Advisory Releases" />
        <reference ref_id="CVE" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:326492" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:326491" version="24">
      <metadata>
        <title>Test for mysql-client On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
This MySQL update provides the following:   * upgrade to version 5.5.39, [bnc#887580]   * CVEs fixed: CVE-2014-2484, CVE-2014-4258, CVE-2014-4260,   CVE-2014-2494, CVE-2014-4238, CVE-2014-4207, CVE-2014-4233,   CVE-2014-4240, CVE-2014-4214, CVE-2014-4243   See also:   http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html   /www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html   Security Issues:   * CVE-2014-2484   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2484   * CVE-2014-4258   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4258   * CVE-2014-4260   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4260   * CVE-2014-2494   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2494   * CVE-2014-4238   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4238   * CVE-2014-4207   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4207   * CVE-2014-4233   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4233   * CVE-2014-4240   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4240   * CVE-2014-4214   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4214   * CVE-2014-4243   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4243Patch Instructions:   To install this SUSE Security Update use YaST online_update. Refer to Advisory for further details. 
</description>
        <affected family="unix">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:1072-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2014-2484" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2484" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4258" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4258" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4260" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4260" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-2494" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2494" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4238" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4238" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4207" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4207" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4233" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4233" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4240" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4240" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4214" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4214" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4243" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4243" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-2484" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2484" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-2484" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2484" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4258" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4258" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4258" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4258" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4260" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4260" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4260" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4260" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-2494" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2494" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-2494" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2494" source="SUSE Advisory Releases" />
        <reference ref_id="CVE" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:326488" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:326487" version="24">
      <metadata>
        <title>Test for libmysql55client_r18 On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
This MySQL update provides the following:   * upgrade to version 5.5.39, [bnc#887580]   * CVEs fixed: CVE-2014-2484, CVE-2014-4258, CVE-2014-4260,   CVE-2014-2494, CVE-2014-4238, CVE-2014-4207, CVE-2014-4233,   CVE-2014-4240, CVE-2014-4214, CVE-2014-4243   See also:   http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html   /www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html   Security Issues:   * CVE-2014-2484   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2484   * CVE-2014-4258   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4258   * CVE-2014-4260   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4260   * CVE-2014-2494   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2494   * CVE-2014-4238   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4238   * CVE-2014-4207   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4207   * CVE-2014-4233   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4233   * CVE-2014-4240   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4240   * CVE-2014-4214   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4214   * CVE-2014-4243   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4243Patch Instructions:   To install this SUSE Security Update use YaST online_update. Refer to Advisory for further details. 
</description>
        <affected family="unix">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:1072-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2014-2484" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2484" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4258" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4258" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4260" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4260" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-2494" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2494" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4238" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4238" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4207" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4207" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4233" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4233" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4240" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4240" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4214" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4214" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4243" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4243" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-2484" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2484" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-2484" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2484" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4258" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4258" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4258" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4258" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4260" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4260" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4260" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4260" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-2494" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2494" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-2494" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2494" source="SUSE Advisory Releases" />
        <reference ref_id="CVE" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:326484" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:326483" version="24">
      <metadata>
        <title>Test for mysql On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
This MySQL update provides the following:   * upgrade to version 5.5.39, [bnc#887580]   * CVEs fixed: CVE-2014-2484, CVE-2014-4258, CVE-2014-4260,   CVE-2014-2494, CVE-2014-4238, CVE-2014-4207, CVE-2014-4233,   CVE-2014-4240, CVE-2014-4214, CVE-2014-4243   See also:   http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html   /www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html   Security Issues:   * CVE-2014-2484   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2484   * CVE-2014-4258   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4258   * CVE-2014-4260   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4260   * CVE-2014-2494   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2494   * CVE-2014-4238   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4238   * CVE-2014-4207   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4207   * CVE-2014-4233   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4233   * CVE-2014-4240   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4240   * CVE-2014-4214   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4214   * CVE-2014-4243   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4243Patch Instructions:   To install this SUSE Security Update use YaST online_update. Refer to Advisory for further details. 
</description>
        <affected family="unix">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:1072-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2014-2484" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2484" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4258" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4258" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4260" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4260" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-2494" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2494" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4238" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4238" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4207" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4207" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4233" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4233" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4240" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4240" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4214" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4214" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4243" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4243" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-2484" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2484" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-2484" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2484" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4258" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4258" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4258" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4258" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4260" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4260" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4260" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4260" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-2494" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2494" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-2494" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2494" source="SUSE Advisory Releases" />
        <reference ref_id="CVE" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:326480" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:326479" version="24">
      <metadata>
        <title>Test for libmysqlclient_r15 On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
This MySQL update provides the following:   * upgrade to version 5.5.39, [bnc#887580]   * CVEs fixed: CVE-2014-2484, CVE-2014-4258, CVE-2014-4260,   CVE-2014-2494, CVE-2014-4238, CVE-2014-4207, CVE-2014-4233,   CVE-2014-4240, CVE-2014-4214, CVE-2014-4243   See also:   http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html   /www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html   Security Issues:   * CVE-2014-2484   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2484   * CVE-2014-4258   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4258   * CVE-2014-4260   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4260   * CVE-2014-2494   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2494   * CVE-2014-4238   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4238   * CVE-2014-4207   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4207   * CVE-2014-4233   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4233   * CVE-2014-4240   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4240   * CVE-2014-4214   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4214   * CVE-2014-4243   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4243Patch Instructions:   To install this SUSE Security Update use YaST online_update. Refer to Advisory for further details. 
</description>
        <affected family="unix">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:1072-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2014-2484" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2484" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4258" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4258" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4260" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4260" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-2494" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2494" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4238" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4238" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4207" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4207" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4233" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4233" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4240" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4240" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4214" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4214" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4243" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4243" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-2484" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2484" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-2484" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2484" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4258" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4258" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4258" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4258" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4260" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4260" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4260" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4260" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-2494" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2494" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-2494" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2494" source="SUSE Advisory Releases" />
        <reference ref_id="CVE" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:326476" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:326475" version="24">
      <metadata>
        <title>Test for libmysql55client18-32bit On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
This MySQL update provides the following:   * upgrade to version 5.5.39, [bnc#887580]   * CVEs fixed: CVE-2014-2484, CVE-2014-4258, CVE-2014-4260,   CVE-2014-2494, CVE-2014-4238, CVE-2014-4207, CVE-2014-4233,   CVE-2014-4240, CVE-2014-4214, CVE-2014-4243   See also:   http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html   /www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html   Security Issues:   * CVE-2014-2484   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2484   * CVE-2014-4258   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4258   * CVE-2014-4260   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4260   * CVE-2014-2494   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2494   * CVE-2014-4238   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4238   * CVE-2014-4207   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4207   * CVE-2014-4233   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4233   * CVE-2014-4240   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4240   * CVE-2014-4214   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4214   * CVE-2014-4243   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4243Patch Instructions:   To install this SUSE Security Update use YaST online_update. Refer to Advisory for further details. 
</description>
        <affected family="unix">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:1072-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2014-2484" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2484" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4258" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4258" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4260" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4260" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-2494" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2494" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4238" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4238" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4207" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4207" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4233" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4233" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4240" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4240" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4214" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4214" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4243" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4243" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-2484" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2484" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-2484" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2484" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4258" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4258" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4258" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4258" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4260" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4260" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4260" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4260" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-2494" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2494" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-2494" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2494" source="SUSE Advisory Releases" />
        <reference ref_id="CVE" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:326472" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:326471" version="24">
      <metadata>
        <title>Test for libmysqlclient15-32bit On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
This MySQL update provides the following:   * upgrade to version 5.5.39, [bnc#887580]   * CVEs fixed: CVE-2014-2484, CVE-2014-4258, CVE-2014-4260,   CVE-2014-2494, CVE-2014-4238, CVE-2014-4207, CVE-2014-4233,   CVE-2014-4240, CVE-2014-4214, CVE-2014-4243   See also:   http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html   /www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html   Security Issues:   * CVE-2014-2484   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2484   * CVE-2014-4258   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4258   * CVE-2014-4260   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4260   * CVE-2014-2494   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2494   * CVE-2014-4238   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4238   * CVE-2014-4207   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4207   * CVE-2014-4233   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4233   * CVE-2014-4240   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4240   * CVE-2014-4214   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4214   * CVE-2014-4243   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4243Patch Instructions:   To install this SUSE Security Update use YaST online_update. Refer to Advisory for further details. 
</description>
        <affected family="unix">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:1072-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2014-2484" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2484" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4258" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4258" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4260" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4260" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-2494" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2494" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4238" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4238" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4207" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4207" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4233" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4233" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4240" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4240" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4214" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4214" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4243" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4243" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-2484" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2484" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-2484" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2484" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4258" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4258" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4258" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4258" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4260" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4260" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4260" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4260" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-2494" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2494" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-2494" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2494" source="SUSE Advisory Releases" />
        <reference ref_id="CVE" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:326468" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:326467" version="24">
      <metadata>
        <title>Test for libgpgme11 On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
This gpgme update fixes the following security issue:   * bnc#890123: Fix possible overflow in gpgsm and uiserver engines   CVE-2014-3564   Security Issues:   * CVE-2014-3564   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3564Patch Instructions:   To install this SUSE Security Update use YaST online_update. Refer to Advisory for further details. 
</description>
        <affected family="unix">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:1073-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2014-3564" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3564" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3564" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3564" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3564" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3564" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:326464" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:326463" version="24">
      <metadata>
        <title>Test for gpgme On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
This gpgme update fixes the following security issue:   * bnc#890123: Fix possible overflow in gpgsm and uiserver engines   CVE-2014-3564   Security Issues:   * CVE-2014-3564   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3564Patch Instructions:   To install this SUSE Security Update use YaST online_update. Refer to Advisory for further details. 
</description>
        <affected family="unix">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:1073-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2014-3564" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3564" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3564" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3564" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3564" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3564" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:326460" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:326455" version="24">
      <metadata>
        <title>Test for libgcrypt11 On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
This libgcrypt update fixes the following security issue:   * bnc#892464: Side-channel attack on Elgamal encryption subkeys. Refer to Advisory for further details. 
</description>
        <affected family="unix">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:1077-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2014-5270" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5270" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-5270" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5270" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-5270" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5270" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:326452" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:326451" version="24">
      <metadata>
        <title>Test for ppp On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
This ppp update fixes a potential security issue that an unprivileged   attacker could access privileged options:   * integer overflow in option parsing CVE-2014-3158, bnc#891489   Security Issues:   * CVE-2014-3158   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3158Patch Instructions:   To install this SUSE Security Update use YaST online_update. Refer to Advisory for further details. 
</description>
        <affected family="unix">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:1088-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2014-3158" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3158" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3158" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3158" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3158" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3158" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:326448" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:326447" version="24">
      <metadata>
        <title>Test for libsnmp15-32bit On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
This update for net-snmp fixes a remote denial of service problem inside   snmptrapd when it is started with the "-OQ" option. Refer to Advisory for further details. 
</description>
        <affected family="unix">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:1106-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2014-3565" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3565" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3565" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3565" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3565" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3565" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:326444" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:326443" version="24">
      <metadata>
        <title>Test for perl-SNMP On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
This update for net-snmp fixes a remote denial of service problem inside   snmptrapd when it is started with the "-OQ" option. Refer to Advisory for further details. 
</description>
        <affected family="unix">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:1106-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2014-3565" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3565" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3565" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3565" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3565" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3565" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:326440" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:326439" version="24">
      <metadata>
        <title>Test for snmp-mibs On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
This update for net-snmp fixes a remote denial of service problem inside   snmptrapd when it is started with the "-OQ" option. Refer to Advisory for further details. 
</description>
        <affected family="unix">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:1106-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2014-3565" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3565" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3565" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3565" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3565" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3565" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:326436" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:326435" version="24">
      <metadata>
        <title>Test for libsnmp15 On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
This update for net-snmp fixes a remote denial of service problem inside   snmptrapd when it is started with the "-OQ" option. Refer to Advisory for further details. 
</description>
        <affected family="unix">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:1106-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2014-3565" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3565" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3565" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3565" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3565" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3565" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:326432" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:326431" version="24">
      <metadata>
        <title>Test for net-snmp On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
This update for net-snmp fixes a remote denial of service problem inside   snmptrapd when it is started with the "-OQ" option. Refer to Advisory for further details. 
</description>
        <affected family="unix">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:1106-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2014-3565" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3565" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3565" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3565" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3565" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3565" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:326428" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:326339" version="24">
      <metadata>
        <title>Test for libQtWebKit4 On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
This update of the QT4 QSSL interface makes it select a set of default   ciphers that is recommended for current usage. Refer to Advisory for further details. 
</description>
        <affected family="unix">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:1121-1" source="https://www.suse.com/support/update/announcement/" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:326336" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:325513" version="24">
      <metadata>
        <title>Test for libvirt-client On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
libvirt has been patched to fix two security issues. Refer to Advisory for further details. 
</description>
        <affected family="unix">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:0785-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2014-0179" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0179" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0179" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0179" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6456" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6456" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6456" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6456" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0179" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0179" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6456" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6456" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0179" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0179" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0179" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0179" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6456" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6456" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6456" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6456" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:325510" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:325509" version="24">
      <metadata>
        <title>Test for libvirt-doc On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
libvirt has been patched to fix two security issues. Refer to Advisory for further details. 
</description>
        <affected family="unix">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:0785-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2014-0179" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0179" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0179" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0179" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6456" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6456" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6456" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6456" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0179" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0179" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6456" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6456" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0179" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0179" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0179" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0179" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6456" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6456" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6456" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6456" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:325506" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:325505" version="24">
      <metadata>
        <title>Test for libvirt-python On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
libvirt has been patched to fix two security issues. Refer to Advisory for further details. 
</description>
        <affected family="unix">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:0785-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2014-0179" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0179" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0179" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0179" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6456" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6456" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6456" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6456" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0179" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0179" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6456" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6456" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0179" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0179" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0179" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0179" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6456" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6456" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6456" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6456" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:325502" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:325501" version="24">
      <metadata>
        <title>Test for libvirt-lock-sanlock On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
libvirt has been patched to fix two security issues. Refer to Advisory for further details. 
</description>
        <affected family="unix">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:0785-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2014-0179" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0179" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0179" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0179" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6456" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6456" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6456" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6456" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0179" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0179" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6456" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6456" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0179" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0179" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0179" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0179" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6456" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6456" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6456" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6456" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:325498" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:325497" version="24">
      <metadata>
        <title>Test for libvirt On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
libvirt has been patched to fix two security issues. Refer to Advisory for further details. 
</description>
        <affected family="unix">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:0785-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2014-0179" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0179" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0179" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0179" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6456" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6456" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6456" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6456" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0179" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0179" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6456" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6456" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0179" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0179" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0179" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0179" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6456" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6456" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6456" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6456" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:325494" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:325493" version="24">
      <metadata>
        <title>Test for libvirt-client-32bit On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
libvirt has been patched to fix two security issues. Refer to Advisory for further details. 
</description>
        <affected family="unix">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:0785-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2014-0179" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0179" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0179" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0179" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6456" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6456" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6456" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6456" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0179" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0179" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6456" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6456" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0179" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0179" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0179" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0179" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6456" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6456" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6456" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6456" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:325490" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:325489" version="24">
      <metadata>
        <title>Test for strongswan-doc On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
This update fixes a NULL ptr dereference DoS via ID_DER_ASN1_DN ID   payloads. Refer to Advisory for further details. 
</description>
        <affected family="unix">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:0793-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2014-2891" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2891" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-2891" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2891" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:325486" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:325485" version="24">
      <metadata>
        <title>Test for strongswan On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
This update fixes a NULL ptr dereference DoS via ID_DER_ASN1_DN ID   payloads. Refer to Advisory for further details. 
</description>
        <affected family="unix">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:0793-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2014-2891" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2891" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-2891" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2891" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:325482" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:325481" version="24">
      <metadata>
        <title>Test for openssl-certs On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
openssl-certs has been updated to include four new and remove two   certificates:   * new: Atos_TrustedRoot_2011:2.8.92.51.203.98.44.95.179.50.crt   * new:   E-Tugra_Certification_Authority:2.8.106.104.62.156.81.155.203.83.crt   * new:   TeliaSonera_Root_CA_v1:2.17.0.149.190.22.160.247.46.70.241.123.57.130.114.2   50.139.205.150.crt   * new: T-TeleSec_GlobalRoot_Class_2:2.1.1.crt   * removed: Firmaprofesional_Root_CA:2.1.1.crt   * removed: TDC_OCES_Root_CA:2.4.62.72.189.196.crtPatch Instructions:   To install this SUSE Security Update use YaST online_update. Refer to Advisory for further details. 
</description>
        <affected family="unix">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:0808-1" source="https://www.suse.com/support/update/announcement/" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:325478" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:325317" version="24">
      <metadata>
        <title>Test for php53-sysvshm On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
php53 was updated to fix the following security vulnerabilities:   * Heap-based buffer overflow in DNS TXT record parsing. Refer to Advisory for further details. 
</description>
        <affected family="unix">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:0869-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2014-4049" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4049" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0238" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0238" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0237" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0237" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-2497" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2497" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4049" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4049" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4049" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4049" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0238" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0238" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0238" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0238" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0237" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0237" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0237" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0237" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-2497" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2497" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-2497" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2497" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:325314" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:325313" version="24">
      <metadata>
        <title>Test for php53-zlib On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
php53 was updated to fix the following security vulnerabilities:   * Heap-based buffer overflow in DNS TXT record parsing. Refer to Advisory for further details. 
</description>
        <affected family="unix">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:0869-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2014-4049" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4049" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0238" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0238" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0237" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0237" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-2497" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2497" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4049" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4049" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4049" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4049" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0238" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0238" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0238" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0238" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0237" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0237" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0237" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0237" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-2497" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2497" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-2497" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2497" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:325310" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:325309" version="24">
      <metadata>
        <title>Test for php53-curl On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
php53 was updated to fix the following security vulnerabilities:   * Heap-based buffer overflow in DNS TXT record parsing. Refer to Advisory for further details. 
</description>
        <affected family="unix">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:0869-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2014-4049" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4049" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0238" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0238" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0237" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0237" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-2497" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2497" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4049" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4049" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4049" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4049" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0238" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0238" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0238" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0238" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0237" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0237" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0237" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0237" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-2497" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2497" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-2497" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2497" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:325306" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:325305" version="24">
      <metadata>
        <title>Test for php53-dba On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
php53 was updated to fix the following security vulnerabilities:   * Heap-based buffer overflow in DNS TXT record parsing. Refer to Advisory for further details. 
</description>
        <affected family="unix">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:0869-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2014-4049" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4049" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0238" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0238" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0237" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0237" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-2497" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2497" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4049" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4049" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4049" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4049" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0238" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0238" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0238" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0238" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0237" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0237" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0237" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0237" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-2497" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2497" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-2497" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2497" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:325302" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:325301" version="24">
      <metadata>
        <title>Test for php53-fileinfo On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
php53 was updated to fix the following security vulnerabilities:   * Heap-based buffer overflow in DNS TXT record parsing. Refer to Advisory for further details. 
</description>
        <affected family="unix">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:0869-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2014-4049" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4049" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0238" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0238" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0237" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0237" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-2497" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2497" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4049" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4049" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4049" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4049" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0238" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0238" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0238" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0238" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0237" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0237" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0237" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0237" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-2497" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2497" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-2497" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2497" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:325298" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:325297" version="24">
      <metadata>
        <title>Test for php53-sysvmsg On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
php53 was updated to fix the following security vulnerabilities:   * Heap-based buffer overflow in DNS TXT record parsing. Refer to Advisory for further details. 
</description>
        <affected family="unix">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:0869-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2014-4049" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4049" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0238" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0238" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0237" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0237" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-2497" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2497" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4049" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4049" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4049" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4049" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0238" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0238" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0238" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0238" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0237" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0237" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0237" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0237" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-2497" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2497" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-2497" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2497" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:325294" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:325293" version="24">
      <metadata>
        <title>Test for php53-xmlrpc On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
php53 was updated to fix the following security vulnerabilities:   * Heap-based buffer overflow in DNS TXT record parsing. Refer to Advisory for further details. 
</description>
        <affected family="unix">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:0869-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2014-4049" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4049" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0238" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0238" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0237" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0237" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-2497" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2497" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4049" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4049" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4049" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4049" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0238" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0238" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0238" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0238" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0237" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0237" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0237" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0237" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-2497" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2497" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-2497" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2497" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:325290" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:325289" version="24">
      <metadata>
        <title>Test for php53 On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
php53 was updated to fix the following security vulnerabilities:   * Heap-based buffer overflow in DNS TXT record parsing. Refer to Advisory for further details. 
</description>
        <affected family="unix">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:0869-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2014-4049" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4049" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0238" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0238" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0237" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0237" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-2497" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2497" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4049" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4049" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4049" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4049" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0238" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0238" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0238" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0238" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0237" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0237" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0237" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0237" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-2497" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2497" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-2497" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2497" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:325286" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:325285" version="24">
      <metadata>
        <title>Test for php53-dom On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
php53 was updated to fix the following security vulnerabilities:   * Heap-based buffer overflow in DNS TXT record parsing. Refer to Advisory for further details. 
</description>
        <affected family="unix">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:0869-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2014-4049" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4049" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0238" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0238" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0237" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0237" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-2497" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2497" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4049" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4049" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4049" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4049" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0238" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0238" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0238" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0238" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0237" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0237" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0237" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0237" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-2497" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2497" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-2497" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2497" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:325282" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:325281" version="24">
      <metadata>
        <title>Test for php53-ftp On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
php53 was updated to fix the following security vulnerabilities:   * Heap-based buffer overflow in DNS TXT record parsing. Refer to Advisory for further details. 
</description>
        <affected family="unix">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:0869-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2014-4049" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4049" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0238" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0238" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0237" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0237" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-2497" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2497" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4049" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4049" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4049" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4049" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0238" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0238" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0238" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0238" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0237" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0237" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0237" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0237" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-2497" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2497" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-2497" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2497" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:325278" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:325277" version="24">
      <metadata>
        <title>Test for php53-odbc On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
php53 was updated to fix the following security vulnerabilities:   * Heap-based buffer overflow in DNS TXT record parsing. Refer to Advisory for further details. 
</description>
        <affected family="unix">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:0869-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2014-4049" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4049" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0238" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0238" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0237" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0237" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-2497" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2497" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4049" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4049" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4049" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4049" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0238" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0238" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0238" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0238" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0237" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0237" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0237" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0237" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-2497" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2497" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-2497" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2497" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:325274" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:325273" version="24">
      <metadata>
        <title>Test for php53-suhosin On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
php53 was updated to fix the following security vulnerabilities:   * Heap-based buffer overflow in DNS TXT record parsing. Refer to Advisory for further details. 
</description>
        <affected family="unix">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:0869-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2014-4049" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4049" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0238" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0238" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0237" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0237" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-2497" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2497" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4049" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4049" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4049" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4049" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0238" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0238" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0238" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0238" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0237" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0237" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0237" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0237" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-2497" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2497" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-2497" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2497" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:325270" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:325269" version="24">
      <metadata>
        <title>Test for php53-tokenizer On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
php53 was updated to fix the following security vulnerabilities:   * Heap-based buffer overflow in DNS TXT record parsing. Refer to Advisory for further details. 
</description>
        <affected family="unix">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:0869-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2014-4049" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4049" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0238" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0238" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0237" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0237" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-2497" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2497" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4049" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4049" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4049" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4049" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0238" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0238" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0238" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0238" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0237" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0237" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0237" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0237" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-2497" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2497" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-2497" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2497" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:325266" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:325265" version="24">
      <metadata>
        <title>Test for php53-zip On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
php53 was updated to fix the following security vulnerabilities:   * Heap-based buffer overflow in DNS TXT record parsing. Refer to Advisory for further details. 
</description>
        <affected family="unix">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:0869-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2014-4049" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4049" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0238" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0238" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0237" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0237" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-2497" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2497" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4049" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4049" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4049" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4049" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0238" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0238" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0238" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0238" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0237" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0237" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0237" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0237" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-2497" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2497" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-2497" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2497" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:325262" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:325261" version="24">
      <metadata>
        <title>Test for php53-bcmath On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
php53 was updated to fix the following security vulnerabilities:   * Heap-based buffer overflow in DNS TXT record parsing. Refer to Advisory for further details. 
</description>
        <affected family="unix">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:0869-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2014-4049" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4049" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0238" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0238" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0237" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0237" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-2497" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2497" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4049" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4049" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4049" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4049" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0238" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0238" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0238" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0238" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0237" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0237" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0237" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0237" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-2497" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2497" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-2497" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2497" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:325258" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:325257" version="24">
      <metadata>
        <title>Test for php53-json On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
php53 was updated to fix the following security vulnerabilities:   * Heap-based buffer overflow in DNS TXT record parsing. Refer to Advisory for further details. 
</description>
        <affected family="unix">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:0869-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2014-4049" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4049" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0238" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0238" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0237" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0237" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-2497" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2497" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4049" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4049" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4049" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4049" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0238" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0238" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0238" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0238" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0237" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0237" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0237" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0237" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-2497" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2497" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-2497" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2497" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:325254" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:325253" version="24">
      <metadata>
        <title>Test for php53-mysql On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
php53 was updated to fix the following security vulnerabilities:   * Heap-based buffer overflow in DNS TXT record parsing. Refer to Advisory for further details. 
</description>
        <affected family="unix">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:0869-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2014-4049" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4049" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0238" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0238" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0237" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0237" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-2497" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2497" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4049" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4049" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4049" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4049" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0238" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0238" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0238" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0238" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0237" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0237" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0237" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0237" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-2497" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2497" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-2497" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2497" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:325250" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:325249" version="24">
      <metadata>
        <title>Test for php53-openssl On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
php53 was updated to fix the following security vulnerabilities:   * Heap-based buffer overflow in DNS TXT record parsing. Refer to Advisory for further details. 
</description>
        <affected family="unix">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:0869-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2014-4049" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4049" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0238" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0238" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0237" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0237" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-2497" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2497" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4049" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4049" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4049" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4049" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0238" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0238" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0238" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0238" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0237" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0237" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0237" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0237" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-2497" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2497" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-2497" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2497" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:325246" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:325245" version="24">
      <metadata>
        <title>Test for php53-pgsql On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
php53 was updated to fix the following security vulnerabilities:   * Heap-based buffer overflow in DNS TXT record parsing. Refer to Advisory for further details. 
</description>
        <affected family="unix">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:0869-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2014-4049" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4049" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0238" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0238" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0237" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0237" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-2497" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2497" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4049" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4049" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4049" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4049" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0238" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0238" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0238" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0238" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0237" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0237" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0237" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0237" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-2497" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2497" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-2497" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2497" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:325242" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:325241" version="24">
      <metadata>
        <title>Test for php53-shmop On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
php53 was updated to fix the following security vulnerabilities:   * Heap-based buffer overflow in DNS TXT record parsing. Refer to Advisory for further details. 
</description>
        <affected family="unix">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:0869-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2014-4049" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4049" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0238" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0238" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0237" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0237" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-2497" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2497" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4049" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4049" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4049" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4049" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0238" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0238" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0238" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0238" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0237" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0237" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0237" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0237" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-2497" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2497" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-2497" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2497" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:325238" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:325237" version="24">
      <metadata>
        <title>Test for php53-wddx On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
php53 was updated to fix the following security vulnerabilities:   * Heap-based buffer overflow in DNS TXT record parsing. Refer to Advisory for further details. 
</description>
        <affected family="unix">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:0869-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2014-4049" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4049" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0238" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0238" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0237" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0237" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-2497" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2497" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4049" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4049" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4049" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4049" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0238" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0238" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0238" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0238" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0237" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0237" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0237" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0237" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-2497" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2497" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-2497" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2497" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:325234" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:325233" version="24">
      <metadata>
        <title>Test for php53-gettext On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
php53 was updated to fix the following security vulnerabilities:   * Heap-based buffer overflow in DNS TXT record parsing. Refer to Advisory for further details. 
</description>
        <affected family="unix">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:0869-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2014-4049" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4049" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0238" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0238" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0237" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0237" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-2497" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2497" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4049" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4049" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4049" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4049" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0238" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0238" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0238" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0238" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0237" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0237" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0237" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0237" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-2497" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2497" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-2497" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2497" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:325230" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:325229" version="24">
      <metadata>
        <title>Test for php53-gmp On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
php53 was updated to fix the following security vulnerabilities:   * Heap-based buffer overflow in DNS TXT record parsing. Refer to Advisory for further details. 
</description>
        <affected family="unix">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:0869-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2014-4049" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4049" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0238" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0238" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0237" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0237" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-2497" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2497" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4049" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4049" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4049" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4049" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0238" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0238" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0238" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0238" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0237" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0237" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0237" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0237" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-2497" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2497" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-2497" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2497" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:325226" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:325225" version="24">
      <metadata>
        <title>Test for php53-exif On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
php53 was updated to fix the following security vulnerabilities:   * Heap-based buffer overflow in DNS TXT record parsing. Refer to Advisory for further details. 
</description>
        <affected family="unix">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:0869-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2014-4049" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4049" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0238" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0238" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0237" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0237" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-2497" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2497" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4049" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4049" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4049" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4049" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0238" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0238" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0238" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0238" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0237" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0237" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0237" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0237" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-2497" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2497" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-2497" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2497" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:325222" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:325221" version="24">
      <metadata>
        <title>Test for php53-gd On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
php53 was updated to fix the following security vulnerabilities:   * Heap-based buffer overflow in DNS TXT record parsing. Refer to Advisory for further details. 
</description>
        <affected family="unix">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:0869-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2014-4049" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4049" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0238" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0238" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0237" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0237" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-2497" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2497" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4049" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4049" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4049" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4049" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0238" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0238" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0238" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0238" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0237" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0237" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0237" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0237" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-2497" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2497" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-2497" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2497" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:325218" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:325217" version="24">
      <metadata>
        <title>Test for php53-intl On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
php53 was updated to fix the following security vulnerabilities:   * Heap-based buffer overflow in DNS TXT record parsing. Refer to Advisory for further details. 
</description>
        <affected family="unix">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:0869-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2014-4049" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4049" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0238" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0238" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0237" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0237" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-2497" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2497" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4049" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4049" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4049" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4049" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0238" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0238" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0238" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0238" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0237" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0237" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0237" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0237" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-2497" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2497" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-2497" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2497" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:325214" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:325213" version="24">
      <metadata>
        <title>Test for php53-mcrypt On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
php53 was updated to fix the following security vulnerabilities:   * Heap-based buffer overflow in DNS TXT record parsing. Refer to Advisory for further details. 
</description>
        <affected family="unix">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:0869-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2014-4049" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4049" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0238" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0238" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0237" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0237" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-2497" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2497" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4049" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4049" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4049" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4049" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0238" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0238" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0238" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0238" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0237" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0237" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0237" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0237" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-2497" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2497" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-2497" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2497" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:325210" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:325209" version="24">
      <metadata>
        <title>Test for php53-pear On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
php53 was updated to fix the following security vulnerabilities:   * Heap-based buffer overflow in DNS TXT record parsing. Refer to Advisory for further details. 
</description>
        <affected family="unix">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:0869-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2014-4049" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4049" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0238" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0238" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0237" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0237" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-2497" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2497" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4049" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4049" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4049" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4049" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0238" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0238" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0238" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0238" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0237" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0237" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0237" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0237" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-2497" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2497" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-2497" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2497" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:325206" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:325205" version="24">
      <metadata>
        <title>Test for xalan-j2 On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
xalan-j2 has been updated to ensure that secure processing cant be   circumvented CVE-2014-0107. Refer to Advisory for further details. 
</description>
        <affected family="unix">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:0870-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2014-0107" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0107" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0107" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0107" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0107" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0107" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:325202" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:325201" version="24">
      <metadata>
        <title>Test for sendmail On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
sendmail has been updated to fix the following security issue:   * Not properly closing file descriptors before executing programs   CVE-2014-3956. Refer to Advisory for further details. 
</description>
        <affected family="unix">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:0872-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2014-3956" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3956" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3956" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3956" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3956" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3956" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:325198" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:325197" version="25">
      <metadata>
        <title>Test for puppet-server On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
Puppet was updated to fix the following security issues: * Unsafe use of temporary files. Refer to Advisory for further details.
</description>
        <affected family="unix">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:0880-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2013-4969" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4969" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3248" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3248" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3250" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3250" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:325194" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:325193" version="25">
      <metadata>
        <title>Test for puppet On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
Puppet was updated to fix the following security issues: * Unsafe use of temporary files. Refer to Advisory for further details.
</description>
        <affected family="unix">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:0880-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2013-4969" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4969" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3248" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3248" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3250" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3250" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:325190" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:325189" version="24">
      <metadata>
        <title>Test for kdm On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
This kdebase4-workspace update fixes two security issues:   * NULL pointer dereference in KDM and KCheckPass. Refer to Advisory for further details. 
</description>
        <affected family="unix">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:0885-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2013-4132" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4132" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4133" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4133" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4132" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4132" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4132" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4132" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4133" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4133" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4133" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4133" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:325186" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:325185" version="24">
      <metadata>
        <title>Test for kwin On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
This kdebase4-workspace update fixes two security issues:   * NULL pointer dereference in KDM and KCheckPass. Refer to Advisory for further details. 
</description>
        <affected family="unix">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:0885-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2013-4132" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4132" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4133" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4133" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4132" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4132" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4132" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4132" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4133" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4133" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4133" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4133" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:325182" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:325181" version="24">
      <metadata>
        <title>Test for kdebase4-workspace On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
This kdebase4-workspace update fixes two security issues:   * NULL pointer dereference in KDM and KCheckPass. Refer to Advisory for further details. 
</description>
        <affected family="unix">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:0885-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2013-4132" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4132" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4133" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4133" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4132" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4132" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4132" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4132" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4133" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4133" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4133" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4133" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:325178" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:325177" version="24">
      <metadata>
        <title>Test for kdebase4-workspace-ksysguardd On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
This kdebase4-workspace update fixes two security issues:   * NULL pointer dereference in KDM and KCheckPass. Refer to Advisory for further details. 
</description>
        <affected family="unix">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:0885-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2013-4132" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4132" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4133" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4133" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4132" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4132" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4132" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4132" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4133" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4133" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4133" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4133" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:325174" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:325173" version="24">
      <metadata>
        <title>Test for kde4-kgreeter-plugins On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
This kdebase4-workspace update fixes two security issues:   * NULL pointer dereference in KDM and KCheckPass. Refer to Advisory for further details. 
</description>
        <affected family="unix">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:0885-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2013-4132" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4132" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4133" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4133" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4132" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4132" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4132" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4132" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4133" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4133" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4133" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4133" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:325170" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:325169" version="24">
      <metadata>
        <title>Test for kdebase4-wallpapers On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
This kdebase4-workspace update fixes two security issues:   * NULL pointer dereference in KDM and KCheckPass. Refer to Advisory for further details. 
</description>
        <affected family="unix">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:0885-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2013-4132" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4132" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4133" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4133" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4132" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4132" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4132" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4132" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4133" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4133" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4133" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4133" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:325166" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:325165" version="24">
      <metadata>
        <title>Test for gpg2-lang On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
GPG2 has been updated to fix a possible denial of service. Refer to Advisory for further details. 
</description>
        <affected family="unix">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:0896-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2014-4617" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4617" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4617" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4617" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4617" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4617" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:325162" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:325161" version="24">
      <metadata>
        <title>Test for gpg2 On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
GPG2 has been updated to fix a possible denial of service. Refer to Advisory for further details. 
</description>
        <affected family="unix">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:0896-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2014-4617" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4617" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4617" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4617" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4617" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4617" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:325158" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:325157" version="24">
      <metadata>
        <title>Test for libtdb1-32bit On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
Samba has been updated to fix two security issues and one non-security   issue. Refer to Advisory for further details. 
</description>
        <affected family="unix">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:0899-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2014-3493" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3493" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0244" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0244" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0178" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0178" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3493" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3493" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3493" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3493" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0244" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0244" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0244" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0244" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0178" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0178" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0178" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0178" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:325154" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:325153" version="24">
      <metadata>
        <title>Test for libtevent0-32bit On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
Samba has been updated to fix two security issues and one non-security   issue. Refer to Advisory for further details. 
</description>
        <affected family="unix">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:0899-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2014-3493" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3493" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0244" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0244" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0178" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0178" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3493" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3493" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3493" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3493" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0244" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0244" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0244" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0244" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0178" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0178" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0178" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0178" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:325150" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:325149" version="24">
      <metadata>
        <title>Test for libsmbclient0-32bit On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
Samba has been updated to fix two security issues and one non-security   issue. Refer to Advisory for further details. 
</description>
        <affected family="unix">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:0899-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2014-3493" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3493" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0244" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0244" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0178" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0178" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3493" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3493" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3493" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3493" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0244" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0244" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0244" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0244" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0178" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0178" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0178" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0178" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:325146" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:325145" version="24">
      <metadata>
        <title>Test for samba-client-32bit On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
Samba has been updated to fix two security issues and one non-security   issue. Refer to Advisory for further details. 
</description>
        <affected family="unix">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:0899-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2014-3493" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3493" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0244" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0244" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0178" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0178" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3493" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3493" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3493" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3493" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0244" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0244" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0244" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0244" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0178" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0178" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0178" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0178" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:325142" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:325141" version="24">
      <metadata>
        <title>Test for libtalloc2-32bit On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
Samba has been updated to fix two security issues and one non-security   issue. Refer to Advisory for further details. 
</description>
        <affected family="unix">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:0899-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2014-3493" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3493" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0244" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0244" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0178" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0178" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3493" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3493" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3493" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3493" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0244" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0244" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0244" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0244" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0178" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0178" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0178" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0178" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:325138" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:325137" version="24">
      <metadata>
        <title>Test for libwbclient0-32bit On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
Samba has been updated to fix two security issues and one non-security   issue. Refer to Advisory for further details. 
</description>
        <affected family="unix">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:0899-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2014-3493" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3493" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0244" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0244" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0178" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0178" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3493" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3493" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3493" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3493" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0244" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0244" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0244" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0244" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0178" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0178" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0178" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0178" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:325134" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:325133" version="24">
      <metadata>
        <title>Test for samba-winbind-32bit On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
Samba has been updated to fix two security issues and one non-security   issue. Refer to Advisory for further details. 
</description>
        <affected family="unix">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:0899-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2014-3493" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3493" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0244" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0244" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0178" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0178" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3493" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3493" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3493" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3493" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0244" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0244" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0244" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0244" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0178" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0178" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0178" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0178" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:325130" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:325129" version="24">
      <metadata>
        <title>Test for samba-32bit On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
Samba has been updated to fix two security issues and one non-security   issue. Refer to Advisory for further details. 
</description>
        <affected family="unix">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:0899-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2014-3493" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3493" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0244" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0244" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0178" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0178" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3493" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3493" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3493" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3493" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0244" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0244" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0244" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0244" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0178" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0178" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0178" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0178" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:325126" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:325125" version="24">
      <metadata>
        <title>Test for samba On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
Samba has been updated to fix two security issues and one non-security   issue. Refer to Advisory for further details. 
</description>
        <affected family="unix">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:0899-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2014-3493" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3493" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0244" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0244" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0178" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0178" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3493" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3493" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3493" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3493" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0244" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0244" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0244" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0244" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0178" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0178" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0178" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0178" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:325122" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:325121" version="24">
      <metadata>
        <title>Test for libtdb1 On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
Samba has been updated to fix two security issues and one non-security   issue. Refer to Advisory for further details. 
</description>
        <affected family="unix">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:0899-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2014-3493" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3493" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0244" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0244" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0178" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0178" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3493" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3493" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3493" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3493" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0244" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0244" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0244" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0244" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0178" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0178" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0178" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0178" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:325118" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:325117" version="24">
      <metadata>
        <title>Test for libtalloc2 On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
Samba has been updated to fix two security issues and one non-security   issue. Refer to Advisory for further details. 
</description>
        <affected family="unix">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:0899-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2014-3493" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3493" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0244" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0244" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0178" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0178" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3493" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3493" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3493" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3493" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0244" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0244" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0244" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0244" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0178" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0178" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0178" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0178" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:325114" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:325113" version="24">
      <metadata>
        <title>Test for libsmbclient0 On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
Samba has been updated to fix two security issues and one non-security   issue. Refer to Advisory for further details. 
</description>
        <affected family="unix">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:0899-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2014-3493" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3493" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0244" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0244" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0178" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0178" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3493" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3493" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3493" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3493" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0244" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0244" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0244" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0244" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0178" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0178" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0178" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0178" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:325110" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:325109" version="24">
      <metadata>
        <title>Test for samba-client On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
Samba has been updated to fix two security issues and one non-security   issue. Refer to Advisory for further details. 
</description>
        <affected family="unix">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:0899-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2014-3493" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3493" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0244" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0244" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0178" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0178" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3493" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3493" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3493" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3493" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0244" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0244" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0244" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0244" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0178" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0178" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0178" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0178" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:325106" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:325105" version="24">
      <metadata>
        <title>Test for ldapsmb On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
Samba has been updated to fix two security issues and one non-security   issue. Refer to Advisory for further details. 
</description>
        <affected family="unix">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:0899-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2014-3493" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3493" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0244" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0244" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0178" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0178" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3493" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3493" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3493" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3493" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0244" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0244" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0244" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0244" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0178" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0178" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0178" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0178" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:325102" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:325101" version="24">
      <metadata>
        <title>Test for libldb1 On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
Samba has been updated to fix two security issues and one non-security   issue. Refer to Advisory for further details. 
</description>
        <affected family="unix">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:0899-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2014-3493" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3493" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0244" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0244" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0178" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0178" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3493" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3493" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3493" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3493" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0244" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0244" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0244" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0244" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0178" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0178" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0178" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0178" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:325098" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:324961" version="24">
      <metadata>
        <title>Test for glibc-html On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
glibc has been updated to fix one security issue that could have resulted   in free-after-use situations. Refer to Advisory for further details. 
</description>
        <affected family="unix">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:0920-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2014-4043" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4043" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4043" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4043" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4043" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4043" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:324958" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:324957" version="24">
      <metadata>
        <title>Test for glibc-info On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
glibc has been updated to fix one security issue that could have resulted   in free-after-use situations. Refer to Advisory for further details. 
</description>
        <affected family="unix">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:0920-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2014-4043" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4043" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4043" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4043" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4043" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4043" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:324954" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:324953" version="24">
      <metadata>
        <title>Test for glibc On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
glibc has been updated to fix one security issue that could have resulted   in free-after-use situations. Refer to Advisory for further details. 
</description>
        <affected family="unix">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:0920-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2014-4043" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4043" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4043" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4043" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4043" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4043" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:324950" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:324949" version="24">
      <metadata>
        <title>Test for glibc-devel On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
glibc has been updated to fix one security issue that could have resulted   in free-after-use situations. Refer to Advisory for further details. 
</description>
        <affected family="unix">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:0920-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2014-4043" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4043" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4043" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4043" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4043" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4043" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:324946" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:324945" version="24">
      <metadata>
        <title>Test for kdirstat On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
The following security issue has been fixed:   * #868682: CVE-2014-2527 CVE-2014-2528: kdirstat: command injection in   kcleanup   Security Issues:   * CVE-2014-2527   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2527   * CVE-2014-2528   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2528Patch Instructions:   To install this SUSE Security Update use YaST online_update. Refer to Advisory for further details. 
</description>
        <affected family="unix">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:0930-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2014-2527" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2527" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-2528" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2528" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-2527" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2527" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-2527" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2527" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-2528" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2528" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-2528" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2528" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:324942" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:324941" version="24">
      <metadata>
        <title>Test for libtasn1-3-32bit On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
libtasn1 has been updated to fix three security issues:   * asn1_get_bit_der could have returned negative bit length   CVE-2014-3468   * Multiple boundary check issues could have allowed DoS CVE-2014-3467   * Possible DoS by NULL pointer dereference in asn1_read_value_type   CVE-2014-3469   Security Issues:   * CVE-2014-3468   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3468   * CVE-2014-3467   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3467   * CVE-2014-3469   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3469Patch Instructions:   To install this SUSE Security Update use YaST online_update. Refer to Advisory for further details. 
</description>
        <affected family="unix">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:0931-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2014-3468" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3468" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3467" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3467" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3469" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3469" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3468" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3468" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3468" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3468" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3467" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3467" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3467" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3467" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3469" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3469" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3469" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3469" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:324938" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:324937" version="24">
      <metadata>
        <title>Test for libtasn1 On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
libtasn1 has been updated to fix three security issues:   * asn1_get_bit_der could have returned negative bit length   CVE-2014-3468   * Multiple boundary check issues could have allowed DoS CVE-2014-3467   * Possible DoS by NULL pointer dereference in asn1_read_value_type   CVE-2014-3469   Security Issues:   * CVE-2014-3468   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3468   * CVE-2014-3467   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3467   * CVE-2014-3469   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3469Patch Instructions:   To install this SUSE Security Update use YaST online_update. Refer to Advisory for further details. 
</description>
        <affected family="unix">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:0931-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2014-3468" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3468" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3467" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3467" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3469" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3469" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3468" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3468" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3468" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3468" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3467" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3467" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3467" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3467" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3469" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3469" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3469" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3469" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:324934" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:324933" version="24">
      <metadata>
        <title>Test for libtasn1-3 On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
libtasn1 has been updated to fix three security issues:   * asn1_get_bit_der could have returned negative bit length   CVE-2014-3468   * Multiple boundary check issues could have allowed DoS CVE-2014-3467   * Possible DoS by NULL pointer dereference in asn1_read_value_type   CVE-2014-3469   Security Issues:   * CVE-2014-3468   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3468   * CVE-2014-3467   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3467   * CVE-2014-3469   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3469Patch Instructions:   To install this SUSE Security Update use YaST online_update. Refer to Advisory for further details. 
</description>
        <affected family="unix">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:0931-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2014-3468" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3468" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3467" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3467" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3469" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3469" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3468" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3468" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3468" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3468" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3467" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3467" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3467" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3467" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3469" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3469" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3469" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3469" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:324930" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:324929" version="24">
      <metadata>
        <title>Test for ntp On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
The NTP time service could have been used for remote denial of service   amplification attacks. Refer to Advisory for further details. 
</description>
        <affected family="unix">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:0937-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2013-5211" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5211" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-5211" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5211" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-5211" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5211" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-5211" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5211" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:324926" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:324925" version="24">
      <metadata>
        <title>Test for ntp-doc On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
The NTP time service could have been used for remote denial of service   amplification attacks. Refer to Advisory for further details. 
</description>
        <affected family="unix">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:0937-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2013-5211" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5211" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-5211" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5211" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-5211" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5211" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-5211" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5211" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:324922" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:324921" version="24">
      <metadata>
        <title>Test for php53-calendar On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
PHP 5.3 has been updated to fix several security problems:   *   CVE-2014-3515: The SPL component in PHP incorrectly anticipated that   certain data structures will have the array data type after   unserialization, which allowed remote attackers to execute arbitrary code   via a crafted string that triggers use of a Hashtable destructor, related   to "type confusion" issues in 1 ArrayObject and 2 SPLObjectStorage. Refer to Advisory for further details. 
</description>
        <affected family="unix">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:0938-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2014-3515" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3515" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0207" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0207" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3478" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3478" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3479" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3479" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3480" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3480" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3487" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3487" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4670" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4670" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4698" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4698" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4721" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4721" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0207" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0207" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0207" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0207" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3478" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3478" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3478" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3478" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3479" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3479" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3479" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3479" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3480" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3480" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3480" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3480" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3487" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3487" source="SUSE Advisory Releases" />
        <reference ref_id="CVE" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:324918" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:324917" version="24">
      <metadata>
        <title>Test for php53-xmlwriter On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
PHP 5.3 has been updated to fix several security problems:   *   CVE-2014-3515: The SPL component in PHP incorrectly anticipated that   certain data structures will have the array data type after   unserialization, which allowed remote attackers to execute arbitrary code   via a crafted string that triggers use of a Hashtable destructor, related   to "type confusion" issues in 1 ArrayObject and 2 SPLObjectStorage. Refer to Advisory for further details. 
</description>
        <affected family="unix">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:0938-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2014-3515" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3515" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0207" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0207" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3478" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3478" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3479" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3479" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3480" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3480" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3487" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3487" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4670" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4670" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4698" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4698" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4721" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4721" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0207" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0207" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0207" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0207" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3478" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3478" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3478" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3478" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3479" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3479" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3479" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3479" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3480" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3480" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3480" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3480" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3487" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3487" source="SUSE Advisory Releases" />
        <reference ref_id="CVE" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:324914" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:324913" version="24">
      <metadata>
        <title>Test for php53-fastcgi On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
PHP 5.3 has been updated to fix several security problems:   *   CVE-2014-3515: The SPL component in PHP incorrectly anticipated that   certain data structures will have the array data type after   unserialization, which allowed remote attackers to execute arbitrary code   via a crafted string that triggers use of a Hashtable destructor, related   to "type confusion" issues in 1 ArrayObject and 2 SPLObjectStorage. Refer to Advisory for further details. 
</description>
        <affected family="unix">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:0938-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2014-3515" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3515" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0207" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0207" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3478" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3478" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3479" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3479" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3480" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3480" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3487" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3487" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4670" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4670" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4698" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4698" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4721" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4721" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0207" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0207" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0207" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0207" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3478" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3478" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3478" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3478" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3479" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3479" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3479" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3479" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3480" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3480" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3480" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3480" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3487" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3487" source="SUSE Advisory Releases" />
        <reference ref_id="CVE" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:324910" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:324909" version="24">
      <metadata>
        <title>Test for php53-mbstring On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
PHP 5.3 has been updated to fix several security problems:   *   CVE-2014-3515: The SPL component in PHP incorrectly anticipated that   certain data structures will have the array data type after   unserialization, which allowed remote attackers to execute arbitrary code   via a crafted string that triggers use of a Hashtable destructor, related   to "type confusion" issues in 1 ArrayObject and 2 SPLObjectStorage. Refer to Advisory for further details. 
</description>
        <affected family="unix">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:0938-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2014-3515" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3515" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0207" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0207" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3478" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3478" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3479" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3479" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3480" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3480" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3487" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3487" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4670" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4670" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4698" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4698" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4721" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4721" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0207" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0207" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0207" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0207" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3478" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3478" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3478" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3478" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3479" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3479" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3479" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3479" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3480" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3480" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3480" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3480" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3487" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3487" source="SUSE Advisory Releases" />
        <reference ref_id="CVE" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:324906" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:324905" version="24">
      <metadata>
        <title>Test for php53-sysvsem On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
PHP 5.3 has been updated to fix several security problems:   *   CVE-2014-3515: The SPL component in PHP incorrectly anticipated that   certain data structures will have the array data type after   unserialization, which allowed remote attackers to execute arbitrary code   via a crafted string that triggers use of a Hashtable destructor, related   to "type confusion" issues in 1 ArrayObject and 2 SPLObjectStorage. Refer to Advisory for further details. 
</description>
        <affected family="unix">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:0938-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2014-3515" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3515" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0207" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0207" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3478" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3478" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3479" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3479" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3480" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3480" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3487" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3487" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4670" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4670" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4698" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4698" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4721" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4721" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0207" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0207" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0207" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0207" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3478" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3478" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3478" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3478" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3479" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3479" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3479" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3479" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3480" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3480" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3480" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3480" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3487" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3487" source="SUSE Advisory Releases" />
        <reference ref_id="CVE" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:324902" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:324901" version="24">
      <metadata>
        <title>Test for php53-iconv On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
PHP 5.3 has been updated to fix several security problems:   *   CVE-2014-3515: The SPL component in PHP incorrectly anticipated that   certain data structures will have the array data type after   unserialization, which allowed remote attackers to execute arbitrary code   via a crafted string that triggers use of a Hashtable destructor, related   to "type confusion" issues in 1 ArrayObject and 2 SPLObjectStorage. Refer to Advisory for further details. 
</description>
        <affected family="unix">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:0938-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2014-3515" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3515" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0207" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0207" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3478" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3478" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3479" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3479" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3480" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3480" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3487" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3487" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4670" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4670" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4698" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4698" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4721" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4721" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0207" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0207" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0207" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0207" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3478" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3478" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3478" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3478" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3479" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3479" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3479" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3479" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3480" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3480" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3480" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3480" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3487" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3487" source="SUSE Advisory Releases" />
        <reference ref_id="CVE" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:324898" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:324897" version="24">
      <metadata>
        <title>Test for php53-ldap On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
PHP 5.3 has been updated to fix several security problems:   *   CVE-2014-3515: The SPL component in PHP incorrectly anticipated that   certain data structures will have the array data type after   unserialization, which allowed remote attackers to execute arbitrary code   via a crafted string that triggers use of a Hashtable destructor, related   to "type confusion" issues in 1 ArrayObject and 2 SPLObjectStorage. Refer to Advisory for further details. 
</description>
        <affected family="unix">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:0938-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2014-3515" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3515" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0207" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0207" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3478" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3478" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3479" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3479" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3480" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3480" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3487" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3487" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4670" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4670" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4698" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4698" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4721" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4721" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0207" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0207" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0207" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0207" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3478" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3478" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3478" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3478" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3479" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3479" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3479" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3479" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3480" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3480" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3480" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3480" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3487" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3487" source="SUSE Advisory Releases" />
        <reference ref_id="CVE" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:324894" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:324893" version="24">
      <metadata>
        <title>Test for php53-pcntl On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
PHP 5.3 has been updated to fix several security problems:   *   CVE-2014-3515: The SPL component in PHP incorrectly anticipated that   certain data structures will have the array data type after   unserialization, which allowed remote attackers to execute arbitrary code   via a crafted string that triggers use of a Hashtable destructor, related   to "type confusion" issues in 1 ArrayObject and 2 SPLObjectStorage. Refer to Advisory for further details. 
</description>
        <affected family="unix">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:0938-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2014-3515" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3515" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0207" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0207" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3478" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3478" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3479" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3479" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3480" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3480" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3487" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3487" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4670" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4670" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4698" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4698" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4721" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4721" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0207" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0207" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0207" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0207" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3478" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3478" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3478" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3478" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3479" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3479" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3479" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3479" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3480" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3480" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3480" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3480" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3487" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3487" source="SUSE Advisory Releases" />
        <reference ref_id="CVE" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:324890" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:324889" version="24">
      <metadata>
        <title>Test for php53-pdo On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
PHP 5.3 has been updated to fix several security problems:   *   CVE-2014-3515: The SPL component in PHP incorrectly anticipated that   certain data structures will have the array data type after   unserialization, which allowed remote attackers to execute arbitrary code   via a crafted string that triggers use of a Hashtable destructor, related   to "type confusion" issues in 1 ArrayObject and 2 SPLObjectStorage. Refer to Advisory for further details. 
</description>
        <affected family="unix">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:0938-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2014-3515" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3515" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0207" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0207" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3478" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3478" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3479" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3479" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3480" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3480" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3487" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3487" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4670" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4670" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4698" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4698" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4721" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4721" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0207" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0207" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0207" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0207" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3478" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3478" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3478" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3478" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3479" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3479" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3479" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3479" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3480" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3480" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3480" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3480" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3487" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3487" source="SUSE Advisory Releases" />
        <reference ref_id="CVE" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:324886" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:324885" version="24">
      <metadata>
        <title>Test for php53-snmp On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
PHP 5.3 has been updated to fix several security problems:   *   CVE-2014-3515: The SPL component in PHP incorrectly anticipated that   certain data structures will have the array data type after   unserialization, which allowed remote attackers to execute arbitrary code   via a crafted string that triggers use of a Hashtable destructor, related   to "type confusion" issues in 1 ArrayObject and 2 SPLObjectStorage. Refer to Advisory for further details. 
</description>
        <affected family="unix">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:0938-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2014-3515" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3515" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0207" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0207" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3478" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3478" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3479" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3479" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3480" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3480" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3487" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3487" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4670" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4670" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4698" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4698" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4721" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4721" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0207" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0207" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0207" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0207" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3478" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3478" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3478" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3478" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3479" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3479" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3479" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3479" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3480" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3480" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3480" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3480" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3487" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3487" source="SUSE Advisory Releases" />
        <reference ref_id="CVE" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:324882" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:324881" version="24">
      <metadata>
        <title>Test for php53-soap On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
PHP 5.3 has been updated to fix several security problems:   *   CVE-2014-3515: The SPL component in PHP incorrectly anticipated that   certain data structures will have the array data type after   unserialization, which allowed remote attackers to execute arbitrary code   via a crafted string that triggers use of a Hashtable destructor, related   to "type confusion" issues in 1 ArrayObject and 2 SPLObjectStorage. Refer to Advisory for further details. 
</description>
        <affected family="unix">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:0938-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2014-3515" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3515" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0207" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0207" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3478" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3478" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3479" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3479" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3480" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3480" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3487" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3487" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4670" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4670" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4698" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4698" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4721" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4721" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0207" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0207" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0207" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0207" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3478" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3478" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3478" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3478" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3479" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3479" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3479" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3479" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3480" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3480" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3480" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3480" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3487" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3487" source="SUSE Advisory Releases" />
        <reference ref_id="CVE" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:324878" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:324877" version="24">
      <metadata>
        <title>Test for php53-xsl On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
PHP 5.3 has been updated to fix several security problems:   *   CVE-2014-3515: The SPL component in PHP incorrectly anticipated that   certain data structures will have the array data type after   unserialization, which allowed remote attackers to execute arbitrary code   via a crafted string that triggers use of a Hashtable destructor, related   to "type confusion" issues in 1 ArrayObject and 2 SPLObjectStorage. Refer to Advisory for further details. 
</description>
        <affected family="unix">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:0938-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2014-3515" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3515" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0207" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0207" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3478" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3478" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3479" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3479" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3480" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3480" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3487" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3487" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4670" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4670" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4698" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4698" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4721" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4721" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0207" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0207" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0207" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0207" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3478" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3478" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3478" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3478" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3479" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3479" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3479" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3479" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3480" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3480" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3480" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3480" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3487" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3487" source="SUSE Advisory Releases" />
        <reference ref_id="CVE" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:324874" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:324873" version="24">
      <metadata>
        <title>Test for apache2-mod_php53 On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
PHP 5.3 has been updated to fix several security problems:   *   CVE-2014-3515: The SPL component in PHP incorrectly anticipated that   certain data structures will have the array data type after   unserialization, which allowed remote attackers to execute arbitrary code   via a crafted string that triggers use of a Hashtable destructor, related   to "type confusion" issues in 1 ArrayObject and 2 SPLObjectStorage. Refer to Advisory for further details. 
</description>
        <affected family="unix">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:0938-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2014-3515" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3515" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0207" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0207" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3478" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3478" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3479" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3479" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3480" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3480" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3487" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3487" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4670" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4670" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4698" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4698" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4721" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4721" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0207" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0207" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0207" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0207" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3478" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3478" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3478" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3478" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3479" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3479" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3479" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3479" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3480" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3480" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3480" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3480" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3487" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3487" source="SUSE Advisory Releases" />
        <reference ref_id="CVE" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:324870" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:324869" version="24">
      <metadata>
        <title>Test for php53-bz2 On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
PHP 5.3 has been updated to fix several security problems:   *   CVE-2014-3515: The SPL component in PHP incorrectly anticipated that   certain data structures will have the array data type after   unserialization, which allowed remote attackers to execute arbitrary code   via a crafted string that triggers use of a Hashtable destructor, related   to "type confusion" issues in 1 ArrayObject and 2 SPLObjectStorage. Refer to Advisory for further details. 
</description>
        <affected family="unix">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:0938-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2014-3515" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3515" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0207" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0207" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3478" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3478" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3479" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3479" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3480" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3480" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3487" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3487" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4670" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4670" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4698" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4698" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4721" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4721" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0207" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0207" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0207" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0207" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3478" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3478" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3478" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3478" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3479" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3479" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3479" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3479" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3480" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3480" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3480" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3480" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3487" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3487" source="SUSE Advisory Releases" />
        <reference ref_id="CVE" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:324866" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:324865" version="24">
      <metadata>
        <title>Test for php53-xmlreader On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
PHP 5.3 has been updated to fix several security problems:   *   CVE-2014-3515: The SPL component in PHP incorrectly anticipated that   certain data structures will have the array data type after   unserialization, which allowed remote attackers to execute arbitrary code   via a crafted string that triggers use of a Hashtable destructor, related   to "type confusion" issues in 1 ArrayObject and 2 SPLObjectStorage. Refer to Advisory for further details. 
</description>
        <affected family="unix">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:0938-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2014-3515" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3515" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0207" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0207" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3478" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3478" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3479" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3479" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3480" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3480" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3487" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3487" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4670" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4670" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4698" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4698" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4721" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4721" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0207" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0207" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0207" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0207" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3478" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3478" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3478" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3478" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3479" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3479" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3479" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3479" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3480" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3480" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3480" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3480" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3487" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3487" source="SUSE Advisory Releases" />
        <reference ref_id="CVE" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:324862" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:324861" version="24">
      <metadata>
        <title>Test for php53-ctype On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
PHP 5.3 has been updated to fix several security problems:   *   CVE-2014-3515: The SPL component in PHP incorrectly anticipated that   certain data structures will have the array data type after   unserialization, which allowed remote attackers to execute arbitrary code   via a crafted string that triggers use of a Hashtable destructor, related   to "type confusion" issues in 1 ArrayObject and 2 SPLObjectStorage. Refer to Advisory for further details. 
</description>
        <affected family="unix">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:0938-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2014-3515" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3515" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0207" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0207" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3478" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3478" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3479" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3479" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3480" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3480" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3487" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3487" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4670" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4670" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4698" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4698" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4721" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4721" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0207" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0207" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0207" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0207" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3478" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3478" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3478" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3478" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3479" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3479" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3479" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3479" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3480" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3480" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3480" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3480" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3487" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3487" source="SUSE Advisory Releases" />
        <reference ref_id="CVE" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:324858" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:324857" version="24">
      <metadata>
        <title>Test for php53-pspell On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
PHP 5.3 has been updated to fix several security problems:   *   CVE-2014-3515: The SPL component in PHP incorrectly anticipated that   certain data structures will have the array data type after   unserialization, which allowed remote attackers to execute arbitrary code   via a crafted string that triggers use of a Hashtable destructor, related   to "type confusion" issues in 1 ArrayObject and 2 SPLObjectStorage. Refer to Advisory for further details. 
</description>
        <affected family="unix">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:0938-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2014-3515" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3515" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0207" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0207" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3478" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3478" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3479" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3479" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3480" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3480" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3487" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3487" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4670" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4670" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4698" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4698" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4721" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4721" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0207" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0207" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0207" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0207" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3478" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3478" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3478" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3478" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3479" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3479" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3479" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3479" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3480" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3480" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3480" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3480" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3487" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3487" source="SUSE Advisory Releases" />
        <reference ref_id="CVE" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:324854" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:324853" version="24">
      <metadata>
        <title>Test for php53-sysvshm On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
PHP 5.3 has been updated to fix several security problems:   *   CVE-2014-3515: The SPL component in PHP incorrectly anticipated that   certain data structures will have the array data type after   unserialization, which allowed remote attackers to execute arbitrary code   via a crafted string that triggers use of a Hashtable destructor, related   to "type confusion" issues in 1 ArrayObject and 2 SPLObjectStorage. Refer to Advisory for further details. 
</description>
        <affected family="unix">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:0938-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2014-3515" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3515" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0207" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0207" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3478" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3478" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3479" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3479" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3480" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3480" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3487" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3487" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4670" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4670" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4698" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4698" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4721" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4721" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0207" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0207" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0207" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0207" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3478" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3478" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3478" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3478" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3479" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3479" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3479" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3479" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3480" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3480" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3480" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3480" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3487" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3487" source="SUSE Advisory Releases" />
        <reference ref_id="CVE" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:324850" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:324849" version="24">
      <metadata>
        <title>Test for php53-zlib On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
PHP 5.3 has been updated to fix several security problems:   *   CVE-2014-3515: The SPL component in PHP incorrectly anticipated that   certain data structures will have the array data type after   unserialization, which allowed remote attackers to execute arbitrary code   via a crafted string that triggers use of a Hashtable destructor, related   to "type confusion" issues in 1 ArrayObject and 2 SPLObjectStorage. Refer to Advisory for further details. 
</description>
        <affected family="unix">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:0938-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2014-3515" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3515" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0207" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0207" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3478" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3478" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3479" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3479" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3480" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3480" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3487" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3487" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4670" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4670" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4698" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4698" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4721" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4721" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0207" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0207" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0207" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0207" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3478" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3478" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3478" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3478" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3479" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3479" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3479" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3479" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3480" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3480" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3480" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3480" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3487" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3487" source="SUSE Advisory Releases" />
        <reference ref_id="CVE" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:324846" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:324845" version="24">
      <metadata>
        <title>Test for php53-curl On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
PHP 5.3 has been updated to fix several security problems:   *   CVE-2014-3515: The SPL component in PHP incorrectly anticipated that   certain data structures will have the array data type after   unserialization, which allowed remote attackers to execute arbitrary code   via a crafted string that triggers use of a Hashtable destructor, related   to "type confusion" issues in 1 ArrayObject and 2 SPLObjectStorage. Refer to Advisory for further details. 
</description>
        <affected family="unix">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:0938-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2014-3515" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3515" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0207" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0207" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3478" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3478" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3479" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3479" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3480" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3480" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3487" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3487" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4670" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4670" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4698" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4698" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4721" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4721" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0207" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0207" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0207" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0207" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3478" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3478" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3478" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3478" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3479" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3479" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3479" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3479" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3480" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3480" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3480" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3480" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3487" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3487" source="SUSE Advisory Releases" />
        <reference ref_id="CVE" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:324842" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:324461" version="24">
      <metadata>
        <title>Test for glibc-i18ndata On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
This glibc update contains one security and two non security fixes:   * bnc#887022: directory traversal in LC_* locale handling   CVE-2014-0475   * bnc#882028: nscd gets activated upon upgrade   * bnc#886416: iconv command inserts a extra control code "0F"   Security Issues:   * CVE-2014-0475   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0475Patch Instructions:   To install this SUSE Security Update use YaST online_update. Refer to Advisory for further details. 
</description>
        <affected family="unix">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:1027-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2014-0475" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0475" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0475" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0475" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0475" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0475" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:324458" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:324457" version="24">
      <metadata>
        <title>Test for glibc-locale On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
This glibc update contains one security and two non security fixes:   * bnc#887022: directory traversal in LC_* locale handling   CVE-2014-0475   * bnc#882028: nscd gets activated upon upgrade   * bnc#886416: iconv command inserts a extra control code "0F"   Security Issues:   * CVE-2014-0475   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0475Patch Instructions:   To install this SUSE Security Update use YaST online_update. Refer to Advisory for further details. 
</description>
        <affected family="unix">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:1027-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2014-0475" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0475" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0475" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0475" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0475" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0475" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:324454" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:324453" version="24">
      <metadata>
        <title>Test for nscd On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
This glibc update contains one security and two non security fixes:   * bnc#887022: directory traversal in LC_* locale handling   CVE-2014-0475   * bnc#882028: nscd gets activated upon upgrade   * bnc#886416: iconv command inserts a extra control code "0F"   Security Issues:   * CVE-2014-0475   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0475Patch Instructions:   To install this SUSE Security Update use YaST online_update. Refer to Advisory for further details. 
</description>
        <affected family="unix">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:1027-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2014-0475" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0475" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0475" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0475" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0475" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0475" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:324450" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:324449" version="24">
      <metadata>
        <title>Test for glibc-profile On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
This glibc update contains one security and two non security fixes:   * bnc#887022: directory traversal in LC_* locale handling   CVE-2014-0475   * bnc#882028: nscd gets activated upon upgrade   * bnc#886416: iconv command inserts a extra control code "0F"   Security Issues:   * CVE-2014-0475   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0475Patch Instructions:   To install this SUSE Security Update use YaST online_update. Refer to Advisory for further details. 
</description>
        <affected family="unix">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:1027-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2014-0475" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0475" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0475" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0475" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0475" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0475" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:324446" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:324445" version="24">
      <metadata>
        <title>Test for glibc-html On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
This glibc update contains one security and two non security fixes:   * bnc#887022: directory traversal in LC_* locale handling   CVE-2014-0475   * bnc#882028: nscd gets activated upon upgrade   * bnc#886416: iconv command inserts a extra control code "0F"   Security Issues:   * CVE-2014-0475   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0475Patch Instructions:   To install this SUSE Security Update use YaST online_update. Refer to Advisory for further details. 
</description>
        <affected family="unix">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:1027-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2014-0475" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0475" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0475" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0475" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0475" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0475" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:324442" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:324441" version="24">
      <metadata>
        <title>Test for glibc-info On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
This glibc update contains one security and two non security fixes:   * bnc#887022: directory traversal in LC_* locale handling   CVE-2014-0475   * bnc#882028: nscd gets activated upon upgrade   * bnc#886416: iconv command inserts a extra control code "0F"   Security Issues:   * CVE-2014-0475   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0475Patch Instructions:   To install this SUSE Security Update use YaST online_update. Refer to Advisory for further details. 
</description>
        <affected family="unix">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:1027-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2014-0475" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0475" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0475" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0475" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0475" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0475" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:324438" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:324437" version="24">
      <metadata>
        <title>Test for glibc On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
This glibc update contains one security and two non security fixes:   * bnc#887022: directory traversal in LC_* locale handling   CVE-2014-0475   * bnc#882028: nscd gets activated upon upgrade   * bnc#886416: iconv command inserts a extra control code "0F"   Security Issues:   * CVE-2014-0475   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0475Patch Instructions:   To install this SUSE Security Update use YaST online_update. Refer to Advisory for further details. 
</description>
        <affected family="unix">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:1027-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2014-0475" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0475" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0475" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0475" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0475" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0475" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:324434" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:324433" version="24">
      <metadata>
        <title>Test for glibc-devel On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
This glibc update contains one security and two non security fixes:   * bnc#887022: directory traversal in LC_* locale handling   CVE-2014-0475   * bnc#882028: nscd gets activated upon upgrade   * bnc#886416: iconv command inserts a extra control code "0F"   Security Issues:   * CVE-2014-0475   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0475Patch Instructions:   To install this SUSE Security Update use YaST online_update. Refer to Advisory for further details. 
</description>
        <affected family="unix">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:1027-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2014-0475" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0475" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0475" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0475" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0475" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0475" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:324430" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:324429" version="24">
      <metadata>
        <title>Test for krb5-32bit On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
This MIT krb5 update fixes a buffer overrun problem in kadmind:   * bnc#891082: buffer overrun in kadmind with LDAP back end   MITKRB5-SA-2014-001 CVE-2014-4345   MIT krb5 Security Advisory 2014-001   * http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2014-001.txt   Security Issues:   * CVE-2014-4345   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4345Patch Instructions:   To install this SUSE Security Update use YaST online_update. Refer to Advisory for further details. 
</description>
        <affected family="unix">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:1028-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2014-4345" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4345" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4345" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4345" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4345" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4345" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:324426" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:324425" version="24">
      <metadata>
        <title>Test for krb5-apps-servers On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
This MIT krb5 update fixes a buffer overrun problem in kadmind:   * bnc#891082: buffer overrun in kadmind with LDAP back end   MITKRB5-SA-2014-001 CVE-2014-4345   MIT krb5 Security Advisory 2014-001   * http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2014-001.txt   Security Issues:   * CVE-2014-4345   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4345Patch Instructions:   To install this SUSE Security Update use YaST online_update. Refer to Advisory for further details. 
</description>
        <affected family="unix">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:1028-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2014-4345" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4345" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4345" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4345" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4345" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4345" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:324422" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:324421" version="24">
      <metadata>
        <title>Test for krb5-client On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
This MIT krb5 update fixes a buffer overrun problem in kadmind:   * bnc#891082: buffer overrun in kadmind with LDAP back end   MITKRB5-SA-2014-001 CVE-2014-4345   MIT krb5 Security Advisory 2014-001   * http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2014-001.txt   Security Issues:   * CVE-2014-4345   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4345Patch Instructions:   To install this SUSE Security Update use YaST online_update. Refer to Advisory for further details. 
</description>
        <affected family="unix">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:1028-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2014-4345" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4345" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4345" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4345" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4345" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4345" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:324418" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:324417" version="24">
      <metadata>
        <title>Test for krb5-plugin-kdb-ldap On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
This MIT krb5 update fixes a buffer overrun problem in kadmind:   * bnc#891082: buffer overrun in kadmind with LDAP back end   MITKRB5-SA-2014-001 CVE-2014-4345   MIT krb5 Security Advisory 2014-001   * http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2014-001.txt   Security Issues:   * CVE-2014-4345   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4345Patch Instructions:   To install this SUSE Security Update use YaST online_update. Refer to Advisory for further details. 
</description>
        <affected family="unix">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:1028-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2014-4345" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4345" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4345" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4345" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4345" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4345" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:324414" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:324413" version="24">
      <metadata>
        <title>Test for krb5 On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
This MIT krb5 update fixes a buffer overrun problem in kadmind:   * bnc#891082: buffer overrun in kadmind with LDAP back end   MITKRB5-SA-2014-001 CVE-2014-4345   MIT krb5 Security Advisory 2014-001   * http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2014-001.txt   Security Issues:   * CVE-2014-4345   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4345Patch Instructions:   To install this SUSE Security Update use YaST online_update. Refer to Advisory for further details. 
</description>
        <affected family="unix">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:1028-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2014-4345" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4345" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4345" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4345" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4345" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4345" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:324410" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:324409" version="24">
      <metadata>
        <title>Test for krb5-server On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
This MIT krb5 update fixes a buffer overrun problem in kadmind:   * bnc#891082: buffer overrun in kadmind with LDAP back end   MITKRB5-SA-2014-001 CVE-2014-4345   MIT krb5 Security Advisory 2014-001   * http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2014-001.txt   Security Issues:   * CVE-2014-4345   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4345Patch Instructions:   To install this SUSE Security Update use YaST online_update. Refer to Advisory for further details. 
</description>
        <affected family="unix">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:1028-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2014-4345" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4345" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4345" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4345" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4345" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4345" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:324406" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:324405" version="24">
      <metadata>
        <title>Test for krb5-apps-clients On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
This MIT krb5 update fixes a buffer overrun problem in kadmind:   * bnc#891082: buffer overrun in kadmind with LDAP back end   MITKRB5-SA-2014-001 CVE-2014-4345   MIT krb5 Security Advisory 2014-001   * http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2014-001.txt   Security Issues:   * CVE-2014-4345   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4345Patch Instructions:   To install this SUSE Security Update use YaST online_update. Refer to Advisory for further details. 
</description>
        <affected family="unix">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:1028-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2014-4345" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4345" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4345" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4345" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4345" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4345" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:324402" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:324401" version="24">
      <metadata>
        <title>Test for krb5-plugin-preauth-pkinit On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
This MIT krb5 update fixes a buffer overrun problem in kadmind:   * bnc#891082: buffer overrun in kadmind with LDAP back end   MITKRB5-SA-2014-001 CVE-2014-4345   MIT krb5 Security Advisory 2014-001   * http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2014-001.txt   Security Issues:   * CVE-2014-4345   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4345Patch Instructions:   To install this SUSE Security Update use YaST online_update. Refer to Advisory for further details. 
</description>
        <affected family="unix">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:1028-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2014-4345" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4345" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4345" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4345" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4345" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4345" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:324398" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:324397" version="24">
      <metadata>
        <title>Test for krb5-doc On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
This MIT krb5 update fixes a buffer overrun problem in kadmind:   * bnc#891082: buffer overrun in kadmind with LDAP back end   MITKRB5-SA-2014-001 CVE-2014-4345   MIT krb5 Security Advisory 2014-001   * http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2014-001.txt   Security Issues:   * CVE-2014-4345   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4345Patch Instructions:   To install this SUSE Security Update use YaST online_update. Refer to Advisory for further details. 
</description>
        <affected family="unix">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:1028-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2014-4345" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4345" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4345" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4345" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4345" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4345" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:324394" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:324393" version="24">
      <metadata>
        <title>Test for java-1_7_0-ibm-jdbc On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
IBM Java 1.7.0 has been updated to fix 14 security issues. Refer to Advisory for further details. 
</description>
        <affected family="unix">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:1037-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2014-4227" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4227" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4227" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4227" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4262" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4262" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4262" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4262" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4219" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4219" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4219" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4219" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4209" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4209" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4209" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4209" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4220" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4220" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4220" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4220" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4268" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4268" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4268" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4268" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4218" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4218" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4218" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4218" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4252" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4252" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4252" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4252" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4266" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4266" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4266" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4266" source="SUSE Advisory Releases" />
        <reference ref_id="CVE" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:324390" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:324389" version="24">
      <metadata>
        <title>Test for java-1_7_0-ibm On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
IBM Java 1.7.0 has been updated to fix 14 security issues. Refer to Advisory for further details. 
</description>
        <affected family="unix">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:1037-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2014-4227" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4227" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4227" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4227" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4262" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4262" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4262" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4262" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4219" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4219" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4219" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4219" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4209" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4209" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4209" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4209" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4220" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4220" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4220" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4220" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4268" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4268" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4268" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4268" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4218" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4218" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4218" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4218" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4252" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4252" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4252" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4252" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4266" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4266" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4266" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4266" source="SUSE Advisory Releases" />
        <reference ref_id="CVE" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:324386" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:324385" version="24">
      <metadata>
        <title>Test for java-1_7_0-ibm-alsa On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
IBM Java 1.7.0 has been updated to fix 14 security issues. Refer to Advisory for further details. 
</description>
        <affected family="unix">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:1037-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2014-4227" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4227" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4227" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4227" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4262" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4262" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4262" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4262" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4219" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4219" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4219" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4219" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4209" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4209" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4209" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4209" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4220" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4220" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4220" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4220" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4268" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4268" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4268" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4268" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4218" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4218" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4218" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4218" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4252" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4252" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4252" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4252" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4266" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4266" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4266" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4266" source="SUSE Advisory Releases" />
        <reference ref_id="CVE" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:324382" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:324381" version="24">
      <metadata>
        <title>Test for java-1_7_0-ibm-plugin On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
IBM Java 1.7.0 has been updated to fix 14 security issues. Refer to Advisory for further details. 
</description>
        <affected family="unix">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:1037-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2014-4227" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4227" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4227" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4227" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4262" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4262" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4262" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4262" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4219" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4219" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4219" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4219" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4209" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4209" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4209" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4209" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4220" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4220" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4220" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4220" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4268" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4268" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4268" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4268" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4218" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4218" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4218" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4218" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4252" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4252" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4252" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4252" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4266" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4266" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4266" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4266" source="SUSE Advisory Releases" />
        <reference ref_id="CVE" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:324378" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:324377" version="24">
      <metadata>
        <title>Test for libopenssl0_9_8-hmac-32bit On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
This OpenSSL update fixes the following security issue:   * bnc#890764: Information leak in pretty printing functions   CVE-2014-3508   * bnc#890767: Double Free when processing DTLS packets CVE-2014-3505   * bnc#890768: DTLS memory exhaustion CVE-2014-3506   * bnc#890769: DTLS memory leak from zero-length fragments   CVE-2014-3507   * bnc#890770: DTLS anonymous ECDH denial of service CVE-2014-3510   Security Issues:   * CVE-2014-3508   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3508   * CVE-2014-3505   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3505   * CVE-2014-3506   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3506   * CVE-2014-3507   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3507   * CVE-2014-3510   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3510Patch Instructions:   To install this SUSE Security Update use YaST online_update. Refer to Advisory for further details. 
</description>
        <affected family="unix">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:1049-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2014-3508" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3508" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3505" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3505" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3506" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3506" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3507" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3507" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3510" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3510" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3508" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3508" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3508" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3508" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3505" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3505" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3505" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3505" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3506" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3506" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3506" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3506" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3507" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3507" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3507" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3507" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3510" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3510" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3510" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3510" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:324374" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:324373" version="24">
      <metadata>
        <title>Test for libopenssl0_9_8-32bit On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
This OpenSSL update fixes the following security issue:   * bnc#890764: Information leak in pretty printing functions   CVE-2014-3508   * bnc#890767: Double Free when processing DTLS packets CVE-2014-3505   * bnc#890768: DTLS memory exhaustion CVE-2014-3506   * bnc#890769: DTLS memory leak from zero-length fragments   CVE-2014-3507   * bnc#890770: DTLS anonymous ECDH denial of service CVE-2014-3510   Security Issues:   * CVE-2014-3508   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3508   * CVE-2014-3505   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3505   * CVE-2014-3506   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3506   * CVE-2014-3507   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3507   * CVE-2014-3510   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3510Patch Instructions:   To install this SUSE Security Update use YaST online_update. Refer to Advisory for further details. 
</description>
        <affected family="unix">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:1049-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2014-3508" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3508" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3505" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3505" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3506" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3506" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3507" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3507" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3510" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3510" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3508" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3508" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3508" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3508" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3505" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3505" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3505" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3505" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3506" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3506" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3506" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3506" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3507" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3507" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3507" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3507" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3510" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3510" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3510" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3510" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:324370" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:324369" version="24">
      <metadata>
        <title>Test for libopenssl0_9_8-hmac On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
This OpenSSL update fixes the following security issue:   * bnc#890764: Information leak in pretty printing functions   CVE-2014-3508   * bnc#890767: Double Free when processing DTLS packets CVE-2014-3505   * bnc#890768: DTLS memory exhaustion CVE-2014-3506   * bnc#890769: DTLS memory leak from zero-length fragments   CVE-2014-3507   * bnc#890770: DTLS anonymous ECDH denial of service CVE-2014-3510   Security Issues:   * CVE-2014-3508   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3508   * CVE-2014-3505   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3505   * CVE-2014-3506   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3506   * CVE-2014-3507   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3507   * CVE-2014-3510   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3510Patch Instructions:   To install this SUSE Security Update use YaST online_update. Refer to Advisory for further details. 
</description>
        <affected family="unix">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:1049-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2014-3508" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3508" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3505" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3505" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3506" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3506" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3507" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3507" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3510" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3510" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3508" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3508" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3508" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3508" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3505" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3505" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3505" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3505" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3506" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3506" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3506" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3506" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3507" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3507" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3507" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3507" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3510" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3510" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3510" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3510" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:324366" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:324365" version="24">
      <metadata>
        <title>Test for openssl On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
This OpenSSL update fixes the following security issue:   * bnc#890764: Information leak in pretty printing functions   CVE-2014-3508   * bnc#890767: Double Free when processing DTLS packets CVE-2014-3505   * bnc#890768: DTLS memory exhaustion CVE-2014-3506   * bnc#890769: DTLS memory leak from zero-length fragments   CVE-2014-3507   * bnc#890770: DTLS anonymous ECDH denial of service CVE-2014-3510   Security Issues:   * CVE-2014-3508   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3508   * CVE-2014-3505   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3505   * CVE-2014-3506   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3506   * CVE-2014-3507   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3507   * CVE-2014-3510   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3510Patch Instructions:   To install this SUSE Security Update use YaST online_update. Refer to Advisory for further details. 
</description>
        <affected family="unix">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:1049-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2014-3508" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3508" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3505" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3505" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3506" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3506" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3507" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3507" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3510" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3510" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3508" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3508" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3508" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3508" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3505" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3505" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3505" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3505" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3506" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3506" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3506" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3506" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3507" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3507" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3507" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3507" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3510" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3510" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3510" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3510" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:324362" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:324361" version="24">
      <metadata>
        <title>Test for openssl-doc On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
This OpenSSL update fixes the following security issue:   * bnc#890764: Information leak in pretty printing functions   CVE-2014-3508   * bnc#890767: Double Free when processing DTLS packets CVE-2014-3505   * bnc#890768: DTLS memory exhaustion CVE-2014-3506   * bnc#890769: DTLS memory leak from zero-length fragments   CVE-2014-3507   * bnc#890770: DTLS anonymous ECDH denial of service CVE-2014-3510   Security Issues:   * CVE-2014-3508   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3508   * CVE-2014-3505   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3505   * CVE-2014-3506   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3506   * CVE-2014-3507   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3507   * CVE-2014-3510   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3510Patch Instructions:   To install this SUSE Security Update use YaST online_update. Refer to Advisory for further details. 
</description>
        <affected family="unix">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:1049-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2014-3508" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3508" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3505" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3505" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3506" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3506" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3507" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3507" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3510" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3510" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3508" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3508" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3508" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3508" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3505" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3505" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3505" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3505" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3506" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3506" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3506" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3506" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3507" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3507" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3507" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3507" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3510" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3510" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3510" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3510" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:324358" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:324357" version="24">
      <metadata>
        <title>Test for libopenssl0_9_8 On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
This OpenSSL update fixes the following security issue:   * bnc#890764: Information leak in pretty printing functions   CVE-2014-3508   * bnc#890767: Double Free when processing DTLS packets CVE-2014-3505   * bnc#890768: DTLS memory exhaustion CVE-2014-3506   * bnc#890769: DTLS memory leak from zero-length fragments   CVE-2014-3507   * bnc#890770: DTLS anonymous ECDH denial of service CVE-2014-3510   Security Issues:   * CVE-2014-3508   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3508   * CVE-2014-3505   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3505   * CVE-2014-3506   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3506   * CVE-2014-3507   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3507   * CVE-2014-3510   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3510Patch Instructions:   To install this SUSE Security Update use YaST online_update. Refer to Advisory for further details. 
</description>
        <affected family="unix">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:1049-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2014-3508" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3508" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3505" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3505" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3506" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3506" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3507" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3507" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3510" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3510" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3508" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3508" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3508" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3508" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3505" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3505" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3505" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3505" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3506" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3506" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3506" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3506" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3507" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3507" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3507" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3507" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3510" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3510" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3510" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3510" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:324354" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:324353" version="24">
      <metadata>
        <title>Test for java-1_6_0-ibm-jdbc On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
java-1_6_0-ibm has been updated to fix ten security issues. Refer to Advisory for further details. 
</description>
        <affected family="unix">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:1055-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2014-4227" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4227" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4227" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4227" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4262" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4262" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4262" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4262" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4219" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4219" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4219" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4219" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4209" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4209" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4209" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4209" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4268" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4268" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4268" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4268" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4218" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4218" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4218" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4218" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4252" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4252" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4252" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4252" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4265" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4265" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4265" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4265" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4263" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4263" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4263" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4263" source="SUSE Advisory Releases" />
        <reference ref_id="CVE" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:324350" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:324349" version="24">
      <metadata>
        <title>Test for java-1_6_0-ibm-fonts On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
java-1_6_0-ibm has been updated to fix ten security issues. Refer to Advisory for further details. 
</description>
        <affected family="unix">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:1055-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2014-4227" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4227" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4227" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4227" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4262" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4262" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4262" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4262" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4219" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4219" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4219" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4219" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4209" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4209" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4209" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4209" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4268" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4268" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4268" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4268" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4218" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4218" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4218" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4218" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4252" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4252" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4252" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4252" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4265" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4265" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4265" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4265" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4263" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4263" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4263" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4263" source="SUSE Advisory Releases" />
        <reference ref_id="CVE" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:324346" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:324345" version="24">
      <metadata>
        <title>Test for java-1_6_0-ibm On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
java-1_6_0-ibm has been updated to fix ten security issues. Refer to Advisory for further details. 
</description>
        <affected family="unix">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:1055-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2014-4227" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4227" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4227" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4227" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4262" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4262" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4262" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4262" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4219" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4219" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4219" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4219" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4209" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4209" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4209" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4209" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4268" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4268" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4268" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4268" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4218" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4218" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4218" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4218" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4252" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4252" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4252" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4252" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4265" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4265" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4265" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4265" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4263" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4263" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4263" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4263" source="SUSE Advisory Releases" />
        <reference ref_id="CVE" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:324342" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:324341" version="24">
      <metadata>
        <title>Test for java-1_6_0-ibm-plugin On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
java-1_6_0-ibm has been updated to fix ten security issues. Refer to Advisory for further details. 
</description>
        <affected family="unix">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:1055-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2014-4227" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4227" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4227" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4227" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4262" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4262" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4262" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4262" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4219" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4219" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4219" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4219" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4209" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4209" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4209" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4209" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4268" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4268" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4268" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4268" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4218" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4218" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4218" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4218" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4252" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4252" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4252" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4252" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4265" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4265" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4265" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4265" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4263" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4263" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4263" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4263" source="SUSE Advisory Releases" />
        <reference ref_id="CVE" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:324338" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:324337" version="24">
      <metadata>
        <title>Test for java-1_6_0-ibm-alsa On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
java-1_6_0-ibm has been updated to fix ten security issues. Refer to Advisory for further details. 
</description>
        <affected family="unix">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:1055-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2014-4227" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4227" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4227" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4227" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4262" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4262" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4262" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4262" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4219" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4219" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4219" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4219" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4209" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4209" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4209" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4209" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4268" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4268" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4268" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4268" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4218" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4218" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4218" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4218" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4252" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4252" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4252" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4252" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4265" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4265" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4265" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4265" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4263" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4263" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-4263" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4263" source="SUSE Advisory Releases" />
        <reference ref_id="CVE" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:324334" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:323012" version="24">
      <metadata>
        <title>Test for kernel-xen-devel On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
The SUSE Linux Enterprise 11 Service Pack 3 kernel was updated to fix a   critical privilege escalation security issue:   * CVE-2014-3153: The futex acquisition code in kernel/futex.c can be   used to gain ring0 access via the futex syscall. Refer to Advisory for further details. 
</description>
        <affected family="unix">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:0775-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2014-3153" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3153" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3153" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3153" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3153" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3153" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:323009" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:323008" version="25">
      <metadata>
        <title>Test for xen-kmp-default On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
The SUSE Linux Enterprise 11 Service Pack 3 kernel was updated to fix a
                    critical privilege escalation security issue: * CVE-2014-3153: The futex acquisition code
                    in kernel/futex.c can be used to gain ring0 access via the futex syscall. Refer to Advisory
                    for further details.
</description>
        <affected family="unix">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:0775-1" source="https://www.suse.com/support/update/" />
        <reference ref_id="CVE-2014-3153" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3153" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:323005" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:322976" version="24">
      <metadata>
        <title>Test for kernel-default-base On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
The SUSE Linux Enterprise 11 Service Pack 3 kernel was updated to fix a   critical privilege escalation security issue:   * CVE-2014-3153: The futex acquisition code in kernel/futex.c can be   used to gain ring0 access via the futex syscall. Refer to Advisory for further details. 
</description>
        <affected family="unix">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:0775-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2014-3153" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3153" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3153" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3153" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-3153" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3153" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:322973" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:321114" version="24">
      <metadata>
        <title>Test for xen-kmp-trace On SUSE Linux Enterprise Server 11 SP2</title>
        <description>
This update fixes the following security issues in xen:   * CVE-2012-5510: Grant table version switch list   corruption vulnerability XSA-26   * CVE-2012-5511: Several HVM operations do not validate   the range of their inputs XSA-27   * CVE-2012-5512: HVMOP_get_mem_access crash /   HVMOP_set_mem_access information leak XSA-28   * CVE-2012-5513: XENMEM_exchange may overwrite   hypervisor memory XSA-29   * CVE-2012-5514: Missing unlock in   guest_physmap_mark_populate_on_demand XSA-30   * CVE-2012-5515: Several memory hypercall operations   allow invalid extent order values XSA-31   Also the following bugs have been fixed and upstream   patches have been applied:   * FATAL PAGE FAULT in hypervisor arch_do_domctl   * 25931-x86-domctl-iomem-mapping-checks.patch   * 26132-tmem-save-NULL-check.patch   * 26134-x86-shadow-invlpg-check.patch   * 26148-vcpu-timer-overflow.patch Replaces   CVE-2012-4535-xsa20.patch   * 26149-x86-p2m-physmap-error-path.patch Replaces   CVE-2012-4537-xsa22.patch   * 26150-x86-shadow-unhook-toplevel-check.patch   Replaces CVE-2012-4538-xsa23.patch   * 26151-gnttab-compat-get-status-frames.patch Replaces   CVE-2012-4539-xsa24.patch   * bnc#792476 - efi files missing in latest XEN update   Security Issue references:   * CVE-2012-5512   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5512      * CVE-2012-5513   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5513      * CVE-2012-5514   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5514      * CVE-2012-5511   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5511      * CVE-2012-5510   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5510      * CVE-2012-5515   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5515   Patch Instructions:   To install this SUSE Security Update use YaST online_update. Refer to Advisory for further details. 
</description>
        <affected family="linux">
          <platform>SUSE Linux Enterprise Server 11 SP2</platform>
        </affected>
        <reference ref_id="SUSE-SU-2012:1615-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2012-5510" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5510" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2012-5511" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5511" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2012-5512" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5512" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2012-5513" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5513" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2012-5514" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5514" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2012-5515" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5515" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2012-4535" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4535" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2012-4537" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4537" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2012-4538" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4538" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2012-4539" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4539" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2012-5512" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5512" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2012-5512" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5512" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2012-5513" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5513" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2012-5513" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5513" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2012-5514" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5514" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2012-5514" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5514" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2012-5511" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5511" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2012-5511" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5511" source="SUSE Advisory Releases" />
        <reference ref_id="CVE" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:321111" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:321110" version="24">
      <metadata>
        <title>Test for xen-tools On SUSE Linux Enterprise Server 11 SP2</title>
        <description>
This update fixes the following security issues in xen:   * CVE-2012-5510: Grant table version switch list   corruption vulnerability XSA-26   * CVE-2012-5511: Several HVM operations do not validate   the range of their inputs XSA-27   * CVE-2012-5512: HVMOP_get_mem_access crash /   HVMOP_set_mem_access information leak XSA-28   * CVE-2012-5513: XENMEM_exchange may overwrite   hypervisor memory XSA-29   * CVE-2012-5514: Missing unlock in   guest_physmap_mark_populate_on_demand XSA-30   * CVE-2012-5515: Several memory hypercall operations   allow invalid extent order values XSA-31   Also the following bugs have been fixed and upstream   patches have been applied:   * FATAL PAGE FAULT in hypervisor arch_do_domctl   * 25931-x86-domctl-iomem-mapping-checks.patch   * 26132-tmem-save-NULL-check.patch   * 26134-x86-shadow-invlpg-check.patch   * 26148-vcpu-timer-overflow.patch Replaces   CVE-2012-4535-xsa20.patch   * 26149-x86-p2m-physmap-error-path.patch Replaces   CVE-2012-4537-xsa22.patch   * 26150-x86-shadow-unhook-toplevel-check.patch   Replaces CVE-2012-4538-xsa23.patch   * 26151-gnttab-compat-get-status-frames.patch Replaces   CVE-2012-4539-xsa24.patch   * bnc#792476 - efi files missing in latest XEN update   Security Issue references:   * CVE-2012-5512   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5512      * CVE-2012-5513   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5513      * CVE-2012-5514   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5514      * CVE-2012-5511   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5511      * CVE-2012-5510   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5510      * CVE-2012-5515   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5515   Patch Instructions:   To install this SUSE Security Update use YaST online_update. Refer to Advisory for further details. 
</description>
        <affected family="linux">
          <platform>SUSE Linux Enterprise Server 11 SP2</platform>
        </affected>
        <reference ref_id="SUSE-SU-2012:1615-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2012-5510" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5510" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2012-5511" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5511" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2012-5512" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5512" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2012-5513" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5513" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2012-5514" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5514" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2012-5515" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5515" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2012-4535" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4535" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2012-4537" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4537" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2012-4538" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4538" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2012-4539" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4539" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2012-5512" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5512" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2012-5512" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5512" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2012-5513" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5513" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2012-5513" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5513" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2012-5514" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5514" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2012-5514" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5514" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2012-5511" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5511" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2012-5511" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5511" source="SUSE Advisory Releases" />
        <reference ref_id="CVE" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:321107" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:321106" version="24">
      <metadata>
        <title>Test for xen-kmp-default On SUSE Linux Enterprise Server 11 SP2</title>
        <description>
This update fixes the following security issues in xen:   * CVE-2012-5510: Grant table version switch list   corruption vulnerability XSA-26   * CVE-2012-5511: Several HVM operations do not validate   the range of their inputs XSA-27   * CVE-2012-5512: HVMOP_get_mem_access crash /   HVMOP_set_mem_access information leak XSA-28   * CVE-2012-5513: XENMEM_exchange may overwrite   hypervisor memory XSA-29   * CVE-2012-5514: Missing unlock in   guest_physmap_mark_populate_on_demand XSA-30   * CVE-2012-5515: Several memory hypercall operations   allow invalid extent order values XSA-31   Also the following bugs have been fixed and upstream   patches have been applied:   * FATAL PAGE FAULT in hypervisor arch_do_domctl   * 25931-x86-domctl-iomem-mapping-checks.patch   * 26132-tmem-save-NULL-check.patch   * 26134-x86-shadow-invlpg-check.patch   * 26148-vcpu-timer-overflow.patch Replaces   CVE-2012-4535-xsa20.patch   * 26149-x86-p2m-physmap-error-path.patch Replaces   CVE-2012-4537-xsa22.patch   * 26150-x86-shadow-unhook-toplevel-check.patch   Replaces CVE-2012-4538-xsa23.patch   * 26151-gnttab-compat-get-status-frames.patch Replaces   CVE-2012-4539-xsa24.patch   * bnc#792476 - efi files missing in latest XEN update   Security Issue references:   * CVE-2012-5512   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5512      * CVE-2012-5513   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5513      * CVE-2012-5514   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5514      * CVE-2012-5511   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5511      * CVE-2012-5510   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5510      * CVE-2012-5515   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5515   Patch Instructions:   To install this SUSE Security Update use YaST online_update. Refer to Advisory for further details. 
</description>
        <affected family="linux">
          <platform>SUSE Linux Enterprise Server 11 SP2</platform>
        </affected>
        <reference ref_id="SUSE-SU-2012:1615-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2012-5510" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5510" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2012-5511" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5511" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2012-5512" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5512" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2012-5513" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5513" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2012-5514" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5514" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2012-5515" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5515" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2012-4535" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4535" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2012-4537" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4537" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2012-4538" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4538" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2012-4539" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4539" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2012-5512" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5512" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2012-5512" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5512" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2012-5513" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5513" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2012-5513" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5513" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2012-5514" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5514" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2012-5514" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5514" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2012-5511" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5511" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2012-5511" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5511" source="SUSE Advisory Releases" />
        <reference ref_id="CVE" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:321103" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:321102" version="24">
      <metadata>
        <title>Test for xen-libs On SUSE Linux Enterprise Server 11 SP2</title>
        <description>
This update fixes the following security issues in xen:   * CVE-2012-5510: Grant table version switch list   corruption vulnerability XSA-26   * CVE-2012-5511: Several HVM operations do not validate   the range of their inputs XSA-27   * CVE-2012-5512: HVMOP_get_mem_access crash /   HVMOP_set_mem_access information leak XSA-28   * CVE-2012-5513: XENMEM_exchange may overwrite   hypervisor memory XSA-29   * CVE-2012-5514: Missing unlock in   guest_physmap_mark_populate_on_demand XSA-30   * CVE-2012-5515: Several memory hypercall operations   allow invalid extent order values XSA-31   Also the following bugs have been fixed and upstream   patches have been applied:   * FATAL PAGE FAULT in hypervisor arch_do_domctl   * 25931-x86-domctl-iomem-mapping-checks.patch   * 26132-tmem-save-NULL-check.patch   * 26134-x86-shadow-invlpg-check.patch   * 26148-vcpu-timer-overflow.patch Replaces   CVE-2012-4535-xsa20.patch   * 26149-x86-p2m-physmap-error-path.patch Replaces   CVE-2012-4537-xsa22.patch   * 26150-x86-shadow-unhook-toplevel-check.patch   Replaces CVE-2012-4538-xsa23.patch   * 26151-gnttab-compat-get-status-frames.patch Replaces   CVE-2012-4539-xsa24.patch   * bnc#792476 - efi files missing in latest XEN update   Security Issue references:   * CVE-2012-5512   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5512      * CVE-2012-5513   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5513      * CVE-2012-5514   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5514      * CVE-2012-5511   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5511      * CVE-2012-5510   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5510      * CVE-2012-5515   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5515   Patch Instructions:   To install this SUSE Security Update use YaST online_update. Refer to Advisory for further details. 
</description>
        <affected family="linux">
          <platform>SUSE Linux Enterprise Server 11 SP2</platform>
        </affected>
        <reference ref_id="SUSE-SU-2012:1615-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2012-5510" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5510" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2012-5511" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5511" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2012-5512" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5512" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2012-5513" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5513" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2012-5514" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5514" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2012-5515" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5515" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2012-4535" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4535" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2012-4537" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4537" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2012-4538" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4538" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2012-4539" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4539" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2012-5512" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5512" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2012-5512" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5512" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2012-5513" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5513" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2012-5513" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5513" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2012-5514" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5514" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2012-5514" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5514" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2012-5511" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5511" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2012-5511" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5511" source="SUSE Advisory Releases" />
        <reference ref_id="CVE" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:321099" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:321098" version="24">
      <metadata>
        <title>Test for xen On SUSE Linux Enterprise Server 11 SP2</title>
        <description>
This update fixes the following security issues in xen:   * CVE-2012-5510: Grant table version switch list   corruption vulnerability XSA-26   * CVE-2012-5511: Several HVM operations do not validate   the range of their inputs XSA-27   * CVE-2012-5512: HVMOP_get_mem_access crash /   HVMOP_set_mem_access information leak XSA-28   * CVE-2012-5513: XENMEM_exchange may overwrite   hypervisor memory XSA-29   * CVE-2012-5514: Missing unlock in   guest_physmap_mark_populate_on_demand XSA-30   * CVE-2012-5515: Several memory hypercall operations   allow invalid extent order values XSA-31   Also the following bugs have been fixed and upstream   patches have been applied:   * FATAL PAGE FAULT in hypervisor arch_do_domctl   * 25931-x86-domctl-iomem-mapping-checks.patch   * 26132-tmem-save-NULL-check.patch   * 26134-x86-shadow-invlpg-check.patch   * 26148-vcpu-timer-overflow.patch Replaces   CVE-2012-4535-xsa20.patch   * 26149-x86-p2m-physmap-error-path.patch Replaces   CVE-2012-4537-xsa22.patch   * 26150-x86-shadow-unhook-toplevel-check.patch   Replaces CVE-2012-4538-xsa23.patch   * 26151-gnttab-compat-get-status-frames.patch Replaces   CVE-2012-4539-xsa24.patch   * bnc#792476 - efi files missing in latest XEN update   Security Issue references:   * CVE-2012-5512   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5512      * CVE-2012-5513   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5513      * CVE-2012-5514   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5514      * CVE-2012-5511   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5511      * CVE-2012-5510   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5510      * CVE-2012-5515   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5515   Patch Instructions:   To install this SUSE Security Update use YaST online_update. Refer to Advisory for further details. 
</description>
        <affected family="linux">
          <platform>SUSE Linux Enterprise Server 11 SP2</platform>
        </affected>
        <reference ref_id="SUSE-SU-2012:1615-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2012-5510" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5510" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2012-5511" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5511" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2012-5512" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5512" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2012-5513" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5513" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2012-5514" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5514" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2012-5515" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5515" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2012-4535" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4535" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2012-4537" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4537" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2012-4538" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4538" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2012-4539" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4539" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2012-5512" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5512" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2012-5512" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5512" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2012-5513" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5513" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2012-5513" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5513" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2012-5514" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5514" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2012-5514" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5514" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2012-5511" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5511" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2012-5511" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5511" source="SUSE Advisory Releases" />
        <reference ref_id="CVE" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:321095" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:321094" version="24">
      <metadata>
        <title>Test for xen-doc-html On SUSE Linux Enterprise Server 11 SP2</title>
        <description>
This update fixes the following security issues in xen:   * CVE-2012-5510: Grant table version switch list   corruption vulnerability XSA-26   * CVE-2012-5511: Several HVM operations do not validate   the range of their inputs XSA-27   * CVE-2012-5512: HVMOP_get_mem_access crash /   HVMOP_set_mem_access information leak XSA-28   * CVE-2012-5513: XENMEM_exchange may overwrite   hypervisor memory XSA-29   * CVE-2012-5514: Missing unlock in   guest_physmap_mark_populate_on_demand XSA-30   * CVE-2012-5515: Several memory hypercall operations   allow invalid extent order values XSA-31   Also the following bugs have been fixed and upstream   patches have been applied:   * FATAL PAGE FAULT in hypervisor arch_do_domctl   * 25931-x86-domctl-iomem-mapping-checks.patch   * 26132-tmem-save-NULL-check.patch   * 26134-x86-shadow-invlpg-check.patch   * 26148-vcpu-timer-overflow.patch Replaces   CVE-2012-4535-xsa20.patch   * 26149-x86-p2m-physmap-error-path.patch Replaces   CVE-2012-4537-xsa22.patch   * 26150-x86-shadow-unhook-toplevel-check.patch   Replaces CVE-2012-4538-xsa23.patch   * 26151-gnttab-compat-get-status-frames.patch Replaces   CVE-2012-4539-xsa24.patch   * bnc#792476 - efi files missing in latest XEN update   Security Issue references:   * CVE-2012-5512   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5512      * CVE-2012-5513   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5513      * CVE-2012-5514   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5514      * CVE-2012-5511   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5511      * CVE-2012-5510   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5510      * CVE-2012-5515   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5515   Patch Instructions:   To install this SUSE Security Update use YaST online_update. Refer to Advisory for further details. 
</description>
        <affected family="linux">
          <platform>SUSE Linux Enterprise Server 11 SP2</platform>
        </affected>
        <reference ref_id="SUSE-SU-2012:1615-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2012-5510" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5510" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2012-5511" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5511" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2012-5512" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5512" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2012-5513" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5513" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2012-5514" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5514" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2012-5515" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5515" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2012-4535" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4535" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2012-4537" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4537" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2012-4538" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4538" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2012-4539" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4539" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2012-5512" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5512" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2012-5512" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5512" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2012-5513" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5513" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2012-5513" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5513" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2012-5514" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5514" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2012-5514" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5514" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2012-5511" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5511" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2012-5511" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5511" source="SUSE Advisory Releases" />
        <reference ref_id="CVE" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:321091" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:321090" version="24">
      <metadata>
        <title>Test for libxml2-devel On SUSE Linux Enterprise Server 10 SP4</title>
        <description>
A heap-based buffer underflow in the entity decoding of   libxml2 could have caused a Denial of Service or   potentially allowed the execution of arbitrary code. Refer to Advisory for further details. 
</description>
        <affected family="linux">
          <platform>SUSE Linux Enterprise Server 10 SP4</platform>
        </affected>
        <reference ref_id="SUSE-SU-2012:1636-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2012-5134" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5134" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2012-5134" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5134" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:321087" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:321086" version="24">
      <metadata>
        <title>Test for libxml2 On SUSE Linux Enterprise Server 10 SP4</title>
        <description>
A heap-based buffer underflow in the entity decoding of   libxml2 could have caused a Denial of Service or   potentially allowed the execution of arbitrary code. Refer to Advisory for further details. 
</description>
        <affected family="linux">
          <platform>SUSE Linux Enterprise Server 10 SP4</platform>
        </affected>
        <reference ref_id="SUSE-SU-2012:1636-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2012-5134" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5134" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2012-5134" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5134" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:321083" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:321070" version="24">
      <metadata>
        <title>Test for libxml2-python On SUSE Linux Enterprise Server 11 SP2</title>
        <description>
A heap-based buffer underflow in the entity decoding of   libxml2 could have caused a Denial of Service or   potentially allowed the execution of arbitrary code. Refer to Advisory for further details. 
</description>
        <affected family="linux">
          <platform>SUSE Linux Enterprise Server 11 SP2</platform>
        </affected>
        <reference ref_id="SUSE-SU-2012:1636-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2012-5134" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5134" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2012-5134" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5134" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:321067" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:321066" version="24">
      <metadata>
        <title>Test for libxml2-32bit On SUSE Linux Enterprise Server 11 SP2</title>
        <description>
A heap-based buffer underflow in the entity decoding of   libxml2 could have caused a Denial of Service or   potentially allowed the execution of arbitrary code. Refer to Advisory for further details. 
</description>
        <affected family="linux">
          <platform>SUSE Linux Enterprise Server 11 SP2</platform>
        </affected>
        <reference ref_id="SUSE-SU-2012:1636-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2012-5134" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5134" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2012-5134" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5134" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:321063" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:321062" version="24">
      <metadata>
        <title>Test for libxml2-devel-32bit On SUSE Linux Enterprise Server 10 SP4</title>
        <description>
A heap-based buffer underflow in the entity decoding of   libxml2 could have caused a Denial of Service or   potentially allowed the execution of arbitrary code. Refer to Advisory for further details. 
</description>
        <affected family="linux">
          <platform>SUSE Linux Enterprise Server 10 SP4</platform>
        </affected>
        <reference ref_id="SUSE-SU-2012:1636-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2012-5134" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5134" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2012-5134" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5134" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:321059" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:321058" version="24">
      <metadata>
        <title>Test for libxml2-32bit On SUSE Linux Enterprise Server 10 SP4</title>
        <description>
A heap-based buffer underflow in the entity decoding of   libxml2 could have caused a Denial of Service or   potentially allowed the execution of arbitrary code. Refer to Advisory for further details. 
</description>
        <affected family="linux">
          <platform>SUSE Linux Enterprise Server 10 SP4</platform>
        </affected>
        <reference ref_id="SUSE-SU-2012:1636-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2012-5134" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5134" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2012-5134" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5134" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:321055" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:321054" version="24">
      <metadata>
        <title>Test for glibc-i18ndata On SUSE Linux Enterprise Server 11 SP2</title>
        <description>
This collective update for the GNU C library glibc   provides the following fixes:   * Fix strtod integer/buffer overflows bnc#775690,   CVE-2012-3480   * Fix vfprintf handling of many format specifiers   bnc#770891, CVE-2012-3404, CVE-2012-3405, CVE-2012-3406   * Fix pthread_cond_timedwait stack unwinding   bnc#750741, bnc#777233   * Improve fix for dynamic library unloading bnc#783060   * Fix resolver when first query fails, but second one   succeeds bnc#767266. Refer to Advisory for further details. 
</description>
        <affected family="linux">
          <platform>SUSE Linux Enterprise Server 11 SP2</platform>
        </affected>
        <reference ref_id="SUSE-SU-2012:1666-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2012-3480" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3480" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2012-3404" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3404" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2012-3405" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3405" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2012-3406" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3406" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2012-3404" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3404" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2012-3404" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3404" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2012-3405" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3405" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2012-3405" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3405" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2012-3406" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3406" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2012-3406" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3406" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2012-3480" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3480" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2012-3480" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3480" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:321051" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:321010" version="24">
      <metadata>
        <title>Test for glibc-devel On SUSE Linux Enterprise Server 11 SP2</title>
        <description>
This collective update for the GNU C library glibc   provides the following fixes:   * Fix strtod integer/buffer overflows bnc#775690,   CVE-2012-3480   * Fix vfprintf handling of many format specifiers   bnc#770891, CVE-2012-3404, CVE-2012-3405, CVE-2012-3406   * Fix pthread_cond_timedwait stack unwinding   bnc#750741, bnc#777233   * Improve fix for dynamic library unloading bnc#783060   * Fix resolver when first query fails, but second one   succeeds bnc#767266. Refer to Advisory for further details. 
</description>
        <affected family="linux">
          <platform>SUSE Linux Enterprise Server 11 SP2</platform>
        </affected>
        <reference ref_id="SUSE-SU-2012:1666-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2012-3480" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3480" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2012-3404" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3404" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2012-3405" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3405" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2012-3406" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3406" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2012-3404" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3404" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2012-3404" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3404" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2012-3405" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3405" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2012-3405" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3405" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2012-3406" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3406" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2012-3406" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3406" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2012-3480" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3480" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2012-3480" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3480" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:321007" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:321002" version="24">
      <metadata>
        <title>Test for glibc-locale On SUSE Linux Enterprise Server 10 SP4</title>
        <description>
This update for GNU C library glibc fixes multiple   integer overflows in strtod and related functions. Refer to Advisory for further details. 
</description>
        <affected family="linux">
          <platform>SUSE Linux Enterprise Server 10 SP4</platform>
        </affected>
        <reference ref_id="SUSE-SU-2012:1667-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2012-3480" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3480" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2012-3480" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3480" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:320999" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:320994" version="24">
      <metadata>
        <title>Test for glibc-profile On SUSE Linux Enterprise Server 10 SP4</title>
        <description>
This update for GNU C library glibc fixes multiple   integer overflows in strtod and related functions. Refer to Advisory for further details. 
</description>
        <affected family="linux">
          <platform>SUSE Linux Enterprise Server 10 SP4</platform>
        </affected>
        <reference ref_id="SUSE-SU-2012:1667-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2012-3480" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3480" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2012-3480" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3480" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:320991" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:320986" version="24">
      <metadata>
        <title>Test for glibc-info On SUSE Linux Enterprise Server 10 SP4</title>
        <description>
This update for GNU C library glibc fixes multiple   integer overflows in strtod and related functions. Refer to Advisory for further details. 
</description>
        <affected family="linux">
          <platform>SUSE Linux Enterprise Server 10 SP4</platform>
        </affected>
        <reference ref_id="SUSE-SU-2012:1667-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2012-3480" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3480" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2012-3480" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3480" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:320983" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:320978" version="24">
      <metadata>
        <title>Test for glibc-devel On SUSE Linux Enterprise Server 10 SP4</title>
        <description>
This update for GNU C library glibc fixes multiple   integer overflows in strtod and related functions. Refer to Advisory for further details. 
</description>
        <affected family="linux">
          <platform>SUSE Linux Enterprise Server 10 SP4</platform>
        </affected>
        <reference ref_id="SUSE-SU-2012:1667-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2012-3480" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3480" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2012-3480" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3480" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:320975" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:320974" version="24">
      <metadata>
        <title>Test for glibc-32bit On SUSE Linux Enterprise Server 10 SP4</title>
        <description>
This update for GNU C library glibc fixes multiple   integer overflows in strtod and related functions. Refer to Advisory for further details. 
</description>
        <affected family="linux">
          <platform>SUSE Linux Enterprise Server 10 SP4</platform>
        </affected>
        <reference ref_id="SUSE-SU-2012:1667-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2012-3480" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3480" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2012-3480" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3480" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:320971" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:320970" version="24">
      <metadata>
        <title>Test for glibc-profile-32bit On SUSE Linux Enterprise Server 10 SP4</title>
        <description>
This update for GNU C library glibc fixes multiple   integer overflows in strtod and related functions. Refer to Advisory for further details. 
</description>
        <affected family="linux">
          <platform>SUSE Linux Enterprise Server 10 SP4</platform>
        </affected>
        <reference ref_id="SUSE-SU-2012:1667-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2012-3480" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3480" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2012-3480" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3480" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:320967" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:320413" version="24">
      <metadata>
        <title>Test for gnutls On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
The GnuTLS library received a critical security fix and   other updates:   * CVE-2014-0092: The X.509 certificate verification had   incorrect error handling, which could lead to broken   certificates marked as being valid. Refer to Advisory for further details. 
</description>
        <affected family="linux">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:0319-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2014-0092" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0092" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2009-5138" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-5138" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0092" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0092" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0092" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0092" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2009-5138" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-5138" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2009-5138" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-5138" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:320410" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:320409" version="24">
      <metadata>
        <title>Test for libgnutls26 On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
The GnuTLS library received a critical security fix and   other updates:   * CVE-2014-0092: The X.509 certificate verification had   incorrect error handling, which could lead to broken   certificates marked as being valid. Refer to Advisory for further details. 
</description>
        <affected family="linux">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:0319-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2014-0092" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0092" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2009-5138" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-5138" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0092" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0092" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0092" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0092" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2009-5138" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-5138" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2009-5138" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-5138" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:320406" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:320405" version="25">
      <metadata>
        <title>Test for openssl-certs On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
The openssl-certs package was updated to match the certificates contained in the Mozilla NSS 3.15.4 release. Refer to Advisory for further details.
</description>
        <affected family="linux">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:0331-1" source="https://www.suse.com/support/update/announcement/" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:320402" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:320401" version="24">
      <metadata>
        <title>Test for libpython2_6-1_0-32bit On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
This update for Python fixes the following security issues:   * bnc#834601: SSL module does not handle certificates   that contain hostnames with NULL bytes. Refer to Advisory for further details. 
</description>
        <affected family="linux">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:0337-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2013-4238" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4238" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-1752" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1752" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4073" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4073" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4073" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4073" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4238" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4238" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4238" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4238" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:320398" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:320397" version="24">
      <metadata>
        <title>Test for python-base-32bit On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
This update for Python fixes the following security issues:   * bnc#834601: SSL module does not handle certificates   that contain hostnames with NULL bytes. Refer to Advisory for further details. 
</description>
        <affected family="linux">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:0337-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2013-4238" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4238" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-1752" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1752" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4073" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4073" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4073" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4073" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4238" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4238" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4238" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4238" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:320394" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:320381" version="24">
      <metadata>
        <title>Test for libpython2_6-1_0 On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
This update for Python fixes the following security issues:   * bnc#834601: SSL module does not handle certificates   that contain hostnames with NULL bytes. Refer to Advisory for further details. 
</description>
        <affected family="linux">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:0337-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2013-4238" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4238" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-1752" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1752" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4073" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4073" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4073" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4073" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4238" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4238" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4238" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4238" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:320378" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:320361" version="24">
      <metadata>
        <title>Test for python-idle On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
This update for Python fixes the following security issues:   * bnc#834601: SSL module does not handle certificates   that contain hostnames with NULL bytes. Refer to Advisory for further details. 
</description>
        <affected family="linux">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:0337-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2013-4238" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4238" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-1752" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1752" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4073" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4073" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4073" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4073" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4238" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4238" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4238" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4238" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:320358" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:320341" version="24">
      <metadata>
        <title>Test for libMagickCore1 On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
The image converter program and library set of ImageMagick   received an update that fixes a buffer overflow when   handling PSD images. Refer to Advisory for further details. 
</description>
        <affected family="linux">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:0359-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2014-1947" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1947" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-1947" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1947" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:320338" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:320337" version="24">
      <metadata>
        <title>Test for xen-libs-32bit On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
The SUSE Linux Enterprise Server 11 Service Pack 3 Xen   hypervisor and toolset has been updated to 4.2.4 to fix   various bugs and security issues:   The following security issues have been addressed:   *   XSA-60: CVE-2013-2212: The vmx_set_uc_mode function   in Xen 3.3 through 4.3, when disabling chaches, allows   local HVM guests with access to memory mapped I/O regions   to cause a denial of service CPU consumption and possibly   hypervisor or guest kernel panic via a crafted GFN range. Refer to Advisory for further details. 
</description>
        <affected family="linux">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:0373-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2013-2212" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2212" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6400" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6400" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6885" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6885" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-1642" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1642" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-1891" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1891" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-1892" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1892" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-1893" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1893" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-1894" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1894" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-1895" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1895" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-1896" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1896" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-1666" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1666" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-1950" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1950" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-2212" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2212" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-2212" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2212" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6400" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6400" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6400" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6400" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6885" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6885" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6885" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6885" source="SUSE Advisory Releases" />
        <reference ref_id="CVE" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:320334" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:320333" version="24">
      <metadata>
        <title>Test for xen-doc-pdf On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
The SUSE Linux Enterprise Server 11 Service Pack 3 Xen   hypervisor and toolset has been updated to 4.2.4 to fix   various bugs and security issues:   The following security issues have been addressed:   *   XSA-60: CVE-2013-2212: The vmx_set_uc_mode function   in Xen 3.3 through 4.3, when disabling chaches, allows   local HVM guests with access to memory mapped I/O regions   to cause a denial of service CPU consumption and possibly   hypervisor or guest kernel panic via a crafted GFN range. Refer to Advisory for further details. 
</description>
        <affected family="linux">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:0373-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2013-2212" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2212" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6400" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6400" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6885" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6885" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-1642" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1642" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-1891" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1891" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-1892" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1892" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-1893" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1893" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-1894" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1894" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-1895" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1895" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-1896" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1896" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-1666" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1666" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-1950" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1950" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-2212" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2212" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-2212" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2212" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6400" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6400" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6400" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6400" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6885" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6885" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6885" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6885" source="SUSE Advisory Releases" />
        <reference ref_id="CVE" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:320330" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:320329" version="24">
      <metadata>
        <title>Test for xen-tools On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
The SUSE Linux Enterprise Server 11 Service Pack 3 Xen   hypervisor and toolset has been updated to 4.2.4 to fix   various bugs and security issues:   The following security issues have been addressed:   *   XSA-60: CVE-2013-2212: The vmx_set_uc_mode function   in Xen 3.3 through 4.3, when disabling chaches, allows   local HVM guests with access to memory mapped I/O regions   to cause a denial of service CPU consumption and possibly   hypervisor or guest kernel panic via a crafted GFN range. Refer to Advisory for further details. 
</description>
        <affected family="linux">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:0373-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2013-2212" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2212" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6400" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6400" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6885" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6885" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-1642" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1642" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-1891" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1891" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-1892" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1892" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-1893" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1893" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-1894" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1894" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-1895" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1895" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-1896" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1896" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-1666" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1666" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-1950" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1950" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-2212" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2212" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-2212" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2212" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6400" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6400" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6400" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6400" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6885" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6885" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6885" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6885" source="SUSE Advisory Releases" />
        <reference ref_id="CVE" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:320326" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:319777" version="24">
      <metadata>
        <title>Test for openswan-doc On SUSE Linux Enterprise Server 11 SP2</title>
        <description>
This update fixes a Denial of Service DoS vulnerability   via IKEv2 I1 notifications in openswan. Refer to Advisory for further details. 
</description>
        <affected family="linux">
          <platform>SUSE Linux Enterprise Server 11 SP2</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:0178-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2013-7294" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-7294" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-7294" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-7294" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-7294" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-7294" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:319774" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:319773" version="26">
      <metadata>
        <title>Test for bind-doc On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
This update fixes a DoS vulnerability in bind when handling malformed NSEC3-signed zones. Refer to Advisory for further details.
</description>
        <affected family="linux">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:0179-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2014-0591" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0591" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:319770" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:319761" version="26">
      <metadata>
        <title>Test for bind-utils On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
This update fixes a DoS vulnerability in bind when handling malformed NSEC3-signed zones. Refer to Advisory for further details.
</description>
        <affected family="linux">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:0179-1" source="https://www.suse.com/support/update" />
        <reference ref_id="CVE-2014-0591" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0591" source="SUSE Advisory Releases" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:319758" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:319753" version="25">
      <metadata>
        <title>Test for bind-libs-32bit On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
This update fixes a DoS vulnerability in bind when handling   malformed NSEC3-signed zones. Refer to Advisory for further details. 
</description>
        <affected family="linux">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:0179-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2014-0591" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0591" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0591" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0591" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2014-0591" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0591" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:319750" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:319745" version="24">
      <metadata>
        <title>Test for kernel-ec2 On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
The SUSE Linux Enterprise 11 Service Pack 3 kernel was   updated to 3.0.101 and also includes various other bug and   security fixes. Refer to Advisory for further details. 
</description>
        <affected family="linux">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:0189-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2013-4587" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4587" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4592" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4592" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6367" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6367" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6368" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6368" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6376" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6376" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4483" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4483" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4511" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4511" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4514" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4514" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4515" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4515" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6378" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6378" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6380" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6380" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-7027" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-7027" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6463" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6463" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6383" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6383" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4345" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4345" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-2146" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2146" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-2930" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2930" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-2146" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2146" source="SUSE Advisory Releases" />
        <reference ref_id="CVE" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:319742" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:319729" version="25">
      <metadata>
        <title>Test for xen-kmp-default On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
The SUSE Linux Enterprise 11 Service Pack 3 kernel was updated to 3.0.101 and also includes various other bug and security fixes. Refer to Advisory for further details.
</description>
        <affected family="linux">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:0189-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2013-4587" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4587" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4592" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4592" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6367" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6367" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6368" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6368" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6376" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6376" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4483" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4483" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4511" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4511" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4514" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4514" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4515" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4515" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6378" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6378" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6380" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6380" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-7027" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-7027" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6463" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6463" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6383" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6383" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4345" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4345" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-2146" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2146" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-2930" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2930" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-2146" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2146" source="SUSE Advisory Releases" />
        <reference ref_id="CVE" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:319726" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:319725" version="24">
      <metadata>
        <title>Test for kernel-ec2-devel On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
The SUSE Linux Enterprise 11 Service Pack 3 kernel was   updated to 3.0.101 and also includes various other bug and   security fixes. Refer to Advisory for further details. 
</description>
        <affected family="linux">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:0189-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2013-4587" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4587" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4592" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4592" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6367" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6367" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6368" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6368" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6376" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6376" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4483" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4483" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4511" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4511" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4514" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4514" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4515" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4515" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6378" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6378" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6380" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6380" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-7027" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-7027" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6463" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6463" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6383" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6383" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4345" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4345" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-2146" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2146" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-2930" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2930" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-2146" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2146" source="SUSE Advisory Releases" />
        <reference ref_id="CVE" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:319722" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:319713" version="25">
      <metadata>
        <title>Test for xen-kmp-pae On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
The SUSE Linux Enterprise 11 Service Pack 3 kernel was updated to 3.0.101 and
                    also includes various other bug and security fixes. Refer to Advisory for further
                    details.
</description>
        <affected family="linux">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:0189-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2013-4587" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4587" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4592" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4592" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6367" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6367" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6368" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6368" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6376" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6376" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4483" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4483" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4511" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4511" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4514" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4514" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4515" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4515" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6378" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6378" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6380" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6380" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-7027" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-7027" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6463" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6463" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6383" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6383" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4345" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4345" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-2146" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2146" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-2930" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2930" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-2146" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2146" source="SUSE Advisory Releases" />
        <reference ref_id="CVE" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:319710" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:319701" version="24">
      <metadata>
        <title>Test for kernel-trace-base On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
The SUSE Linux Enterprise 11 Service Pack 3 kernel was   updated to 3.0.101 and also includes various other bug and   security fixes. Refer to Advisory for further details. 
</description>
        <affected family="linux">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:0189-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2013-4587" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4587" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4592" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4592" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6367" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6367" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6368" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6368" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6376" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6376" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4483" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4483" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4511" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4511" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4514" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4514" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4515" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4515" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6378" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6378" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6380" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6380" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-7027" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-7027" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6463" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6463" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6383" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6383" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4345" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4345" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-2146" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2146" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-2930" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2930" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-2146" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2146" source="SUSE Advisory Releases" />
        <reference ref_id="CVE" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:319698" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:319657" version="25">
      <metadata>
        <title>Test for hplip On SUSE Linux Enterprise Server 11 SP2</title>
        <description>
hplip was updated to fix three security issues:   *   CVE-2013-0200: Some local file overwrite problems via   predictable /tmp filenames were fixed. Refer to Advisory for further details. 
</description>
        <affected family="linux">
          <platform>SUSE Linux Enterprise Server 11 SP2</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:0188-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2013-0200" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0200" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4325" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4325" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6402" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6402" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4325" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4325" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4325" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4325" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-0200" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0200" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-0200" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0200" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6402" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6402" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6402" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6402" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:319654" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:317976" version="24">
      <metadata>
        <title>Test for php53-dom On SUSE Linux Enterprise Server 11 SP2</title>
        <description>
This update fixes the following issues:   * memory corruption in openssl_parse_x509   CVE-2013-6420   * Heap buffer over-read in DateInterval CVE-2013-6712   * man-in-the-middle attacks by specially crafting   certificates CVE-2013-4248   Security Issue references:   * CVE-2013-6420   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6420      * CVE-2013-6712   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6712      * CVE-2013-4248   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4248   Indications:   Everybody should update.Patch Instructions:   To install this SUSE Security Update use YaST online_update. Refer to Advisory for further details. 
</description>
        <affected family="linux">
          <platform>SUSE Linux Enterprise Server 11 SP2</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:0064-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2013-6420" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6420" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6712" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6712" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4248" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4248" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6420" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6420" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6420" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6420" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6712" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6712" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6712" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6712" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4248" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4248" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4248" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4248" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:317973" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:317964" version="24">
      <metadata>
        <title>Test for php53-suhosin On SUSE Linux Enterprise Server 11 SP2</title>
        <description>
This update fixes the following issues:   * memory corruption in openssl_parse_x509   CVE-2013-6420   * Heap buffer over-read in DateInterval CVE-2013-6712   * man-in-the-middle attacks by specially crafting   certificates CVE-2013-4248   Security Issue references:   * CVE-2013-6420   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6420      * CVE-2013-6712   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6712      * CVE-2013-4248   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4248   Indications:   Everybody should update.Patch Instructions:   To install this SUSE Security Update use YaST online_update. Refer to Advisory for further details. 
</description>
        <affected family="linux">
          <platform>SUSE Linux Enterprise Server 11 SP2</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:0064-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2013-6420" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6420" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6712" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6712" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4248" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4248" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6420" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6420" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6420" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6420" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6712" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6712" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6712" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6712" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4248" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4248" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4248" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4248" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:317961" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:317960" version="24">
      <metadata>
        <title>Test for php53-tokenizer On SUSE Linux Enterprise Server 11 SP2</title>
        <description>
This update fixes the following issues:   * memory corruption in openssl_parse_x509   CVE-2013-6420   * Heap buffer over-read in DateInterval CVE-2013-6712   * man-in-the-middle attacks by specially crafting   certificates CVE-2013-4248   Security Issue references:   * CVE-2013-6420   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6420      * CVE-2013-6712   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6712      * CVE-2013-4248   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4248   Indications:   Everybody should update.Patch Instructions:   To install this SUSE Security Update use YaST online_update. Refer to Advisory for further details. 
</description>
        <affected family="linux">
          <platform>SUSE Linux Enterprise Server 11 SP2</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:0064-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2013-6420" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6420" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6712" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6712" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4248" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4248" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6420" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6420" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6420" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6420" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6712" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6712" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6712" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6712" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4248" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4248" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4248" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4248" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:317957" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:317956" version="24">
      <metadata>
        <title>Test for php53-zip On SUSE Linux Enterprise Server 11 SP2</title>
        <description>
This update fixes the following issues:   * memory corruption in openssl_parse_x509   CVE-2013-6420   * Heap buffer over-read in DateInterval CVE-2013-6712   * man-in-the-middle attacks by specially crafting   certificates CVE-2013-4248   Security Issue references:   * CVE-2013-6420   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6420      * CVE-2013-6712   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6712      * CVE-2013-4248   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4248   Indications:   Everybody should update.Patch Instructions:   To install this SUSE Security Update use YaST online_update. Refer to Advisory for further details. 
</description>
        <affected family="linux">
          <platform>SUSE Linux Enterprise Server 11 SP2</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:0064-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2013-6420" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6420" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6712" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6712" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4248" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4248" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6420" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6420" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6420" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6420" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6712" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6712" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6712" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6712" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4248" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4248" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4248" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4248" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:317953" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:317952" version="24">
      <metadata>
        <title>Test for php53-bcmath On SUSE Linux Enterprise Server 11 SP2</title>
        <description>
This update fixes the following issues:   * memory corruption in openssl_parse_x509   CVE-2013-6420   * Heap buffer over-read in DateInterval CVE-2013-6712   * man-in-the-middle attacks by specially crafting   certificates CVE-2013-4248   Security Issue references:   * CVE-2013-6420   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6420      * CVE-2013-6712   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6712      * CVE-2013-4248   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4248   Indications:   Everybody should update.Patch Instructions:   To install this SUSE Security Update use YaST online_update. Refer to Advisory for further details. 
</description>
        <affected family="linux">
          <platform>SUSE Linux Enterprise Server 11 SP2</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:0064-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2013-6420" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6420" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6712" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6712" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4248" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4248" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6420" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6420" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6420" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6420" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6712" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6712" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6712" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6712" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4248" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4248" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4248" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4248" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:317949" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:317920" version="24">
      <metadata>
        <title>Test for php53-gmp On SUSE Linux Enterprise Server 11 SP2</title>
        <description>
This update fixes the following issues:   * memory corruption in openssl_parse_x509   CVE-2013-6420   * Heap buffer over-read in DateInterval CVE-2013-6712   * man-in-the-middle attacks by specially crafting   certificates CVE-2013-4248   Security Issue references:   * CVE-2013-6420   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6420      * CVE-2013-6712   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6712      * CVE-2013-4248   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4248   Indications:   Everybody should update.Patch Instructions:   To install this SUSE Security Update use YaST online_update. Refer to Advisory for further details. 
</description>
        <affected family="linux">
          <platform>SUSE Linux Enterprise Server 11 SP2</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:0064-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2013-6420" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6420" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6712" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6712" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4248" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4248" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6420" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6420" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6420" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6420" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6712" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6712" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6712" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6712" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4248" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4248" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4248" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4248" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:317917" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:317916" version="24">
      <metadata>
        <title>Test for php53-exif On SUSE Linux Enterprise Server 11 SP2</title>
        <description>
This update fixes the following issues:   * memory corruption in openssl_parse_x509   CVE-2013-6420   * Heap buffer over-read in DateInterval CVE-2013-6712   * man-in-the-middle attacks by specially crafting   certificates CVE-2013-4248   Security Issue references:   * CVE-2013-6420   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6420      * CVE-2013-6712   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6712      * CVE-2013-4248   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4248   Indications:   Everybody should update.Patch Instructions:   To install this SUSE Security Update use YaST online_update. Refer to Advisory for further details. 
</description>
        <affected family="linux">
          <platform>SUSE Linux Enterprise Server 11 SP2</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:0064-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2013-6420" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6420" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6712" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6712" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4248" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4248" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6420" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6420" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6420" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6420" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6712" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6712" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6712" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6712" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4248" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4248" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4248" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4248" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:317913" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:317912" version="24">
      <metadata>
        <title>Test for php53-gd On SUSE Linux Enterprise Server 11 SP2</title>
        <description>
This update fixes the following issues:   * memory corruption in openssl_parse_x509   CVE-2013-6420   * Heap buffer over-read in DateInterval CVE-2013-6712   * man-in-the-middle attacks by specially crafting   certificates CVE-2013-4248   Security Issue references:   * CVE-2013-6420   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6420      * CVE-2013-6712   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6712      * CVE-2013-4248   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4248   Indications:   Everybody should update.Patch Instructions:   To install this SUSE Security Update use YaST online_update. Refer to Advisory for further details. 
</description>
        <affected family="linux">
          <platform>SUSE Linux Enterprise Server 11 SP2</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:0064-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2013-6420" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6420" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6712" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6712" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4248" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4248" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6420" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6420" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6420" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6420" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6712" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6712" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6712" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6712" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4248" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4248" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4248" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4248" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:317909" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:317908" version="24">
      <metadata>
        <title>Test for php53-intl On SUSE Linux Enterprise Server 11 SP2</title>
        <description>
This update fixes the following issues:   * memory corruption in openssl_parse_x509   CVE-2013-6420   * Heap buffer over-read in DateInterval CVE-2013-6712   * man-in-the-middle attacks by specially crafting   certificates CVE-2013-4248   Security Issue references:   * CVE-2013-6420   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6420      * CVE-2013-6712   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6712      * CVE-2013-4248   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4248   Indications:   Everybody should update.Patch Instructions:   To install this SUSE Security Update use YaST online_update. Refer to Advisory for further details. 
</description>
        <affected family="linux">
          <platform>SUSE Linux Enterprise Server 11 SP2</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:0064-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2013-6420" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6420" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6712" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6712" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4248" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4248" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6420" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6420" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6420" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6420" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6712" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6712" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6712" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6712" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4248" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4248" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4248" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4248" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:317905" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:317720" version="24">
      <metadata>
        <title>Test for php53-pear On SUSE Linux Enterprise Server 11 SP3</title>
        <description>
This update fixes the following issues:   * memory corruption in openssl_parse_x509   CVE-2013-6420   * Heap buffer over-read in DateInterval CVE-2013-6712   * man-in-the-middle attacks by specially crafting   certificates CVE-2013-4248   Security Issue references:   * CVE-2013-6420   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6420      * CVE-2013-6712   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6712      * CVE-2013-4248   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4248   Indications:   Everybody should update.Patch Instructions:   To install this SUSE Security Update use YaST online_update. Refer to Advisory for further details. 
</description>
        <affected family="linux">
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:0063-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2013-6420" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6420" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6712" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6712" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4248" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4248" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6420" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6420" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6420" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6420" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6712" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6712" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6712" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6712" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4248" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4248" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4248" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4248" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:317717" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:317716" version="26">
      <metadata>
        <title>Test for wireshark On SUSE Linux Enterprise Server 11 SP2</title>
        <description>
wireshark was updated to security update version 1.8.12,   fixing bugs and security issues. Refer to Advisory for further details. 
</description>
        <affected family="linux">
          <platform>SUSE Linux Enterprise Server 11 SP2</platform>
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:0115-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2013-7112" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-7112" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-7114" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-7114" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-7112" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-7112" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-7112" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-7112" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-7113" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-7113" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-7113" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-7113" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-7114" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-7114" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-7114" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-7114" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:317713" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:317700" version="24">
      <metadata>
        <title>Test for kernel-trace-devel On SUSE Linux Enterprise Server 11 SP2</title>
        <description>
The SUSE Linux Enterprise 11 Service Pack 2 kernel was   updated to 3.0.101 and also includes various other bug and   security fixes. Refer to Advisory for further details. 
</description>
        <affected family="linux">
          <platform>SUSE Linux Enterprise Server 11 SP2</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:0140-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2013-4587" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4587" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6368" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6368" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6367" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6367" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4592" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4592" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6378" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6378" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4514" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4514" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4515" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4515" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-7027" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-7027" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4483" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4483" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4511" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4511" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6380" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6380" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6463" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6463" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6383" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6383" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4345" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4345" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4345" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4345" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4345" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4345" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4483" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4483" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4483" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4483" source="SUSE Advisory Releases" />
        <reference ref_id="CVE" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:317697" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:317692" version="24">
      <metadata>
        <title>Test for kernel-trace On SUSE Linux Enterprise Server 11 SP2</title>
        <description>
The SUSE Linux Enterprise 11 Service Pack 2 kernel was   updated to 3.0.101 and also includes various other bug and   security fixes. Refer to Advisory for further details. 
</description>
        <affected family="linux">
          <platform>SUSE Linux Enterprise Server 11 SP2</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:0140-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2013-4587" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4587" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6368" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6368" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6367" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6367" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4592" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4592" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6378" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6378" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4514" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4514" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4515" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4515" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-7027" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-7027" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4483" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4483" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4511" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4511" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6380" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6380" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6463" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6463" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6383" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6383" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4345" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4345" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4345" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4345" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4345" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4345" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4483" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4483" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4483" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4483" source="SUSE Advisory Releases" />
        <reference ref_id="CVE" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:317689" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:317684" version="24">
      <metadata>
        <title>Test for kernel-source On SUSE Linux Enterprise Server 11 SP2</title>
        <description>
The SUSE Linux Enterprise 11 Service Pack 2 kernel was   updated to 3.0.101 and also includes various other bug and   security fixes. Refer to Advisory for further details. 
</description>
        <affected family="linux">
          <platform>SUSE Linux Enterprise Server 11 SP2</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:0140-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2013-4587" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4587" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6368" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6368" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6367" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6367" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4592" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4592" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6378" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6378" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4514" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4514" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4515" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4515" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-7027" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-7027" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4483" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4483" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4511" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4511" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6380" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6380" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6463" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6463" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6383" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6383" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4345" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4345" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4345" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4345" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4345" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4345" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4483" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4483" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4483" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4483" source="SUSE Advisory Releases" />
        <reference ref_id="CVE" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:317681" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:317680" version="24">
      <metadata>
        <title>Test for kernel-pae On SUSE Linux Enterprise Server 11 SP2</title>
        <description>
The SUSE Linux Enterprise 11 Service Pack 2 kernel was   updated to 3.0.101 and also includes various other bug and   security fixes. Refer to Advisory for further details. 
</description>
        <affected family="linux">
          <platform>SUSE Linux Enterprise Server 11 SP2</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:0140-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2013-4587" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4587" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6368" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6368" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6367" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6367" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4592" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4592" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6378" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6378" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4514" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4514" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4515" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4515" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-7027" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-7027" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4483" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4483" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4511" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4511" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6380" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6380" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6463" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6463" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6383" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6383" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4345" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4345" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4345" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4345" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4345" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4345" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4483" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4483" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4483" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4483" source="SUSE Advisory Releases" />
        <reference ref_id="CVE" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:317677" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:317676" version="24">
      <metadata>
        <title>Test for kernel-pae-devel On SUSE Linux Enterprise Server 11 SP2</title>
        <description>
The SUSE Linux Enterprise 11 Service Pack 2 kernel was   updated to 3.0.101 and also includes various other bug and   security fixes. Refer to Advisory for further details. 
</description>
        <affected family="linux">
          <platform>SUSE Linux Enterprise Server 11 SP2</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:0140-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2013-4587" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4587" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6368" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6368" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6367" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6367" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4592" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4592" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6378" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6378" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4514" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4514" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4515" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4515" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-7027" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-7027" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4483" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4483" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4511" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4511" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6380" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6380" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6463" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6463" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6383" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6383" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4345" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4345" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4345" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4345" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4345" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4345" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4483" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4483" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4483" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4483" source="SUSE Advisory Releases" />
        <reference ref_id="CVE" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:317673" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:317672" version="24">
      <metadata>
        <title>Test for xen-kmp-pae On SUSE Linux Enterprise Server 11 SP2</title>
        <description>
The SUSE Linux Enterprise 11 Service Pack 2 kernel was   updated to 3.0.101 and also includes various other bug and   security fixes. Refer to Advisory for further details. 
</description>
        <affected family="linux">
          <platform>SUSE Linux Enterprise Server 11 SP2</platform>
        </affected>
        <reference ref_id="SUSE-SU-2014:0140-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2013-4587" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4587" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6368" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6368" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6367" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6367" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4592" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4592" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6378" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6378" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4514" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4514" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4515" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4515" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-7027" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-7027" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4483" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4483" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4511" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4511" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6380" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6380" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6463" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6463" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-6383" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6383" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4345" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4345" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4345" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4345" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4345" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4345" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4483" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4483" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4483" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4483" source="SUSE Advisory Releases" />
        <reference ref_id="CVE" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:317669" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:311671" version="26">
      <metadata>
        <title>Test for java-1_6_0-ibm-fonts On SUSE Linux Enterprise Server 11 SP2 and SP3</title>
        <description>
   IBM Java 1.6.0 has been updated to SR14 to fix bugs and   security issues.   Please see also   http://www.ibm.com/developerworks/java/jdk/alerts/   /www.ibm.com/developerworks/java/jdk/alerts/   Also the following bugs have been fixed:   * add Europe/Busingen to tzmappings bnc#817062   * mark files in jre/bin and bin/ as executable   bnc#823034   Security Issue references:   * CVE-2013-3009   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3009      * CVE-2013-3011   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3011      * CVE-2013-3012   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3012      * CVE-2013-4002   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4002      * CVE-2013-2468   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2468      * CVE-2013-2469   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2469      * CVE-2013-2465   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2465      * CVE-2013-2464   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2464      * CVE-2013-2463   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2463      * CVE-2013-2473   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2473      * CVE-2013-2472   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2472      * CVE-2013-2471   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2471      * CVE-2013-2470   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2470      * CVE-2013-2459   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2459      * CVE-2013-2466   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2466      * CVE-2013-3743   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3743      * CVE-2013-2448   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2448      * CVE-2013-2442   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2442      * CVE-2013-2407   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2407      * CVE-2013-2454   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2454      * CVE-2013-2456   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2456      * CVE-2013-2453   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2453      * CVE-2013-2457   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2457      * CVE-2013-2455   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2455      * CVE-2013-2412   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2412      * CVE-2013-2443   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2443      * CVE-2013-2447   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2447      * CVE-2013-2437   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2437      * CVE-2013-2444   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2444      * CVE-2013-2452   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2452      * CVE-2013-2446   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2446      * CVE-2013-2450   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2450      * CVE-2013-1571   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1571      * CVE-2013-2451   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2451      * CVE-2013-1500   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1500   Patch Instructions:   To install this SUSE Security Update use YaST online_update.   Alternatively you can run the command listed for your product:     * SUSE Linux Enterprise Software Development Kit 11 SP3:       zypper in -t patch sdksp3-java-1_6_0-ibm-8105     * SUSE Linux Enterprise Server 11 SP3 for VMware:       zypper in -t patch slessp3-java-1_6_0-ibm-8105     * SUSE Linux Enterprise Server 11 SP3:       zypper in -t patch slessp3-java-1_6_0-ibm-8105     * SUSE Linux Enterprise Java 11 SP3:       zypper in -t patch slejsp3-java-1_6_0-ibm-8105   To bring your system up-to-date, use "zypper patch".
</description>
        <affected family="linux">
          <platform>SUSE Linux Enterprise Server 11 SP2</platform>
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2013:1255-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2013-3009" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3009" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-3009" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3009" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-3011" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3011" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-3011" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3011" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-3012" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3012" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-3012" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3012" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4002" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4002" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4002" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4002" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-2468" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2468" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-2468" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2468" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-2469" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2469" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-2469" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2469" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-2465" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2465" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-2465" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2465" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-2464" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2464" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-2464" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2464" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-2463" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2463" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-2463" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2463" source="SUSE Advisory Releases" />
        <reference ref_id="CVE" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:311668" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:311667" version="26">
      <metadata>
        <title>Test for java-1_6_0-ibm On SUSE Linux Enterprise Server 11 SP2 and SP3</title>
        <description>
   IBM Java 1.6.0 has been updated to SR14 to fix bugs and   security issues.   Please see also   http://www.ibm.com/developerworks/java/jdk/alerts/   /www.ibm.com/developerworks/java/jdk/alerts/   Also the following bugs have been fixed:   * add Europe/Busingen to tzmappings bnc#817062   * mark files in jre/bin and bin/ as executable   bnc#823034   Security Issue references:   * CVE-2013-3009   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3009      * CVE-2013-3011   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3011      * CVE-2013-3012   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3012      * CVE-2013-4002   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4002      * CVE-2013-2468   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2468      * CVE-2013-2469   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2469      * CVE-2013-2465   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2465      * CVE-2013-2464   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2464      * CVE-2013-2463   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2463      * CVE-2013-2473   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2473      * CVE-2013-2472   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2472      * CVE-2013-2471   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2471      * CVE-2013-2470   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2470      * CVE-2013-2459   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2459      * CVE-2013-2466   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2466      * CVE-2013-3743   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3743      * CVE-2013-2448   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2448      * CVE-2013-2442   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2442      * CVE-2013-2407   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2407      * CVE-2013-2454   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2454      * CVE-2013-2456   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2456      * CVE-2013-2453   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2453      * CVE-2013-2457   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2457      * CVE-2013-2455   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2455      * CVE-2013-2412   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2412      * CVE-2013-2443   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2443      * CVE-2013-2447   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2447      * CVE-2013-2437   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2437      * CVE-2013-2444   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2444      * CVE-2013-2452   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2452      * CVE-2013-2446   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2446      * CVE-2013-2450   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2450      * CVE-2013-1571   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1571      * CVE-2013-2451   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2451      * CVE-2013-1500   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1500   Patch Instructions:   To install this SUSE Security Update use YaST online_update.   Alternatively you can run the command listed for your product:     * SUSE Linux Enterprise Software Development Kit 11 SP3:       zypper in -t patch sdksp3-java-1_6_0-ibm-8105     * SUSE Linux Enterprise Server 11 SP3 for VMware:       zypper in -t patch slessp3-java-1_6_0-ibm-8105     * SUSE Linux Enterprise Server 11 SP3:       zypper in -t patch slessp3-java-1_6_0-ibm-8105     * SUSE Linux Enterprise Java 11 SP3:       zypper in -t patch slejsp3-java-1_6_0-ibm-8105   To bring your system up-to-date, use "zypper patch".
</description>
        <affected family="linux">
          <platform>SUSE Linux Enterprise Server 11 SP2</platform>
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2013:1255-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2013-3009" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3009" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-3009" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3009" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-3011" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3011" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-3011" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3011" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-3012" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3012" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-3012" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3012" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4002" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4002" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4002" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4002" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-2468" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2468" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-2468" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2468" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-2469" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2469" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-2469" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2469" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-2465" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2465" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-2465" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2465" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-2464" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2464" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-2464" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2464" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-2463" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2463" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-2463" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2463" source="SUSE Advisory Releases" />
        <reference ref_id="CVE" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:311664" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:311663" version="26">
      <metadata>
        <title>Test for java-1_6_0-ibm-alsa On SUSE Linux Enterprise Server 11 SP2 and SP3</title>
        <description>
   IBM Java 1.6.0 has been updated to SR14 to fix bugs and   security issues.   Please see also   http://www.ibm.com/developerworks/java/jdk/alerts/   /www.ibm.com/developerworks/java/jdk/alerts/   Also the following bugs have been fixed:   * add Europe/Busingen to tzmappings bnc#817062   * mark files in jre/bin and bin/ as executable   bnc#823034   Security Issue references:   * CVE-2013-3009   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3009      * CVE-2013-3011   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3011      * CVE-2013-3012   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3012      * CVE-2013-4002   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4002      * CVE-2013-2468   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2468      * CVE-2013-2469   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2469      * CVE-2013-2465   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2465      * CVE-2013-2464   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2464      * CVE-2013-2463   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2463      * CVE-2013-2473   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2473      * CVE-2013-2472   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2472      * CVE-2013-2471   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2471      * CVE-2013-2470   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2470      * CVE-2013-2459   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2459      * CVE-2013-2466   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2466      * CVE-2013-3743   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3743      * CVE-2013-2448   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2448      * CVE-2013-2442   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2442      * CVE-2013-2407   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2407      * CVE-2013-2454   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2454      * CVE-2013-2456   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2456      * CVE-2013-2453   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2453      * CVE-2013-2457   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2457      * CVE-2013-2455   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2455      * CVE-2013-2412   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2412      * CVE-2013-2443   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2443      * CVE-2013-2447   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2447      * CVE-2013-2437   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2437      * CVE-2013-2444   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2444      * CVE-2013-2452   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2452      * CVE-2013-2446   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2446      * CVE-2013-2450   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2450      * CVE-2013-1571   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1571      * CVE-2013-2451   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2451      * CVE-2013-1500   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1500   Patch Instructions:   To install this SUSE Security Update use YaST online_update.   Alternatively you can run the command listed for your product:     * SUSE Linux Enterprise Software Development Kit 11 SP3:       zypper in -t patch sdksp3-java-1_6_0-ibm-8105     * SUSE Linux Enterprise Server 11 SP3 for VMware:       zypper in -t patch slessp3-java-1_6_0-ibm-8105     * SUSE Linux Enterprise Server 11 SP3:       zypper in -t patch slessp3-java-1_6_0-ibm-8105     * SUSE Linux Enterprise Java 11 SP3:       zypper in -t patch slejsp3-java-1_6_0-ibm-8105   To bring your system up-to-date, use "zypper patch".
</description>
        <affected family="linux">
          <platform>SUSE Linux Enterprise Server 11 SP2</platform>
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2013:1255-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2013-3009" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3009" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-3009" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3009" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-3011" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3011" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-3011" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3011" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-3012" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3012" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-3012" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3012" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4002" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4002" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-4002" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4002" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-2468" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2468" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-2468" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2468" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-2469" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2469" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-2469" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2469" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-2465" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2465" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-2465" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2465" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-2464" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2464" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-2464" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2464" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-2463" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2463" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-2463" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2463" source="SUSE Advisory Releases" />
        <reference ref_id="CVE" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:311660" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:311631" version="26">
      <metadata>
        <title>Test for xorg-x11-libXp-32bit On SUSE Linux Enterprise Server 11 SP2 and SP3</title>
        <description>
   This update of xorg-x11-libXp fixes several integer   overflow issues bnc#815451, bnc#821668, CVE-2013-2062.   Security Issue reference:   * CVE-2013-2062   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2062   Patch Instructions:   To install this SUSE Security Update use YaST online_update.   Alternatively you can run the command listed for your product:     * SUSE Linux Enterprise Software Development Kit 11 SP2:       zypper in -t patch sdksp2-xorg-x11-libXp-7844     * SUSE Linux Enterprise Server 11 SP2 for VMware:       zypper in -t patch slessp2-xorg-x11-libXp-7844     * SUSE Linux Enterprise Server 11 SP2:       zypper in -t patch slessp2-xorg-x11-libXp-7844     * SUSE Linux Enterprise Desktop 11 SP2:       zypper in -t patch sledsp2-xorg-x11-libXp-7844   To bring your system up-to-date, use "zypper patch".
</description>
        <affected family="linux">
          <platform>SUSE Linux Enterprise Server 11 SP2</platform>
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2013:1102-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2013-2062" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2062" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-2062" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2062" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-2062" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2062" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:311628" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:311627" version="26">
      <metadata>
        <title>Test for xorg-x11-libXp On SUSE Linux Enterprise Server 11 SP2 and SP3</title>
        <description>
   This update of xorg-x11-libXp fixes several integer   overflow issues bnc#815451, bnc#821668, CVE-2013-2062.   Security Issue reference:   * CVE-2013-2062   /cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2062   Patch Instructions:   To install this SUSE Security Update use YaST online_update.   Alternatively you can run the command listed for your product:     * SUSE Linux Enterprise Software Development Kit 11 SP2:       zypper in -t patch sdksp2-xorg-x11-libXp-7844     * SUSE Linux Enterprise Server 11 SP2 for VMware:       zypper in -t patch slessp2-xorg-x11-libXp-7844     * SUSE Linux Enterprise Server 11 SP2:       zypper in -t patch slessp2-xorg-x11-libXp-7844     * SUSE Linux Enterprise Desktop 11 SP2:       zypper in -t patch sledsp2-xorg-x11-libXp-7844   To bring your system up-to-date, use "zypper patch".
</description>
        <affected family="linux">
          <platform>SUSE Linux Enterprise Server 11 SP2</platform>
          <platform>SUSE Linux Enterprise Server 11 SP3</platform>
        </affected>
        <reference ref_id="SUSE-SU-2013:1102-1" source="https://www.suse.com/support/update/announcement/" />
        <reference ref_id="CVE-2013-2062" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2062" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-2062" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2062" source="SUSE Advisory Releases" />
        <reference ref_id="CVE-2013-2062" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2062" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:311624" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282024" version="26">
      <metadata>
        <title>Test for java-1_4_2-ibm On SUSE Linux Enterprise Server 10 SP1 for x86</title>
        <description>
   [293]CVE-2008-2086 at MITRE

Description

   Sun Java Web Start and Java Plug-in for JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18
   and earlier allow remote attackers to execute arbitrary code via a crafted jnlp file that modifies the (1) java.home, (2) java.ext.dirs, or
   (3) user.home System Properties, aka "Java Web Start File Inclusion" and CR 6694892.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP1 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-2086" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2086" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278144" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282023" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-plugin On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-2086 at MITRE

Description

   Sun Java Web Start and Java Plug-in for JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18
   and earlier allow remote attackers to execute arbitrary code via a crafted jnlp file that modifies the (1) java.home, (2) java.ext.dirs, or
   (3) user.home System Properties, aka "Java Web Start File Inclusion" and CR 6694892.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-2086" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2086" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278140" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282022" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-jdbc On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-2086 at MITRE

Description

   Sun Java Web Start and Java Plug-in for JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18
   and earlier allow remote attackers to execute arbitrary code via a crafted jnlp file that modifies the (1) java.home, (2) java.ext.dirs, or
   (3) user.home System Properties, aka "Java Web Start File Inclusion" and CR 6694892.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-2086" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2086" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278136" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282021" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-fonts On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-2086 at MITRE

Description

   Sun Java Web Start and Java Plug-in for JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18
   and earlier allow remote attackers to execute arbitrary code via a crafted jnlp file that modifies the (1) java.home, (2) java.ext.dirs, or
   (3) user.home System Properties, aka "Java Web Start File Inclusion" and CR 6694892.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-2086" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2086" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278132" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282020" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-devel On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-2086 at MITRE

Description

   Sun Java Web Start and Java Plug-in for JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18
   and earlier allow remote attackers to execute arbitrary code via a crafted jnlp file that modifies the (1) java.home, (2) java.ext.dirs, or
   (3) user.home System Properties, aka "Java Web Start File Inclusion" and CR 6694892.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-2086" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2086" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278128" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282019" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-alsa On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-2086 at MITRE

Description

   Sun Java Web Start and Java Plug-in for JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18
   and earlier allow remote attackers to execute arbitrary code via a crafted jnlp file that modifies the (1) java.home, (2) java.ext.dirs, or
   (3) user.home System Properties, aka "Java Web Start File Inclusion" and CR 6694892.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-2086" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2086" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278124" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281325" version="26">
      <metadata>
        <title>Test for websphere-as_ce On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-0038 at MITRE

Description

   Multiple cross-site scripting (XSS) vulnerabilities in the web administration console in Apache Geronimo Application Server 2.1 through 2.1.3
   allow remote attackers to inject arbitrary web script or HTML via the (1) name, (2) ip, (3) username, or (4) description parameter to
   console/portal/Server/Monitoring; or (5) the PATH_INFO to the default URI under console/portal/.
     ________________________________________________________________________________________________________________________________________

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-0038" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0038" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:281319" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281324" version="26">
      <metadata>
        <title>Test for libapr-util1-devel On SUSE Linux Enterprise Desktop 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-0023 at MITRE

Description

   The apr_strmatch_precompile function in strmatch/apr_strmatch.c in Apache APR-util before 1.3.5 allows remote attackers to cause a denial of
   service (daemon crash) via crafted input involving (1) a .htaccess file used with the Apache HTTP Server, (2) the SVNMasterURI directive in
   the mod_dav_svn module in the Apache HTTP Server, (3) the mod_apreq2 module for the Apache HTTP Server, or (4) an application that uses the
   libapreq2 library, which triggers a heap-based buffer underflow.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-0023" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0023" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278849" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279751" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner190-translations-32bit On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-1194 at MITRE

Description

   Integer overflow in the pango_glyph_string_set_size function in pango/glyphstring.c in Pango before 1.24 allows context-dependent attackers
   to cause a denial of service (application crash) or possibly execute arbitrary code via a long glyph string that triggers a heap-based buffer
   overflow, as demonstrated by a long document.location value in Firefox.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.8 (AV:N/AC:M/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-1194" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-1194" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279748" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279742" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner190-gnomevfs-32bit On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-1194 at MITRE

Description

   Integer overflow in the pango_glyph_string_set_size function in pango/glyphstring.c in Pango before 1.24 allows context-dependent attackers
   to cause a denial of service (application crash) or possibly execute arbitrary code via a long glyph string that triggers a heap-based buffer
   overflow, as demonstrated by a long document.location value in Firefox.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.8 (AV:N/AC:M/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-1194" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-1194" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279739" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279729" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner190-32bit On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-1194 at MITRE

Description

   Integer overflow in the pango_glyph_string_set_size function in pango/glyphstring.c in Pango before 1.24 allows context-dependent attackers
   to cause a denial of service (application crash) or possibly execute arbitrary code via a long glyph string that triggers a heap-based buffer
   overflow, as demonstrated by a long document.location value in Firefox.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.8 (AV:N/AC:M/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-1194" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-1194" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279726" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279223" version="27">
      <metadata>
        <title>Test for php5-fastcgi On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2008-5624 at MITRE

Description

   PHP 5 before 5.2.7 does not properly initialize the page_uid and page_gid global variables for use by the SAPI php_getuid function, which
   allows context-dependent attackers to bypass safe_mode restrictions via variable settings that are intended to be restricted to root, as
   demonstrated by a setting of /etc for the error_log variable.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2008-5624" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2008-5624" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279220" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279219" version="27">
      <metadata>
        <title>Test for php5-exif On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2008-5624 at MITRE

Description

   PHP 5 before 5.2.7 does not properly initialize the page_uid and page_gid global variables for use by the SAPI php_getuid function, which
   allows context-dependent attackers to bypass safe_mode restrictions via variable settings that are intended to be restricted to root, as
   demonstrated by a setting of /etc for the error_log variable.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2008-5624" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2008-5624" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279216" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279215" version="27">
      <metadata>
        <title>Test for php5-dom On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2008-5624 at MITRE

Description

   PHP 5 before 5.2.7 does not properly initialize the page_uid and page_gid global variables for use by the SAPI php_getuid function, which
   allows context-dependent attackers to bypass safe_mode restrictions via variable settings that are intended to be restricted to root, as
   demonstrated by a setting of /etc for the error_log variable.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2008-5624" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2008-5624" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279212" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279211" version="27">
      <metadata>
        <title>Test for php5-devel On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2008-5624 at MITRE

Description

   PHP 5 before 5.2.7 does not properly initialize the page_uid and page_gid global variables for use by the SAPI php_getuid function, which
   allows context-dependent attackers to bypass safe_mode restrictions via variable settings that are intended to be restricted to root, as
   demonstrated by a setting of /etc for the error_log variable.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2008-5624" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2008-5624" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279208" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279207" version="27">
      <metadata>
        <title>Test for php5-dbase On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2008-5624 at MITRE

Description

   PHP 5 before 5.2.7 does not properly initialize the page_uid and page_gid global variables for use by the SAPI php_getuid function, which
   allows context-dependent attackers to bypass safe_mode restrictions via variable settings that are intended to be restricted to root, as
   demonstrated by a setting of /etc for the error_log variable.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2008-5624" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2008-5624" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279204" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279203" version="27">
      <metadata>
        <title>Test for php5-dba On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2008-5624 at MITRE

Description

   PHP 5 before 5.2.7 does not properly initialize the page_uid and page_gid global variables for use by the SAPI php_getuid function, which
   allows context-dependent attackers to bypass safe_mode restrictions via variable settings that are intended to be restricted to root, as
   demonstrated by a setting of /etc for the error_log variable.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2008-5624" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2008-5624" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279200" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279199" version="27">
      <metadata>
        <title>Test for php5-curl On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2008-5624 at MITRE

Description

   PHP 5 before 5.2.7 does not properly initialize the page_uid and page_gid global variables for use by the SAPI php_getuid function, which
   allows context-dependent attackers to bypass safe_mode restrictions via variable settings that are intended to be restricted to root, as
   demonstrated by a setting of /etc for the error_log variable.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2008-5624" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2008-5624" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279196" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279195" version="27">
      <metadata>
        <title>Test for php5-ctype On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2008-5624 at MITRE

Description

   PHP 5 before 5.2.7 does not properly initialize the page_uid and page_gid global variables for use by the SAPI php_getuid function, which
   allows context-dependent attackers to bypass safe_mode restrictions via variable settings that are intended to be restricted to root, as
   demonstrated by a setting of /etc for the error_log variable.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2008-5624" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2008-5624" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279192" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279191" version="27">
      <metadata>
        <title>Test for php5-calendar On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2008-5624 at MITRE

Description

   PHP 5 before 5.2.7 does not properly initialize the page_uid and page_gid global variables for use by the SAPI php_getuid function, which
   allows context-dependent attackers to bypass safe_mode restrictions via variable settings that are intended to be restricted to root, as
   demonstrated by a setting of /etc for the error_log variable.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2008-5624" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2008-5624" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279188" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279187" version="27">
      <metadata>
        <title>Test for php5-bz2 On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2008-5624 at MITRE

Description

   PHP 5 before 5.2.7 does not properly initialize the page_uid and page_gid global variables for use by the SAPI php_getuid function, which
   allows context-dependent attackers to bypass safe_mode restrictions via variable settings that are intended to be restricted to root, as
   demonstrated by a setting of /etc for the error_log variable.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2008-5624" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2008-5624" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279184" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279183" version="27">
      <metadata>
        <title>Test for php5-bcmath On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2008-5624 at MITRE

Description

   PHP 5 before 5.2.7 does not properly initialize the page_uid and page_gid global variables for use by the SAPI php_getuid function, which
   allows context-dependent attackers to bypass safe_mode restrictions via variable settings that are intended to be restricted to root, as
   demonstrated by a setting of /etc for the error_log variable.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2008-5624" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2008-5624" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279180" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279179" version="27">
      <metadata>
        <title>Test for php5 On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2008-5624 at MITRE

Description

   PHP 5 before 5.2.7 does not properly initialize the page_uid and page_gid global variables for use by the SAPI php_getuid function, which
   allows context-dependent attackers to bypass safe_mode restrictions via variable settings that are intended to be restricted to root, as
   demonstrated by a setting of /etc for the error_log variable.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2008-5624" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2008-5624" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279176" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279175" version="27">
      <metadata>
        <title>Test for apache2-mod_php5 On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2008-5624 at MITRE

Description

   PHP 5 before 5.2.7 does not properly initialize the page_uid and page_gid global variables for use by the SAPI php_getuid function, which
   allows context-dependent attackers to bypass safe_mode restrictions via variable settings that are intended to be restricted to root, as
   demonstrated by a setting of /etc for the error_log variable.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2008-5624" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2008-5624" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279172" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279171" version="27">
      <metadata>
        <title>Test for kernel-xenpae On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0007 at MITRE

Description

   net/bridge/netfilter/ebtables.c in the ebtables module in the netfilter framework in the Linux kernel before 2.6.33-rc4 does not require the
   CAP_NET_ADMIN capability for setting or modifying rules, which allows local users to bypass intended access restrictions and configure
   arbitrary network-traffic filtering via a modified ebtables application.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.1 (AV:L/AC:L/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0007" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0007" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278342" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279170" version="27">
      <metadata>
        <title>Test for kernel-xen On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0007 at MITRE

Description

   net/bridge/netfilter/ebtables.c in the ebtables module in the netfilter framework in the Linux kernel before 2.6.33-rc4 does not require the
   CAP_NET_ADMIN capability for setting or modifying rules, which allows local users to bypass intended access restrictions and configure
   arbitrary network-traffic filtering via a modified ebtables application.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.1 (AV:L/AC:L/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0007" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0007" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278338" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279169" version="27">
      <metadata>
        <title>Test for kernel-vmipae On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0007 at MITRE

Description

   net/bridge/netfilter/ebtables.c in the ebtables module in the netfilter framework in the Linux kernel before 2.6.33-rc4 does not require the
   CAP_NET_ADMIN capability for setting or modifying rules, which allows local users to bypass intended access restrictions and configure
   arbitrary network-traffic filtering via a modified ebtables application.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.1 (AV:L/AC:L/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0007" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0007" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278334" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279168" version="27">
      <metadata>
        <title>Test for kernel-vmi On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0007 at MITRE

Description

   net/bridge/netfilter/ebtables.c in the ebtables module in the netfilter framework in the Linux kernel before 2.6.33-rc4 does not require the
   CAP_NET_ADMIN capability for setting or modifying rules, which allows local users to bypass intended access restrictions and configure
   arbitrary network-traffic filtering via a modified ebtables application.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.1 (AV:L/AC:L/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0007" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0007" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278330" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279167" version="27">
      <metadata>
        <title>Test for kernel-syms On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0007 at MITRE

Description

   net/bridge/netfilter/ebtables.c in the ebtables module in the netfilter framework in the Linux kernel before 2.6.33-rc4 does not require the
   CAP_NET_ADMIN capability for setting or modifying rules, which allows local users to bypass intended access restrictions and configure
   arbitrary network-traffic filtering via a modified ebtables application.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.1 (AV:L/AC:L/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0007" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0007" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278326" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279166" version="27">
      <metadata>
        <title>Test for kernel-source On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0007 at MITRE

Description

   net/bridge/netfilter/ebtables.c in the ebtables module in the netfilter framework in the Linux kernel before 2.6.33-rc4 does not require the
   CAP_NET_ADMIN capability for setting or modifying rules, which allows local users to bypass intended access restrictions and configure
   arbitrary network-traffic filtering via a modified ebtables application.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.1 (AV:L/AC:L/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0007" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0007" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278322" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279165" version="27">
      <metadata>
        <title>Test for kernel-smp On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0007 at MITRE

Description

   net/bridge/netfilter/ebtables.c in the ebtables module in the netfilter framework in the Linux kernel before 2.6.33-rc4 does not require the
   CAP_NET_ADMIN capability for setting or modifying rules, which allows local users to bypass intended access restrictions and configure
   arbitrary network-traffic filtering via a modified ebtables application.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.1 (AV:L/AC:L/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0007" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0007" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278318" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279164" version="27">
      <metadata>
        <title>Test for kernel-kdumppae On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0007 at MITRE

Description

   net/bridge/netfilter/ebtables.c in the ebtables module in the netfilter framework in the Linux kernel before 2.6.33-rc4 does not require the
   CAP_NET_ADMIN capability for setting or modifying rules, which allows local users to bypass intended access restrictions and configure
   arbitrary network-traffic filtering via a modified ebtables application.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.1 (AV:L/AC:L/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0007" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0007" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278350" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279163" version="27">
      <metadata>
        <title>Test for kernel-kdump On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0007 at MITRE

Description

   net/bridge/netfilter/ebtables.c in the ebtables module in the netfilter framework in the Linux kernel before 2.6.33-rc4 does not require the
   CAP_NET_ADMIN capability for setting or modifying rules, which allows local users to bypass intended access restrictions and configure
   arbitrary network-traffic filtering via a modified ebtables application.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.1 (AV:L/AC:L/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0007" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0007" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278314" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279162" version="27">
      <metadata>
        <title>Test for kernel-default On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0007 at MITRE

Description

   net/bridge/netfilter/ebtables.c in the ebtables module in the netfilter framework in the Linux kernel before 2.6.33-rc4 does not require the
   CAP_NET_ADMIN capability for setting or modifying rules, which allows local users to bypass intended access restrictions and configure
   arbitrary network-traffic filtering via a modified ebtables application.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.1 (AV:L/AC:L/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0007" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0007" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278310" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279161" version="27">
      <metadata>
        <title>Test for kernel-debug On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0007 at MITRE

Description

   net/bridge/netfilter/ebtables.c in the ebtables module in the netfilter framework in the Linux kernel before 2.6.33-rc4 does not require the
   CAP_NET_ADMIN capability for setting or modifying rules, which allows local users to bypass intended access restrictions and configure
   arbitrary network-traffic filtering via a modified ebtables application.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.1 (AV:L/AC:L/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0007" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0007" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278306" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279160" version="27">
      <metadata>
        <title>Test for kernel-bigsmp On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0007 at MITRE

Description

   net/bridge/netfilter/ebtables.c in the ebtables module in the netfilter framework in the Linux kernel before 2.6.33-rc4 does not require the
   CAP_NET_ADMIN capability for setting or modifying rules, which allows local users to bypass intended access restrictions and configure
   arbitrary network-traffic filtering via a modified ebtables application.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.1 (AV:L/AC:L/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0007" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0007" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278302" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279159" version="27">
      <metadata>
        <title>Test for kernel-kdumppae On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-4538 at MITRE

Description

   drivers/net/e1000e/netdev.c in the e1000e driver in the Linux kernel 2.6.32.3 and earlier does not properly check the size of an Ethernet
   frame that exceeds the MTU, which allows remote attackers to have an unspecified impact via crafted packets, a related issue to
   CVE-2009-4537.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-4538" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-4538" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278350" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279158" version="27">
      <metadata>
        <title>Test for kernel-xenpae On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-4538 at MITRE

Description

   drivers/net/e1000e/netdev.c in the e1000e driver in the Linux kernel 2.6.32.3 and earlier does not properly check the size of an Ethernet
   frame that exceeds the MTU, which allows remote attackers to have an unspecified impact via crafted packets, a related issue to
   CVE-2009-4537.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-4538" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-4538" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278342" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279157" version="27">
      <metadata>
        <title>Test for kernel-xen On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-4538 at MITRE

Description

   drivers/net/e1000e/netdev.c in the e1000e driver in the Linux kernel 2.6.32.3 and earlier does not properly check the size of an Ethernet
   frame that exceeds the MTU, which allows remote attackers to have an unspecified impact via crafted packets, a related issue to
   CVE-2009-4537.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-4538" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-4538" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278338" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279156" version="27">
      <metadata>
        <title>Test for kernel-vmipae On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-4538 at MITRE

Description

   drivers/net/e1000e/netdev.c in the e1000e driver in the Linux kernel 2.6.32.3 and earlier does not properly check the size of an Ethernet
   frame that exceeds the MTU, which allows remote attackers to have an unspecified impact via crafted packets, a related issue to
   CVE-2009-4537.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-4538" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-4538" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278334" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279155" version="27">
      <metadata>
        <title>Test for kernel-vmi On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-4538 at MITRE

Description

   drivers/net/e1000e/netdev.c in the e1000e driver in the Linux kernel 2.6.32.3 and earlier does not properly check the size of an Ethernet
   frame that exceeds the MTU, which allows remote attackers to have an unspecified impact via crafted packets, a related issue to
   CVE-2009-4537.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-4538" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-4538" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278330" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279154" version="27">
      <metadata>
        <title>Test for kernel-syms On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-4538 at MITRE

Description

   drivers/net/e1000e/netdev.c in the e1000e driver in the Linux kernel 2.6.32.3 and earlier does not properly check the size of an Ethernet
   frame that exceeds the MTU, which allows remote attackers to have an unspecified impact via crafted packets, a related issue to
   CVE-2009-4537.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-4538" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-4538" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278326" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279153" version="27">
      <metadata>
        <title>Test for kernel-source On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-4538 at MITRE

Description

   drivers/net/e1000e/netdev.c in the e1000e driver in the Linux kernel 2.6.32.3 and earlier does not properly check the size of an Ethernet
   frame that exceeds the MTU, which allows remote attackers to have an unspecified impact via crafted packets, a related issue to
   CVE-2009-4537.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-4538" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-4538" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278322" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279152" version="27">
      <metadata>
        <title>Test for kernel-smp On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-4538 at MITRE

Description

   drivers/net/e1000e/netdev.c in the e1000e driver in the Linux kernel 2.6.32.3 and earlier does not properly check the size of an Ethernet
   frame that exceeds the MTU, which allows remote attackers to have an unspecified impact via crafted packets, a related issue to
   CVE-2009-4537.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-4538" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-4538" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278318" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279151" version="27">
      <metadata>
        <title>Test for kernel-kdump On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-4538 at MITRE

Description

   drivers/net/e1000e/netdev.c in the e1000e driver in the Linux kernel 2.6.32.3 and earlier does not properly check the size of an Ethernet
   frame that exceeds the MTU, which allows remote attackers to have an unspecified impact via crafted packets, a related issue to
   CVE-2009-4537.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-4538" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-4538" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278314" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279150" version="27">
      <metadata>
        <title>Test for kernel-default On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-4538 at MITRE

Description

   drivers/net/e1000e/netdev.c in the e1000e driver in the Linux kernel 2.6.32.3 and earlier does not properly check the size of an Ethernet
   frame that exceeds the MTU, which allows remote attackers to have an unspecified impact via crafted packets, a related issue to
   CVE-2009-4537.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-4538" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-4538" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278310" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279149" version="27">
      <metadata>
        <title>Test for kernel-debug On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-4538 at MITRE

Description

   drivers/net/e1000e/netdev.c in the e1000e driver in the Linux kernel 2.6.32.3 and earlier does not properly check the size of an Ethernet
   frame that exceeds the MTU, which allows remote attackers to have an unspecified impact via crafted packets, a related issue to
   CVE-2009-4537.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-4538" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-4538" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278306" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279148" version="27">
      <metadata>
        <title>Test for kernel-bigsmp On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-4538 at MITRE

Description

   drivers/net/e1000e/netdev.c in the e1000e driver in the Linux kernel 2.6.32.3 and earlier does not properly check the size of an Ethernet
   frame that exceeds the MTU, which allows remote attackers to have an unspecified impact via crafted packets, a related issue to
   CVE-2009-4537.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-4538" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-4538" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278302" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279147" version="27">
      <metadata>
        <title>Test for kernel-kdumppae On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-4536 at MITRE

Description

   drivers/net/e1000/e1000_main.c in the e1000 driver in the Linux kernel 2.6.32.3 and earlier handles Ethernet frames that exceed the MTU by
   processing certain trailing payload data as if it were a complete frame, which allows remote attackers to bypass packet filters via a large
   packet with a crafted payload. NOTE: this vulnerability exists because of an incorrect fix for CVE-2009-1385.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.8 (AV:N/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-4536" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-4536" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278350" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279146" version="27">
      <metadata>
        <title>Test for kernel-xenpae On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-4536 at MITRE

Description

   drivers/net/e1000/e1000_main.c in the e1000 driver in the Linux kernel 2.6.32.3 and earlier handles Ethernet frames that exceed the MTU by
   processing certain trailing payload data as if it were a complete frame, which allows remote attackers to bypass packet filters via a large
   packet with a crafted payload. NOTE: this vulnerability exists because of an incorrect fix for CVE-2009-1385.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.8 (AV:N/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-4536" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-4536" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278342" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279145" version="27">
      <metadata>
        <title>Test for kernel-xen On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-4536 at MITRE

Description

   drivers/net/e1000/e1000_main.c in the e1000 driver in the Linux kernel 2.6.32.3 and earlier handles Ethernet frames that exceed the MTU by
   processing certain trailing payload data as if it were a complete frame, which allows remote attackers to bypass packet filters via a large
   packet with a crafted payload. NOTE: this vulnerability exists because of an incorrect fix for CVE-2009-1385.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.8 (AV:N/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-4536" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-4536" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278338" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279144" version="27">
      <metadata>
        <title>Test for kernel-vmipae On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-4536 at MITRE

Description

   drivers/net/e1000/e1000_main.c in the e1000 driver in the Linux kernel 2.6.32.3 and earlier handles Ethernet frames that exceed the MTU by
   processing certain trailing payload data as if it were a complete frame, which allows remote attackers to bypass packet filters via a large
   packet with a crafted payload. NOTE: this vulnerability exists because of an incorrect fix for CVE-2009-1385.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.8 (AV:N/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-4536" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-4536" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278334" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279143" version="27">
      <metadata>
        <title>Test for kernel-vmi On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-4536 at MITRE

Description

   drivers/net/e1000/e1000_main.c in the e1000 driver in the Linux kernel 2.6.32.3 and earlier handles Ethernet frames that exceed the MTU by
   processing certain trailing payload data as if it were a complete frame, which allows remote attackers to bypass packet filters via a large
   packet with a crafted payload. NOTE: this vulnerability exists because of an incorrect fix for CVE-2009-1385.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.8 (AV:N/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-4536" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-4536" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278330" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279142" version="27">
      <metadata>
        <title>Test for kernel-syms On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-4536 at MITRE

Description

   drivers/net/e1000/e1000_main.c in the e1000 driver in the Linux kernel 2.6.32.3 and earlier handles Ethernet frames that exceed the MTU by
   processing certain trailing payload data as if it were a complete frame, which allows remote attackers to bypass packet filters via a large
   packet with a crafted payload. NOTE: this vulnerability exists because of an incorrect fix for CVE-2009-1385.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.8 (AV:N/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-4536" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-4536" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278326" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279141" version="27">
      <metadata>
        <title>Test for kernel-source On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-4536 at MITRE

Description

   drivers/net/e1000/e1000_main.c in the e1000 driver in the Linux kernel 2.6.32.3 and earlier handles Ethernet frames that exceed the MTU by
   processing certain trailing payload data as if it were a complete frame, which allows remote attackers to bypass packet filters via a large
   packet with a crafted payload. NOTE: this vulnerability exists because of an incorrect fix for CVE-2009-1385.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.8 (AV:N/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-4536" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-4536" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278322" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279140" version="27">
      <metadata>
        <title>Test for kernel-smp On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-4536 at MITRE

Description

   drivers/net/e1000/e1000_main.c in the e1000 driver in the Linux kernel 2.6.32.3 and earlier handles Ethernet frames that exceed the MTU by
   processing certain trailing payload data as if it were a complete frame, which allows remote attackers to bypass packet filters via a large
   packet with a crafted payload. NOTE: this vulnerability exists because of an incorrect fix for CVE-2009-1385.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.8 (AV:N/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-4536" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-4536" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278318" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279139" version="27">
      <metadata>
        <title>Test for kernel-kdump On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-4536 at MITRE

Description

   drivers/net/e1000/e1000_main.c in the e1000 driver in the Linux kernel 2.6.32.3 and earlier handles Ethernet frames that exceed the MTU by
   processing certain trailing payload data as if it were a complete frame, which allows remote attackers to bypass packet filters via a large
   packet with a crafted payload. NOTE: this vulnerability exists because of an incorrect fix for CVE-2009-1385.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.8 (AV:N/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-4536" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-4536" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278314" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279138" version="27">
      <metadata>
        <title>Test for kernel-default On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-4536 at MITRE

Description

   drivers/net/e1000/e1000_main.c in the e1000 driver in the Linux kernel 2.6.32.3 and earlier handles Ethernet frames that exceed the MTU by
   processing certain trailing payload data as if it were a complete frame, which allows remote attackers to bypass packet filters via a large
   packet with a crafted payload. NOTE: this vulnerability exists because of an incorrect fix for CVE-2009-1385.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.8 (AV:N/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-4536" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-4536" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278310" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279137" version="27">
      <metadata>
        <title>Test for kernel-debug On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-4536 at MITRE

Description

   drivers/net/e1000/e1000_main.c in the e1000 driver in the Linux kernel 2.6.32.3 and earlier handles Ethernet frames that exceed the MTU by
   processing certain trailing payload data as if it were a complete frame, which allows remote attackers to bypass packet filters via a large
   packet with a crafted payload. NOTE: this vulnerability exists because of an incorrect fix for CVE-2009-1385.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.8 (AV:N/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-4536" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-4536" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278306" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279136" version="27">
      <metadata>
        <title>Test for kernel-bigsmp On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-4536 at MITRE

Description

   drivers/net/e1000/e1000_main.c in the e1000 driver in the Linux kernel 2.6.32.3 and earlier handles Ethernet frames that exceed the MTU by
   processing certain trailing payload data as if it were a complete frame, which allows remote attackers to bypass packet filters via a large
   packet with a crafted payload. NOTE: this vulnerability exists because of an incorrect fix for CVE-2009-1385.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.8 (AV:N/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-4536" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-4536" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278302" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279135" version="27">
      <metadata>
        <title>Test for kernel-xenpae On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-3939 at MITRE

Description

   The poll_mode_io file for the megaraid_sas driver in the Linux kernel 2.6.31.6 and earlier has world-writable permissions, which allows local
   users to change the I/O mode of the driver by modifying this file.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.6 (AV:L/AC:L/Au:N/C:N/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-3939" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-3939" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278342" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279134" version="27">
      <metadata>
        <title>Test for kernel-xen On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-3939 at MITRE

Description

   The poll_mode_io file for the megaraid_sas driver in the Linux kernel 2.6.31.6 and earlier has world-writable permissions, which allows local
   users to change the I/O mode of the driver by modifying this file.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.6 (AV:L/AC:L/Au:N/C:N/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-3939" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-3939" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278338" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279133" version="27">
      <metadata>
        <title>Test for kernel-vmipae On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-3939 at MITRE

Description

   The poll_mode_io file for the megaraid_sas driver in the Linux kernel 2.6.31.6 and earlier has world-writable permissions, which allows local
   users to change the I/O mode of the driver by modifying this file.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.6 (AV:L/AC:L/Au:N/C:N/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-3939" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-3939" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278334" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279132" version="27">
      <metadata>
        <title>Test for kernel-vmi On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-3939 at MITRE

Description

   The poll_mode_io file for the megaraid_sas driver in the Linux kernel 2.6.31.6 and earlier has world-writable permissions, which allows local
   users to change the I/O mode of the driver by modifying this file.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.6 (AV:L/AC:L/Au:N/C:N/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-3939" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-3939" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278330" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279131" version="27">
      <metadata>
        <title>Test for kernel-syms On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-3939 at MITRE

Description

   The poll_mode_io file for the megaraid_sas driver in the Linux kernel 2.6.31.6 and earlier has world-writable permissions, which allows local
   users to change the I/O mode of the driver by modifying this file.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.6 (AV:L/AC:L/Au:N/C:N/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-3939" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-3939" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278326" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279130" version="27">
      <metadata>
        <title>Test for kernel-source On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-3939 at MITRE

Description

   The poll_mode_io file for the megaraid_sas driver in the Linux kernel 2.6.31.6 and earlier has world-writable permissions, which allows local
   users to change the I/O mode of the driver by modifying this file.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.6 (AV:L/AC:L/Au:N/C:N/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-3939" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-3939" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278322" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279129" version="27">
      <metadata>
        <title>Test for kernel-smp On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-3939 at MITRE

Description

   The poll_mode_io file for the megaraid_sas driver in the Linux kernel 2.6.31.6 and earlier has world-writable permissions, which allows local
   users to change the I/O mode of the driver by modifying this file.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.6 (AV:L/AC:L/Au:N/C:N/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-3939" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-3939" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278318" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279128" version="27">
      <metadata>
        <title>Test for kernel-kdumppae On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-3939 at MITRE

Description

   The poll_mode_io file for the megaraid_sas driver in the Linux kernel 2.6.31.6 and earlier has world-writable permissions, which allows local
   users to change the I/O mode of the driver by modifying this file.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.6 (AV:L/AC:L/Au:N/C:N/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-3939" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-3939" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278350" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279127" version="27">
      <metadata>
        <title>Test for kernel-kdump On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-3939 at MITRE

Description

   The poll_mode_io file for the megaraid_sas driver in the Linux kernel 2.6.31.6 and earlier has world-writable permissions, which allows local
   users to change the I/O mode of the driver by modifying this file.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.6 (AV:L/AC:L/Au:N/C:N/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-3939" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-3939" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278314" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279126" version="27">
      <metadata>
        <title>Test for kernel-default On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-3939 at MITRE

Description

   The poll_mode_io file for the megaraid_sas driver in the Linux kernel 2.6.31.6 and earlier has world-writable permissions, which allows local
   users to change the I/O mode of the driver by modifying this file.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.6 (AV:L/AC:L/Au:N/C:N/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-3939" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-3939" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278310" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279125" version="27">
      <metadata>
        <title>Test for kernel-debug On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-3939 at MITRE

Description

   The poll_mode_io file for the megaraid_sas driver in the Linux kernel 2.6.31.6 and earlier has world-writable permissions, which allows local
   users to change the I/O mode of the driver by modifying this file.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.6 (AV:L/AC:L/Au:N/C:N/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-3939" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-3939" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278306" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279124" version="27">
      <metadata>
        <title>Test for kernel-bigsmp On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-3939 at MITRE

Description

   The poll_mode_io file for the megaraid_sas driver in the Linux kernel 2.6.31.6 and earlier has world-writable permissions, which allows local
   users to change the I/O mode of the driver by modifying this file.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.6 (AV:L/AC:L/Au:N/C:N/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-3939" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-3939" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278302" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279123" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner191-translations On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0162 at MITRE

Description

   Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, does not properly support the
   application/octet-stream content type as a protection mechanism against execution of web script in certain circumstances involving SVG and
   the EMBED element, which allows remote attackers to bypass the Same Origin Policy and conduct cross-site scripting (XSS) attacks via an
   embedded SVG document.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0162" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0162" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278248" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279122" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner191-gnomevfs On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0162 at MITRE

Description

   Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, does not properly support the
   application/octet-stream content type as a protection mechanism against execution of web script in certain circumstances involving SVG and
   the EMBED element, which allows remote attackers to bypass the Same Origin Policy and conduct cross-site scripting (XSS) attacks via an
   embedded SVG document.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0162" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0162" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278244" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279121" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner191 On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0162 at MITRE

Description

   Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, does not properly support the
   application/octet-stream content type as a protection mechanism against execution of web script in certain circumstances involving SVG and
   the EMBED element, which allows remote attackers to bypass the Same Origin Policy and conduct cross-site scripting (XSS) attacks via an
   embedded SVG document.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0162" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0162" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278240" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279120" version="27">
      <metadata>
        <title>Test for MozillaFirefox-translations On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0162 at MITRE

Description

   Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, does not properly support the
   application/octet-stream content type as a protection mechanism against execution of web script in certain circumstances involving SVG and
   the EMBED element, which allows remote attackers to bypass the Same Origin Policy and conduct cross-site scripting (XSS) attacks via an
   embedded SVG document.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0162" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0162" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278168" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279119" version="27">
      <metadata>
        <title>Test for MozillaFirefox On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0162 at MITRE

Description

   Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, does not properly support the
   application/octet-stream content type as a protection mechanism against execution of web script in certain circumstances involving SVG and
   the EMBED element, which allows remote attackers to bypass the Same Origin Policy and conduct cross-site scripting (XSS) attacks via an
   embedded SVG document.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0162" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0162" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278160" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279118" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner190-translations On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0162 at MITRE

Description

   Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, does not properly support the
   application/octet-stream content type as a protection mechanism against execution of web script in certain circumstances involving SVG and
   the EMBED element, which allows remote attackers to bypass the Same Origin Policy and conduct cross-site scripting (XSS) attacks via an
   embedded SVG document.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0162" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0162" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278200" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279117" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner190-gnomevfs On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0162 at MITRE

Description

   Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, does not properly support the
   application/octet-stream content type as a protection mechanism against execution of web script in certain circumstances involving SVG and
   the EMBED element, which allows remote attackers to bypass the Same Origin Policy and conduct cross-site scripting (XSS) attacks via an
   embedded SVG document.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0162" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0162" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278196" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279116" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner190 On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0162 at MITRE

Description

   Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, does not properly support the
   application/octet-stream content type as a protection mechanism against execution of web script in certain circumstances involving SVG and
   the EMBED element, which allows remote attackers to bypass the Same Origin Policy and conduct cross-site scripting (XSS) attacks via an
   embedded SVG document.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0162" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0162" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278192" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279115" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner191-translations On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0160 at MITRE

Description

   The Web Worker functionality in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, does not properly
   handle array data types for posted messages, which allows remote attackers to cause a denial of service (heap memory corruption and
   application crash) or possibly execute arbitrary code via unspecified vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0160" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0160" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278248" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279114" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner191-gnomevfs On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0160 at MITRE

Description

   The Web Worker functionality in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, does not properly
   handle array data types for posted messages, which allows remote attackers to cause a denial of service (heap memory corruption and
   application crash) or possibly execute arbitrary code via unspecified vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0160" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0160" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278244" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279113" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner191 On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0160 at MITRE

Description

   The Web Worker functionality in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, does not properly
   handle array data types for posted messages, which allows remote attackers to cause a denial of service (heap memory corruption and
   application crash) or possibly execute arbitrary code via unspecified vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0160" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0160" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278240" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279112" version="27">
      <metadata>
        <title>Test for MozillaFirefox-translations On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0160 at MITRE

Description

   The Web Worker functionality in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, does not properly
   handle array data types for posted messages, which allows remote attackers to cause a denial of service (heap memory corruption and
   application crash) or possibly execute arbitrary code via unspecified vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0160" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0160" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278168" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279111" version="27">
      <metadata>
        <title>Test for MozillaFirefox On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0160 at MITRE

Description

   The Web Worker functionality in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, does not properly
   handle array data types for posted messages, which allows remote attackers to cause a denial of service (heap memory corruption and
   application crash) or possibly execute arbitrary code via unspecified vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0160" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0160" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278160" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279110" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner190-translations On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0160 at MITRE

Description

   The Web Worker functionality in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, does not properly
   handle array data types for posted messages, which allows remote attackers to cause a denial of service (heap memory corruption and
   application crash) or possibly execute arbitrary code via unspecified vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0160" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0160" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278200" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279109" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner190-gnomevfs On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0160 at MITRE

Description

   The Web Worker functionality in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, does not properly
   handle array data types for posted messages, which allows remote attackers to cause a denial of service (heap memory corruption and
   application crash) or possibly execute arbitrary code via unspecified vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0160" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0160" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278196" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279108" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner190 On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0160 at MITRE

Description

   The Web Worker functionality in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, does not properly
   handle array data types for posted messages, which allows remote attackers to cause a denial of service (heap memory corruption and
   application crash) or possibly execute arbitrary code via unspecified vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0160" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0160" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278192" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279107" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner191-translations On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0159 at MITRE

Description

   The browser engine in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, Thunderbird before 3.0.2, and SeaMonkey before 2.0.3 allows
   remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors
   related to the nsBlockFrame::StealFrame function in layout/generic/nsBlockFrame.cpp, and unspecified other vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0159" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0159" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278248" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279106" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner191-gnomevfs On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0159 at MITRE

Description

   The browser engine in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, Thunderbird before 3.0.2, and SeaMonkey before 2.0.3 allows
   remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors
   related to the nsBlockFrame::StealFrame function in layout/generic/nsBlockFrame.cpp, and unspecified other vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0159" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0159" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278244" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279105" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner191 On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0159 at MITRE

Description

   The browser engine in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, Thunderbird before 3.0.2, and SeaMonkey before 2.0.3 allows
   remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors
   related to the nsBlockFrame::StealFrame function in layout/generic/nsBlockFrame.cpp, and unspecified other vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0159" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0159" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278240" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279104" version="27">
      <metadata>
        <title>Test for MozillaFirefox-translations On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0159 at MITRE

Description

   The browser engine in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, Thunderbird before 3.0.2, and SeaMonkey before 2.0.3 allows
   remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors
   related to the nsBlockFrame::StealFrame function in layout/generic/nsBlockFrame.cpp, and unspecified other vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0159" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0159" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278168" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279103" version="27">
      <metadata>
        <title>Test for MozillaFirefox On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0159 at MITRE

Description

   The browser engine in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, Thunderbird before 3.0.2, and SeaMonkey before 2.0.3 allows
   remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors
   related to the nsBlockFrame::StealFrame function in layout/generic/nsBlockFrame.cpp, and unspecified other vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0159" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0159" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278160" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279102" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner190-translations On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0159 at MITRE

Description

   The browser engine in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, Thunderbird before 3.0.2, and SeaMonkey before 2.0.3 allows
   remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors
   related to the nsBlockFrame::StealFrame function in layout/generic/nsBlockFrame.cpp, and unspecified other vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0159" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0159" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278200" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279101" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner190-gnomevfs On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0159 at MITRE

Description

   The browser engine in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, Thunderbird before 3.0.2, and SeaMonkey before 2.0.3 allows
   remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors
   related to the nsBlockFrame::StealFrame function in layout/generic/nsBlockFrame.cpp, and unspecified other vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0159" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0159" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278196" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279100" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner190 On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0159 at MITRE

Description

   The browser engine in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, Thunderbird before 3.0.2, and SeaMonkey before 2.0.3 allows
   remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors
   related to the nsBlockFrame::StealFrame function in layout/generic/nsBlockFrame.cpp, and unspecified other vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0159" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0159" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278192" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279099" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner191-translations On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-3988 at MITRE

Description

   Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, does not properly restrict read access to object
   properties in showModalDialog, which allows remote attackers to bypass the Same Origin Policy and conduct cross-site scripting (XSS) attacks
   via crafted dialogArguments values.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-3988" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-3988" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278248" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279098" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner191-gnomevfs On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-3988 at MITRE

Description

   Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, does not properly restrict read access to object
   properties in showModalDialog, which allows remote attackers to bypass the Same Origin Policy and conduct cross-site scripting (XSS) attacks
   via crafted dialogArguments values.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-3988" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-3988" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278244" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279097" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner191 On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-3988 at MITRE

Description

   Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, does not properly restrict read access to object
   properties in showModalDialog, which allows remote attackers to bypass the Same Origin Policy and conduct cross-site scripting (XSS) attacks
   via crafted dialogArguments values.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-3988" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-3988" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278240" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279096" version="27">
      <metadata>
        <title>Test for MozillaFirefox-translations On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-3988 at MITRE

Description

   Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, does not properly restrict read access to object
   properties in showModalDialog, which allows remote attackers to bypass the Same Origin Policy and conduct cross-site scripting (XSS) attacks
   via crafted dialogArguments values.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-3988" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-3988" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278168" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279095" version="27">
      <metadata>
        <title>Test for MozillaFirefox On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-3988 at MITRE

Description

   Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, does not properly restrict read access to object
   properties in showModalDialog, which allows remote attackers to bypass the Same Origin Policy and conduct cross-site scripting (XSS) attacks
   via crafted dialogArguments values.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-3988" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-3988" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278160" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279094" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner190-translations On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-3988 at MITRE

Description

   Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, does not properly restrict read access to object
   properties in showModalDialog, which allows remote attackers to bypass the Same Origin Policy and conduct cross-site scripting (XSS) attacks
   via crafted dialogArguments values.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-3988" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-3988" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278200" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279093" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner190-gnomevfs On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-3988 at MITRE

Description

   Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, does not properly restrict read access to object
   properties in showModalDialog, which allows remote attackers to bypass the Same Origin Policy and conduct cross-site scripting (XSS) attacks
   via crafted dialogArguments values.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-3988" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-3988" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278196" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279092" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner190 On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-3988 at MITRE

Description

   Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, does not properly restrict read access to object
   properties in showModalDialog, which allows remote attackers to bypass the Same Origin Policy and conduct cross-site scripting (XSS) attacks
   via crafted dialogArguments values.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-3988" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-3988" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278192" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279091" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner191-translations On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-1571 at MITRE

Description

   Use-after-free vulnerability in the HTML parser in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, Thunderbird before 3.0.2, and
   SeaMonkey before 2.0.3 allows remote attackers to execute arbitrary code via unspecified method calls that attempt to access freed objects in
   low-memory situations.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-1571" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-1571" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278248" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279090" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner191-gnomevfs On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-1571 at MITRE

Description

   Use-after-free vulnerability in the HTML parser in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, Thunderbird before 3.0.2, and
   SeaMonkey before 2.0.3 allows remote attackers to execute arbitrary code via unspecified method calls that attempt to access freed objects in
   low-memory situations.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-1571" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-1571" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278244" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279089" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner191 On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-1571 at MITRE

Description

   Use-after-free vulnerability in the HTML parser in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, Thunderbird before 3.0.2, and
   SeaMonkey before 2.0.3 allows remote attackers to execute arbitrary code via unspecified method calls that attempt to access freed objects in
   low-memory situations.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-1571" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-1571" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278240" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279088" version="27">
      <metadata>
        <title>Test for MozillaFirefox-translations On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-1571 at MITRE

Description

   Use-after-free vulnerability in the HTML parser in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, Thunderbird before 3.0.2, and
   SeaMonkey before 2.0.3 allows remote attackers to execute arbitrary code via unspecified method calls that attempt to access freed objects in
   low-memory situations.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-1571" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-1571" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278168" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279087" version="27">
      <metadata>
        <title>Test for MozillaFirefox On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-1571 at MITRE

Description

   Use-after-free vulnerability in the HTML parser in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, Thunderbird before 3.0.2, and
   SeaMonkey before 2.0.3 allows remote attackers to execute arbitrary code via unspecified method calls that attempt to access freed objects in
   low-memory situations.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-1571" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-1571" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278160" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279086" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner190-translations On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-1571 at MITRE

Description

   Use-after-free vulnerability in the HTML parser in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, Thunderbird before 3.0.2, and
   SeaMonkey before 2.0.3 allows remote attackers to execute arbitrary code via unspecified method calls that attempt to access freed objects in
   low-memory situations.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-1571" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-1571" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278200" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279085" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner190-gnomevfs On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-1571 at MITRE

Description

   Use-after-free vulnerability in the HTML parser in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, Thunderbird before 3.0.2, and
   SeaMonkey before 2.0.3 allows remote attackers to execute arbitrary code via unspecified method calls that attempt to access freed objects in
   low-memory situations.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-1571" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-1571" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278196" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279084" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner190 On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-1571 at MITRE

Description

   Use-after-free vulnerability in the HTML parser in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, Thunderbird before 3.0.2, and
   SeaMonkey before 2.0.3 allows remote attackers to execute arbitrary code via unspecified method calls that attempt to access freed objects in
   low-memory situations.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-1571" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-1571" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278192" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279083" version="27">
      <metadata>
        <title>Test for netpbm On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-4274 at MITRE

Description

   Stack-based buffer overflow in converter/ppm/xpmtoppm.c in netpbm before 10.47.07 allows context-dependent attackers to cause a denial of
   service (application crash) or possibly execute arbitrary code via an XPM image file that contains a crafted header field associated with a
   large color index value.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-4274" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-4274" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279080" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279079" version="27">
      <metadata>
        <title>Test for libnetpbm On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-4274 at MITRE

Description

   Stack-based buffer overflow in converter/ppm/xpmtoppm.c in netpbm before 10.47.07 allows context-dependent attackers to cause a denial of
   service (application crash) or possibly execute arbitrary code via an XPM image file that contains a crafted header field associated with a
   large color index value.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-4274" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-4274" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279076" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279075" version="27">
      <metadata>
        <title>Test for libtool On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-3736 at MITRE

Description

   ltdl.c in libltdl in GNU Libtool 1.5.x, and 2.2.6 before 2.2.6b, as used in Ham Radio Control Libraries and possibly other products, attempts
   to open a .la file in the current working directory, which allows local users to gain privileges via a Trojan horse file.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.9 (AV:L/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-3736" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-3736" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279072" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279071" version="27">
      <metadata>
        <title>Test for kernel-kdumppae On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-3556 at MITRE

Description

   A certain Red Hat configuration step for the qla2xxx driver in the Linux kernel 2.6.18 on Red Hat Enterprise Linux (RHEL) 5, when N_Port ID
   Virtualization (NPIV) hardware is used, sets world-writable permissions for the (1) vport_create and (2) vport_delete files under
   /sys/class/scsi_host/, which allows local users to make arbitrary changes to SCSI host attributes by modifying these files.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 1.9 (AV:L/AC:M/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-3556" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-3556" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278350" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279070" version="27">
      <metadata>
        <title>Test for kernel-xenpae On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-3556 at MITRE

Description

   A certain Red Hat configuration step for the qla2xxx driver in the Linux kernel 2.6.18 on Red Hat Enterprise Linux (RHEL) 5, when N_Port ID
   Virtualization (NPIV) hardware is used, sets world-writable permissions for the (1) vport_create and (2) vport_delete files under
   /sys/class/scsi_host/, which allows local users to make arbitrary changes to SCSI host attributes by modifying these files.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 1.9 (AV:L/AC:M/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-3556" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-3556" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278342" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279069" version="27">
      <metadata>
        <title>Test for kernel-xen On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-3556 at MITRE

Description

   A certain Red Hat configuration step for the qla2xxx driver in the Linux kernel 2.6.18 on Red Hat Enterprise Linux (RHEL) 5, when N_Port ID
   Virtualization (NPIV) hardware is used, sets world-writable permissions for the (1) vport_create and (2) vport_delete files under
   /sys/class/scsi_host/, which allows local users to make arbitrary changes to SCSI host attributes by modifying these files.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 1.9 (AV:L/AC:M/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-3556" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-3556" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278338" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279068" version="27">
      <metadata>
        <title>Test for kernel-vmipae On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-3556 at MITRE

Description

   A certain Red Hat configuration step for the qla2xxx driver in the Linux kernel 2.6.18 on Red Hat Enterprise Linux (RHEL) 5, when N_Port ID
   Virtualization (NPIV) hardware is used, sets world-writable permissions for the (1) vport_create and (2) vport_delete files under
   /sys/class/scsi_host/, which allows local users to make arbitrary changes to SCSI host attributes by modifying these files.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 1.9 (AV:L/AC:M/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-3556" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-3556" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278334" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279067" version="27">
      <metadata>
        <title>Test for kernel-vmi On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-3556 at MITRE

Description

   A certain Red Hat configuration step for the qla2xxx driver in the Linux kernel 2.6.18 on Red Hat Enterprise Linux (RHEL) 5, when N_Port ID
   Virtualization (NPIV) hardware is used, sets world-writable permissions for the (1) vport_create and (2) vport_delete files under
   /sys/class/scsi_host/, which allows local users to make arbitrary changes to SCSI host attributes by modifying these files.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 1.9 (AV:L/AC:M/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-3556" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-3556" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278330" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279066" version="27">
      <metadata>
        <title>Test for kernel-syms On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-3556 at MITRE

Description

   A certain Red Hat configuration step for the qla2xxx driver in the Linux kernel 2.6.18 on Red Hat Enterprise Linux (RHEL) 5, when N_Port ID
   Virtualization (NPIV) hardware is used, sets world-writable permissions for the (1) vport_create and (2) vport_delete files under
   /sys/class/scsi_host/, which allows local users to make arbitrary changes to SCSI host attributes by modifying these files.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 1.9 (AV:L/AC:M/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-3556" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-3556" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278326" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279065" version="27">
      <metadata>
        <title>Test for kernel-source On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-3556 at MITRE

Description

   A certain Red Hat configuration step for the qla2xxx driver in the Linux kernel 2.6.18 on Red Hat Enterprise Linux (RHEL) 5, when N_Port ID
   Virtualization (NPIV) hardware is used, sets world-writable permissions for the (1) vport_create and (2) vport_delete files under
   /sys/class/scsi_host/, which allows local users to make arbitrary changes to SCSI host attributes by modifying these files.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 1.9 (AV:L/AC:M/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-3556" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-3556" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278322" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279064" version="27">
      <metadata>
        <title>Test for kernel-smp On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-3556 at MITRE

Description

   A certain Red Hat configuration step for the qla2xxx driver in the Linux kernel 2.6.18 on Red Hat Enterprise Linux (RHEL) 5, when N_Port ID
   Virtualization (NPIV) hardware is used, sets world-writable permissions for the (1) vport_create and (2) vport_delete files under
   /sys/class/scsi_host/, which allows local users to make arbitrary changes to SCSI host attributes by modifying these files.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 1.9 (AV:L/AC:M/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-3556" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-3556" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278318" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279063" version="27">
      <metadata>
        <title>Test for kernel-kdump On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-3556 at MITRE

Description

   A certain Red Hat configuration step for the qla2xxx driver in the Linux kernel 2.6.18 on Red Hat Enterprise Linux (RHEL) 5, when N_Port ID
   Virtualization (NPIV) hardware is used, sets world-writable permissions for the (1) vport_create and (2) vport_delete files under
   /sys/class/scsi_host/, which allows local users to make arbitrary changes to SCSI host attributes by modifying these files.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 1.9 (AV:L/AC:M/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-3556" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-3556" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278314" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279062" version="27">
      <metadata>
        <title>Test for kernel-default On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-3556 at MITRE

Description

   A certain Red Hat configuration step for the qla2xxx driver in the Linux kernel 2.6.18 on Red Hat Enterprise Linux (RHEL) 5, when N_Port ID
   Virtualization (NPIV) hardware is used, sets world-writable permissions for the (1) vport_create and (2) vport_delete files under
   /sys/class/scsi_host/, which allows local users to make arbitrary changes to SCSI host attributes by modifying these files.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 1.9 (AV:L/AC:M/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-3556" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-3556" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278310" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279061" version="27">
      <metadata>
        <title>Test for kernel-debug On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-3556 at MITRE

Description

   A certain Red Hat configuration step for the qla2xxx driver in the Linux kernel 2.6.18 on Red Hat Enterprise Linux (RHEL) 5, when N_Port ID
   Virtualization (NPIV) hardware is used, sets world-writable permissions for the (1) vport_create and (2) vport_delete files under
   /sys/class/scsi_host/, which allows local users to make arbitrary changes to SCSI host attributes by modifying these files.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 1.9 (AV:L/AC:M/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-3556" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-3556" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278306" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279060" version="27">
      <metadata>
        <title>Test for kernel-bigsmp On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-3556 at MITRE

Description

   A certain Red Hat configuration step for the qla2xxx driver in the Linux kernel 2.6.18 on Red Hat Enterprise Linux (RHEL) 5, when N_Port ID
   Virtualization (NPIV) hardware is used, sets world-writable permissions for the (1) vport_create and (2) vport_delete files under
   /sys/class/scsi_host/, which allows local users to make arbitrary changes to SCSI host attributes by modifying these files.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 1.9 (AV:L/AC:M/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-3556" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-3556" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278302" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279059" version="27">
      <metadata>
        <title>Test for cron On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0424 at MITRE

Description

   The edit_cmd function in crontab.c in (1) cronie before 1.4.4 and (2) Vixie cron (vixie-cron) allows local users to change the modification
   times of arbitrary files, and consequently cause a denial of service, via a symlink attack on a temporary file in the /tmp directory.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 3.3 (AV:L/AC:M/Au:N/C:N/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0424" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0424" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279056" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279055" version="27">
      <metadata>
        <title>Test for squid On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0308 at MITRE

Description

   lib/rfc1035.c in Squid 2.x, 3.0 through 3.0.STABLE22, and 3.1 through 3.1.0.15 allows remote attackers to cause a denial of service
   (assertion failure) via a crafted DNS packet that only contains a header.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.0 (AV:N/AC:L/Au:S/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0308" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0308" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279040" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279054" version="27">
      <metadata>
        <title>Test for ethereal-devel On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0304 at MITRE

Description

   Multiple buffer overflows in the LWRES dissector in Wireshark 0.9.15 through 1.0.10 and 1.2.0 through 1.2.5 allow remote attackers to cause a
   denial of service (crash) via a malformed packet, as demonstrated using a stack-based buffer overflow to the dissect_getaddrsbyname_request
   function.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0304" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0304" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279036" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279053" version="27">
      <metadata>
        <title>Test for ethereal On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0304 at MITRE

Description

   Multiple buffer overflows in the LWRES dissector in Wireshark 0.9.15 through 1.0.10 and 1.2.0 through 1.2.5 allow remote attackers to cause a
   denial of service (crash) via a malformed packet, as demonstrated using a stack-based buffer overflow to the dissect_getaddrsbyname_request
   function.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0304" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0304" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279032" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279052" version="27">
      <metadata>
        <title>Test for mysql-shared On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-4484 at MITRE

Description

   Multiple stack-based buffer overflows in the CertDecoder::GetName function in src/asn.cpp in TaoCrypt in yaSSL before 1.9.9, as used in
   mysqld in MySQL 5.0.x before 5.0.90, MySQL 5.1.x before 5.1.43, MySQL 5.5.x through 5.5.0-m2, and other products, allow remote attackers to
   execute arbitrary code or cause a denial of service (memory corruption and daemon crash) by establishing an SSL connection and sending an
   X.509 client certificate with a crafted name field, as demonstrated by mysql_overflow1.py and the vd_mysql5 module in VulnDisco Pack
   Professional 8.11. NOTE: this was originally reported for MySQL 5.0.51a.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-4484" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-4484" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278833" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279051" version="27">
      <metadata>
        <title>Test for mysql-devel On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-4484 at MITRE

Description

   Multiple stack-based buffer overflows in the CertDecoder::GetName function in src/asn.cpp in TaoCrypt in yaSSL before 1.9.9, as used in
   mysqld in MySQL 5.0.x before 5.0.90, MySQL 5.1.x before 5.1.43, MySQL 5.5.x through 5.5.0-m2, and other products, allow remote attackers to
   execute arbitrary code or cause a denial of service (memory corruption and daemon crash) by establishing an SSL connection and sending an
   X.509 client certificate with a crafted name field, as demonstrated by mysql_overflow1.py and the vd_mysql5 module in VulnDisco Pack
   Professional 8.11. NOTE: this was originally reported for MySQL 5.0.51a.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-4484" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-4484" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278829" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279050" version="27">
      <metadata>
        <title>Test for mysql-client On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-4484 at MITRE

Description

   Multiple stack-based buffer overflows in the CertDecoder::GetName function in src/asn.cpp in TaoCrypt in yaSSL before 1.9.9, as used in
   mysqld in MySQL 5.0.x before 5.0.90, MySQL 5.1.x before 5.1.43, MySQL 5.5.x through 5.5.0-m2, and other products, allow remote attackers to
   execute arbitrary code or cause a denial of service (memory corruption and daemon crash) by establishing an SSL connection and sending an
   X.509 client certificate with a crafted name field, as demonstrated by mysql_overflow1.py and the vd_mysql5 module in VulnDisco Pack
   Professional 8.11. NOTE: this was originally reported for MySQL 5.0.51a.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-4484" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-4484" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278825" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279049" version="27">
      <metadata>
        <title>Test for mysql-Max On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-4484 at MITRE

Description

   Multiple stack-based buffer overflows in the CertDecoder::GetName function in src/asn.cpp in TaoCrypt in yaSSL before 1.9.9, as used in
   mysqld in MySQL 5.0.x before 5.0.90, MySQL 5.1.x before 5.1.43, MySQL 5.5.x through 5.5.0-m2, and other products, allow remote attackers to
   execute arbitrary code or cause a denial of service (memory corruption and daemon crash) by establishing an SSL connection and sending an
   X.509 client certificate with a crafted name field, as demonstrated by mysql_overflow1.py and the vd_mysql5 module in VulnDisco Pack
   Professional 8.11. NOTE: this was originally reported for MySQL 5.0.51a.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-4484" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-4484" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278821" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279048" version="27">
      <metadata>
        <title>Test for mysql On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-4484 at MITRE

Description

   Multiple stack-based buffer overflows in the CertDecoder::GetName function in src/asn.cpp in TaoCrypt in yaSSL before 1.9.9, as used in
   mysqld in MySQL 5.0.x before 5.0.90, MySQL 5.1.x before 5.1.43, MySQL 5.5.x through 5.5.0-m2, and other products, allow remote attackers to
   execute arbitrary code or cause a denial of service (memory corruption and daemon crash) by establishing an SSL connection and sending an
   X.509 client certificate with a crafted name field, as demonstrated by mysql_overflow1.py and the vd_mysql5 module in VulnDisco Pack
   Professional 8.11. NOTE: this was originally reported for MySQL 5.0.51a.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-4484" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-4484" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278817" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279047" version="27">
      <metadata>
        <title>Test for ethereal-devel On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-4377 at MITRE

Description

   The (1) SMB and (2) SMB2 dissectors in Wireshark 0.9.0 through 1.2.4 allow remote attackers to cause a denial of service (crash) via a
   crafted packet that triggers a NULL pointer dereference, as demonstrated by fuzz-2009-12-07-11141.pcap.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-4377" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-4377" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279036" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279046" version="27">
      <metadata>
        <title>Test for ethereal On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-4377 at MITRE

Description

   The (1) SMB and (2) SMB2 dissectors in Wireshark 0.9.0 through 1.2.4 allow remote attackers to cause a denial of service (crash) via a
   crafted packet that triggers a NULL pointer dereference, as demonstrated by fuzz-2009-12-07-11141.pcap.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-4377" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-4377" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279032" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279045" version="27">
      <metadata>
        <title>Test for ethereal-devel On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-4376 at MITRE

Description

   Buffer overflow in the daintree_sna_read function in the Daintree SNA file parser in Wireshark 1.2.0 through 1.2.4 allows remote attackers to
   cause a denial of service (crash) and possibly execute arbitrary code via a crafted packet.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-4376" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-4376" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279036" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279044" version="27">
      <metadata>
        <title>Test for ethereal On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-4376 at MITRE

Description

   Buffer overflow in the daintree_sna_read function in the Daintree SNA file parser in Wireshark 1.2.0 through 1.2.4 allows remote attackers to
   cause a denial of service (crash) and possibly execute arbitrary code via a crafted packet.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-4376" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-4376" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279032" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279043" version="27">
      <metadata>
        <title>Test for squid On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-2855 at MITRE

Description

   The strListGetItem function in src/HttpHeaderTools.c in Squid 2.7 allows remote attackers to cause a denial of service via a crafted auth
   header with certain comma delimiters that trigger an infinite loop of calls to the strcspn function.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-2855" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-2855" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279040" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279039" version="27">
      <metadata>
        <title>Test for ethereal-devel On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-2563 at MITRE

Description

   Unspecified vulnerability in the Infiniband dissector in Wireshark 1.0.6 through 1.2.0, when running on unspecified platforms, allows remote
   attackers to cause a denial of service (crash) via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.1 (AV:N/AC:M/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-2563" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-2563" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279036" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279035" version="27">
      <metadata>
        <title>Test for ethereal On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-2563 at MITRE

Description

   Unspecified vulnerability in the Infiniband dissector in Wireshark 1.0.6 through 1.2.0, when running on unspecified platforms, allows remote
   attackers to cause a denial of service (crash) via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.1 (AV:N/AC:M/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-2563" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-2563" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279032" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279031" version="27">
      <metadata>
        <title>Test for ldapsmb On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0926 at MITRE

Description

   The default configuration of smbd in Samba before 3.3.11, 3.4.x before 3.4.6, and 3.5.x before 3.5.0rc3, when a writable share exists, allows
   remote authenticated users to leverage a directory traversal vulnerability, and access arbitrary files, by using the symlink command in
   smbclient to create a symlink containing .. (dot dot) sequences, related to the combination of the unix extensions and wide links options.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 3.5 (AV:N/AC:M/Au:S/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0926" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0926" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278600" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279030" version="27">
      <metadata>
        <title>Test for samba-winbind On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0926 at MITRE

Description

   The default configuration of smbd in Samba before 3.3.11, 3.4.x before 3.4.6, and 3.5.x before 3.5.0rc3, when a writable share exists, allows
   remote authenticated users to leverage a directory traversal vulnerability, and access arbitrary files, by using the symlink command in
   smbclient to create a symlink containing .. (dot dot) sequences, related to the combination of the unix extensions and wide links options.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 3.5 (AV:N/AC:M/Au:S/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0926" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0926" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278640" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279029" version="27">
      <metadata>
        <title>Test for samba-vscan On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0926 at MITRE

Description

   The default configuration of smbd in Samba before 3.3.11, 3.4.x before 3.4.6, and 3.5.x before 3.5.0rc3, when a writable share exists, allows
   remote authenticated users to leverage a directory traversal vulnerability, and access arbitrary files, by using the symlink command in
   smbclient to create a symlink containing .. (dot dot) sequences, related to the combination of the unix extensions and wide links options.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 3.5 (AV:N/AC:M/Au:S/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0926" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0926" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278636" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279028" version="27">
      <metadata>
        <title>Test for samba-python On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0926 at MITRE

Description

   The default configuration of smbd in Samba before 3.3.11, 3.4.x before 3.4.6, and 3.5.x before 3.5.0rc3, when a writable share exists, allows
   remote authenticated users to leverage a directory traversal vulnerability, and access arbitrary files, by using the symlink command in
   smbclient to create a symlink containing .. (dot dot) sequences, related to the combination of the unix extensions and wide links options.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 3.5 (AV:N/AC:M/Au:S/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0926" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0926" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278632" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279027" version="27">
      <metadata>
        <title>Test for samba-krb-printing On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0926 at MITRE

Description

   The default configuration of smbd in Samba before 3.3.11, 3.4.x before 3.4.6, and 3.5.x before 3.5.0rc3, when a writable share exists, allows
   remote authenticated users to leverage a directory traversal vulnerability, and access arbitrary files, by using the symlink command in
   smbclient to create a symlink containing .. (dot dot) sequences, related to the combination of the unix extensions and wide links options.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 3.5 (AV:N/AC:M/Au:S/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0926" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0926" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278628" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279026" version="27">
      <metadata>
        <title>Test for samba-client On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0926 at MITRE

Description

   The default configuration of smbd in Samba before 3.3.11, 3.4.x before 3.4.6, and 3.5.x before 3.5.0rc3, when a writable share exists, allows
   remote authenticated users to leverage a directory traversal vulnerability, and access arbitrary files, by using the symlink command in
   smbclient to create a symlink containing .. (dot dot) sequences, related to the combination of the unix extensions and wide links options.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 3.5 (AV:N/AC:M/Au:S/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0926" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0926" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278624" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279025" version="27">
      <metadata>
        <title>Test for samba On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0926 at MITRE

Description

   The default configuration of smbd in Samba before 3.3.11, 3.4.x before 3.4.6, and 3.5.x before 3.5.0rc3, when a writable share exists, allows
   remote authenticated users to leverage a directory traversal vulnerability, and access arbitrary files, by using the symlink command in
   smbclient to create a symlink containing .. (dot dot) sequences, related to the combination of the unix extensions and wide links options.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 3.5 (AV:N/AC:M/Au:S/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0926" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0926" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278620" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279024" version="27">
      <metadata>
        <title>Test for libsmbclient-devel On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0926 at MITRE

Description

   The default configuration of smbd in Samba before 3.3.11, 3.4.x before 3.4.6, and 3.5.x before 3.5.0rc3, when a writable share exists, allows
   remote authenticated users to leverage a directory traversal vulnerability, and access arbitrary files, by using the symlink command in
   smbclient to create a symlink containing .. (dot dot) sequences, related to the combination of the unix extensions and wide links options.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 3.5 (AV:N/AC:M/Au:S/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0926" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0926" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278616" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279023" version="27">
      <metadata>
        <title>Test for libsmbclient On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0926 at MITRE

Description

   The default configuration of smbd in Samba before 3.3.11, 3.4.x before 3.4.6, and 3.5.x before 3.5.0rc3, when a writable share exists, allows
   remote authenticated users to leverage a directory traversal vulnerability, and access arbitrary files, by using the symlink command in
   smbclient to create a symlink containing .. (dot dot) sequences, related to the combination of the unix extensions and wide links options.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 3.5 (AV:N/AC:M/Au:S/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0926" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0926" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278612" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279022" version="27">
      <metadata>
        <title>Test for libmsrpc-devel On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0926 at MITRE

Description

   The default configuration of smbd in Samba before 3.3.11, 3.4.x before 3.4.6, and 3.5.x before 3.5.0rc3, when a writable share exists, allows
   remote authenticated users to leverage a directory traversal vulnerability, and access arbitrary files, by using the symlink command in
   smbclient to create a symlink containing .. (dot dot) sequences, related to the combination of the unix extensions and wide links options.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 3.5 (AV:N/AC:M/Au:S/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0926" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0926" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278608" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279021" version="27">
      <metadata>
        <title>Test for libmsrpc On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0926 at MITRE

Description

   The default configuration of smbd in Samba before 3.3.11, 3.4.x before 3.4.6, and 3.5.x before 3.5.0rc3, when a writable share exists, allows
   remote authenticated users to leverage a directory traversal vulnerability, and access arbitrary files, by using the symlink command in
   smbclient to create a symlink containing .. (dot dot) sequences, related to the combination of the unix extensions and wide links options.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 3.5 (AV:N/AC:M/Au:S/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0926" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0926" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278604" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279020" version="27">
      <metadata>
        <title>Test for cifs-mount On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0926 at MITRE

Description

   The default configuration of smbd in Samba before 3.3.11, 3.4.x before 3.4.6, and 3.5.x before 3.5.0rc3, when a writable share exists, allows
   remote authenticated users to leverage a directory traversal vulnerability, and access arbitrary files, by using the symlink command in
   smbclient to create a symlink containing .. (dot dot) sequences, related to the combination of the unix extensions and wide links options.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 3.5 (AV:N/AC:M/Au:S/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0926" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0926" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278596" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279019" version="27">
      <metadata>
        <title>Test for ldapsmb On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0547 at MITRE

Description

   client/mount.cifs.c in mount.cifs in smbfs in Samba 3.4.5 and earlier does not verify that the (1) device name and (2) mountpoint strings are
   composed of valid characters, which allows local users to cause a denial of service (mtab corruption) via a crafted string.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.1 (AV:L/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0547" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0547" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278600" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279018" version="27">
      <metadata>
        <title>Test for samba-winbind On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0547 at MITRE

Description

   client/mount.cifs.c in mount.cifs in smbfs in Samba 3.4.5 and earlier does not verify that the (1) device name and (2) mountpoint strings are
   composed of valid characters, which allows local users to cause a denial of service (mtab corruption) via a crafted string.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.1 (AV:L/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0547" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0547" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278640" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279017" version="27">
      <metadata>
        <title>Test for samba-vscan On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0547 at MITRE

Description

   client/mount.cifs.c in mount.cifs in smbfs in Samba 3.4.5 and earlier does not verify that the (1) device name and (2) mountpoint strings are
   composed of valid characters, which allows local users to cause a denial of service (mtab corruption) via a crafted string.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.1 (AV:L/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0547" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0547" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278636" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279016" version="27">
      <metadata>
        <title>Test for samba-python On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0547 at MITRE

Description

   client/mount.cifs.c in mount.cifs in smbfs in Samba 3.4.5 and earlier does not verify that the (1) device name and (2) mountpoint strings are
   composed of valid characters, which allows local users to cause a denial of service (mtab corruption) via a crafted string.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.1 (AV:L/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0547" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0547" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278632" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279015" version="27">
      <metadata>
        <title>Test for samba-krb-printing On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0547 at MITRE

Description

   client/mount.cifs.c in mount.cifs in smbfs in Samba 3.4.5 and earlier does not verify that the (1) device name and (2) mountpoint strings are
   composed of valid characters, which allows local users to cause a denial of service (mtab corruption) via a crafted string.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.1 (AV:L/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0547" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0547" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278628" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279014" version="27">
      <metadata>
        <title>Test for samba-client On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0547 at MITRE

Description

   client/mount.cifs.c in mount.cifs in smbfs in Samba 3.4.5 and earlier does not verify that the (1) device name and (2) mountpoint strings are
   composed of valid characters, which allows local users to cause a denial of service (mtab corruption) via a crafted string.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.1 (AV:L/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0547" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0547" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278624" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279013" version="27">
      <metadata>
        <title>Test for samba On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0547 at MITRE

Description

   client/mount.cifs.c in mount.cifs in smbfs in Samba 3.4.5 and earlier does not verify that the (1) device name and (2) mountpoint strings are
   composed of valid characters, which allows local users to cause a denial of service (mtab corruption) via a crafted string.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.1 (AV:L/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0547" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0547" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278620" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279012" version="27">
      <metadata>
        <title>Test for libsmbclient-devel On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0547 at MITRE

Description

   client/mount.cifs.c in mount.cifs in smbfs in Samba 3.4.5 and earlier does not verify that the (1) device name and (2) mountpoint strings are
   composed of valid characters, which allows local users to cause a denial of service (mtab corruption) via a crafted string.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.1 (AV:L/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0547" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0547" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278616" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279011" version="27">
      <metadata>
        <title>Test for libsmbclient On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0547 at MITRE

Description

   client/mount.cifs.c in mount.cifs in smbfs in Samba 3.4.5 and earlier does not verify that the (1) device name and (2) mountpoint strings are
   composed of valid characters, which allows local users to cause a denial of service (mtab corruption) via a crafted string.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.1 (AV:L/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0547" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0547" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278612" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279010" version="27">
      <metadata>
        <title>Test for libmsrpc-devel On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0547 at MITRE

Description

   client/mount.cifs.c in mount.cifs in smbfs in Samba 3.4.5 and earlier does not verify that the (1) device name and (2) mountpoint strings are
   composed of valid characters, which allows local users to cause a denial of service (mtab corruption) via a crafted string.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.1 (AV:L/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0547" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0547" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278608" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279009" version="27">
      <metadata>
        <title>Test for libmsrpc On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0547 at MITRE

Description

   client/mount.cifs.c in mount.cifs in smbfs in Samba 3.4.5 and earlier does not verify that the (1) device name and (2) mountpoint strings are
   composed of valid characters, which allows local users to cause a denial of service (mtab corruption) via a crafted string.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.1 (AV:L/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0547" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0547" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278604" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279008" version="27">
      <metadata>
        <title>Test for cifs-mount On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0547 at MITRE

Description

   client/mount.cifs.c in mount.cifs in smbfs in Samba 3.4.5 and earlier does not verify that the (1) device name and (2) mountpoint strings are
   composed of valid characters, which allows local users to cause a denial of service (mtab corruption) via a crafted string.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.1 (AV:L/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0547" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0547" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278596" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279007" version="27">
      <metadata>
        <title>Test for tomcat5-webapps On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-2902 at MITRE

Description

   Directory traversal vulnerability in Apache Tomcat 5.5.0 through 5.5.28 and 6.0.0 through 6.0.20 allows remote attackers to delete
   work-directory files via directory traversal sequences in a WAR filename, as demonstrated by the ...war filename.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-2902" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-2902" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278995" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279006" version="27">
      <metadata>
        <title>Test for tomcat5-admin-webapps On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-2902 at MITRE

Description

   Directory traversal vulnerability in Apache Tomcat 5.5.0 through 5.5.28 and 6.0.0 through 6.0.20 allows remote attackers to delete
   work-directory files via directory traversal sequences in a WAR filename, as demonstrated by the ...war filename.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-2902" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-2902" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278991" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279005" version="27">
      <metadata>
        <title>Test for tomcat5 On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-2902 at MITRE

Description

   Directory traversal vulnerability in Apache Tomcat 5.5.0 through 5.5.28 and 6.0.0 through 6.0.20 allows remote attackers to delete
   work-directory files via directory traversal sequences in a WAR filename, as demonstrated by the ...war filename.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-2902" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-2902" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278987" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279004" version="27">
      <metadata>
        <title>Test for tomcat5-webapps On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-2901 at MITRE

Description

   The autodeployment process in Apache Tomcat 5.5.0 through 5.5.28 and 6.0.0 through 6.0.20, when autoDeploy is enabled, deploys appBase files
   that remain from a failed undeploy, which might allow remote attackers to bypass intended authentication requirements via HTTP requests.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-2901" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-2901" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278995" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279003" version="27">
      <metadata>
        <title>Test for tomcat5-admin-webapps On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-2901 at MITRE

Description

   The autodeployment process in Apache Tomcat 5.5.0 through 5.5.28 and 6.0.0 through 6.0.20, when autoDeploy is enabled, deploys appBase files
   that remain from a failed undeploy, which might allow remote attackers to bypass intended authentication requirements via HTTP requests.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-2901" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-2901" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278991" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279002" version="27">
      <metadata>
        <title>Test for tomcat5 On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-2901 at MITRE

Description

   The autodeployment process in Apache Tomcat 5.5.0 through 5.5.28 and 6.0.0 through 6.0.20, when autoDeploy is enabled, deploys appBase files
   that remain from a failed undeploy, which might allow remote attackers to bypass intended authentication requirements via HTTP requests.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-2901" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-2901" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278987" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279001" version="27">
      <metadata>
        <title>Test for tomcat5-webapps On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-2693 at MITRE

Description

   Directory traversal vulnerability in Apache Tomcat 5.5.0 through 5.5.28 and 6.0.0 through 6.0.20 allows remote attackers to create or
   overwrite arbitrary files via a .. (dot dot) in an entry in a WAR file, as demonstrated by a ../../bin/catalina.bat entry.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.8 (AV:N/AC:M/Au:N/C:N/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-2693" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-2693" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278995" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:279000" version="27">
      <metadata>
        <title>Test for tomcat5-admin-webapps On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-2693 at MITRE

Description

   Directory traversal vulnerability in Apache Tomcat 5.5.0 through 5.5.28 and 6.0.0 through 6.0.20 allows remote attackers to create or
   overwrite arbitrary files via a .. (dot dot) in an entry in a WAR file, as demonstrated by a ../../bin/catalina.bat entry.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.8 (AV:N/AC:M/Au:N/C:N/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-2693" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-2693" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278991" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278999" version="27">
      <metadata>
        <title>Test for tomcat5 On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-2693 at MITRE

Description

   Directory traversal vulnerability in Apache Tomcat 5.5.0 through 5.5.28 and 6.0.0 through 6.0.20 allows remote attackers to create or
   overwrite arbitrary files via a .. (dot dot) in an entry in a WAR file, as demonstrated by a ../../bin/catalina.bat entry.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.8 (AV:N/AC:M/Au:N/C:N/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-2693" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-2693" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278987" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278998" version="27">
      <metadata>
        <title>Test for tomcat5-webapps On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2008-5515 at MITRE

Description

   Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, 6.0.0 through 6.0.18, and possibly earlier versions normalizes the target pathname
   before filtering the query string when using the RequestDispatcher method, which allows remote attackers to bypass intended access
   restrictions and conduct directory traversal attacks via .. (dot dot) sequences and the WEB-INF directory in a Request.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2008-5515" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2008-5515" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278995" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278994" version="27">
      <metadata>
        <title>Test for tomcat5-admin-webapps On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2008-5515 at MITRE

Description

   Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, 6.0.0 through 6.0.18, and possibly earlier versions normalizes the target pathname
   before filtering the query string when using the RequestDispatcher method, which allows remote attackers to bypass intended access
   restrictions and conduct directory traversal attacks via .. (dot dot) sequences and the WEB-INF directory in a Request.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2008-5515" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2008-5515" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278991" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278990" version="27">
      <metadata>
        <title>Test for tomcat5 On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2008-5515 at MITRE

Description

   Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, 6.0.0 through 6.0.18, and possibly earlier versions normalizes the target pathname
   before filtering the query string when using the RequestDispatcher method, which allows remote attackers to bypass intended access
   restrictions and conduct directory traversal attacks via .. (dot dot) sequences and the WEB-INF directory in a Request.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2008-5515" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2008-5515" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278987" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278986" version="27">
      <metadata>
        <title>Test for kdebase3-session On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0436 at MITRE

Description

   Race condition in backend/ctrl.c in KDM in KDE Software Compilation (SC) 2.2.0 through 4.4.2 allows local users to change the permissions of
   arbitrary files, and consequently gain privileges, by blocking the removal of a certain directory that contains a control socket, related to
   improper interaction with ksm.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.9 (AV:L/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0436" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0436" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278983" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278982" version="27">
      <metadata>
        <title>Test for kdebase3-samba On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0436 at MITRE

Description

   Race condition in backend/ctrl.c in KDM in KDE Software Compilation (SC) 2.2.0 through 4.4.2 allows local users to change the permissions of
   arbitrary files, and consequently gain privileges, by blocking the removal of a certain directory that contains a control socket, related to
   improper interaction with ksm.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.9 (AV:L/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0436" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0436" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278979" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278978" version="27">
      <metadata>
        <title>Test for kdebase3-nsplugin On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0436 at MITRE

Description

   Race condition in backend/ctrl.c in KDM in KDE Software Compilation (SC) 2.2.0 through 4.4.2 allows local users to change the permissions of
   arbitrary files, and consequently gain privileges, by blocking the removal of a certain directory that contains a control socket, related to
   improper interaction with ksm.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.9 (AV:L/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0436" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0436" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278975" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278974" version="27">
      <metadata>
        <title>Test for kdebase3-ksysguardd On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0436 at MITRE

Description

   Race condition in backend/ctrl.c in KDM in KDE Software Compilation (SC) 2.2.0 through 4.4.2 allows local users to change the permissions of
   arbitrary files, and consequently gain privileges, by blocking the removal of a certain directory that contains a control socket, related to
   improper interaction with ksm.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.9 (AV:L/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0436" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0436" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278971" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278970" version="27">
      <metadata>
        <title>Test for kdebase3-kdm On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0436 at MITRE

Description

   Race condition in backend/ctrl.c in KDM in KDE Software Compilation (SC) 2.2.0 through 4.4.2 allows local users to change the permissions of
   arbitrary files, and consequently gain privileges, by blocking the removal of a certain directory that contains a control socket, related to
   improper interaction with ksm.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.9 (AV:L/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0436" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0436" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278967" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278966" version="27">
      <metadata>
        <title>Test for kdebase3-extra On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0436 at MITRE

Description

   Race condition in backend/ctrl.c in KDM in KDE Software Compilation (SC) 2.2.0 through 4.4.2 allows local users to change the permissions of
   arbitrary files, and consequently gain privileges, by blocking the removal of a certain directory that contains a control socket, related to
   improper interaction with ksm.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.9 (AV:L/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0436" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0436" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278963" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278962" version="27">
      <metadata>
        <title>Test for kdebase3-devel On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0436 at MITRE

Description

   Race condition in backend/ctrl.c in KDM in KDE Software Compilation (SC) 2.2.0 through 4.4.2 allows local users to change the permissions of
   arbitrary files, and consequently gain privileges, by blocking the removal of a certain directory that contains a control socket, related to
   improper interaction with ksm.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.9 (AV:L/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0436" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0436" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278959" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278958" version="27">
      <metadata>
        <title>Test for kdebase3 On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0436 at MITRE

Description

   Race condition in backend/ctrl.c in KDM in KDE Software Compilation (SC) 2.2.0 through 4.4.2 allows local users to change the permissions of
   arbitrary files, and consequently gain privileges, by blocking the removal of a certain directory that contains a control socket, related to
   improper interaction with ksm.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.9 (AV:L/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0436" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0436" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278955" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278954" version="27">
      <metadata>
        <title>Test for fileshareset On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0436 at MITRE

Description

   Race condition in backend/ctrl.c in KDM in KDE Software Compilation (SC) 2.2.0 through 4.4.2 allows local users to change the permissions of
   arbitrary files, and consequently gain privileges, by blocking the removal of a certain directory that contains a control socket, related to
   improper interaction with ksm.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.9 (AV:L/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0436" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0436" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278951" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278950" version="27">
      <metadata>
        <title>Test for kernel-kdumppae On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-1088 at MITRE

Description

   fs/namei.c in Linux kernel 2.6.18 through 2.6.34 does not always follow NFS automount "symlinks," which allows attackers to have an unknown
   impact, related to LOOKUP_FOLLOW.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.4 (AV:N/AC:H/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-1088" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-1088" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278350" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278949" version="27">
      <metadata>
        <title>Test for kernel-xenpae On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-1088 at MITRE

Description

   fs/namei.c in Linux kernel 2.6.18 through 2.6.34 does not always follow NFS automount "symlinks," which allows attackers to have an unknown
   impact, related to LOOKUP_FOLLOW.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.4 (AV:N/AC:H/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-1088" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-1088" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278342" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278948" version="27">
      <metadata>
        <title>Test for kernel-xen On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-1088 at MITRE

Description

   fs/namei.c in Linux kernel 2.6.18 through 2.6.34 does not always follow NFS automount "symlinks," which allows attackers to have an unknown
   impact, related to LOOKUP_FOLLOW.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.4 (AV:N/AC:H/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-1088" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-1088" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278338" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278947" version="27">
      <metadata>
        <title>Test for kernel-vmipae On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-1088 at MITRE

Description

   fs/namei.c in Linux kernel 2.6.18 through 2.6.34 does not always follow NFS automount "symlinks," which allows attackers to have an unknown
   impact, related to LOOKUP_FOLLOW.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.4 (AV:N/AC:H/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-1088" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-1088" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278334" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278946" version="27">
      <metadata>
        <title>Test for kernel-vmi On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-1088 at MITRE

Description

   fs/namei.c in Linux kernel 2.6.18 through 2.6.34 does not always follow NFS automount "symlinks," which allows attackers to have an unknown
   impact, related to LOOKUP_FOLLOW.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.4 (AV:N/AC:H/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-1088" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-1088" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278330" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278945" version="27">
      <metadata>
        <title>Test for kernel-syms On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-1088 at MITRE

Description

   fs/namei.c in Linux kernel 2.6.18 through 2.6.34 does not always follow NFS automount "symlinks," which allows attackers to have an unknown
   impact, related to LOOKUP_FOLLOW.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.4 (AV:N/AC:H/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-1088" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-1088" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278326" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278944" version="27">
      <metadata>
        <title>Test for kernel-source On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-1088 at MITRE

Description

   fs/namei.c in Linux kernel 2.6.18 through 2.6.34 does not always follow NFS automount "symlinks," which allows attackers to have an unknown
   impact, related to LOOKUP_FOLLOW.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.4 (AV:N/AC:H/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-1088" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-1088" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278322" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278943" version="27">
      <metadata>
        <title>Test for kernel-smp On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-1088 at MITRE

Description

   fs/namei.c in Linux kernel 2.6.18 through 2.6.34 does not always follow NFS automount "symlinks," which allows attackers to have an unknown
   impact, related to LOOKUP_FOLLOW.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.4 (AV:N/AC:H/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-1088" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-1088" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278318" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278942" version="27">
      <metadata>
        <title>Test for kernel-kdump On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-1088 at MITRE

Description

   fs/namei.c in Linux kernel 2.6.18 through 2.6.34 does not always follow NFS automount "symlinks," which allows attackers to have an unknown
   impact, related to LOOKUP_FOLLOW.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.4 (AV:N/AC:H/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-1088" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-1088" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278314" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278941" version="27">
      <metadata>
        <title>Test for kernel-default On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-1088 at MITRE

Description

   fs/namei.c in Linux kernel 2.6.18 through 2.6.34 does not always follow NFS automount "symlinks," which allows attackers to have an unknown
   impact, related to LOOKUP_FOLLOW.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.4 (AV:N/AC:H/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-1088" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-1088" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278310" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278940" version="27">
      <metadata>
        <title>Test for kernel-debug On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-1088 at MITRE

Description

   fs/namei.c in Linux kernel 2.6.18 through 2.6.34 does not always follow NFS automount "symlinks," which allows attackers to have an unknown
   impact, related to LOOKUP_FOLLOW.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.4 (AV:N/AC:H/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-1088" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-1088" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278306" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278939" version="27">
      <metadata>
        <title>Test for kernel-bigsmp On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-1088 at MITRE

Description

   fs/namei.c in Linux kernel 2.6.18 through 2.6.34 does not always follow NFS automount "symlinks," which allows attackers to have an unknown
   impact, related to LOOKUP_FOLLOW.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.4 (AV:N/AC:H/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-1088" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-1088" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278302" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278938" version="27">
      <metadata>
        <title>Test for kernel-kdumppae On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-1086 at MITRE

Description

   The ULE decapsulation functionality in drivers/media/dvb/dvb-core/dvb_net.c in dvb-core in Linux kernel 2.6.33 and earlier allows attackers
   to cause a denial of service (infinite loop) via a crafted MPEG2-TS frame, related to an invalid Payload Pointer ULE.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.8 (AV:N/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-1086" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-1086" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278350" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278937" version="27">
      <metadata>
        <title>Test for kernel-xenpae On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-1086 at MITRE

Description

   The ULE decapsulation functionality in drivers/media/dvb/dvb-core/dvb_net.c in dvb-core in Linux kernel 2.6.33 and earlier allows attackers
   to cause a denial of service (infinite loop) via a crafted MPEG2-TS frame, related to an invalid Payload Pointer ULE.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.8 (AV:N/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-1086" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-1086" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278342" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278936" version="27">
      <metadata>
        <title>Test for kernel-xen On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-1086 at MITRE

Description

   The ULE decapsulation functionality in drivers/media/dvb/dvb-core/dvb_net.c in dvb-core in Linux kernel 2.6.33 and earlier allows attackers
   to cause a denial of service (infinite loop) via a crafted MPEG2-TS frame, related to an invalid Payload Pointer ULE.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.8 (AV:N/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-1086" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-1086" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278338" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278935" version="27">
      <metadata>
        <title>Test for kernel-vmipae On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-1086 at MITRE

Description

   The ULE decapsulation functionality in drivers/media/dvb/dvb-core/dvb_net.c in dvb-core in Linux kernel 2.6.33 and earlier allows attackers
   to cause a denial of service (infinite loop) via a crafted MPEG2-TS frame, related to an invalid Payload Pointer ULE.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.8 (AV:N/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-1086" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-1086" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278334" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278934" version="27">
      <metadata>
        <title>Test for kernel-vmi On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-1086 at MITRE

Description

   The ULE decapsulation functionality in drivers/media/dvb/dvb-core/dvb_net.c in dvb-core in Linux kernel 2.6.33 and earlier allows attackers
   to cause a denial of service (infinite loop) via a crafted MPEG2-TS frame, related to an invalid Payload Pointer ULE.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.8 (AV:N/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-1086" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-1086" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278330" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278933" version="27">
      <metadata>
        <title>Test for kernel-syms On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-1086 at MITRE

Description

   The ULE decapsulation functionality in drivers/media/dvb/dvb-core/dvb_net.c in dvb-core in Linux kernel 2.6.33 and earlier allows attackers
   to cause a denial of service (infinite loop) via a crafted MPEG2-TS frame, related to an invalid Payload Pointer ULE.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.8 (AV:N/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-1086" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-1086" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278326" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278932" version="27">
      <metadata>
        <title>Test for kernel-source On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-1086 at MITRE

Description

   The ULE decapsulation functionality in drivers/media/dvb/dvb-core/dvb_net.c in dvb-core in Linux kernel 2.6.33 and earlier allows attackers
   to cause a denial of service (infinite loop) via a crafted MPEG2-TS frame, related to an invalid Payload Pointer ULE.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.8 (AV:N/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-1086" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-1086" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278322" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278931" version="27">
      <metadata>
        <title>Test for kernel-smp On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-1086 at MITRE

Description

   The ULE decapsulation functionality in drivers/media/dvb/dvb-core/dvb_net.c in dvb-core in Linux kernel 2.6.33 and earlier allows attackers
   to cause a denial of service (infinite loop) via a crafted MPEG2-TS frame, related to an invalid Payload Pointer ULE.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.8 (AV:N/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-1086" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-1086" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278318" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278930" version="27">
      <metadata>
        <title>Test for kernel-kdump On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-1086 at MITRE

Description

   The ULE decapsulation functionality in drivers/media/dvb/dvb-core/dvb_net.c in dvb-core in Linux kernel 2.6.33 and earlier allows attackers
   to cause a denial of service (infinite loop) via a crafted MPEG2-TS frame, related to an invalid Payload Pointer ULE.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.8 (AV:N/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-1086" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-1086" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278314" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278929" version="27">
      <metadata>
        <title>Test for kernel-default On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-1086 at MITRE

Description

   The ULE decapsulation functionality in drivers/media/dvb/dvb-core/dvb_net.c in dvb-core in Linux kernel 2.6.33 and earlier allows attackers
   to cause a denial of service (infinite loop) via a crafted MPEG2-TS frame, related to an invalid Payload Pointer ULE.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.8 (AV:N/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-1086" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-1086" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278310" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278928" version="27">
      <metadata>
        <title>Test for kernel-debug On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-1086 at MITRE

Description

   The ULE decapsulation functionality in drivers/media/dvb/dvb-core/dvb_net.c in dvb-core in Linux kernel 2.6.33 and earlier allows attackers
   to cause a denial of service (infinite loop) via a crafted MPEG2-TS frame, related to an invalid Payload Pointer ULE.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.8 (AV:N/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-1086" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-1086" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278306" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278927" version="27">
      <metadata>
        <title>Test for kernel-bigsmp On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-1086 at MITRE

Description

   The ULE decapsulation functionality in drivers/media/dvb/dvb-core/dvb_net.c in dvb-core in Linux kernel 2.6.33 and earlier allows attackers
   to cause a denial of service (infinite loop) via a crafted MPEG2-TS frame, related to an invalid Payload Pointer ULE.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.8 (AV:N/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-1086" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-1086" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278302" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278926" version="27">
      <metadata>
        <title>Test for kernel-kdumppae On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-1083 at MITRE

Description

   The processcompl_compat function in drivers/usb/core/devio.c in Linux kernel 2.6.x through 2.6.32, and possibly other versions, does not
   clear the transfer buffer before returning to userspace when a USB command fails, which might make it easier for physically proximate
   attackers to obtain sensitive information (kernel memory).
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.7 (AV:L/AC:M/Au:N/C:C/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-1083" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-1083" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278350" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278925" version="27">
      <metadata>
        <title>Test for kernel-xenpae On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-1083 at MITRE

Description

   The processcompl_compat function in drivers/usb/core/devio.c in Linux kernel 2.6.x through 2.6.32, and possibly other versions, does not
   clear the transfer buffer before returning to userspace when a USB command fails, which might make it easier for physically proximate
   attackers to obtain sensitive information (kernel memory).
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.7 (AV:L/AC:M/Au:N/C:C/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-1083" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-1083" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278342" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278924" version="27">
      <metadata>
        <title>Test for kernel-xen On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-1083 at MITRE

Description

   The processcompl_compat function in drivers/usb/core/devio.c in Linux kernel 2.6.x through 2.6.32, and possibly other versions, does not
   clear the transfer buffer before returning to userspace when a USB command fails, which might make it easier for physically proximate
   attackers to obtain sensitive information (kernel memory).
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.7 (AV:L/AC:M/Au:N/C:C/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-1083" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-1083" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278338" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278923" version="27">
      <metadata>
        <title>Test for kernel-vmipae On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-1083 at MITRE

Description

   The processcompl_compat function in drivers/usb/core/devio.c in Linux kernel 2.6.x through 2.6.32, and possibly other versions, does not
   clear the transfer buffer before returning to userspace when a USB command fails, which might make it easier for physically proximate
   attackers to obtain sensitive information (kernel memory).
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.7 (AV:L/AC:M/Au:N/C:C/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-1083" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-1083" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278334" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278922" version="27">
      <metadata>
        <title>Test for kernel-vmi On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-1083 at MITRE

Description

   The processcompl_compat function in drivers/usb/core/devio.c in Linux kernel 2.6.x through 2.6.32, and possibly other versions, does not
   clear the transfer buffer before returning to userspace when a USB command fails, which might make it easier for physically proximate
   attackers to obtain sensitive information (kernel memory).
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.7 (AV:L/AC:M/Au:N/C:C/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-1083" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-1083" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278330" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278921" version="27">
      <metadata>
        <title>Test for kernel-syms On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-1083 at MITRE

Description

   The processcompl_compat function in drivers/usb/core/devio.c in Linux kernel 2.6.x through 2.6.32, and possibly other versions, does not
   clear the transfer buffer before returning to userspace when a USB command fails, which might make it easier for physically proximate
   attackers to obtain sensitive information (kernel memory).
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.7 (AV:L/AC:M/Au:N/C:C/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-1083" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-1083" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278326" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278920" version="27">
      <metadata>
        <title>Test for kernel-source On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-1083 at MITRE

Description

   The processcompl_compat function in drivers/usb/core/devio.c in Linux kernel 2.6.x through 2.6.32, and possibly other versions, does not
   clear the transfer buffer before returning to userspace when a USB command fails, which might make it easier for physically proximate
   attackers to obtain sensitive information (kernel memory).
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.7 (AV:L/AC:M/Au:N/C:C/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-1083" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-1083" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278322" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278919" version="27">
      <metadata>
        <title>Test for kernel-smp On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-1083 at MITRE

Description

   The processcompl_compat function in drivers/usb/core/devio.c in Linux kernel 2.6.x through 2.6.32, and possibly other versions, does not
   clear the transfer buffer before returning to userspace when a USB command fails, which might make it easier for physically proximate
   attackers to obtain sensitive information (kernel memory).
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.7 (AV:L/AC:M/Au:N/C:C/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-1083" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-1083" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278318" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278918" version="27">
      <metadata>
        <title>Test for kernel-kdump On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-1083 at MITRE

Description

   The processcompl_compat function in drivers/usb/core/devio.c in Linux kernel 2.6.x through 2.6.32, and possibly other versions, does not
   clear the transfer buffer before returning to userspace when a USB command fails, which might make it easier for physically proximate
   attackers to obtain sensitive information (kernel memory).
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.7 (AV:L/AC:M/Au:N/C:C/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-1083" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-1083" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278314" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278917" version="27">
      <metadata>
        <title>Test for kernel-default On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-1083 at MITRE

Description

   The processcompl_compat function in drivers/usb/core/devio.c in Linux kernel 2.6.x through 2.6.32, and possibly other versions, does not
   clear the transfer buffer before returning to userspace when a USB command fails, which might make it easier for physically proximate
   attackers to obtain sensitive information (kernel memory).
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.7 (AV:L/AC:M/Au:N/C:C/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-1083" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-1083" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278310" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278916" version="27">
      <metadata>
        <title>Test for kernel-debug On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-1083 at MITRE

Description

   The processcompl_compat function in drivers/usb/core/devio.c in Linux kernel 2.6.x through 2.6.32, and possibly other versions, does not
   clear the transfer buffer before returning to userspace when a USB command fails, which might make it easier for physically proximate
   attackers to obtain sensitive information (kernel memory).
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.7 (AV:L/AC:M/Au:N/C:C/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-1083" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-1083" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278306" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278915" version="27">
      <metadata>
        <title>Test for kernel-bigsmp On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-1083 at MITRE

Description

   The processcompl_compat function in drivers/usb/core/devio.c in Linux kernel 2.6.x through 2.6.32, and possibly other versions, does not
   clear the transfer buffer before returning to userspace when a USB command fails, which might make it easier for physically proximate
   attackers to obtain sensitive information (kernel memory).
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.7 (AV:L/AC:M/Au:N/C:C/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-1083" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-1083" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278302" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278914" version="27">
      <metadata>
        <title>Test for kernel-kdumppae On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0410 at MITRE

Description

   drivers/connector/connector.c in the Linux kernel before 2.6.32.8 allows local users to cause a denial of service (memory consumption and
   system crash) by sending the kernel many NETLINK_CONNECTOR messages.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.9 (AV:L/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0410" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0410" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278350" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278913" version="27">
      <metadata>
        <title>Test for kernel-xenpae On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0410 at MITRE

Description

   drivers/connector/connector.c in the Linux kernel before 2.6.32.8 allows local users to cause a denial of service (memory consumption and
   system crash) by sending the kernel many NETLINK_CONNECTOR messages.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.9 (AV:L/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0410" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0410" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278342" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278912" version="27">
      <metadata>
        <title>Test for kernel-xen On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0410 at MITRE

Description

   drivers/connector/connector.c in the Linux kernel before 2.6.32.8 allows local users to cause a denial of service (memory consumption and
   system crash) by sending the kernel many NETLINK_CONNECTOR messages.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.9 (AV:L/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0410" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0410" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278338" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278911" version="27">
      <metadata>
        <title>Test for kernel-vmipae On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0410 at MITRE

Description

   drivers/connector/connector.c in the Linux kernel before 2.6.32.8 allows local users to cause a denial of service (memory consumption and
   system crash) by sending the kernel many NETLINK_CONNECTOR messages.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.9 (AV:L/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0410" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0410" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278334" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278910" version="27">
      <metadata>
        <title>Test for kernel-vmi On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0410 at MITRE

Description

   drivers/connector/connector.c in the Linux kernel before 2.6.32.8 allows local users to cause a denial of service (memory consumption and
   system crash) by sending the kernel many NETLINK_CONNECTOR messages.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.9 (AV:L/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0410" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0410" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278330" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278909" version="27">
      <metadata>
        <title>Test for kernel-syms On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0410 at MITRE

Description

   drivers/connector/connector.c in the Linux kernel before 2.6.32.8 allows local users to cause a denial of service (memory consumption and
   system crash) by sending the kernel many NETLINK_CONNECTOR messages.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.9 (AV:L/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0410" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0410" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278326" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278908" version="27">
      <metadata>
        <title>Test for kernel-source On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0410 at MITRE

Description

   drivers/connector/connector.c in the Linux kernel before 2.6.32.8 allows local users to cause a denial of service (memory consumption and
   system crash) by sending the kernel many NETLINK_CONNECTOR messages.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.9 (AV:L/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0410" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0410" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278322" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278907" version="27">
      <metadata>
        <title>Test for kernel-smp On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0410 at MITRE

Description

   drivers/connector/connector.c in the Linux kernel before 2.6.32.8 allows local users to cause a denial of service (memory consumption and
   system crash) by sending the kernel many NETLINK_CONNECTOR messages.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.9 (AV:L/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0410" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0410" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278318" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278906" version="27">
      <metadata>
        <title>Test for kernel-kdump On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0410 at MITRE

Description

   drivers/connector/connector.c in the Linux kernel before 2.6.32.8 allows local users to cause a denial of service (memory consumption and
   system crash) by sending the kernel many NETLINK_CONNECTOR messages.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.9 (AV:L/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0410" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0410" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278314" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278905" version="27">
      <metadata>
        <title>Test for kernel-default On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0410 at MITRE

Description

   drivers/connector/connector.c in the Linux kernel before 2.6.32.8 allows local users to cause a denial of service (memory consumption and
   system crash) by sending the kernel many NETLINK_CONNECTOR messages.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.9 (AV:L/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0410" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0410" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278310" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278904" version="27">
      <metadata>
        <title>Test for kernel-debug On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0410 at MITRE

Description

   drivers/connector/connector.c in the Linux kernel before 2.6.32.8 allows local users to cause a denial of service (memory consumption and
   system crash) by sending the kernel many NETLINK_CONNECTOR messages.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.9 (AV:L/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0410" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0410" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278306" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278903" version="27">
      <metadata>
        <title>Test for kernel-bigsmp On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0410 at MITRE

Description

   drivers/connector/connector.c in the Linux kernel before 2.6.32.8 allows local users to cause a denial of service (memory consumption and
   system crash) by sending the kernel many NETLINK_CONNECTOR messages.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.9 (AV:L/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0410" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0410" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278302" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278902" version="27">
      <metadata>
        <title>Test for kernel-kdumppae On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-4020 at MITRE

Description

   Stack-based buffer overflow in the hfs subsystem in the Linux kernel 2.6.32 allows remote attackers to have an unspecified impact via a
   crafted Hierarchical File System (HFS) filesystem, related to the hfs_readdir function in fs/hfs/dir.c.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.8 (AV:N/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-4020" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-4020" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278350" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278901" version="27">
      <metadata>
        <title>Test for kernel-xenpae On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-4020 at MITRE

Description

   Stack-based buffer overflow in the hfs subsystem in the Linux kernel 2.6.32 allows remote attackers to have an unspecified impact via a
   crafted Hierarchical File System (HFS) filesystem, related to the hfs_readdir function in fs/hfs/dir.c.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.8 (AV:N/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-4020" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-4020" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278342" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278900" version="27">
      <metadata>
        <title>Test for kernel-xen On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-4020 at MITRE

Description

   Stack-based buffer overflow in the hfs subsystem in the Linux kernel 2.6.32 allows remote attackers to have an unspecified impact via a
   crafted Hierarchical File System (HFS) filesystem, related to the hfs_readdir function in fs/hfs/dir.c.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.8 (AV:N/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-4020" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-4020" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278338" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278899" version="27">
      <metadata>
        <title>Test for kernel-vmipae On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-4020 at MITRE

Description

   Stack-based buffer overflow in the hfs subsystem in the Linux kernel 2.6.32 allows remote attackers to have an unspecified impact via a
   crafted Hierarchical File System (HFS) filesystem, related to the hfs_readdir function in fs/hfs/dir.c.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.8 (AV:N/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-4020" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-4020" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278334" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278898" version="27">
      <metadata>
        <title>Test for kernel-vmi On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-4020 at MITRE

Description

   Stack-based buffer overflow in the hfs subsystem in the Linux kernel 2.6.32 allows remote attackers to have an unspecified impact via a
   crafted Hierarchical File System (HFS) filesystem, related to the hfs_readdir function in fs/hfs/dir.c.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.8 (AV:N/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-4020" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-4020" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278330" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278897" version="27">
      <metadata>
        <title>Test for kernel-syms On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-4020 at MITRE

Description

   Stack-based buffer overflow in the hfs subsystem in the Linux kernel 2.6.32 allows remote attackers to have an unspecified impact via a
   crafted Hierarchical File System (HFS) filesystem, related to the hfs_readdir function in fs/hfs/dir.c.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.8 (AV:N/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-4020" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-4020" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278326" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278896" version="27">
      <metadata>
        <title>Test for kernel-source On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-4020 at MITRE

Description

   Stack-based buffer overflow in the hfs subsystem in the Linux kernel 2.6.32 allows remote attackers to have an unspecified impact via a
   crafted Hierarchical File System (HFS) filesystem, related to the hfs_readdir function in fs/hfs/dir.c.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.8 (AV:N/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-4020" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-4020" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278322" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278895" version="27">
      <metadata>
        <title>Test for kernel-smp On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-4020 at MITRE

Description

   Stack-based buffer overflow in the hfs subsystem in the Linux kernel 2.6.32 allows remote attackers to have an unspecified impact via a
   crafted Hierarchical File System (HFS) filesystem, related to the hfs_readdir function in fs/hfs/dir.c.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.8 (AV:N/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-4020" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-4020" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278318" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278894" version="27">
      <metadata>
        <title>Test for kernel-kdump On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-4020 at MITRE

Description

   Stack-based buffer overflow in the hfs subsystem in the Linux kernel 2.6.32 allows remote attackers to have an unspecified impact via a
   crafted Hierarchical File System (HFS) filesystem, related to the hfs_readdir function in fs/hfs/dir.c.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.8 (AV:N/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-4020" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-4020" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278314" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278893" version="27">
      <metadata>
        <title>Test for kernel-default On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-4020 at MITRE

Description

   Stack-based buffer overflow in the hfs subsystem in the Linux kernel 2.6.32 allows remote attackers to have an unspecified impact via a
   crafted Hierarchical File System (HFS) filesystem, related to the hfs_readdir function in fs/hfs/dir.c.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.8 (AV:N/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-4020" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-4020" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278310" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278892" version="27">
      <metadata>
        <title>Test for kernel-debug On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-4020 at MITRE

Description

   Stack-based buffer overflow in the hfs subsystem in the Linux kernel 2.6.32 allows remote attackers to have an unspecified impact via a
   crafted Hierarchical File System (HFS) filesystem, related to the hfs_readdir function in fs/hfs/dir.c.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.8 (AV:N/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-4020" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-4020" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278306" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278891" version="27">
      <metadata>
        <title>Test for kernel-bigsmp On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-4020 at MITRE

Description

   Stack-based buffer overflow in the hfs subsystem in the Linux kernel 2.6.32 allows remote attackers to have an unspecified impact via a
   crafted Hierarchical File System (HFS) filesystem, related to the hfs_readdir function in fs/hfs/dir.c.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.8 (AV:N/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-4020" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-4020" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278302" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278890" version="27">
      <metadata>
        <title>Test for tar On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0624 at MITRE

Description

   Heap-based buffer overflow in the rmt_read__ function in lib/rtapelib.c in the rmt client functionality in GNU tar before 1.23 and GNU cpio
   before 2.11 allows remote rmt servers to cause a denial of service (memory corruption) or possibly execute arbitrary code by sending more
   data than was requested, related to archive filenames that contain a : (colon) character.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.8 (AV:N/AC:M/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0624" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0624" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278887" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278886" version="27">
      <metadata>
        <title>Test for cpio On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0624 at MITRE

Description

   Heap-based buffer overflow in the rmt_read__ function in lib/rtapelib.c in the rmt client functionality in GNU tar before 1.23 and GNU cpio
   before 2.11 allows remote rmt servers to cause a denial of service (memory corruption) or possibly execute arbitrary code by sending more
   data than was requested, related to archive filenames that contain a : (colon) character.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.8 (AV:N/AC:M/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0624" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0624" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278883" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278882" version="27">
      <metadata>
        <title>Test for mysql-shared On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-4030 at MITRE

Description

   MySQL 5.1.x before 5.1.41 allows local users to bypass certain privilege checks by calling CREATE TABLE on a MyISAM table with modified (1)
   DATA DIRECTORY or (2) INDEX DIRECTORY arguments that are originally associated with pathnames without symlinks, and that can point to tables
   created at a future time at which a pathname is modified to contain a symlink to a subdirectory of the MySQL data home directory, related to
   incorrect calculation of the mysql_unpacked_real_data_home value. NOTE: this vulnerability exists because of an incomplete fix for
   CVE-2008-4098 and CVE-2008-2079.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.4 (AV:L/AC:M/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-4030" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-4030" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278833" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278881" version="27">
      <metadata>
        <title>Test for mysql-devel On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-4030 at MITRE

Description

   MySQL 5.1.x before 5.1.41 allows local users to bypass certain privilege checks by calling CREATE TABLE on a MyISAM table with modified (1)
   DATA DIRECTORY or (2) INDEX DIRECTORY arguments that are originally associated with pathnames without symlinks, and that can point to tables
   created at a future time at which a pathname is modified to contain a symlink to a subdirectory of the MySQL data home directory, related to
   incorrect calculation of the mysql_unpacked_real_data_home value. NOTE: this vulnerability exists because of an incomplete fix for
   CVE-2008-4098 and CVE-2008-2079.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.4 (AV:L/AC:M/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-4030" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-4030" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278829" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278880" version="27">
      <metadata>
        <title>Test for mysql-client On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-4030 at MITRE

Description

   MySQL 5.1.x before 5.1.41 allows local users to bypass certain privilege checks by calling CREATE TABLE on a MyISAM table with modified (1)
   DATA DIRECTORY or (2) INDEX DIRECTORY arguments that are originally associated with pathnames without symlinks, and that can point to tables
   created at a future time at which a pathname is modified to contain a symlink to a subdirectory of the MySQL data home directory, related to
   incorrect calculation of the mysql_unpacked_real_data_home value. NOTE: this vulnerability exists because of an incomplete fix for
   CVE-2008-4098 and CVE-2008-2079.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.4 (AV:L/AC:M/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-4030" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-4030" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278825" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278879" version="27">
      <metadata>
        <title>Test for mysql-Max On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-4030 at MITRE

Description

   MySQL 5.1.x before 5.1.41 allows local users to bypass certain privilege checks by calling CREATE TABLE on a MyISAM table with modified (1)
   DATA DIRECTORY or (2) INDEX DIRECTORY arguments that are originally associated with pathnames without symlinks, and that can point to tables
   created at a future time at which a pathname is modified to contain a symlink to a subdirectory of the MySQL data home directory, related to
   incorrect calculation of the mysql_unpacked_real_data_home value. NOTE: this vulnerability exists because of an incomplete fix for
   CVE-2008-4098 and CVE-2008-2079.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.4 (AV:L/AC:M/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-4030" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-4030" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278821" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278878" version="27">
      <metadata>
        <title>Test for mysql On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-4030 at MITRE

Description

   MySQL 5.1.x before 5.1.41 allows local users to bypass certain privilege checks by calling CREATE TABLE on a MyISAM table with modified (1)
   DATA DIRECTORY or (2) INDEX DIRECTORY arguments that are originally associated with pathnames without symlinks, and that can point to tables
   created at a future time at which a pathname is modified to contain a symlink to a subdirectory of the MySQL data home directory, related to
   incorrect calculation of the mysql_unpacked_real_data_home value. NOTE: this vulnerability exists because of an incomplete fix for
   CVE-2008-4098 and CVE-2008-2079.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.4 (AV:L/AC:M/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-4030" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-4030" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278817" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278877" version="27">
      <metadata>
        <title>Test for mysql-shared On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-4028 at MITRE

Description

   The vio_verify_callback function in viosslfactories.c in MySQL 5.0.x before 5.0.88 and 5.1.x before 5.1.41, when OpenSSL is used, accepts a
   value of zero for the depth of X.509 certificates, which allows man-in-the-middle attackers to spoof arbitrary SSL-based MySQL servers via a
   crafted certificate, as demonstrated by a certificate presented by a server linked against the yaSSL library.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.4 (AV:N/AC:L/Au:N/C:N/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-4028" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-4028" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278833" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278876" version="27">
      <metadata>
        <title>Test for mysql-devel On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-4028 at MITRE

Description

   The vio_verify_callback function in viosslfactories.c in MySQL 5.0.x before 5.0.88 and 5.1.x before 5.1.41, when OpenSSL is used, accepts a
   value of zero for the depth of X.509 certificates, which allows man-in-the-middle attackers to spoof arbitrary SSL-based MySQL servers via a
   crafted certificate, as demonstrated by a certificate presented by a server linked against the yaSSL library.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.4 (AV:N/AC:L/Au:N/C:N/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-4028" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-4028" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278829" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278875" version="27">
      <metadata>
        <title>Test for mysql-client On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-4028 at MITRE

Description

   The vio_verify_callback function in viosslfactories.c in MySQL 5.0.x before 5.0.88 and 5.1.x before 5.1.41, when OpenSSL is used, accepts a
   value of zero for the depth of X.509 certificates, which allows man-in-the-middle attackers to spoof arbitrary SSL-based MySQL servers via a
   crafted certificate, as demonstrated by a certificate presented by a server linked against the yaSSL library.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.4 (AV:N/AC:L/Au:N/C:N/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-4028" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-4028" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278825" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278874" version="27">
      <metadata>
        <title>Test for mysql-Max On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-4028 at MITRE

Description

   The vio_verify_callback function in viosslfactories.c in MySQL 5.0.x before 5.0.88 and 5.1.x before 5.1.41, when OpenSSL is used, accepts a
   value of zero for the depth of X.509 certificates, which allows man-in-the-middle attackers to spoof arbitrary SSL-based MySQL servers via a
   crafted certificate, as demonstrated by a certificate presented by a server linked against the yaSSL library.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.4 (AV:N/AC:L/Au:N/C:N/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-4028" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-4028" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278821" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278873" version="27">
      <metadata>
        <title>Test for mysql On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-4028 at MITRE

Description

   The vio_verify_callback function in viosslfactories.c in MySQL 5.0.x before 5.0.88 and 5.1.x before 5.1.41, when OpenSSL is used, accepts a
   value of zero for the depth of X.509 certificates, which allows man-in-the-middle attackers to spoof arbitrary SSL-based MySQL servers via a
   crafted certificate, as demonstrated by a certificate presented by a server linked against the yaSSL library.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.4 (AV:N/AC:L/Au:N/C:N/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-4028" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-4028" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278817" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278872" version="27">
      <metadata>
        <title>Test for mysql-shared On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-4019 at MITRE

Description

   mysqld in MySQL 5.0.x before 5.0.88 and 5.1.x before 5.1.41 does not (1) properly handle errors during execution of certain SELECT statements
   with subqueries, and does not (2) preserve certain null_value flags during execution of statements that use the GeomFromWKB function, which
   allows remote authenticated users to cause a denial of service (daemon crash) via a crafted statement.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.0 (AV:N/AC:L/Au:S/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-4019" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-4019" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278833" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278871" version="27">
      <metadata>
        <title>Test for mysql-devel On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-4019 at MITRE

Description

   mysqld in MySQL 5.0.x before 5.0.88 and 5.1.x before 5.1.41 does not (1) properly handle errors during execution of certain SELECT statements
   with subqueries, and does not (2) preserve certain null_value flags during execution of statements that use the GeomFromWKB function, which
   allows remote authenticated users to cause a denial of service (daemon crash) via a crafted statement.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.0 (AV:N/AC:L/Au:S/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-4019" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-4019" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278829" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278870" version="27">
      <metadata>
        <title>Test for mysql-client On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-4019 at MITRE

Description

   mysqld in MySQL 5.0.x before 5.0.88 and 5.1.x before 5.1.41 does not (1) properly handle errors during execution of certain SELECT statements
   with subqueries, and does not (2) preserve certain null_value flags during execution of statements that use the GeomFromWKB function, which
   allows remote authenticated users to cause a denial of service (daemon crash) via a crafted statement.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.0 (AV:N/AC:L/Au:S/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-4019" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-4019" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278825" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278869" version="27">
      <metadata>
        <title>Test for mysql-Max On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-4019 at MITRE

Description

   mysqld in MySQL 5.0.x before 5.0.88 and 5.1.x before 5.1.41 does not (1) properly handle errors during execution of certain SELECT statements
   with subqueries, and does not (2) preserve certain null_value flags during execution of statements that use the GeomFromWKB function, which
   allows remote authenticated users to cause a denial of service (daemon crash) via a crafted statement.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.0 (AV:N/AC:L/Au:S/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-4019" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-4019" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278821" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278868" version="27">
      <metadata>
        <title>Test for mysql On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-4019 at MITRE

Description

   mysqld in MySQL 5.0.x before 5.0.88 and 5.1.x before 5.1.41 does not (1) properly handle errors during execution of certain SELECT statements
   with subqueries, and does not (2) preserve certain null_value flags during execution of statements that use the GeomFromWKB function, which
   allows remote authenticated users to cause a denial of service (daemon crash) via a crafted statement.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.0 (AV:N/AC:L/Au:S/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-4019" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-4019" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278817" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278867" version="27">
      <metadata>
        <title>Test for libmikmod On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-3996 at MITRE

Description

   Heap-based buffer overflow in IN_MOD.DLL (aka the Module Decoder Plug-in) in Winamp before 5.57, and libmikmod 3.1.12, might allow remote
   attackers to execute arbitrary code via an Ultratracker file.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-3996" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-3996" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278863" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278866" version="27">
      <metadata>
        <title>Test for libmikmod On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-3995 at MITRE

Description

   Multiple heap-based buffer overflows in IN_MOD.DLL (aka the Module Decoder Plug-in) in Winamp before 5.57, and libmikmod 3.1.12, might allow
   remote attackers to execute arbitrary code via (1) crafted samples or (2) crafted instrument definitions in an Impulse Tracker file. NOTE:
   some of these details are obtained from third party information.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-3995" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-3995" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278863" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278862" version="27">
      <metadata>
        <title>Test for libapr1-devel On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-2412 at MITRE

Description

   Multiple integer overflows in the Apache Portable Runtime (APR) library and the Apache Portable Utility library (aka APR-util) 0.9.x and
   1.3.x allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via vectors that trigger
   crafted calls to the (1) allocator_alloc or (2) apr_palloc function in memory/unix/apr_pools.c in APR; or crafted calls to the (3)
   apr_rmm_malloc, (4) apr_rmm_calloc, or (5) apr_rmm_realloc function in misc/apr_rmm.c in APR-util; leading to buffer overflows. NOTE: some of
   these details are obtained from third party information.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-2412" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-2412" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278859" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278858" version="27">
      <metadata>
        <title>Test for libapr1 On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-2412 at MITRE

Description

   Multiple integer overflows in the Apache Portable Runtime (APR) library and the Apache Portable Utility library (aka APR-util) 0.9.x and
   1.3.x allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via vectors that trigger
   crafted calls to the (1) allocator_alloc or (2) apr_palloc function in memory/unix/apr_pools.c in APR; or crafted calls to the (3)
   apr_rmm_malloc, (4) apr_rmm_calloc, or (5) apr_rmm_realloc function in misc/apr_rmm.c in APR-util; leading to buffer overflows. NOTE: some of
   these details are obtained from third party information.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-2412" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-2412" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278855" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278854" version="27">
      <metadata>
        <title>Test for libapr-util1-devel On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-2412 at MITRE

Description

   Multiple integer overflows in the Apache Portable Runtime (APR) library and the Apache Portable Utility library (aka APR-util) 0.9.x and
   1.3.x allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via vectors that trigger
   crafted calls to the (1) allocator_alloc or (2) apr_palloc function in memory/unix/apr_pools.c in APR; or crafted calls to the (3)
   apr_rmm_malloc, (4) apr_rmm_calloc, or (5) apr_rmm_realloc function in misc/apr_rmm.c in APR-util; leading to buffer overflows. NOTE: some of
   these details are obtained from third party information.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-2412" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-2412" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278849" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278853" version="27">
      <metadata>
        <title>Test for libapr-util1 On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-2412 at MITRE

Description

   Multiple integer overflows in the Apache Portable Runtime (APR) library and the Apache Portable Utility library (aka APR-util) 0.9.x and
   1.3.x allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via vectors that trigger
   crafted calls to the (1) allocator_alloc or (2) apr_palloc function in memory/unix/apr_pools.c in APR; or crafted calls to the (3)
   apr_rmm_malloc, (4) apr_rmm_calloc, or (5) apr_rmm_realloc function in misc/apr_rmm.c in APR-util; leading to buffer overflows. NOTE: some of
   these details are obtained from third party information.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-2412" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-2412" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278845" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278852" version="27">
      <metadata>
        <title>Test for libapr-util1-devel On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-1955 at MITRE

Description

   The expat XML parser in the apr_xml_* interface in xml/apr_xml.c in Apache APR-util before 1.3.7, as used in the mod_dav and mod_dav_svn
   modules in the Apache HTTP Server, allows remote attackers to cause a denial of service (memory consumption) via a crafted XML document
   containing a large number of nested entity references, as demonstrated by a PROPFIND request, a similar issue to CVE-2003-1564.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.8 (AV:N/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-1955" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-1955" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278849" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278848" version="27">
      <metadata>
        <title>Test for libapr-util1 On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-1955 at MITRE

Description

   The expat XML parser in the apr_xml_* interface in xml/apr_xml.c in Apache APR-util before 1.3.7, as used in the mod_dav and mod_dav_svn
   modules in the Apache HTTP Server, allows remote attackers to cause a denial of service (memory consumption) via a crafted XML document
   containing a large number of nested entity references, as demonstrated by a PROPFIND request, a similar issue to CVE-2003-1564.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.8 (AV:N/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-1955" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-1955" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278845" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278844" version="27">
      <metadata>
        <title>Test for evolution-data-server-devel On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-0547 at MITRE

Description

   Evolution 2.22.3.1 checks S/MIME signatures against a copy of the e-mail text within a signed-data blob, not the copy of the e-mail text
   displayed to the user, which allows remote attackers to spoof a signature by modifying the latter copy, a different vulnerability than
   CVE-2008-5077.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-0547" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-0547" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278841" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278840" version="27">
      <metadata>
        <title>Test for evolution-data-server On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-0547 at MITRE

Description

   Evolution 2.22.3.1 checks S/MIME signatures against a copy of the e-mail text within a signed-data blob, not the copy of the e-mail text
   displayed to the user, which allows remote attackers to spoof a signature by modifying the latter copy, a different vulnerability than
   CVE-2008-5077.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-0547" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-0547" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278837" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278836" version="27">
      <metadata>
        <title>Test for mysql-shared On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2008-7247 at MITRE

Description

   sql/sql_table.cc in MySQL 5.0.x through 5.0.88, 5.1.x through 5.1.41, and 6.0 before 6.0.9-alpha, when the data home directory contains a
   symlink to a different filesystem, allows remote authenticated users to bypass intended access restrictions by calling CREATE TABLE with a
   (1) DATA DIRECTORY or (2) INDEX DIRECTORY argument referring to a subdirectory that requires following this symlink.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.0 (AV:N/AC:M/Au:S/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2008-7247" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2008-7247" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278833" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278832" version="27">
      <metadata>
        <title>Test for mysql-devel On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2008-7247 at MITRE

Description

   sql/sql_table.cc in MySQL 5.0.x through 5.0.88, 5.1.x through 5.1.41, and 6.0 before 6.0.9-alpha, when the data home directory contains a
   symlink to a different filesystem, allows remote authenticated users to bypass intended access restrictions by calling CREATE TABLE with a
   (1) DATA DIRECTORY or (2) INDEX DIRECTORY argument referring to a subdirectory that requires following this symlink.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.0 (AV:N/AC:M/Au:S/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2008-7247" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2008-7247" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278829" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278828" version="27">
      <metadata>
        <title>Test for mysql-client On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2008-7247 at MITRE

Description

   sql/sql_table.cc in MySQL 5.0.x through 5.0.88, 5.1.x through 5.1.41, and 6.0 before 6.0.9-alpha, when the data home directory contains a
   symlink to a different filesystem, allows remote authenticated users to bypass intended access restrictions by calling CREATE TABLE with a
   (1) DATA DIRECTORY or (2) INDEX DIRECTORY argument referring to a subdirectory that requires following this symlink.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.0 (AV:N/AC:M/Au:S/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2008-7247" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2008-7247" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278825" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278824" version="27">
      <metadata>
        <title>Test for mysql-Max On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2008-7247 at MITRE

Description

   sql/sql_table.cc in MySQL 5.0.x through 5.0.88, 5.1.x through 5.1.41, and 6.0 before 6.0.9-alpha, when the data home directory contains a
   symlink to a different filesystem, allows remote authenticated users to bypass intended access restrictions by calling CREATE TABLE with a
   (1) DATA DIRECTORY or (2) INDEX DIRECTORY argument referring to a subdirectory that requires following this symlink.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.0 (AV:N/AC:M/Au:S/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2008-7247" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2008-7247" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278821" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278820" version="27">
      <metadata>
        <title>Test for mysql On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2008-7247 at MITRE

Description

   sql/sql_table.cc in MySQL 5.0.x through 5.0.88, 5.1.x through 5.1.41, and 6.0 before 6.0.9-alpha, when the data home directory contains a
   symlink to a different filesystem, allows remote authenticated users to bypass intended access restrictions by calling CREATE TABLE with a
   (1) DATA DIRECTORY or (2) INDEX DIRECTORY argument referring to a subdirectory that requires following this symlink.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.0 (AV:N/AC:M/Au:S/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2008-7247" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2008-7247" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278817" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278816" version="27">
      <metadata>
        <title>Test for ncpfs-devel On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0791 at MITRE

Description

   The (1) ncpmount, (2) ncpumount, and (3) ncplogin programs in ncpfs 2.2.6 do not properly create lock files, which allows local users to
   cause a denial of service (application failure) via unspecified vectors that trigger the creation of a /etc/mtab~ file that persists after
   the program exits.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.1 (AV:L/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0791" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0791" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278809" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278815" version="27">
      <metadata>
        <title>Test for ncpfs On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0791 at MITRE

Description

   The (1) ncpmount, (2) ncpumount, and (3) ncplogin programs in ncpfs 2.2.6 do not properly create lock files, which allows local users to
   cause a denial of service (application failure) via unspecified vectors that trigger the creation of a /etc/mtab~ file that persists after
   the program exits.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.1 (AV:L/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0791" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0791" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278805" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278814" version="27">
      <metadata>
        <title>Test for ncpfs-devel On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0790 at MITRE

Description

   sutil/ncpumount.c in ncpumount in ncpfs 2.2.6 produces certain detailed error messages about the results of privileged file-access attempts,
   which allows local users to determine the existence of arbitrary files via the mountpoint name.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.1 (AV:L/AC:L/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0790" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0790" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278809" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278813" version="27">
      <metadata>
        <title>Test for ncpfs On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0790 at MITRE

Description

   sutil/ncpumount.c in ncpumount in ncpfs 2.2.6 produces certain detailed error messages about the results of privileged file-access attempts,
   which allows local users to determine the existence of arbitrary files via the mountpoint name.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.1 (AV:L/AC:L/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0790" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0790" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278805" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278812" version="27">
      <metadata>
        <title>Test for ncpfs-devel On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0788 at MITRE

Description

   ncpfs 2.2.6 allows local users to cause a denial of service, obtain sensitive information, or possibly gain privileges via symlink attacks
   involving the (1) ncpmount and (2) ncpumount programs.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.4 (AV:L/AC:M/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0788" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0788" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278809" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278808" version="27">
      <metadata>
        <title>Test for ncpfs On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0788 at MITRE

Description

   ncpfs 2.2.6 allows local users to cause a denial of service, obtain sensitive information, or possibly gain privileges via symlink attacks
   involving the (1) ncpmount and (2) ncpumount programs.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.4 (AV:L/AC:M/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0788" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0788" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278805" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278804" version="27">
      <metadata>
        <title>Test for libpng-devel On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0205 at MITRE

Description

   The png_decompress_chunk function in pngrutil.c in libpng 1.0.x before 1.0.53, 1.2.x before 1.2.43, and 1.4.x before 1.4.1 does not properly
   handle compressed ancillary-chunk data that has a disproportionately large uncompressed representation, which allows remote attackers to
   cause a denial of service (memory and CPU consumption, and application hang) via a crafted PNG file, as demonstrated by use of the deflate
   compression method on data composed of many occurrences of the same character, related to a "decompression bomb" attack.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.8 (AV:N/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0205" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0205" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278801" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278800" version="27">
      <metadata>
        <title>Test for libpng On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0205 at MITRE

Description

   The png_decompress_chunk function in pngrutil.c in libpng 1.0.x before 1.0.53, 1.2.x before 1.2.43, and 1.4.x before 1.4.1 does not properly
   handle compressed ancillary-chunk data that has a disproportionately large uncompressed representation, which allows remote attackers to
   cause a denial of service (memory and CPU consumption, and application hang) via a crafted PNG file, as demonstrated by use of the deflate
   compression method on data composed of many occurrences of the same character, related to a "decompression bomb" attack.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.8 (AV:N/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0205" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0205" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278797" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278796" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner191-translations On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0182 at MITRE

Description

   The XMLDocument::load function in Mozilla Firefox before 3.5.9 and 3.6.x before 3.6.2, Thunderbird before 3.0.4, and SeaMonkey before 2.0.4
   does not perform the expected nsIContentPolicy checks during loading of content by XML documents, which allows attackers to bypass intended
   access restrictions via crafted content.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0182" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0182" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278248" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278795" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner191-gnomevfs On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0182 at MITRE

Description

   The XMLDocument::load function in Mozilla Firefox before 3.5.9 and 3.6.x before 3.6.2, Thunderbird before 3.0.4, and SeaMonkey before 2.0.4
   does not perform the expected nsIContentPolicy checks during loading of content by XML documents, which allows attackers to bypass intended
   access restrictions via crafted content.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0182" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0182" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278244" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278794" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner191 On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0182 at MITRE

Description

   The XMLDocument::load function in Mozilla Firefox before 3.5.9 and 3.6.x before 3.6.2, Thunderbird before 3.0.4, and SeaMonkey before 2.0.4
   does not perform the expected nsIContentPolicy checks during loading of content by XML documents, which allows attackers to bypass intended
   access restrictions via crafted content.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0182" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0182" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278240" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278793" version="27">
      <metadata>
        <title>Test for MozillaFirefox-translations On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0182 at MITRE

Description

   The XMLDocument::load function in Mozilla Firefox before 3.5.9 and 3.6.x before 3.6.2, Thunderbird before 3.0.4, and SeaMonkey before 2.0.4
   does not perform the expected nsIContentPolicy checks during loading of content by XML documents, which allows attackers to bypass intended
   access restrictions via crafted content.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0182" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0182" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278168" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278792" version="27">
      <metadata>
        <title>Test for MozillaFirefox On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0182 at MITRE

Description

   The XMLDocument::load function in Mozilla Firefox before 3.5.9 and 3.6.x before 3.6.2, Thunderbird before 3.0.4, and SeaMonkey before 2.0.4
   does not perform the expected nsIContentPolicy checks during loading of content by XML documents, which allows attackers to bypass intended
   access restrictions via crafted content.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0182" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0182" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278160" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278791" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner190-translations On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0182 at MITRE

Description

   The XMLDocument::load function in Mozilla Firefox before 3.5.9 and 3.6.x before 3.6.2, Thunderbird before 3.0.4, and SeaMonkey before 2.0.4
   does not perform the expected nsIContentPolicy checks during loading of content by XML documents, which allows attackers to bypass intended
   access restrictions via crafted content.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0182" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0182" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278200" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278790" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner190-gnomevfs On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0182 at MITRE

Description

   The XMLDocument::load function in Mozilla Firefox before 3.5.9 and 3.6.x before 3.6.2, Thunderbird before 3.0.4, and SeaMonkey before 2.0.4
   does not perform the expected nsIContentPolicy checks during loading of content by XML documents, which allows attackers to bypass intended
   access restrictions via crafted content.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0182" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0182" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278196" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278789" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner190 On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0182 at MITRE

Description

   The XMLDocument::load function in Mozilla Firefox before 3.5.9 and 3.6.x before 3.6.2, Thunderbird before 3.0.4, and SeaMonkey before 2.0.4
   does not perform the expected nsIContentPolicy checks during loading of content by XML documents, which allows attackers to bypass intended
   access restrictions via crafted content.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0182" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0182" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278192" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278788" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner191-translations On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0181 at MITRE

Description

   Mozilla Firefox before 3.5.9 and 3.6.x before 3.6.2, and SeaMonkey before 2.0.4, executes a mail application in situations where an IMG
   element has a SRC attribute that is a redirect to a mailto: URL, which allows remote attackers to cause a denial of service (excessive
   application launches) via an HTML document with many images.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0181" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0181" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278248" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278787" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner191-gnomevfs On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0181 at MITRE

Description

   Mozilla Firefox before 3.5.9 and 3.6.x before 3.6.2, and SeaMonkey before 2.0.4, executes a mail application in situations where an IMG
   element has a SRC attribute that is a redirect to a mailto: URL, which allows remote attackers to cause a denial of service (excessive
   application launches) via an HTML document with many images.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0181" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0181" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278244" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278786" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner191 On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0181 at MITRE

Description

   Mozilla Firefox before 3.5.9 and 3.6.x before 3.6.2, and SeaMonkey before 2.0.4, executes a mail application in situations where an IMG
   element has a SRC attribute that is a redirect to a mailto: URL, which allows remote attackers to cause a denial of service (excessive
   application launches) via an HTML document with many images.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0181" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0181" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278240" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278785" version="27">
      <metadata>
        <title>Test for MozillaFirefox-translations On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0181 at MITRE

Description

   Mozilla Firefox before 3.5.9 and 3.6.x before 3.6.2, and SeaMonkey before 2.0.4, executes a mail application in situations where an IMG
   element has a SRC attribute that is a redirect to a mailto: URL, which allows remote attackers to cause a denial of service (excessive
   application launches) via an HTML document with many images.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0181" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0181" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278168" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278784" version="27">
      <metadata>
        <title>Test for MozillaFirefox On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0181 at MITRE

Description

   Mozilla Firefox before 3.5.9 and 3.6.x before 3.6.2, and SeaMonkey before 2.0.4, executes a mail application in situations where an IMG
   element has a SRC attribute that is a redirect to a mailto: URL, which allows remote attackers to cause a denial of service (excessive
   application launches) via an HTML document with many images.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0181" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0181" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278160" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278783" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner190-translations On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0181 at MITRE

Description

   Mozilla Firefox before 3.5.9 and 3.6.x before 3.6.2, and SeaMonkey before 2.0.4, executes a mail application in situations where an IMG
   element has a SRC attribute that is a redirect to a mailto: URL, which allows remote attackers to cause a denial of service (excessive
   application launches) via an HTML document with many images.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0181" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0181" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278200" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278782" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner190-gnomevfs On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0181 at MITRE

Description

   Mozilla Firefox before 3.5.9 and 3.6.x before 3.6.2, and SeaMonkey before 2.0.4, executes a mail application in situations where an IMG
   element has a SRC attribute that is a redirect to a mailto: URL, which allows remote attackers to cause a denial of service (excessive
   application launches) via an HTML document with many images.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0181" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0181" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278196" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278781" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner190 On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0181 at MITRE

Description

   Mozilla Firefox before 3.5.9 and 3.6.x before 3.6.2, and SeaMonkey before 2.0.4, executes a mail application in situations where an IMG
   element has a SRC attribute that is a redirect to a mailto: URL, which allows remote attackers to cause a denial of service (excessive
   application launches) via an HTML document with many images.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0181" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0181" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278192" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278780" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner191-translations On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0179 at MITRE

Description

   Mozilla Firefox before 3.0.19 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, when the XMLHttpRequestSpy module in the Firebug add-on is
   used, does not properly handle interaction between the XMLHttpRequestSpy object and chrome privileged objects, which allows remote attackers
   to execute arbitrary JavaScript via a crafted HTTP response.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0179" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0179" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278248" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278779" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner191-gnomevfs On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0179 at MITRE

Description

   Mozilla Firefox before 3.0.19 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, when the XMLHttpRequestSpy module in the Firebug add-on is
   used, does not properly handle interaction between the XMLHttpRequestSpy object and chrome privileged objects, which allows remote attackers
   to execute arbitrary JavaScript via a crafted HTTP response.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0179" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0179" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278244" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278778" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner191 On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0179 at MITRE

Description

   Mozilla Firefox before 3.0.19 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, when the XMLHttpRequestSpy module in the Firebug add-on is
   used, does not properly handle interaction between the XMLHttpRequestSpy object and chrome privileged objects, which allows remote attackers
   to execute arbitrary JavaScript via a crafted HTTP response.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0179" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0179" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278240" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278777" version="27">
      <metadata>
        <title>Test for MozillaFirefox-translations On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0179 at MITRE

Description

   Mozilla Firefox before 3.0.19 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, when the XMLHttpRequestSpy module in the Firebug add-on is
   used, does not properly handle interaction between the XMLHttpRequestSpy object and chrome privileged objects, which allows remote attackers
   to execute arbitrary JavaScript via a crafted HTTP response.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0179" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0179" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278168" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278776" version="27">
      <metadata>
        <title>Test for MozillaFirefox On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0179 at MITRE

Description

   Mozilla Firefox before 3.0.19 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, when the XMLHttpRequestSpy module in the Firebug add-on is
   used, does not properly handle interaction between the XMLHttpRequestSpy object and chrome privileged objects, which allows remote attackers
   to execute arbitrary JavaScript via a crafted HTTP response.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0179" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0179" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278160" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278775" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner190-translations On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0179 at MITRE

Description

   Mozilla Firefox before 3.0.19 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, when the XMLHttpRequestSpy module in the Firebug add-on is
   used, does not properly handle interaction between the XMLHttpRequestSpy object and chrome privileged objects, which allows remote attackers
   to execute arbitrary JavaScript via a crafted HTTP response.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0179" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0179" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278200" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278774" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner190-gnomevfs On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0179 at MITRE

Description

   Mozilla Firefox before 3.0.19 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, when the XMLHttpRequestSpy module in the Firebug add-on is
   used, does not properly handle interaction between the XMLHttpRequestSpy object and chrome privileged objects, which allows remote attackers
   to execute arbitrary JavaScript via a crafted HTTP response.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0179" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0179" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278196" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278773" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner190 On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0179 at MITRE

Description

   Mozilla Firefox before 3.0.19 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, when the XMLHttpRequestSpy module in the Firebug add-on is
   used, does not properly handle interaction between the XMLHttpRequestSpy object and chrome privileged objects, which allows remote attackers
   to execute arbitrary JavaScript via a crafted HTTP response.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0179" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0179" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278192" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278772" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner191-translations On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0178 at MITRE

Description

   Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2, and SeaMonkey before 2.0.4, does not prevent applets from
   interpreting mouse clicks as drag-and-drop actions, which allows remote attackers to execute arbitrary JavaScript with Chrome privileges by
   loading a chrome: URL and then loading a javascript: URL.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.6 (AV:N/AC:H/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0178" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0178" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278248" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278771" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner191-gnomevfs On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0178 at MITRE

Description

   Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2, and SeaMonkey before 2.0.4, does not prevent applets from
   interpreting mouse clicks as drag-and-drop actions, which allows remote attackers to execute arbitrary JavaScript with Chrome privileges by
   loading a chrome: URL and then loading a javascript: URL.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.6 (AV:N/AC:H/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0178" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0178" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278244" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278770" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner191 On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0178 at MITRE

Description

   Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2, and SeaMonkey before 2.0.4, does not prevent applets from
   interpreting mouse clicks as drag-and-drop actions, which allows remote attackers to execute arbitrary JavaScript with Chrome privileges by
   loading a chrome: URL and then loading a javascript: URL.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.6 (AV:N/AC:H/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0178" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0178" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278240" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278769" version="27">
      <metadata>
        <title>Test for MozillaFirefox-translations On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0178 at MITRE

Description

   Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2, and SeaMonkey before 2.0.4, does not prevent applets from
   interpreting mouse clicks as drag-and-drop actions, which allows remote attackers to execute arbitrary JavaScript with Chrome privileges by
   loading a chrome: URL and then loading a javascript: URL.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.6 (AV:N/AC:H/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0178" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0178" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278168" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278768" version="27">
      <metadata>
        <title>Test for MozillaFirefox On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0178 at MITRE

Description

   Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2, and SeaMonkey before 2.0.4, does not prevent applets from
   interpreting mouse clicks as drag-and-drop actions, which allows remote attackers to execute arbitrary JavaScript with Chrome privileges by
   loading a chrome: URL and then loading a javascript: URL.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.6 (AV:N/AC:H/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0178" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0178" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278160" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278767" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner190-translations On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0178 at MITRE

Description

   Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2, and SeaMonkey before 2.0.4, does not prevent applets from
   interpreting mouse clicks as drag-and-drop actions, which allows remote attackers to execute arbitrary JavaScript with Chrome privileges by
   loading a chrome: URL and then loading a javascript: URL.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.6 (AV:N/AC:H/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0178" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0178" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278200" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278766" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner190-gnomevfs On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0178 at MITRE

Description

   Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2, and SeaMonkey before 2.0.4, does not prevent applets from
   interpreting mouse clicks as drag-and-drop actions, which allows remote attackers to execute arbitrary JavaScript with Chrome privileges by
   loading a chrome: URL and then loading a javascript: URL.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.6 (AV:N/AC:H/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0178" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0178" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278196" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278765" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner190 On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0178 at MITRE

Description

   Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2, and SeaMonkey before 2.0.4, does not prevent applets from
   interpreting mouse clicks as drag-and-drop actions, which allows remote attackers to execute arbitrary JavaScript with Chrome privileges by
   loading a chrome: URL and then loading a javascript: URL.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.6 (AV:N/AC:H/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0178" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0178" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278192" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278764" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner191-translations On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0177 at MITRE

Description

   Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2, and SeaMonkey before 2.0.4, frees the contents of the
   window.navigator.plugins array while a reference to an array element is still active, which allows remote attackers to execute arbitrary code
   or cause a denial of service (application crash) via unspecified vectors, related to a "dangling pointer vulnerability."
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0177" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0177" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278248" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278763" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner191-gnomevfs On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0177 at MITRE

Description

   Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2, and SeaMonkey before 2.0.4, frees the contents of the
   window.navigator.plugins array while a reference to an array element is still active, which allows remote attackers to execute arbitrary code
   or cause a denial of service (application crash) via unspecified vectors, related to a "dangling pointer vulnerability."
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0177" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0177" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278244" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278762" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner191 On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0177 at MITRE

Description

   Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2, and SeaMonkey before 2.0.4, frees the contents of the
   window.navigator.plugins array while a reference to an array element is still active, which allows remote attackers to execute arbitrary code
   or cause a denial of service (application crash) via unspecified vectors, related to a "dangling pointer vulnerability."
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0177" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0177" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278240" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278761" version="27">
      <metadata>
        <title>Test for MozillaFirefox-translations On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0177 at MITRE

Description

   Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2, and SeaMonkey before 2.0.4, frees the contents of the
   window.navigator.plugins array while a reference to an array element is still active, which allows remote attackers to execute arbitrary code
   or cause a denial of service (application crash) via unspecified vectors, related to a "dangling pointer vulnerability."
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0177" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0177" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278168" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278760" version="27">
      <metadata>
        <title>Test for MozillaFirefox On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0177 at MITRE

Description

   Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2, and SeaMonkey before 2.0.4, frees the contents of the
   window.navigator.plugins array while a reference to an array element is still active, which allows remote attackers to execute arbitrary code
   or cause a denial of service (application crash) via unspecified vectors, related to a "dangling pointer vulnerability."
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0177" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0177" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278160" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278759" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner190-translations On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0177 at MITRE

Description

   Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2, and SeaMonkey before 2.0.4, frees the contents of the
   window.navigator.plugins array while a reference to an array element is still active, which allows remote attackers to execute arbitrary code
   or cause a denial of service (application crash) via unspecified vectors, related to a "dangling pointer vulnerability."
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0177" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0177" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278200" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278758" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner190-gnomevfs On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0177 at MITRE

Description

   Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2, and SeaMonkey before 2.0.4, frees the contents of the
   window.navigator.plugins array while a reference to an array element is still active, which allows remote attackers to execute arbitrary code
   or cause a denial of service (application crash) via unspecified vectors, related to a "dangling pointer vulnerability."
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0177" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0177" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278196" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278757" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner190 On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0177 at MITRE

Description

   Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2, and SeaMonkey before 2.0.4, frees the contents of the
   window.navigator.plugins array while a reference to an array element is still active, which allows remote attackers to execute arbitrary code
   or cause a denial of service (application crash) via unspecified vectors, related to a "dangling pointer vulnerability."
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0177" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0177" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278192" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278756" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner191-translations On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0176 at MITRE

Description

   Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2; Thunderbird before 3.0.4; and SeaMonkey before 2.0.4 do not
   properly manage reference counts for option elements in a XUL tree optgroup, which might allow remote attackers to execute arbitrary code via
   unspecified vectors that trigger access to deleted elements, related to a "dangling pointer vulnerability."
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0176" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0176" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278248" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278755" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner191-gnomevfs On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0176 at MITRE

Description

   Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2; Thunderbird before 3.0.4; and SeaMonkey before 2.0.4 do not
   properly manage reference counts for option elements in a XUL tree optgroup, which might allow remote attackers to execute arbitrary code via
   unspecified vectors that trigger access to deleted elements, related to a "dangling pointer vulnerability."
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0176" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0176" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278244" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278754" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner191 On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0176 at MITRE

Description

   Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2; Thunderbird before 3.0.4; and SeaMonkey before 2.0.4 do not
   properly manage reference counts for option elements in a XUL tree optgroup, which might allow remote attackers to execute arbitrary code via
   unspecified vectors that trigger access to deleted elements, related to a "dangling pointer vulnerability."
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0176" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0176" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278240" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278753" version="27">
      <metadata>
        <title>Test for MozillaFirefox-translations On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0176 at MITRE

Description

   Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2; Thunderbird before 3.0.4; and SeaMonkey before 2.0.4 do not
   properly manage reference counts for option elements in a XUL tree optgroup, which might allow remote attackers to execute arbitrary code via
   unspecified vectors that trigger access to deleted elements, related to a "dangling pointer vulnerability."
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0176" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0176" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278168" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278752" version="27">
      <metadata>
        <title>Test for MozillaFirefox On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0176 at MITRE

Description

   Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2; Thunderbird before 3.0.4; and SeaMonkey before 2.0.4 do not
   properly manage reference counts for option elements in a XUL tree optgroup, which might allow remote attackers to execute arbitrary code via
   unspecified vectors that trigger access to deleted elements, related to a "dangling pointer vulnerability."
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0176" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0176" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278160" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278751" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner190-translations On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0176 at MITRE

Description

   Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2; Thunderbird before 3.0.4; and SeaMonkey before 2.0.4 do not
   properly manage reference counts for option elements in a XUL tree optgroup, which might allow remote attackers to execute arbitrary code via
   unspecified vectors that trigger access to deleted elements, related to a "dangling pointer vulnerability."
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0176" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0176" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278200" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278750" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner190-gnomevfs On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0176 at MITRE

Description

   Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2; Thunderbird before 3.0.4; and SeaMonkey before 2.0.4 do not
   properly manage reference counts for option elements in a XUL tree optgroup, which might allow remote attackers to execute arbitrary code via
   unspecified vectors that trigger access to deleted elements, related to a "dangling pointer vulnerability."
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0176" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0176" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278196" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278749" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner190 On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0176 at MITRE

Description

   Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2; Thunderbird before 3.0.4; and SeaMonkey before 2.0.4 do not
   properly manage reference counts for option elements in a XUL tree optgroup, which might allow remote attackers to execute arbitrary code via
   unspecified vectors that trigger access to deleted elements, related to a "dangling pointer vulnerability."
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0176" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0176" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278192" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278748" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner191-translations On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0175 at MITRE

Description

   Use-after-free vulnerability in the nsTreeSelection implementation in Mozilla Firefox before 3.0.19 and 3.5.x before 3.5.9, Thunderbird
   before 3.0.4, and SeaMonkey before 2.0.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash)
   via unspecified vectors that trigger a call to the handler for the select event for XUL tree items.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0175" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0175" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278248" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278747" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner191-gnomevfs On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0175 at MITRE

Description

   Use-after-free vulnerability in the nsTreeSelection implementation in Mozilla Firefox before 3.0.19 and 3.5.x before 3.5.9, Thunderbird
   before 3.0.4, and SeaMonkey before 2.0.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash)
   via unspecified vectors that trigger a call to the handler for the select event for XUL tree items.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0175" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0175" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278244" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278746" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner191 On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0175 at MITRE

Description

   Use-after-free vulnerability in the nsTreeSelection implementation in Mozilla Firefox before 3.0.19 and 3.5.x before 3.5.9, Thunderbird
   before 3.0.4, and SeaMonkey before 2.0.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash)
   via unspecified vectors that trigger a call to the handler for the select event for XUL tree items.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0175" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0175" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278240" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278745" version="27">
      <metadata>
        <title>Test for MozillaFirefox-translations On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0175 at MITRE

Description

   Use-after-free vulnerability in the nsTreeSelection implementation in Mozilla Firefox before 3.0.19 and 3.5.x before 3.5.9, Thunderbird
   before 3.0.4, and SeaMonkey before 2.0.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash)
   via unspecified vectors that trigger a call to the handler for the select event for XUL tree items.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0175" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0175" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278168" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278744" version="27">
      <metadata>
        <title>Test for MozillaFirefox On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0175 at MITRE

Description

   Use-after-free vulnerability in the nsTreeSelection implementation in Mozilla Firefox before 3.0.19 and 3.5.x before 3.5.9, Thunderbird
   before 3.0.4, and SeaMonkey before 2.0.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash)
   via unspecified vectors that trigger a call to the handler for the select event for XUL tree items.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0175" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0175" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278160" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278743" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner190-translations On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0175 at MITRE

Description

   Use-after-free vulnerability in the nsTreeSelection implementation in Mozilla Firefox before 3.0.19 and 3.5.x before 3.5.9, Thunderbird
   before 3.0.4, and SeaMonkey before 2.0.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash)
   via unspecified vectors that trigger a call to the handler for the select event for XUL tree items.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0175" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0175" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278200" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278742" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner190-gnomevfs On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0175 at MITRE

Description

   Use-after-free vulnerability in the nsTreeSelection implementation in Mozilla Firefox before 3.0.19 and 3.5.x before 3.5.9, Thunderbird
   before 3.0.4, and SeaMonkey before 2.0.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash)
   via unspecified vectors that trigger a call to the handler for the select event for XUL tree items.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0175" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0175" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278196" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278741" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner190 On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0175 at MITRE

Description

   Use-after-free vulnerability in the nsTreeSelection implementation in Mozilla Firefox before 3.0.19 and 3.5.x before 3.5.9, Thunderbird
   before 3.0.4, and SeaMonkey before 2.0.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash)
   via unspecified vectors that trigger a call to the handler for the select event for XUL tree items.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0175" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0175" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278192" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278740" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner191-translations On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0174 at MITRE

Description

   Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2;
   Thunderbird before 3.0.4; and SeaMonkey before 2.0.4 allow remote attackers to cause a denial of service (memory corruption and application
   crash) or possibly execute arbitrary code via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0174" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0174" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278248" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278739" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner191-gnomevfs On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0174 at MITRE

Description

   Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2;
   Thunderbird before 3.0.4; and SeaMonkey before 2.0.4 allow remote attackers to cause a denial of service (memory corruption and application
   crash) or possibly execute arbitrary code via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0174" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0174" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278244" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278738" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner191 On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0174 at MITRE

Description

   Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2;
   Thunderbird before 3.0.4; and SeaMonkey before 2.0.4 allow remote attackers to cause a denial of service (memory corruption and application
   crash) or possibly execute arbitrary code via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0174" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0174" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278240" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278737" version="27">
      <metadata>
        <title>Test for MozillaFirefox-translations On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0174 at MITRE

Description

   Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2;
   Thunderbird before 3.0.4; and SeaMonkey before 2.0.4 allow remote attackers to cause a denial of service (memory corruption and application
   crash) or possibly execute arbitrary code via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0174" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0174" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278168" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278736" version="27">
      <metadata>
        <title>Test for MozillaFirefox On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0174 at MITRE

Description

   Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2;
   Thunderbird before 3.0.4; and SeaMonkey before 2.0.4 allow remote attackers to cause a denial of service (memory corruption and application
   crash) or possibly execute arbitrary code via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0174" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0174" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278160" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278735" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner190-translations On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0174 at MITRE

Description

   Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2;
   Thunderbird before 3.0.4; and SeaMonkey before 2.0.4 allow remote attackers to cause a denial of service (memory corruption and application
   crash) or possibly execute arbitrary code via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0174" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0174" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278200" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278734" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner190-gnomevfs On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0174 at MITRE

Description

   Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2;
   Thunderbird before 3.0.4; and SeaMonkey before 2.0.4 allow remote attackers to cause a denial of service (memory corruption and application
   crash) or possibly execute arbitrary code via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0174" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0174" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278196" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278733" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner190 On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0174 at MITRE

Description

   Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2;
   Thunderbird before 3.0.4; and SeaMonkey before 2.0.4 allow remote attackers to cause a denial of service (memory corruption and application
   crash) or possibly execute arbitrary code via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0174" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0174" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278192" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278732" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner191-translations On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0173 at MITRE

Description

   Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.5.9 and 3.6.x before 3.6.2, Thunderbird before 3.0.4,
   and SeaMonkey before 2.0.4 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute
   arbitrary code via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0173" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0173" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278248" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278731" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner191-gnomevfs On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0173 at MITRE

Description

   Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.5.9 and 3.6.x before 3.6.2, Thunderbird before 3.0.4,
   and SeaMonkey before 2.0.4 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute
   arbitrary code via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0173" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0173" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278244" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278730" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner191 On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0173 at MITRE

Description

   Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.5.9 and 3.6.x before 3.6.2, Thunderbird before 3.0.4,
   and SeaMonkey before 2.0.4 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute
   arbitrary code via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0173" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0173" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278240" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278729" version="27">
      <metadata>
        <title>Test for MozillaFirefox-translations On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0173 at MITRE

Description

   Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.5.9 and 3.6.x before 3.6.2, Thunderbird before 3.0.4,
   and SeaMonkey before 2.0.4 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute
   arbitrary code via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0173" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0173" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278168" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278728" version="27">
      <metadata>
        <title>Test for MozillaFirefox On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0173 at MITRE

Description

   Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.5.9 and 3.6.x before 3.6.2, Thunderbird before 3.0.4,
   and SeaMonkey before 2.0.4 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute
   arbitrary code via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0173" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0173" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278160" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278727" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner190-translations On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0173 at MITRE

Description

   Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.5.9 and 3.6.x before 3.6.2, Thunderbird before 3.0.4,
   and SeaMonkey before 2.0.4 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute
   arbitrary code via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0173" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0173" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278200" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278726" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner190-gnomevfs On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0173 at MITRE

Description

   Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.5.9 and 3.6.x before 3.6.2, Thunderbird before 3.0.4,
   and SeaMonkey before 2.0.4 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute
   arbitrary code via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0173" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0173" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278196" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278725" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner190 On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0173 at MITRE

Description

   Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.5.9 and 3.6.x before 3.6.2, Thunderbird before 3.0.4,
   and SeaMonkey before 2.0.4 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute
   arbitrary code via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0173" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0173" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278192" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278724" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner190-translations On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-3983 at MITRE

Description

   Mozilla Firefox before 3.0.16 and 3.5.x before 3.5.6, and SeaMonkey before 2.0.1, allows remote attackers to send authenticated requests to
   arbitrary applications by replaying the NTLM credentials of a browser user.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.8 (AV:N/AC:M/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-3983" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-3983" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278200" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278723" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner190-gnomevfs On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-3983 at MITRE

Description

   Mozilla Firefox before 3.0.16 and 3.5.x before 3.5.6, and SeaMonkey before 2.0.1, allows remote attackers to send authenticated requests to
   arbitrary applications by replaying the NTLM credentials of a browser user.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.8 (AV:N/AC:M/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-3983" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-3983" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278196" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278722" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner190 On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-3983 at MITRE

Description

   Mozilla Firefox before 3.0.16 and 3.5.x before 3.5.6, and SeaMonkey before 2.0.1, allows remote attackers to send authenticated requests to
   arbitrary applications by replaying the NTLM credentials of a browser user.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.8 (AV:N/AC:M/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-3983" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-3983" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278192" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278721" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner191-translations On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-3983 at MITRE

Description

   Mozilla Firefox before 3.0.16 and 3.5.x before 3.5.6, and SeaMonkey before 2.0.1, allows remote attackers to send authenticated requests to
   arbitrary applications by replaying the NTLM credentials of a browser user.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.8 (AV:N/AC:M/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-3983" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-3983" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278248" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278720" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner191-gnomevfs On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-3983 at MITRE

Description

   Mozilla Firefox before 3.0.16 and 3.5.x before 3.5.6, and SeaMonkey before 2.0.1, allows remote attackers to send authenticated requests to
   arbitrary applications by replaying the NTLM credentials of a browser user.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.8 (AV:N/AC:M/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-3983" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-3983" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278244" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278719" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner191 On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-3983 at MITRE

Description

   Mozilla Firefox before 3.0.16 and 3.5.x before 3.5.6, and SeaMonkey before 2.0.1, allows remote attackers to send authenticated requests to
   arbitrary applications by replaying the NTLM credentials of a browser user.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.8 (AV:N/AC:M/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-3983" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-3983" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278240" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278718" version="27">
      <metadata>
        <title>Test for MozillaFirefox-translations On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-3983 at MITRE

Description

   Mozilla Firefox before 3.0.16 and 3.5.x before 3.5.6, and SeaMonkey before 2.0.1, allows remote attackers to send authenticated requests to
   arbitrary applications by replaying the NTLM credentials of a browser user.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.8 (AV:N/AC:M/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-3983" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-3983" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278168" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278717" version="27">
      <metadata>
        <title>Test for MozillaFirefox On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-3983 at MITRE

Description

   Mozilla Firefox before 3.0.16 and 3.5.x before 3.5.6, and SeaMonkey before 2.0.1, allows remote attackers to send authenticated requests to
   arbitrary applications by replaying the NTLM credentials of a browser user.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.8 (AV:N/AC:M/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-3983" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-3983" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278160" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278716" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner191-translations On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-3389 at MITRE

Description

   Integer overflow in libtheora in Xiph.Org Theora before 1.1, as used in Mozilla Firefox 3.5 before 3.5.6 and SeaMonkey before 2.0.1, allows
   remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a video with large dimensions.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-3389" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-3389" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278248" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278715" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner191-gnomevfs On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-3389 at MITRE

Description

   Integer overflow in libtheora in Xiph.Org Theora before 1.1, as used in Mozilla Firefox 3.5 before 3.5.6 and SeaMonkey before 2.0.1, allows
   remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a video with large dimensions.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-3389" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-3389" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278244" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278714" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner191 On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-3389 at MITRE

Description

   Integer overflow in libtheora in Xiph.Org Theora before 1.1, as used in Mozilla Firefox 3.5 before 3.5.6 and SeaMonkey before 2.0.1, allows
   remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a video with large dimensions.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-3389" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-3389" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278240" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278713" version="27">
      <metadata>
        <title>Test for MozillaFirefox-translations On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-3389 at MITRE

Description

   Integer overflow in libtheora in Xiph.Org Theora before 1.1, as used in Mozilla Firefox 3.5 before 3.5.6 and SeaMonkey before 2.0.1, allows
   remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a video with large dimensions.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-3389" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-3389" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278168" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278712" version="27">
      <metadata>
        <title>Test for MozillaFirefox On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-3389 at MITRE

Description

   Integer overflow in libtheora in Xiph.Org Theora before 1.1, as used in Mozilla Firefox 3.5 before 3.5.6 and SeaMonkey before 2.0.1, allows
   remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a video with large dimensions.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-3389" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-3389" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278160" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278711" version="27">
      <metadata>
        <title>Test for openssl-doc On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-3245 at MITRE

Description

   OpenSSL before 0.9.8m does not check for a NULL return value from bn_wexpand function calls in (1) crypto/bn/bn_div.c, (2)
   crypto/bn/bn_gf2m.c, (3) crypto/ec/ec2_smpl.c, and (4) engines/e_ubsec.c, which has unspecified impact and context-dependent attack vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-3245" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-3245" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278429" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278710" version="27">
      <metadata>
        <title>Test for openssl-devel On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-3245 at MITRE

Description

   OpenSSL before 0.9.8m does not check for a NULL return value from bn_wexpand function calls in (1) crypto/bn/bn_div.c, (2)
   crypto/bn/bn_gf2m.c, (3) crypto/ec/ec2_smpl.c, and (4) engines/e_ubsec.c, which has unspecified impact and context-dependent attack vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-3245" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-3245" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278425" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278709" version="27">
      <metadata>
        <title>Test for openssl On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-3245 at MITRE

Description

   OpenSSL before 0.9.8m does not check for a NULL return value from bn_wexpand function calls in (1) crypto/bn/bn_div.c, (2)
   crypto/bn/bn_gf2m.c, (3) crypto/ec/ec2_smpl.c, and (4) engines/e_ubsec.c, which has unspecified impact and context-dependent attack vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-3245" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-3245" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278421" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278708" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner191-translations On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-3077 at MITRE

Description

   Mozilla Firefox before 3.0.14, and 3.5.x before 3.5.3, does not properly manage pointers for the columns (aka TreeColumns) of a XUL tree
   element, which allows remote attackers to execute arbitrary code via a crafted HTML document, related to a "dangling pointer vulnerability."
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-3077" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-3077" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278248" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278707" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner191-gnomevfs On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-3077 at MITRE

Description

   Mozilla Firefox before 3.0.14, and 3.5.x before 3.5.3, does not properly manage pointers for the columns (aka TreeColumns) of a XUL tree
   element, which allows remote attackers to execute arbitrary code via a crafted HTML document, related to a "dangling pointer vulnerability."
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-3077" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-3077" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278244" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278706" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner191 On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-3077 at MITRE

Description

   Mozilla Firefox before 3.0.14, and 3.5.x before 3.5.3, does not properly manage pointers for the columns (aka TreeColumns) of a XUL tree
   element, which allows remote attackers to execute arbitrary code via a crafted HTML document, related to a "dangling pointer vulnerability."
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-3077" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-3077" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278240" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278705" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner190-translations On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-3077 at MITRE

Description

   Mozilla Firefox before 3.0.14, and 3.5.x before 3.5.3, does not properly manage pointers for the columns (aka TreeColumns) of a XUL tree
   element, which allows remote attackers to execute arbitrary code via a crafted HTML document, related to a "dangling pointer vulnerability."
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-3077" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-3077" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278200" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278704" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner190-gnomevfs On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-3077 at MITRE

Description

   Mozilla Firefox before 3.0.14, and 3.5.x before 3.5.3, does not properly manage pointers for the columns (aka TreeColumns) of a XUL tree
   element, which allows remote attackers to execute arbitrary code via a crafted HTML document, related to a "dangling pointer vulnerability."
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-3077" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-3077" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278196" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278703" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner190 On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-3077 at MITRE

Description

   Mozilla Firefox before 3.0.14, and 3.5.x before 3.5.3, does not properly manage pointers for the columns (aka TreeColumns) of a XUL tree
   element, which allows remote attackers to execute arbitrary code via a crafted HTML document, related to a "dangling pointer vulnerability."
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-3077" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-3077" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278192" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278702" version="27">
      <metadata>
        <title>Test for MozillaFirefox-translations On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-3077 at MITRE

Description

   Mozilla Firefox before 3.0.14, and 3.5.x before 3.5.3, does not properly manage pointers for the columns (aka TreeColumns) of a XUL tree
   element, which allows remote attackers to execute arbitrary code via a crafted HTML document, related to a "dangling pointer vulnerability."
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-3077" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-3077" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278168" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278701" version="27">
      <metadata>
        <title>Test for MozillaFirefox-branding-SLED On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-3077 at MITRE

Description

   Mozilla Firefox before 3.0.14, and 3.5.x before 3.5.3, does not properly manage pointers for the columns (aka TreeColumns) of a XUL tree
   element, which allows remote attackers to execute arbitrary code via a crafted HTML document, related to a "dangling pointer vulnerability."
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-3077" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-3077" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278164" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278700" version="27">
      <metadata>
        <title>Test for MozillaFirefox On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-3077 at MITRE

Description

   Mozilla Firefox before 3.0.14, and 3.5.x before 3.5.3, does not properly manage pointers for the columns (aka TreeColumns) of a XUL tree
   element, which allows remote attackers to execute arbitrary code via a crafted HTML document, related to a "dangling pointer vulnerability."
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-3077" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-3077" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278160" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278699" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner191-translations On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-3075 at MITRE

Description

   Multiple unspecified vulnerabilities in the JavaScript engine in Mozilla Firefox before 3.0.14 and 3.5.x before 3.5.2, Thunderbird before
   2.0.0.24, and SeaMonkey before 1.1.19 allow remote attackers to cause a denial of service (memory corruption and application crash) or
   possibly execute arbitrary code via vectors related to use of mutable strings in the js_StringReplaceHelper function in js/src/jsstr.cpp, and
   unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-3075" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-3075" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278248" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278698" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner191-gnomevfs On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-3075 at MITRE

Description

   Multiple unspecified vulnerabilities in the JavaScript engine in Mozilla Firefox before 3.0.14 and 3.5.x before 3.5.2, Thunderbird before
   2.0.0.24, and SeaMonkey before 1.1.19 allow remote attackers to cause a denial of service (memory corruption and application crash) or
   possibly execute arbitrary code via vectors related to use of mutable strings in the js_StringReplaceHelper function in js/src/jsstr.cpp, and
   unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-3075" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-3075" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278244" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278697" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner191 On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-3075 at MITRE

Description

   Multiple unspecified vulnerabilities in the JavaScript engine in Mozilla Firefox before 3.0.14 and 3.5.x before 3.5.2, Thunderbird before
   2.0.0.24, and SeaMonkey before 1.1.19 allow remote attackers to cause a denial of service (memory corruption and application crash) or
   possibly execute arbitrary code via vectors related to use of mutable strings in the js_StringReplaceHelper function in js/src/jsstr.cpp, and
   unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-3075" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-3075" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278240" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278696" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner190-translations On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-3075 at MITRE

Description

   Multiple unspecified vulnerabilities in the JavaScript engine in Mozilla Firefox before 3.0.14 and 3.5.x before 3.5.2, Thunderbird before
   2.0.0.24, and SeaMonkey before 1.1.19 allow remote attackers to cause a denial of service (memory corruption and application crash) or
   possibly execute arbitrary code via vectors related to use of mutable strings in the js_StringReplaceHelper function in js/src/jsstr.cpp, and
   unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-3075" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-3075" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278200" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278695" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner190-gnomevfs On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-3075 at MITRE

Description

   Multiple unspecified vulnerabilities in the JavaScript engine in Mozilla Firefox before 3.0.14 and 3.5.x before 3.5.2, Thunderbird before
   2.0.0.24, and SeaMonkey before 1.1.19 allow remote attackers to cause a denial of service (memory corruption and application crash) or
   possibly execute arbitrary code via vectors related to use of mutable strings in the js_StringReplaceHelper function in js/src/jsstr.cpp, and
   unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-3075" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-3075" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278196" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278694" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner190 On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-3075 at MITRE

Description

   Multiple unspecified vulnerabilities in the JavaScript engine in Mozilla Firefox before 3.0.14 and 3.5.x before 3.5.2, Thunderbird before
   2.0.0.24, and SeaMonkey before 1.1.19 allow remote attackers to cause a denial of service (memory corruption and application crash) or
   possibly execute arbitrary code via vectors related to use of mutable strings in the js_StringReplaceHelper function in js/src/jsstr.cpp, and
   unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-3075" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-3075" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278192" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278693" version="27">
      <metadata>
        <title>Test for MozillaFirefox-translations On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-3075 at MITRE

Description

   Multiple unspecified vulnerabilities in the JavaScript engine in Mozilla Firefox before 3.0.14 and 3.5.x before 3.5.2, Thunderbird before
   2.0.0.24, and SeaMonkey before 1.1.19 allow remote attackers to cause a denial of service (memory corruption and application crash) or
   possibly execute arbitrary code via vectors related to use of mutable strings in the js_StringReplaceHelper function in js/src/jsstr.cpp, and
   unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-3075" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-3075" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278168" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278692" version="27">
      <metadata>
        <title>Test for MozillaFirefox-branding-SLED On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-3075 at MITRE

Description

   Multiple unspecified vulnerabilities in the JavaScript engine in Mozilla Firefox before 3.0.14 and 3.5.x before 3.5.2, Thunderbird before
   2.0.0.24, and SeaMonkey before 1.1.19 allow remote attackers to cause a denial of service (memory corruption and application crash) or
   possibly execute arbitrary code via vectors related to use of mutable strings in the js_StringReplaceHelper function in js/src/jsstr.cpp, and
   unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-3075" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-3075" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278164" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278691" version="27">
      <metadata>
        <title>Test for MozillaFirefox On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-3075 at MITRE

Description

   Multiple unspecified vulnerabilities in the JavaScript engine in Mozilla Firefox before 3.0.14 and 3.5.x before 3.5.2, Thunderbird before
   2.0.0.24, and SeaMonkey before 1.1.19 allow remote attackers to cause a denial of service (memory corruption and application crash) or
   possibly execute arbitrary code via vectors related to use of mutable strings in the js_StringReplaceHelper function in js/src/jsstr.cpp, and
   unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-3075" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-3075" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278160" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278690" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner191-translations On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-3072 at MITRE

Description

   Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.0.14 and 3.5.x before 3.5.3, Thunderbird before
   2.0.0.24, and SeaMonkey before 1.1.19 allow remote attackers to cause a denial of service (memory corruption and application crash) or
   possibly execute arbitrary code via vectors related to the BinHex decoder in netwerk/streamconv/converters/nsBinHexDecoder.cpp, and unknown
   vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-3072" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-3072" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278248" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278689" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner191-gnomevfs On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-3072 at MITRE

Description

   Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.0.14 and 3.5.x before 3.5.3, Thunderbird before
   2.0.0.24, and SeaMonkey before 1.1.19 allow remote attackers to cause a denial of service (memory corruption and application crash) or
   possibly execute arbitrary code via vectors related to the BinHex decoder in netwerk/streamconv/converters/nsBinHexDecoder.cpp, and unknown
   vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-3072" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-3072" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278244" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278688" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner191 On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-3072 at MITRE

Description

   Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.0.14 and 3.5.x before 3.5.3, Thunderbird before
   2.0.0.24, and SeaMonkey before 1.1.19 allow remote attackers to cause a denial of service (memory corruption and application crash) or
   possibly execute arbitrary code via vectors related to the BinHex decoder in netwerk/streamconv/converters/nsBinHexDecoder.cpp, and unknown
   vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-3072" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-3072" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278240" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278687" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner190-translations On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-3072 at MITRE

Description

   Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.0.14 and 3.5.x before 3.5.3, Thunderbird before
   2.0.0.24, and SeaMonkey before 1.1.19 allow remote attackers to cause a denial of service (memory corruption and application crash) or
   possibly execute arbitrary code via vectors related to the BinHex decoder in netwerk/streamconv/converters/nsBinHexDecoder.cpp, and unknown
   vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-3072" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-3072" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278200" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278686" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner190-gnomevfs On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-3072 at MITRE

Description

   Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.0.14 and 3.5.x before 3.5.3, Thunderbird before
   2.0.0.24, and SeaMonkey before 1.1.19 allow remote attackers to cause a denial of service (memory corruption and application crash) or
   possibly execute arbitrary code via vectors related to the BinHex decoder in netwerk/streamconv/converters/nsBinHexDecoder.cpp, and unknown
   vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-3072" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-3072" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278196" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278685" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner190 On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-3072 at MITRE

Description

   Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.0.14 and 3.5.x before 3.5.3, Thunderbird before
   2.0.0.24, and SeaMonkey before 1.1.19 allow remote attackers to cause a denial of service (memory corruption and application crash) or
   possibly execute arbitrary code via vectors related to the BinHex decoder in netwerk/streamconv/converters/nsBinHexDecoder.cpp, and unknown
   vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-3072" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-3072" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278192" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278684" version="27">
      <metadata>
        <title>Test for MozillaFirefox-translations On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-3072 at MITRE

Description

   Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.0.14 and 3.5.x before 3.5.3, Thunderbird before
   2.0.0.24, and SeaMonkey before 1.1.19 allow remote attackers to cause a denial of service (memory corruption and application crash) or
   possibly execute arbitrary code via vectors related to the BinHex decoder in netwerk/streamconv/converters/nsBinHexDecoder.cpp, and unknown
   vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-3072" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-3072" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278168" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278683" version="27">
      <metadata>
        <title>Test for MozillaFirefox-branding-SLED On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-3072 at MITRE

Description

   Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.0.14 and 3.5.x before 3.5.3, Thunderbird before
   2.0.0.24, and SeaMonkey before 1.1.19 allow remote attackers to cause a denial of service (memory corruption and application crash) or
   possibly execute arbitrary code via vectors related to the BinHex decoder in netwerk/streamconv/converters/nsBinHexDecoder.cpp, and unknown
   vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-3072" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-3072" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278164" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278682" version="27">
      <metadata>
        <title>Test for MozillaFirefox On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-3072 at MITRE

Description

   Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.0.14 and 3.5.x before 3.5.3, Thunderbird before
   2.0.0.24, and SeaMonkey before 1.1.19 allow remote attackers to cause a denial of service (memory corruption and application crash) or
   possibly execute arbitrary code via vectors related to the BinHex decoder in netwerk/streamconv/converters/nsBinHexDecoder.cpp, and unknown
   vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-3072" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-3072" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278160" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278681" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner191-translations On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-0689 at MITRE

Description

   Array index error in the (1) dtoa implementation in dtoa.c (aka pdtoa.c) and the (2) gdtoa (aka new dtoa) implementation in gdtoa/misc.c in
   libc, as used in multiple operating systems and products including in FreeBSD 6.4 and 7.2, NetBSD 5.0, OpenBSD 4.5, Mozilla Firefox 3.0.x
   before 3.0.15 and 3.5.x before 3.5.4, K-Meleon 1.5.3, SeaMonkey 1.1.8, and other products, allows context-dependent attackers to cause a
   denial of service (application crash) and possibly execute arbitrary code via a large precision value in the format argument to a printf
   function, which triggers incorrect memory allocation and a heap-based buffer overflow during conversion to a floating-point number.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.8 (AV:N/AC:M/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-0689" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-0689" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278248" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278680" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner191-gnomevfs On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-0689 at MITRE

Description

   Array index error in the (1) dtoa implementation in dtoa.c (aka pdtoa.c) and the (2) gdtoa (aka new dtoa) implementation in gdtoa/misc.c in
   libc, as used in multiple operating systems and products including in FreeBSD 6.4 and 7.2, NetBSD 5.0, OpenBSD 4.5, Mozilla Firefox 3.0.x
   before 3.0.15 and 3.5.x before 3.5.4, K-Meleon 1.5.3, SeaMonkey 1.1.8, and other products, allows context-dependent attackers to cause a
   denial of service (application crash) and possibly execute arbitrary code via a large precision value in the format argument to a printf
   function, which triggers incorrect memory allocation and a heap-based buffer overflow during conversion to a floating-point number.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.8 (AV:N/AC:M/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-0689" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-0689" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278244" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278679" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner191 On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-0689 at MITRE

Description

   Array index error in the (1) dtoa implementation in dtoa.c (aka pdtoa.c) and the (2) gdtoa (aka new dtoa) implementation in gdtoa/misc.c in
   libc, as used in multiple operating systems and products including in FreeBSD 6.4 and 7.2, NetBSD 5.0, OpenBSD 4.5, Mozilla Firefox 3.0.x
   before 3.0.15 and 3.5.x before 3.5.4, K-Meleon 1.5.3, SeaMonkey 1.1.8, and other products, allows context-dependent attackers to cause a
   denial of service (application crash) and possibly execute arbitrary code via a large precision value in the format argument to a printf
   function, which triggers incorrect memory allocation and a heap-based buffer overflow during conversion to a floating-point number.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.8 (AV:N/AC:M/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-0689" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-0689" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278240" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278678" version="27">
      <metadata>
        <title>Test for MozillaFirefox-translations On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-0689 at MITRE

Description

   Array index error in the (1) dtoa implementation in dtoa.c (aka pdtoa.c) and the (2) gdtoa (aka new dtoa) implementation in gdtoa/misc.c in
   libc, as used in multiple operating systems and products including in FreeBSD 6.4 and 7.2, NetBSD 5.0, OpenBSD 4.5, Mozilla Firefox 3.0.x
   before 3.0.15 and 3.5.x before 3.5.4, K-Meleon 1.5.3, SeaMonkey 1.1.8, and other products, allows context-dependent attackers to cause a
   denial of service (application crash) and possibly execute arbitrary code via a large precision value in the format argument to a printf
   function, which triggers incorrect memory allocation and a heap-based buffer overflow during conversion to a floating-point number.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.8 (AV:N/AC:M/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-0689" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-0689" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278168" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278677" version="27">
      <metadata>
        <title>Test for MozillaFirefox On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-0689 at MITRE

Description

   Array index error in the (1) dtoa implementation in dtoa.c (aka pdtoa.c) and the (2) gdtoa (aka new dtoa) implementation in gdtoa/misc.c in
   libc, as used in multiple operating systems and products including in FreeBSD 6.4 and 7.2, NetBSD 5.0, OpenBSD 4.5, Mozilla Firefox 3.0.x
   before 3.0.15 and 3.5.x before 3.5.4, K-Meleon 1.5.3, SeaMonkey 1.1.8, and other products, allows context-dependent attackers to cause a
   denial of service (application crash) and possibly execute arbitrary code via a large precision value in the format argument to a printf
   function, which triggers incorrect memory allocation and a heap-based buffer overflow during conversion to a floating-point number.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.8 (AV:N/AC:M/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-0689" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-0689" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278160" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278676" version="27">
      <metadata>
        <title>Test for mozilla-nspr-devel On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-0689 at MITRE

Description

   Array index error in the (1) dtoa implementation in dtoa.c (aka pdtoa.c) and the (2) gdtoa (aka new dtoa) implementation in gdtoa/misc.c in
   libc, as used in multiple operating systems and products including in FreeBSD 6.4 and 7.2, NetBSD 5.0, OpenBSD 4.5, Mozilla Firefox 3.0.x
   before 3.0.15 and 3.5.x before 3.5.4, K-Meleon 1.5.3, SeaMonkey 1.1.8, and other products, allows context-dependent attackers to cause a
   denial of service (application crash) and possibly execute arbitrary code via a large precision value in the format argument to a printf
   function, which triggers incorrect memory allocation and a heap-based buffer overflow during conversion to a floating-point number.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.8 (AV:N/AC:M/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-0689" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-0689" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278446" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278675" version="27">
      <metadata>
        <title>Test for mozilla-nspr On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-0689 at MITRE

Description

   Array index error in the (1) dtoa implementation in dtoa.c (aka pdtoa.c) and the (2) gdtoa (aka new dtoa) implementation in gdtoa/misc.c in
   libc, as used in multiple operating systems and products including in FreeBSD 6.4 and 7.2, NetBSD 5.0, OpenBSD 4.5, Mozilla Firefox 3.0.x
   before 3.0.15 and 3.5.x before 3.5.4, K-Meleon 1.5.3, SeaMonkey 1.1.8, and other products, allows context-dependent attackers to cause a
   denial of service (application crash) and possibly execute arbitrary code via a large precision value in the format argument to a printf
   function, which triggers incorrect memory allocation and a heap-based buffer overflow during conversion to a floating-point number.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.8 (AV:N/AC:M/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-0689" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-0689" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278442" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278674" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner190-translations On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-0689 at MITRE

Description

   Array index error in the (1) dtoa implementation in dtoa.c (aka pdtoa.c) and the (2) gdtoa (aka new dtoa) implementation in gdtoa/misc.c in
   libc, as used in multiple operating systems and products including in FreeBSD 6.4 and 7.2, NetBSD 5.0, OpenBSD 4.5, Mozilla Firefox 3.0.x
   before 3.0.15 and 3.5.x before 3.5.4, K-Meleon 1.5.3, SeaMonkey 1.1.8, and other products, allows context-dependent attackers to cause a
   denial of service (application crash) and possibly execute arbitrary code via a large precision value in the format argument to a printf
   function, which triggers incorrect memory allocation and a heap-based buffer overflow during conversion to a floating-point number.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.8 (AV:N/AC:M/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-0689" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-0689" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278200" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278673" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner190-gnomevfs On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-0689 at MITRE

Description

   Array index error in the (1) dtoa implementation in dtoa.c (aka pdtoa.c) and the (2) gdtoa (aka new dtoa) implementation in gdtoa/misc.c in
   libc, as used in multiple operating systems and products including in FreeBSD 6.4 and 7.2, NetBSD 5.0, OpenBSD 4.5, Mozilla Firefox 3.0.x
   before 3.0.15 and 3.5.x before 3.5.4, K-Meleon 1.5.3, SeaMonkey 1.1.8, and other products, allows context-dependent attackers to cause a
   denial of service (application crash) and possibly execute arbitrary code via a large precision value in the format argument to a printf
   function, which triggers incorrect memory allocation and a heap-based buffer overflow during conversion to a floating-point number.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.8 (AV:N/AC:M/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-0689" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-0689" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278196" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278672" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner190 On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-0689 at MITRE

Description

   Array index error in the (1) dtoa implementation in dtoa.c (aka pdtoa.c) and the (2) gdtoa (aka new dtoa) implementation in gdtoa/misc.c in
   libc, as used in multiple operating systems and products including in FreeBSD 6.4 and 7.2, NetBSD 5.0, OpenBSD 4.5, Mozilla Firefox 3.0.x
   before 3.0.15 and 3.5.x before 3.5.4, K-Meleon 1.5.3, SeaMonkey 1.1.8, and other products, allows context-dependent attackers to cause a
   denial of service (application crash) and possibly execute arbitrary code via a large precision value in the format argument to a printf
   function, which triggers incorrect memory allocation and a heap-based buffer overflow during conversion to a floating-point number.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.8 (AV:N/AC:M/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-0689" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-0689" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278192" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278671" version="27">
      <metadata>
        <title>Test for kdelibs3-doc On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-0689 at MITRE

Description

   Array index error in the (1) dtoa implementation in dtoa.c (aka pdtoa.c) and the (2) gdtoa (aka new dtoa) implementation in gdtoa/misc.c in
   libc, as used in multiple operating systems and products including in FreeBSD 6.4 and 7.2, NetBSD 5.0, OpenBSD 4.5, Mozilla Firefox 3.0.x
   before 3.0.15 and 3.5.x before 3.5.4, K-Meleon 1.5.3, SeaMonkey 1.1.8, and other products, allows context-dependent attackers to cause a
   denial of service (application crash) and possibly execute arbitrary code via a large precision value in the format argument to a printf
   function, which triggers incorrect memory allocation and a heap-based buffer overflow during conversion to a floating-point number.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.8 (AV:N/AC:M/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-0689" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-0689" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278668" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278667" version="27">
      <metadata>
        <title>Test for kdelibs3-devel On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-0689 at MITRE

Description

   Array index error in the (1) dtoa implementation in dtoa.c (aka pdtoa.c) and the (2) gdtoa (aka new dtoa) implementation in gdtoa/misc.c in
   libc, as used in multiple operating systems and products including in FreeBSD 6.4 and 7.2, NetBSD 5.0, OpenBSD 4.5, Mozilla Firefox 3.0.x
   before 3.0.15 and 3.5.x before 3.5.4, K-Meleon 1.5.3, SeaMonkey 1.1.8, and other products, allows context-dependent attackers to cause a
   denial of service (application crash) and possibly execute arbitrary code via a large precision value in the format argument to a printf
   function, which triggers incorrect memory allocation and a heap-based buffer overflow during conversion to a floating-point number.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.8 (AV:N/AC:M/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-0689" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-0689" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278664" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278663" version="27">
      <metadata>
        <title>Test for kdelibs3-arts On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-0689 at MITRE

Description

   Array index error in the (1) dtoa implementation in dtoa.c (aka pdtoa.c) and the (2) gdtoa (aka new dtoa) implementation in gdtoa/misc.c in
   libc, as used in multiple operating systems and products including in FreeBSD 6.4 and 7.2, NetBSD 5.0, OpenBSD 4.5, Mozilla Firefox 3.0.x
   before 3.0.15 and 3.5.x before 3.5.4, K-Meleon 1.5.3, SeaMonkey 1.1.8, and other products, allows context-dependent attackers to cause a
   denial of service (application crash) and possibly execute arbitrary code via a large precision value in the format argument to a printf
   function, which triggers incorrect memory allocation and a heap-based buffer overflow during conversion to a floating-point number.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.8 (AV:N/AC:M/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-0689" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-0689" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278660" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278659" version="27">
      <metadata>
        <title>Test for kdelibs3 On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-0689 at MITRE

Description

   Array index error in the (1) dtoa implementation in dtoa.c (aka pdtoa.c) and the (2) gdtoa (aka new dtoa) implementation in gdtoa/misc.c in
   libc, as used in multiple operating systems and products including in FreeBSD 6.4 and 7.2, NetBSD 5.0, OpenBSD 4.5, Mozilla Firefox 3.0.x
   before 3.0.15 and 3.5.x before 3.5.4, K-Meleon 1.5.3, SeaMonkey 1.1.8, and other products, allows context-dependent attackers to cause a
   denial of service (application crash) and possibly execute arbitrary code via a large precision value in the format argument to a printf
   function, which triggers incorrect memory allocation and a heap-based buffer overflow during conversion to a floating-point number.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.8 (AV:N/AC:M/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-0689" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-0689" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278656" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278655" version="27">
      <metadata>
        <title>Test for samba-winbind On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-2063 at MITRE

Description

   Buffer overflow in the SMB1 packet chaining implementation in the chain_reply function in process.c in smbd in Samba 3.0.x before 3.3.13
   allows remote attackers to cause a denial of service (memory corruption and daemon crash) or possibly execute arbitrary code via a crafted
   field in a packet.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-2063" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-2063" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278640" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278654" version="27">
      <metadata>
        <title>Test for samba-vscan On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-2063 at MITRE

Description

   Buffer overflow in the SMB1 packet chaining implementation in the chain_reply function in process.c in smbd in Samba 3.0.x before 3.3.13
   allows remote attackers to cause a denial of service (memory corruption and daemon crash) or possibly execute arbitrary code via a crafted
   field in a packet.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-2063" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-2063" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278636" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278653" version="27">
      <metadata>
        <title>Test for samba-python On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-2063 at MITRE

Description

   Buffer overflow in the SMB1 packet chaining implementation in the chain_reply function in process.c in smbd in Samba 3.0.x before 3.3.13
   allows remote attackers to cause a denial of service (memory corruption and daemon crash) or possibly execute arbitrary code via a crafted
   field in a packet.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-2063" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-2063" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278632" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278652" version="27">
      <metadata>
        <title>Test for samba-krb-printing On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-2063 at MITRE

Description

   Buffer overflow in the SMB1 packet chaining implementation in the chain_reply function in process.c in smbd in Samba 3.0.x before 3.3.13
   allows remote attackers to cause a denial of service (memory corruption and daemon crash) or possibly execute arbitrary code via a crafted
   field in a packet.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-2063" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-2063" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278628" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278651" version="27">
      <metadata>
        <title>Test for samba-client On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-2063 at MITRE

Description

   Buffer overflow in the SMB1 packet chaining implementation in the chain_reply function in process.c in smbd in Samba 3.0.x before 3.3.13
   allows remote attackers to cause a denial of service (memory corruption and daemon crash) or possibly execute arbitrary code via a crafted
   field in a packet.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-2063" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-2063" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278624" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278650" version="27">
      <metadata>
        <title>Test for samba On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-2063 at MITRE

Description

   Buffer overflow in the SMB1 packet chaining implementation in the chain_reply function in process.c in smbd in Samba 3.0.x before 3.3.13
   allows remote attackers to cause a denial of service (memory corruption and daemon crash) or possibly execute arbitrary code via a crafted
   field in a packet.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-2063" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-2063" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278620" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278649" version="27">
      <metadata>
        <title>Test for libsmbclient-devel On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-2063 at MITRE

Description

   Buffer overflow in the SMB1 packet chaining implementation in the chain_reply function in process.c in smbd in Samba 3.0.x before 3.3.13
   allows remote attackers to cause a denial of service (memory corruption and daemon crash) or possibly execute arbitrary code via a crafted
   field in a packet.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-2063" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-2063" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278616" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278648" version="27">
      <metadata>
        <title>Test for libsmbclient On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-2063 at MITRE

Description

   Buffer overflow in the SMB1 packet chaining implementation in the chain_reply function in process.c in smbd in Samba 3.0.x before 3.3.13
   allows remote attackers to cause a denial of service (memory corruption and daemon crash) or possibly execute arbitrary code via a crafted
   field in a packet.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-2063" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-2063" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278612" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278647" version="27">
      <metadata>
        <title>Test for libmsrpc-devel On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-2063 at MITRE

Description

   Buffer overflow in the SMB1 packet chaining implementation in the chain_reply function in process.c in smbd in Samba 3.0.x before 3.3.13
   allows remote attackers to cause a denial of service (memory corruption and daemon crash) or possibly execute arbitrary code via a crafted
   field in a packet.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-2063" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-2063" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278608" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278646" version="27">
      <metadata>
        <title>Test for libmsrpc On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-2063 at MITRE

Description

   Buffer overflow in the SMB1 packet chaining implementation in the chain_reply function in process.c in smbd in Samba 3.0.x before 3.3.13
   allows remote attackers to cause a denial of service (memory corruption and daemon crash) or possibly execute arbitrary code via a crafted
   field in a packet.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-2063" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-2063" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278604" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278645" version="27">
      <metadata>
        <title>Test for ldapsmb On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-2063 at MITRE

Description

   Buffer overflow in the SMB1 packet chaining implementation in the chain_reply function in process.c in smbd in Samba 3.0.x before 3.3.13
   allows remote attackers to cause a denial of service (memory corruption and daemon crash) or possibly execute arbitrary code via a crafted
   field in a packet.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-2063" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-2063" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278600" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278644" version="27">
      <metadata>
        <title>Test for cifs-mount On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-2063 at MITRE

Description

   Buffer overflow in the SMB1 packet chaining implementation in the chain_reply function in process.c in smbd in Samba 3.0.x before 3.3.13
   allows remote attackers to cause a denial of service (memory corruption and daemon crash) or possibly execute arbitrary code via a crafted
   field in a packet.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-2063" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-2063" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278596" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278643" version="27">
      <metadata>
        <title>Test for samba-winbind On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0787 at MITRE

Description

   client/mount.cifs.c in mount.cifs in smbfs in Samba 3.0.22, 3.0.28a, 3.2.3, 3.3.2, 3.4.0, and 3.4.5 allows local users to mount a CIFS share
   on an arbitrary mountpoint, and gain privileges, via a symlink attack on the mountpoint directory file.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.4 (AV:L/AC:M/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0787" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0787" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278640" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278639" version="27">
      <metadata>
        <title>Test for samba-vscan On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0787 at MITRE

Description

   client/mount.cifs.c in mount.cifs in smbfs in Samba 3.0.22, 3.0.28a, 3.2.3, 3.3.2, 3.4.0, and 3.4.5 allows local users to mount a CIFS share
   on an arbitrary mountpoint, and gain privileges, via a symlink attack on the mountpoint directory file.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.4 (AV:L/AC:M/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0787" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0787" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278636" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278635" version="27">
      <metadata>
        <title>Test for samba-python On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0787 at MITRE

Description

   client/mount.cifs.c in mount.cifs in smbfs in Samba 3.0.22, 3.0.28a, 3.2.3, 3.3.2, 3.4.0, and 3.4.5 allows local users to mount a CIFS share
   on an arbitrary mountpoint, and gain privileges, via a symlink attack on the mountpoint directory file.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.4 (AV:L/AC:M/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0787" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0787" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278632" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278631" version="27">
      <metadata>
        <title>Test for samba-krb-printing On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0787 at MITRE

Description

   client/mount.cifs.c in mount.cifs in smbfs in Samba 3.0.22, 3.0.28a, 3.2.3, 3.3.2, 3.4.0, and 3.4.5 allows local users to mount a CIFS share
   on an arbitrary mountpoint, and gain privileges, via a symlink attack on the mountpoint directory file.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.4 (AV:L/AC:M/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0787" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0787" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278628" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278627" version="27">
      <metadata>
        <title>Test for samba-client On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0787 at MITRE

Description

   client/mount.cifs.c in mount.cifs in smbfs in Samba 3.0.22, 3.0.28a, 3.2.3, 3.3.2, 3.4.0, and 3.4.5 allows local users to mount a CIFS share
   on an arbitrary mountpoint, and gain privileges, via a symlink attack on the mountpoint directory file.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.4 (AV:L/AC:M/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0787" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0787" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278624" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278623" version="27">
      <metadata>
        <title>Test for samba On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0787 at MITRE

Description

   client/mount.cifs.c in mount.cifs in smbfs in Samba 3.0.22, 3.0.28a, 3.2.3, 3.3.2, 3.4.0, and 3.4.5 allows local users to mount a CIFS share
   on an arbitrary mountpoint, and gain privileges, via a symlink attack on the mountpoint directory file.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.4 (AV:L/AC:M/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0787" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0787" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278620" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278619" version="27">
      <metadata>
        <title>Test for libsmbclient-devel On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0787 at MITRE

Description

   client/mount.cifs.c in mount.cifs in smbfs in Samba 3.0.22, 3.0.28a, 3.2.3, 3.3.2, 3.4.0, and 3.4.5 allows local users to mount a CIFS share
   on an arbitrary mountpoint, and gain privileges, via a symlink attack on the mountpoint directory file.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.4 (AV:L/AC:M/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0787" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0787" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278616" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278615" version="27">
      <metadata>
        <title>Test for libsmbclient On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0787 at MITRE

Description

   client/mount.cifs.c in mount.cifs in smbfs in Samba 3.0.22, 3.0.28a, 3.2.3, 3.3.2, 3.4.0, and 3.4.5 allows local users to mount a CIFS share
   on an arbitrary mountpoint, and gain privileges, via a symlink attack on the mountpoint directory file.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.4 (AV:L/AC:M/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0787" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0787" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278612" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278611" version="27">
      <metadata>
        <title>Test for libmsrpc-devel On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0787 at MITRE

Description

   client/mount.cifs.c in mount.cifs in smbfs in Samba 3.0.22, 3.0.28a, 3.2.3, 3.3.2, 3.4.0, and 3.4.5 allows local users to mount a CIFS share
   on an arbitrary mountpoint, and gain privileges, via a symlink attack on the mountpoint directory file.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.4 (AV:L/AC:M/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0787" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0787" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278608" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278607" version="27">
      <metadata>
        <title>Test for libmsrpc On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0787 at MITRE

Description

   client/mount.cifs.c in mount.cifs in smbfs in Samba 3.0.22, 3.0.28a, 3.2.3, 3.3.2, 3.4.0, and 3.4.5 allows local users to mount a CIFS share
   on an arbitrary mountpoint, and gain privileges, via a symlink attack on the mountpoint directory file.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.4 (AV:L/AC:M/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0787" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0787" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278604" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278603" version="27">
      <metadata>
        <title>Test for ldapsmb On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0787 at MITRE

Description

   client/mount.cifs.c in mount.cifs in smbfs in Samba 3.0.22, 3.0.28a, 3.2.3, 3.3.2, 3.4.0, and 3.4.5 allows local users to mount a CIFS share
   on an arbitrary mountpoint, and gain privileges, via a symlink attack on the mountpoint directory file.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.4 (AV:L/AC:M/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0787" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0787" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278600" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278599" version="27">
      <metadata>
        <title>Test for cifs-mount On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0787 at MITRE

Description

   client/mount.cifs.c in mount.cifs in smbfs in Samba 3.0.22, 3.0.28a, 3.2.3, 3.3.2, 3.4.0, and 3.4.5 allows local users to mount a CIFS share
   on an arbitrary mountpoint, and gain privileges, via a symlink attack on the mountpoint directory file.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.4 (AV:L/AC:M/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0787" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0787" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278596" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278595" version="27">
      <metadata>
        <title>Test for java-1_5_0-ibm-plugin On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0849 at MITRE

Description

   Unspecified vulnerability in the Java 2D component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27
   allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was
   obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is a heap-based buffer overflow in
   a decoding routine used by the JPEGImageDecoderImpl interface, which allows code execution via a crafted JPEG image.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0849" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0849" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278140" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278594" version="27">
      <metadata>
        <title>Test for java-1_5_0-ibm-jdbc On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0849 at MITRE

Description

   Unspecified vulnerability in the Java 2D component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27
   allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was
   obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is a heap-based buffer overflow in
   a decoding routine used by the JPEGImageDecoderImpl interface, which allows code execution via a crafted JPEG image.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0849" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0849" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278136" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278593" version="27">
      <metadata>
        <title>Test for java-1_5_0-ibm-fonts On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0849 at MITRE

Description

   Unspecified vulnerability in the Java 2D component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27
   allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was
   obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is a heap-based buffer overflow in
   a decoding routine used by the JPEGImageDecoderImpl interface, which allows code execution via a crafted JPEG image.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0849" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0849" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278132" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278592" version="27">
      <metadata>
        <title>Test for java-1_5_0-ibm-devel On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0849 at MITRE

Description

   Unspecified vulnerability in the Java 2D component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27
   allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was
   obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is a heap-based buffer overflow in
   a decoding routine used by the JPEGImageDecoderImpl interface, which allows code execution via a crafted JPEG image.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0849" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0849" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278128" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278591" version="27">
      <metadata>
        <title>Test for java-1_5_0-ibm-alsa On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0849 at MITRE

Description

   Unspecified vulnerability in the Java 2D component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27
   allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was
   obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is a heap-based buffer overflow in
   a decoding routine used by the JPEGImageDecoderImpl interface, which allows code execution via a crafted JPEG image.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0849" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0849" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278124" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278590" version="27">
      <metadata>
        <title>Test for java-1_5_0-ibm On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0849 at MITRE

Description

   Unspecified vulnerability in the Java 2D component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27
   allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was
   obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is a heap-based buffer overflow in
   a decoding routine used by the JPEGImageDecoderImpl interface, which allows code execution via a crafted JPEG image.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0849" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0849" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278120" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278589" version="27">
      <metadata>
        <title>Test for java-1_5_0-ibm-plugin On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0848 at MITRE

Description

   Unspecified vulnerability in the Java 2D component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27
   allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0848" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0848" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278140" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278588" version="27">
      <metadata>
        <title>Test for java-1_5_0-ibm-jdbc On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0848 at MITRE

Description

   Unspecified vulnerability in the Java 2D component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27
   allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0848" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0848" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278136" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278587" version="27">
      <metadata>
        <title>Test for java-1_5_0-ibm-fonts On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0848 at MITRE

Description

   Unspecified vulnerability in the Java 2D component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27
   allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0848" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0848" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278132" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278586" version="27">
      <metadata>
        <title>Test for java-1_5_0-ibm-devel On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0848 at MITRE

Description

   Unspecified vulnerability in the Java 2D component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27
   allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0848" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0848" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278128" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278585" version="27">
      <metadata>
        <title>Test for java-1_5_0-ibm-alsa On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0848 at MITRE

Description

   Unspecified vulnerability in the Java 2D component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27
   allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0848" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0848" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278124" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278584" version="27">
      <metadata>
        <title>Test for java-1_5_0-ibm On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0848 at MITRE

Description

   Unspecified vulnerability in the Java 2D component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27
   allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0848" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0848" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278120" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278583" version="27">
      <metadata>
        <title>Test for java-1_5_0-ibm-plugin On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0847 at MITRE

Description

   Unspecified vulnerability in the Java 2D component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27
   allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was
   obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is a heap-based buffer overflow
   that allows arbitrary code execution via a crafted image.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0847" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0847" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278140" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278582" version="27">
      <metadata>
        <title>Test for java-1_5_0-ibm-jdbc On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0847 at MITRE

Description

   Unspecified vulnerability in the Java 2D component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27
   allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was
   obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is a heap-based buffer overflow
   that allows arbitrary code execution via a crafted image.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0847" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0847" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278136" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278581" version="27">
      <metadata>
        <title>Test for java-1_5_0-ibm-fonts On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0847 at MITRE

Description

   Unspecified vulnerability in the Java 2D component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27
   allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was
   obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is a heap-based buffer overflow
   that allows arbitrary code execution via a crafted image.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0847" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0847" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278132" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278580" version="27">
      <metadata>
        <title>Test for java-1_5_0-ibm-devel On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0847 at MITRE

Description

   Unspecified vulnerability in the Java 2D component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27
   allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was
   obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is a heap-based buffer overflow
   that allows arbitrary code execution via a crafted image.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0847" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0847" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278128" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278579" version="27">
      <metadata>
        <title>Test for java-1_5_0-ibm-alsa On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0847 at MITRE

Description

   Unspecified vulnerability in the Java 2D component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27
   allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was
   obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is a heap-based buffer overflow
   that allows arbitrary code execution via a crafted image.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0847" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0847" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278124" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278578" version="27">
      <metadata>
        <title>Test for java-1_5_0-ibm On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0847 at MITRE

Description

   Unspecified vulnerability in the Java 2D component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27
   allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was
   obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is a heap-based buffer overflow
   that allows arbitrary code execution via a crafted image.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0847" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0847" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278120" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278577" version="27">
      <metadata>
        <title>Test for java-1_5_0-ibm-plugin On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0846 at MITRE

Description

   Unspecified vulnerability in the ImageIO component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27
   allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was
   obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is a heap-based buffer overflow
   that allows remote attackers to execute arbitrary code, related to an "invalid assignment" and inconsistent length values in a JPEG image
   encoder (JPEGImageEncoderImpl).
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0846" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0846" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278140" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278576" version="27">
      <metadata>
        <title>Test for java-1_5_0-ibm-jdbc On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0846 at MITRE

Description

   Unspecified vulnerability in the ImageIO component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27
   allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was
   obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is a heap-based buffer overflow
   that allows remote attackers to execute arbitrary code, related to an "invalid assignment" and inconsistent length values in a JPEG image
   encoder (JPEGImageEncoderImpl).
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0846" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0846" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278136" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278575" version="27">
      <metadata>
        <title>Test for java-1_5_0-ibm-fonts On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0846 at MITRE

Description

   Unspecified vulnerability in the ImageIO component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27
   allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was
   obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is a heap-based buffer overflow
   that allows remote attackers to execute arbitrary code, related to an "invalid assignment" and inconsistent length values in a JPEG image
   encoder (JPEGImageEncoderImpl).
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0846" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0846" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278132" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278574" version="27">
      <metadata>
        <title>Test for java-1_5_0-ibm-devel On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0846 at MITRE

Description

   Unspecified vulnerability in the ImageIO component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27
   allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was
   obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is a heap-based buffer overflow
   that allows remote attackers to execute arbitrary code, related to an "invalid assignment" and inconsistent length values in a JPEG image
   encoder (JPEGImageEncoderImpl).
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0846" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0846" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278128" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278573" version="27">
      <metadata>
        <title>Test for java-1_5_0-ibm-alsa On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0846 at MITRE

Description

   Unspecified vulnerability in the ImageIO component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27
   allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was
   obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is a heap-based buffer overflow
   that allows remote attackers to execute arbitrary code, related to an "invalid assignment" and inconsistent length values in a JPEG image
   encoder (JPEGImageEncoderImpl).
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0846" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0846" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278124" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278572" version="27">
      <metadata>
        <title>Test for java-1_5_0-ibm On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0846 at MITRE

Description

   Unspecified vulnerability in the ImageIO component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27
   allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was
   obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is a heap-based buffer overflow
   that allows remote attackers to execute arbitrary code, related to an "invalid assignment" and inconsistent length values in a JPEG image
   encoder (JPEGImageEncoderImpl).
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0846" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0846" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278120" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278571" version="27">
      <metadata>
        <title>Test for java-1_5_0-ibm-plugin On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0844 at MITRE

Description

   Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27
   allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was
   obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is for improper parsing of a
   crafted MIDI stream when creating a MixerSequencer object, which causes a pointer to be corrupted and allows a NULL byte to be written to
   arbitrary memory.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0844" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0844" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278140" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278570" version="27">
      <metadata>
        <title>Test for java-1_5_0-ibm-jdbc On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0844 at MITRE

Description

   Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27
   allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was
   obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is for improper parsing of a
   crafted MIDI stream when creating a MixerSequencer object, which causes a pointer to be corrupted and allows a NULL byte to be written to
   arbitrary memory.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0844" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0844" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278136" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278569" version="27">
      <metadata>
        <title>Test for java-1_5_0-ibm-fonts On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0844 at MITRE

Description

   Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27
   allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was
   obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is for improper parsing of a
   crafted MIDI stream when creating a MixerSequencer object, which causes a pointer to be corrupted and allows a NULL byte to be written to
   arbitrary memory.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0844" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0844" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278132" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278568" version="27">
      <metadata>
        <title>Test for java-1_5_0-ibm-devel On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0844 at MITRE

Description

   Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27
   allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was
   obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is for improper parsing of a
   crafted MIDI stream when creating a MixerSequencer object, which causes a pointer to be corrupted and allows a NULL byte to be written to
   arbitrary memory.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0844" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0844" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278128" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278567" version="27">
      <metadata>
        <title>Test for java-1_5_0-ibm-alsa On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0844 at MITRE

Description

   Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27
   allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was
   obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is for improper parsing of a
   crafted MIDI stream when creating a MixerSequencer object, which causes a pointer to be corrupted and allows a NULL byte to be written to
   arbitrary memory.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0844" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0844" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278124" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278566" version="27">
      <metadata>
        <title>Test for java-1_5_0-ibm On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0844 at MITRE

Description

   Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27
   allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was
   obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is for improper parsing of a
   crafted MIDI stream when creating a MixerSequencer object, which causes a pointer to be corrupted and allows a NULL byte to be written to
   arbitrary memory.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0844" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0844" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278120" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278565" version="27">
      <metadata>
        <title>Test for java-1_5_0-ibm-plugin On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0843 at MITRE

Description

   Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27
   allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was
   obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is related to XNewPtr and improper
   handling of an integer parameter when allocating heap memory in the com.sun.media.sound libraries, which allows remote attackers to execute
   arbitrary code.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0843" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0843" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278140" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278564" version="27">
      <metadata>
        <title>Test for java-1_5_0-ibm-jdbc On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0843 at MITRE

Description

   Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27
   allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was
   obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is related to XNewPtr and improper
   handling of an integer parameter when allocating heap memory in the com.sun.media.sound libraries, which allows remote attackers to execute
   arbitrary code.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0843" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0843" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278136" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278563" version="27">
      <metadata>
        <title>Test for java-1_5_0-ibm-fonts On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0843 at MITRE

Description

   Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27
   allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was
   obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is related to XNewPtr and improper
   handling of an integer parameter when allocating heap memory in the com.sun.media.sound libraries, which allows remote attackers to execute
   arbitrary code.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0843" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0843" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278132" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278562" version="27">
      <metadata>
        <title>Test for java-1_5_0-ibm-devel On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0843 at MITRE

Description

   Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27
   allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was
   obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is related to XNewPtr and improper
   handling of an integer parameter when allocating heap memory in the com.sun.media.sound libraries, which allows remote attackers to execute
   arbitrary code.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0843" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0843" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278128" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278561" version="27">
      <metadata>
        <title>Test for java-1_5_0-ibm-alsa On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0843 at MITRE

Description

   Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27
   allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was
   obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is related to XNewPtr and improper
   handling of an integer parameter when allocating heap memory in the com.sun.media.sound libraries, which allows remote attackers to execute
   arbitrary code.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0843" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0843" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278124" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278560" version="27">
      <metadata>
        <title>Test for java-1_5_0-ibm On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0843 at MITRE

Description

   Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27
   allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was
   obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is related to XNewPtr and improper
   handling of an integer parameter when allocating heap memory in the com.sun.media.sound libraries, which allows remote attackers to execute
   arbitrary code.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0843" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0843" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278120" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278559" version="27">
      <metadata>
        <title>Test for java-1_5_0-ibm-plugin On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0842 at MITRE

Description

   Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27
   allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was
   obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is an uncontrolled array index that
   allows remote attackers to execute arbitrary code via a MIDI file with a crafted MixerSequencer object, related to the GM_Song structure.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0842" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0842" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278140" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278558" version="27">
      <metadata>
        <title>Test for java-1_5_0-ibm-jdbc On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0842 at MITRE

Description

   Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27
   allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was
   obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is an uncontrolled array index that
   allows remote attackers to execute arbitrary code via a MIDI file with a crafted MixerSequencer object, related to the GM_Song structure.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0842" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0842" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278136" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278557" version="27">
      <metadata>
        <title>Test for java-1_5_0-ibm-fonts On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0842 at MITRE

Description

   Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27
   allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was
   obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is an uncontrolled array index that
   allows remote attackers to execute arbitrary code via a MIDI file with a crafted MixerSequencer object, related to the GM_Song structure.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0842" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0842" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278132" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278556" version="27">
      <metadata>
        <title>Test for java-1_5_0-ibm-devel On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0842 at MITRE

Description

   Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27
   allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was
   obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is an uncontrolled array index that
   allows remote attackers to execute arbitrary code via a MIDI file with a crafted MixerSequencer object, related to the GM_Song structure.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0842" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0842" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278128" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278555" version="27">
      <metadata>
        <title>Test for java-1_5_0-ibm-alsa On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0842 at MITRE

Description

   Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27
   allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was
   obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is an uncontrolled array index that
   allows remote attackers to execute arbitrary code via a MIDI file with a crafted MixerSequencer object, related to the GM_Song structure.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0842" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0842" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278124" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278554" version="27">
      <metadata>
        <title>Test for java-1_5_0-ibm On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0842 at MITRE

Description

   Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27
   allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was
   obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is an uncontrolled array index that
   allows remote attackers to execute arbitrary code via a MIDI file with a crafted MixerSequencer object, related to the GM_Song structure.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0842" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0842" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278120" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278553" version="27">
      <metadata>
        <title>Test for java-1_5_0-ibm-plugin On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0841 at MITRE

Description

   Unspecified vulnerability in the ImageIO component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows
   remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from
   the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is an integer overflow in the Java Runtime
   Environment that allows remote attackers to execute arbitrary code via a JPEG image that contains subsample dimensions with large values,
   related to JPEGImageReader and "stepX".
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0841" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0841" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278140" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278552" version="27">
      <metadata>
        <title>Test for java-1_5_0-ibm-jdbc On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0841 at MITRE

Description

   Unspecified vulnerability in the ImageIO component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows
   remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from
   the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is an integer overflow in the Java Runtime
   Environment that allows remote attackers to execute arbitrary code via a JPEG image that contains subsample dimensions with large values,
   related to JPEGImageReader and "stepX".
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0841" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0841" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278136" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278551" version="27">
      <metadata>
        <title>Test for java-1_5_0-ibm-fonts On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0841 at MITRE

Description

   Unspecified vulnerability in the ImageIO component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows
   remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from
   the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is an integer overflow in the Java Runtime
   Environment that allows remote attackers to execute arbitrary code via a JPEG image that contains subsample dimensions with large values,
   related to JPEGImageReader and "stepX".
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0841" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0841" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278132" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278550" version="27">
      <metadata>
        <title>Test for java-1_5_0-ibm-devel On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0841 at MITRE

Description

   Unspecified vulnerability in the ImageIO component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows
   remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from
   the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is an integer overflow in the Java Runtime
   Environment that allows remote attackers to execute arbitrary code via a JPEG image that contains subsample dimensions with large values,
   related to JPEGImageReader and "stepX".
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0841" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0841" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278128" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278549" version="27">
      <metadata>
        <title>Test for java-1_5_0-ibm-alsa On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0841 at MITRE

Description

   Unspecified vulnerability in the ImageIO component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows
   remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from
   the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is an integer overflow in the Java Runtime
   Environment that allows remote attackers to execute arbitrary code via a JPEG image that contains subsample dimensions with large values,
   related to JPEGImageReader and "stepX".
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0841" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0841" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278124" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278548" version="27">
      <metadata>
        <title>Test for java-1_5_0-ibm On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0841 at MITRE

Description

   Unspecified vulnerability in the ImageIO component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows
   remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from
   the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is an integer overflow in the Java Runtime
   Environment that allows remote attackers to execute arbitrary code via a JPEG image that contains subsample dimensions with large values,
   related to JPEGImageReader and "stepX".
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0841" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0841" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278120" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278547" version="27">
      <metadata>
        <title>Test for java-1_5_0-ibm-plugin On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0840 at MITRE

Description

   Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and
   1.4.2_25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information
   was obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is related to improper checks
   when executing privileged methods in the Java Runtime Environment (JRE), which allows attackers to execute arbitrary code via (1) an
   untrusted object that extends the trusted class but has not modified a certain method, or (2) "a similar trust issue with interfaces," aka
   "Trusted Methods Chaining Remote Code Execution Vulnerability."
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0840" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0840" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278140" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278546" version="27">
      <metadata>
        <title>Test for java-1_5_0-ibm-jdbc On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0840 at MITRE

Description

   Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and
   1.4.2_25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information
   was obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is related to improper checks
   when executing privileged methods in the Java Runtime Environment (JRE), which allows attackers to execute arbitrary code via (1) an
   untrusted object that extends the trusted class but has not modified a certain method, or (2) "a similar trust issue with interfaces," aka
   "Trusted Methods Chaining Remote Code Execution Vulnerability."
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0840" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0840" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278136" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278545" version="27">
      <metadata>
        <title>Test for java-1_5_0-ibm-fonts On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0840 at MITRE

Description

   Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and
   1.4.2_25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information
   was obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is related to improper checks
   when executing privileged methods in the Java Runtime Environment (JRE), which allows attackers to execute arbitrary code via (1) an
   untrusted object that extends the trusted class but has not modified a certain method, or (2) "a similar trust issue with interfaces," aka
   "Trusted Methods Chaining Remote Code Execution Vulnerability."
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0840" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0840" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278132" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278544" version="27">
      <metadata>
        <title>Test for java-1_5_0-ibm-devel On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0840 at MITRE

Description

   Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and
   1.4.2_25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information
   was obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is related to improper checks
   when executing privileged methods in the Java Runtime Environment (JRE), which allows attackers to execute arbitrary code via (1) an
   untrusted object that extends the trusted class but has not modified a certain method, or (2) "a similar trust issue with interfaces," aka
   "Trusted Methods Chaining Remote Code Execution Vulnerability."
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0840" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0840" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278128" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278543" version="27">
      <metadata>
        <title>Test for java-1_5_0-ibm-alsa On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0840 at MITRE

Description

   Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and
   1.4.2_25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information
   was obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is related to improper checks
   when executing privileged methods in the Java Runtime Environment (JRE), which allows attackers to execute arbitrary code via (1) an
   untrusted object that extends the trusted class but has not modified a certain method, or (2) "a similar trust issue with interfaces," aka
   "Trusted Methods Chaining Remote Code Execution Vulnerability."
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0840" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0840" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278124" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278542" version="27">
      <metadata>
        <title>Test for java-1_5_0-ibm On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0840 at MITRE

Description

   Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and
   1.4.2_25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information
   was obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is related to improper checks
   when executing privileged methods in the Java Runtime Environment (JRE), which allows attackers to execute arbitrary code via (1) an
   untrusted object that extends the trusted class but has not modified a certain method, or (2) "a similar trust issue with interfaces," aka
   "Trusted Methods Chaining Remote Code Execution Vulnerability."
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0840" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0840" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278120" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278541" version="27">
      <metadata>
        <title>Test for java-1_5_0-ibm-plugin On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0839 at MITRE

Description

   Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27
   allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0839" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0839" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278140" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278540" version="27">
      <metadata>
        <title>Test for java-1_5_0-ibm-jdbc On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0839 at MITRE

Description

   Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27
   allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0839" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0839" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278136" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278539" version="27">
      <metadata>
        <title>Test for java-1_5_0-ibm-fonts On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0839 at MITRE

Description

   Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27
   allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0839" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0839" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278132" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278538" version="27">
      <metadata>
        <title>Test for java-1_5_0-ibm-devel On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0839 at MITRE

Description

   Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27
   allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0839" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0839" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278128" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278537" version="27">
      <metadata>
        <title>Test for java-1_5_0-ibm-alsa On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0839 at MITRE

Description

   Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27
   allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0839" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0839" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278124" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278536" version="27">
      <metadata>
        <title>Test for java-1_5_0-ibm On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0839 at MITRE

Description

   Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27
   allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0839" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0839" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278120" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278535" version="27">
      <metadata>
        <title>Test for java-1_5_0-ibm-plugin On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0838 at MITRE

Description

   Unspecified vulnerability in the Java 2D component in Oracle Java SE and Java for Business 6 Update 18, 5.0, Update, and 23 allows remote
   attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the
   March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is a stack-based buffer overflow using an untrusted
   size value in the readMabCurveData function in the CMM module in the JVM.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0838" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0838" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278140" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278534" version="27">
      <metadata>
        <title>Test for java-1_5_0-ibm-jdbc On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0838 at MITRE

Description

   Unspecified vulnerability in the Java 2D component in Oracle Java SE and Java for Business 6 Update 18, 5.0, Update, and 23 allows remote
   attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the
   March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is a stack-based buffer overflow using an untrusted
   size value in the readMabCurveData function in the CMM module in the JVM.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0838" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0838" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278136" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278533" version="27">
      <metadata>
        <title>Test for java-1_5_0-ibm-fonts On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0838 at MITRE

Description

   Unspecified vulnerability in the Java 2D component in Oracle Java SE and Java for Business 6 Update 18, 5.0, Update, and 23 allows remote
   attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the
   March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is a stack-based buffer overflow using an untrusted
   size value in the readMabCurveData function in the CMM module in the JVM.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0838" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0838" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278132" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278532" version="27">
      <metadata>
        <title>Test for java-1_5_0-ibm-devel On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0838 at MITRE

Description

   Unspecified vulnerability in the Java 2D component in Oracle Java SE and Java for Business 6 Update 18, 5.0, Update, and 23 allows remote
   attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the
   March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is a stack-based buffer overflow using an untrusted
   size value in the readMabCurveData function in the CMM module in the JVM.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0838" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0838" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278128" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278531" version="27">
      <metadata>
        <title>Test for java-1_5_0-ibm-alsa On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0838 at MITRE

Description

   Unspecified vulnerability in the Java 2D component in Oracle Java SE and Java for Business 6 Update 18, 5.0, Update, and 23 allows remote
   attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the
   March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is a stack-based buffer overflow using an untrusted
   size value in the readMabCurveData function in the CMM module in the JVM.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0838" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0838" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278124" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278530" version="27">
      <metadata>
        <title>Test for java-1_5_0-ibm On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0838 at MITRE

Description

   Unspecified vulnerability in the Java 2D component in Oracle Java SE and Java for Business 6 Update 18, 5.0, Update, and 23 allows remote
   attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the
   March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is a stack-based buffer overflow using an untrusted
   size value in the readMabCurveData function in the CMM module in the JVM.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0838" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0838" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278120" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278529" version="27">
      <metadata>
        <title>Test for java-1_5_0-ibm-plugin On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0837 at MITRE

Description

   Unspecified vulnerability in the Pack200 component in Oracle Java SE and Java for Business 6 Update 18, 5.0, Update, and 23 allows remote
   attackers to affect confidentiality, integrity, and availability via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0837" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0837" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278140" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278528" version="27">
      <metadata>
        <title>Test for java-1_5_0-ibm-jdbc On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0837 at MITRE

Description

   Unspecified vulnerability in the Pack200 component in Oracle Java SE and Java for Business 6 Update 18, 5.0, Update, and 23 allows remote
   attackers to affect confidentiality, integrity, and availability via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0837" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0837" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278136" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278527" version="27">
      <metadata>
        <title>Test for java-1_5_0-ibm-fonts On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0837 at MITRE

Description

   Unspecified vulnerability in the Pack200 component in Oracle Java SE and Java for Business 6 Update 18, 5.0, Update, and 23 allows remote
   attackers to affect confidentiality, integrity, and availability via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0837" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0837" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278132" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278526" version="27">
      <metadata>
        <title>Test for java-1_5_0-ibm-devel On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0837 at MITRE

Description

   Unspecified vulnerability in the Pack200 component in Oracle Java SE and Java for Business 6 Update 18, 5.0, Update, and 23 allows remote
   attackers to affect confidentiality, integrity, and availability via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0837" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0837" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278128" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278525" version="27">
      <metadata>
        <title>Test for java-1_5_0-ibm-alsa On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0837 at MITRE

Description

   Unspecified vulnerability in the Pack200 component in Oracle Java SE and Java for Business 6 Update 18, 5.0, Update, and 23 allows remote
   attackers to affect confidentiality, integrity, and availability via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0837" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0837" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278124" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278524" version="27">
      <metadata>
        <title>Test for java-1_5_0-ibm On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0837 at MITRE

Description

   Unspecified vulnerability in the Pack200 component in Oracle Java SE and Java for Business 6 Update 18, 5.0, Update, and 23 allows remote
   attackers to affect confidentiality, integrity, and availability via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0837" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0837" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278120" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278523" version="27">
      <metadata>
        <title>Test for java-1_5_0-ibm-plugin On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0095 at MITRE

Description

   Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and
   1.4.2_25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.8 (AV:N/AC:M/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0095" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0095" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278140" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278522" version="27">
      <metadata>
        <title>Test for java-1_5_0-ibm-jdbc On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0095 at MITRE

Description

   Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and
   1.4.2_25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.8 (AV:N/AC:M/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0095" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0095" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278136" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278521" version="27">
      <metadata>
        <title>Test for java-1_5_0-ibm-fonts On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0095 at MITRE

Description

   Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and
   1.4.2_25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.8 (AV:N/AC:M/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0095" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0095" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278132" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278520" version="27">
      <metadata>
        <title>Test for java-1_5_0-ibm-devel On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0095 at MITRE

Description

   Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and
   1.4.2_25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.8 (AV:N/AC:M/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0095" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0095" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278128" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278519" version="27">
      <metadata>
        <title>Test for java-1_5_0-ibm-alsa On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0095 at MITRE

Description

   Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and
   1.4.2_25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.8 (AV:N/AC:M/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0095" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0095" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278124" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278518" version="27">
      <metadata>
        <title>Test for java-1_5_0-ibm On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0095 at MITRE

Description

   Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and
   1.4.2_25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.8 (AV:N/AC:M/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0095" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0095" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278120" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278517" version="27">
      <metadata>
        <title>Test for java-1_5_0-ibm-plugin On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0094 at MITRE

Description

   Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18 and 5.0 Update 23
   allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was
   obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is due to missing privilege checks
   during deserialization of RMIConnectionImpl objects, which allows remote attackers to call system-level Java functions via the ClassLoader of
   a constructor that is being deserialized.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0094" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0094" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278140" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278516" version="27">
      <metadata>
        <title>Test for java-1_5_0-ibm-jdbc On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0094 at MITRE

Description

   Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18 and 5.0 Update 23
   allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was
   obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is due to missing privilege checks
   during deserialization of RMIConnectionImpl objects, which allows remote attackers to call system-level Java functions via the ClassLoader of
   a constructor that is being deserialized.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0094" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0094" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278136" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278515" version="27">
      <metadata>
        <title>Test for java-1_5_0-ibm-fonts On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0094 at MITRE

Description

   Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18 and 5.0 Update 23
   allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was
   obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is due to missing privilege checks
   during deserialization of RMIConnectionImpl objects, which allows remote attackers to call system-level Java functions via the ClassLoader of
   a constructor that is being deserialized.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0094" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0094" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278132" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278514" version="27">
      <metadata>
        <title>Test for java-1_5_0-ibm-devel On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0094 at MITRE

Description

   Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18 and 5.0 Update 23
   allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was
   obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is due to missing privilege checks
   during deserialization of RMIConnectionImpl objects, which allows remote attackers to call system-level Java functions via the ClassLoader of
   a constructor that is being deserialized.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0094" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0094" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278128" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278513" version="27">
      <metadata>
        <title>Test for java-1_5_0-ibm-alsa On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0094 at MITRE

Description

   Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18 and 5.0 Update 23
   allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was
   obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is due to missing privilege checks
   during deserialization of RMIConnectionImpl objects, which allows remote attackers to call system-level Java functions via the ClassLoader of
   a constructor that is being deserialized.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0094" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0094" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278124" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278512" version="27">
      <metadata>
        <title>Test for java-1_5_0-ibm On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0094 at MITRE

Description

   Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18 and 5.0 Update 23
   allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was
   obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is due to missing privilege checks
   during deserialization of RMIConnectionImpl objects, which allows remote attackers to call system-level Java functions via the ClassLoader of
   a constructor that is being deserialized.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0094" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0094" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278120" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278511" version="27">
      <metadata>
        <title>Test for java-1_5_0-ibm-plugin On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0092 at MITRE

Description

   Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, and 5.0 Update 23
   allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.1 (AV:N/AC:H/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0092" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0092" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278140" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278510" version="27">
      <metadata>
        <title>Test for java-1_5_0-ibm-jdbc On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0092 at MITRE

Description

   Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, and 5.0 Update 23
   allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.1 (AV:N/AC:H/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0092" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0092" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278136" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278509" version="27">
      <metadata>
        <title>Test for java-1_5_0-ibm-fonts On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0092 at MITRE

Description

   Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, and 5.0 Update 23
   allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.1 (AV:N/AC:H/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0092" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0092" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278132" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278508" version="27">
      <metadata>
        <title>Test for java-1_5_0-ibm-devel On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0092 at MITRE

Description

   Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, and 5.0 Update 23
   allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.1 (AV:N/AC:H/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0092" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0092" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278128" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278507" version="27">
      <metadata>
        <title>Test for java-1_5_0-ibm-alsa On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0092 at MITRE

Description

   Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, and 5.0 Update 23
   allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.1 (AV:N/AC:H/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0092" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0092" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278124" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278506" version="27">
      <metadata>
        <title>Test for java-1_5_0-ibm On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0092 at MITRE

Description

   Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, and 5.0 Update 23
   allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.1 (AV:N/AC:H/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0092" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0092" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278120" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278505" version="27">
      <metadata>
        <title>Test for java-1_5_0-ibm-plugin On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0091 at MITRE

Description

   Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and
   1.4.2_25 allows remote attackers to affect confidentiality via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0091" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0091" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278140" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278504" version="27">
      <metadata>
        <title>Test for java-1_5_0-ibm-jdbc On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0091 at MITRE

Description

   Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and
   1.4.2_25 allows remote attackers to affect confidentiality via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0091" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0091" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278136" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278503" version="27">
      <metadata>
        <title>Test for java-1_5_0-ibm-fonts On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0091 at MITRE

Description

   Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and
   1.4.2_25 allows remote attackers to affect confidentiality via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0091" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0091" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278132" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278502" version="27">
      <metadata>
        <title>Test for java-1_5_0-ibm-devel On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0091 at MITRE

Description

   Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and
   1.4.2_25 allows remote attackers to affect confidentiality via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0091" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0091" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278128" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278501" version="27">
      <metadata>
        <title>Test for java-1_5_0-ibm-alsa On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0091 at MITRE

Description

   Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and
   1.4.2_25 allows remote attackers to affect confidentiality via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0091" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0091" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278124" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278500" version="27">
      <metadata>
        <title>Test for java-1_5_0-ibm On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0091 at MITRE

Description

   Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and
   1.4.2_25 allows remote attackers to affect confidentiality via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0091" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0091" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278120" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278499" version="27">
      <metadata>
        <title>Test for java-1_5_0-ibm-plugin On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0089 at MITRE

Description

   Unspecified vulnerability in the Java Web Start, Java Plug-in component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23,
   and 1.4.2_25 allows remote attackers to affect availability via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0089" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0089" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278140" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278498" version="27">
      <metadata>
        <title>Test for java-1_5_0-ibm-jdbc On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0089 at MITRE

Description

   Unspecified vulnerability in the Java Web Start, Java Plug-in component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23,
   and 1.4.2_25 allows remote attackers to affect availability via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0089" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0089" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278136" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278497" version="27">
      <metadata>
        <title>Test for java-1_5_0-ibm-fonts On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0089 at MITRE

Description

   Unspecified vulnerability in the Java Web Start, Java Plug-in component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23,
   and 1.4.2_25 allows remote attackers to affect availability via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0089" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0089" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278132" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278496" version="27">
      <metadata>
        <title>Test for java-1_5_0-ibm-devel On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0089 at MITRE

Description

   Unspecified vulnerability in the Java Web Start, Java Plug-in component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23,
   and 1.4.2_25 allows remote attackers to affect availability via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0089" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0089" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278128" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278495" version="27">
      <metadata>
        <title>Test for java-1_5_0-ibm-alsa On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0089 at MITRE

Description

   Unspecified vulnerability in the Java Web Start, Java Plug-in component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23,
   and 1.4.2_25 allows remote attackers to affect availability via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0089" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0089" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278124" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278494" version="27">
      <metadata>
        <title>Test for java-1_5_0-ibm On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0089 at MITRE

Description

   Unspecified vulnerability in the Java Web Start, Java Plug-in component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23,
   and 1.4.2_25 allows remote attackers to affect availability via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0089" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0089" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278120" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278493" version="27">
      <metadata>
        <title>Test for java-1_5_0-ibm-plugin On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0088 at MITRE

Description

   Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23,
   1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.8 (AV:N/AC:M/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0088" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0088" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278140" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278492" version="27">
      <metadata>
        <title>Test for java-1_5_0-ibm-jdbc On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0088 at MITRE

Description

   Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23,
   1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.8 (AV:N/AC:M/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0088" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0088" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278136" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278491" version="27">
      <metadata>
        <title>Test for java-1_5_0-ibm-fonts On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0088 at MITRE

Description

   Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23,
   1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.8 (AV:N/AC:M/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0088" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0088" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278132" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278490" version="27">
      <metadata>
        <title>Test for java-1_5_0-ibm-devel On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0088 at MITRE

Description

   Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23,
   1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.8 (AV:N/AC:M/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0088" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0088" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278128" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278489" version="27">
      <metadata>
        <title>Test for java-1_5_0-ibm-alsa On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0088 at MITRE

Description

   Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23,
   1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.8 (AV:N/AC:M/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0088" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0088" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278124" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278488" version="27">
      <metadata>
        <title>Test for java-1_5_0-ibm On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0088 at MITRE

Description

   Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23,
   1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.8 (AV:N/AC:M/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0088" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0088" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278120" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278487" version="27">
      <metadata>
        <title>Test for java-1_5_0-ibm-plugin On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0087 at MITRE

Description

   Unspecified vulnerability in the Java Web Start, Java Plug-in component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23,
   1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0087" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0087" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278140" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278486" version="27">
      <metadata>
        <title>Test for java-1_5_0-ibm-jdbc On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0087 at MITRE

Description

   Unspecified vulnerability in the Java Web Start, Java Plug-in component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23,
   1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0087" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0087" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278136" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278485" version="27">
      <metadata>
        <title>Test for java-1_5_0-ibm-fonts On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0087 at MITRE

Description

   Unspecified vulnerability in the Java Web Start, Java Plug-in component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23,
   1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0087" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0087" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278132" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278484" version="27">
      <metadata>
        <title>Test for java-1_5_0-ibm-devel On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0087 at MITRE

Description

   Unspecified vulnerability in the Java Web Start, Java Plug-in component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23,
   1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0087" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0087" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278128" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278483" version="27">
      <metadata>
        <title>Test for java-1_5_0-ibm-alsa On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0087 at MITRE

Description

   Unspecified vulnerability in the Java Web Start, Java Plug-in component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23,
   1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0087" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0087" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278124" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278482" version="27">
      <metadata>
        <title>Test for java-1_5_0-ibm On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0087 at MITRE

Description

   Unspecified vulnerability in the Java Web Start, Java Plug-in component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23,
   1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0087" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0087" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278120" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278481" version="27">
      <metadata>
        <title>Test for java-1_5_0-ibm-plugin On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0085 at MITRE

Description

   Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23,
   1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.1 (AV:N/AC:H/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0085" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0085" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278140" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278480" version="27">
      <metadata>
        <title>Test for java-1_5_0-ibm-jdbc On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0085 at MITRE

Description

   Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23,
   1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.1 (AV:N/AC:H/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0085" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0085" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278136" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278479" version="27">
      <metadata>
        <title>Test for java-1_5_0-ibm-fonts On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0085 at MITRE

Description

   Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23,
   1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.1 (AV:N/AC:H/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0085" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0085" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278132" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278478" version="27">
      <metadata>
        <title>Test for java-1_5_0-ibm-devel On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0085 at MITRE

Description

   Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23,
   1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.1 (AV:N/AC:H/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0085" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0085" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278128" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278477" version="27">
      <metadata>
        <title>Test for java-1_5_0-ibm-alsa On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0085 at MITRE

Description

   Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23,
   1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.1 (AV:N/AC:H/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0085" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0085" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278124" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278476" version="27">
      <metadata>
        <title>Test for java-1_5_0-ibm On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0085 at MITRE

Description

   Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23,
   1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.1 (AV:N/AC:H/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0085" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0085" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278120" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278475" version="27">
      <metadata>
        <title>Test for java-1_5_0-ibm-plugin On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0084 at MITRE

Description

   Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and
   1.4.2_25 allows remote attackers to affect confidentiality via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0084" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0084" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278140" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278474" version="27">
      <metadata>
        <title>Test for java-1_5_0-ibm-jdbc On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0084 at MITRE

Description

   Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and
   1.4.2_25 allows remote attackers to affect confidentiality via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0084" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0084" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278136" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278473" version="27">
      <metadata>
        <title>Test for java-1_5_0-ibm-fonts On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0084 at MITRE

Description

   Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and
   1.4.2_25 allows remote attackers to affect confidentiality via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0084" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0084" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278132" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278472" version="27">
      <metadata>
        <title>Test for java-1_5_0-ibm-devel On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0084 at MITRE

Description

   Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and
   1.4.2_25 allows remote attackers to affect confidentiality via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0084" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0084" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278128" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278471" version="27">
      <metadata>
        <title>Test for java-1_5_0-ibm-alsa On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0084 at MITRE

Description

   Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and
   1.4.2_25 allows remote attackers to affect confidentiality via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0084" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0084" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278124" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278470" version="27">
      <metadata>
        <title>Test for java-1_5_0-ibm On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0084 at MITRE

Description

   Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and
   1.4.2_25 allows remote attackers to affect confidentiality via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0084" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0084" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278120" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278469" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner191-translations On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-3555 at MITRE

Description

   The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the
   Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Services (NSS) 3.12.4 and
   earlier, multiple Cisco products, and other products, does not properly associate renegotiation handshakes with an existing connection, which
   allows man-in-the-middle attackers to insert data into HTTPS sessions, and possibly other types of sessions protected by TLS or SSL, by
   sending an unauthenticated request that is processed retroactively by a server in a post-renegotiation context, related to a "plaintext
   injection" attack, aka the "Project Mogul" issue.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.4 (AV:N/AC:L/Au:N/C:N/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-3555" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-3555" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278248" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278468" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner191-gnomevfs On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-3555 at MITRE

Description

   The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the
   Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Services (NSS) 3.12.4 and
   earlier, multiple Cisco products, and other products, does not properly associate renegotiation handshakes with an existing connection, which
   allows man-in-the-middle attackers to insert data into HTTPS sessions, and possibly other types of sessions protected by TLS or SSL, by
   sending an unauthenticated request that is processed retroactively by a server in a post-renegotiation context, related to a "plaintext
   injection" attack, aka the "Project Mogul" issue.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.4 (AV:N/AC:L/Au:N/C:N/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-3555" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-3555" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278244" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278467" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner191 On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-3555 at MITRE

Description

   The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the
   Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Services (NSS) 3.12.4 and
   earlier, multiple Cisco products, and other products, does not properly associate renegotiation handshakes with an existing connection, which
   allows man-in-the-middle attackers to insert data into HTTPS sessions, and possibly other types of sessions protected by TLS or SSL, by
   sending an unauthenticated request that is processed retroactively by a server in a post-renegotiation context, related to a "plaintext
   injection" attack, aka the "Project Mogul" issue.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.4 (AV:N/AC:L/Au:N/C:N/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-3555" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-3555" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278240" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278466" version="27">
      <metadata>
        <title>Test for MozillaFirefox-translations On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-3555 at MITRE

Description

   The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the
   Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Services (NSS) 3.12.4 and
   earlier, multiple Cisco products, and other products, does not properly associate renegotiation handshakes with an existing connection, which
   allows man-in-the-middle attackers to insert data into HTTPS sessions, and possibly other types of sessions protected by TLS or SSL, by
   sending an unauthenticated request that is processed retroactively by a server in a post-renegotiation context, related to a "plaintext
   injection" attack, aka the "Project Mogul" issue.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.4 (AV:N/AC:L/Au:N/C:N/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-3555" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-3555" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278168" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278465" version="27">
      <metadata>
        <title>Test for MozillaFirefox On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-3555 at MITRE

Description

   The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the
   Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Services (NSS) 3.12.4 and
   earlier, multiple Cisco products, and other products, does not properly associate renegotiation handshakes with an existing connection, which
   allows man-in-the-middle attackers to insert data into HTTPS sessions, and possibly other types of sessions protected by TLS or SSL, by
   sending an unauthenticated request that is processed retroactively by a server in a post-renegotiation context, related to a "plaintext
   injection" attack, aka the "Project Mogul" issue.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.4 (AV:N/AC:L/Au:N/C:N/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-3555" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-3555" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278160" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278464" version="27">
      <metadata>
        <title>Test for compat-openssl097g On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-3555 at MITRE

Description

   The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the
   Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Services (NSS) 3.12.4 and
   earlier, multiple Cisco products, and other products, does not properly associate renegotiation handshakes with an existing connection, which
   allows man-in-the-middle attackers to insert data into HTTPS sessions, and possibly other types of sessions protected by TLS or SSL, by
   sending an unauthenticated request that is processed retroactively by a server in a post-renegotiation context, related to a "plaintext
   injection" attack, aka the "Project Mogul" issue.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.4 (AV:N/AC:L/Au:N/C:N/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-3555" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-3555" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278461" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278460" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner190-translations On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-3555 at MITRE

Description

   The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the
   Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Services (NSS) 3.12.4 and
   earlier, multiple Cisco products, and other products, does not properly associate renegotiation handshakes with an existing connection, which
   allows man-in-the-middle attackers to insert data into HTTPS sessions, and possibly other types of sessions protected by TLS or SSL, by
   sending an unauthenticated request that is processed retroactively by a server in a post-renegotiation context, related to a "plaintext
   injection" attack, aka the "Project Mogul" issue.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.4 (AV:N/AC:L/Au:N/C:N/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-3555" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-3555" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278200" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278459" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner190-gnomevfs On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-3555 at MITRE

Description

   The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the
   Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Services (NSS) 3.12.4 and
   earlier, multiple Cisco products, and other products, does not properly associate renegotiation handshakes with an existing connection, which
   allows man-in-the-middle attackers to insert data into HTTPS sessions, and possibly other types of sessions protected by TLS or SSL, by
   sending an unauthenticated request that is processed retroactively by a server in a post-renegotiation context, related to a "plaintext
   injection" attack, aka the "Project Mogul" issue.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.4 (AV:N/AC:L/Au:N/C:N/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-3555" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-3555" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278196" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278458" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner190 On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-3555 at MITRE

Description

   The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the
   Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Services (NSS) 3.12.4 and
   earlier, multiple Cisco products, and other products, does not properly associate renegotiation handshakes with an existing connection, which
   allows man-in-the-middle attackers to insert data into HTTPS sessions, and possibly other types of sessions protected by TLS or SSL, by
   sending an unauthenticated request that is processed retroactively by a server in a post-renegotiation context, related to a "plaintext
   injection" attack, aka the "Project Mogul" issue.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.4 (AV:N/AC:L/Au:N/C:N/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-3555" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-3555" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278192" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278457" version="27">
      <metadata>
        <title>Test for mozilla-nss-devel On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-3555 at MITRE

Description

   The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the
   Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Services (NSS) 3.12.4 and
   earlier, multiple Cisco products, and other products, does not properly associate renegotiation handshakes with an existing connection, which
   allows man-in-the-middle attackers to insert data into HTTPS sessions, and possibly other types of sessions protected by TLS or SSL, by
   sending an unauthenticated request that is processed retroactively by a server in a post-renegotiation context, related to a "plaintext
   injection" attack, aka the "Project Mogul" issue.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.4 (AV:N/AC:L/Au:N/C:N/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-3555" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-3555" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278454" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278453" version="27">
      <metadata>
        <title>Test for mozilla-nss On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-3555 at MITRE

Description

   The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the
   Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Services (NSS) 3.12.4 and
   earlier, multiple Cisco products, and other products, does not properly associate renegotiation handshakes with an existing connection, which
   allows man-in-the-middle attackers to insert data into HTTPS sessions, and possibly other types of sessions protected by TLS or SSL, by
   sending an unauthenticated request that is processed retroactively by a server in a post-renegotiation context, related to a "plaintext
   injection" attack, aka the "Project Mogul" issue.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.4 (AV:N/AC:L/Au:N/C:N/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-3555" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-3555" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278450" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278449" version="27">
      <metadata>
        <title>Test for mozilla-nspr-devel On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-3555 at MITRE

Description

   The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the
   Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Services (NSS) 3.12.4 and
   earlier, multiple Cisco products, and other products, does not properly associate renegotiation handshakes with an existing connection, which
   allows man-in-the-middle attackers to insert data into HTTPS sessions, and possibly other types of sessions protected by TLS or SSL, by
   sending an unauthenticated request that is processed retroactively by a server in a post-renegotiation context, related to a "plaintext
   injection" attack, aka the "Project Mogul" issue.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.4 (AV:N/AC:L/Au:N/C:N/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-3555" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-3555" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278446" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278445" version="27">
      <metadata>
        <title>Test for mozilla-nspr On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-3555 at MITRE

Description

   The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the
   Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Services (NSS) 3.12.4 and
   earlier, multiple Cisco products, and other products, does not properly associate renegotiation handshakes with an existing connection, which
   allows man-in-the-middle attackers to insert data into HTTPS sessions, and possibly other types of sessions protected by TLS or SSL, by
   sending an unauthenticated request that is processed retroactively by a server in a post-renegotiation context, related to a "plaintext
   injection" attack, aka the "Project Mogul" issue.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.4 (AV:N/AC:L/Au:N/C:N/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-3555" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-3555" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278442" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278441" version="27">
      <metadata>
        <title>Test for java-1_5_0-ibm-plugin On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-3555 at MITRE

Description

   The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the
   Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Services (NSS) 3.12.4 and
   earlier, multiple Cisco products, and other products, does not properly associate renegotiation handshakes with an existing connection, which
   allows man-in-the-middle attackers to insert data into HTTPS sessions, and possibly other types of sessions protected by TLS or SSL, by
   sending an unauthenticated request that is processed retroactively by a server in a post-renegotiation context, related to a "plaintext
   injection" attack, aka the "Project Mogul" issue.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.4 (AV:N/AC:L/Au:N/C:N/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-3555" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-3555" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278140" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278440" version="27">
      <metadata>
        <title>Test for java-1_5_0-ibm-jdbc On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-3555 at MITRE

Description

   The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the
   Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Services (NSS) 3.12.4 and
   earlier, multiple Cisco products, and other products, does not properly associate renegotiation handshakes with an existing connection, which
   allows man-in-the-middle attackers to insert data into HTTPS sessions, and possibly other types of sessions protected by TLS or SSL, by
   sending an unauthenticated request that is processed retroactively by a server in a post-renegotiation context, related to a "plaintext
   injection" attack, aka the "Project Mogul" issue.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.4 (AV:N/AC:L/Au:N/C:N/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-3555" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-3555" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278136" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278439" version="27">
      <metadata>
        <title>Test for java-1_5_0-ibm-fonts On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-3555 at MITRE

Description

   The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the
   Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Services (NSS) 3.12.4 and
   earlier, multiple Cisco products, and other products, does not properly associate renegotiation handshakes with an existing connection, which
   allows man-in-the-middle attackers to insert data into HTTPS sessions, and possibly other types of sessions protected by TLS or SSL, by
   sending an unauthenticated request that is processed retroactively by a server in a post-renegotiation context, related to a "plaintext
   injection" attack, aka the "Project Mogul" issue.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.4 (AV:N/AC:L/Au:N/C:N/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-3555" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-3555" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278132" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278438" version="27">
      <metadata>
        <title>Test for java-1_5_0-ibm-devel On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-3555 at MITRE

Description

   The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the
   Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Services (NSS) 3.12.4 and
   earlier, multiple Cisco products, and other products, does not properly associate renegotiation handshakes with an existing connection, which
   allows man-in-the-middle attackers to insert data into HTTPS sessions, and possibly other types of sessions protected by TLS or SSL, by
   sending an unauthenticated request that is processed retroactively by a server in a post-renegotiation context, related to a "plaintext
   injection" attack, aka the "Project Mogul" issue.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.4 (AV:N/AC:L/Au:N/C:N/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-3555" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-3555" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278128" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278437" version="27">
      <metadata>
        <title>Test for java-1_5_0-ibm-alsa On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-3555 at MITRE

Description

   The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the
   Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Services (NSS) 3.12.4 and
   earlier, multiple Cisco products, and other products, does not properly associate renegotiation handshakes with an existing connection, which
   allows man-in-the-middle attackers to insert data into HTTPS sessions, and possibly other types of sessions protected by TLS or SSL, by
   sending an unauthenticated request that is processed retroactively by a server in a post-renegotiation context, related to a "plaintext
   injection" attack, aka the "Project Mogul" issue.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.4 (AV:N/AC:L/Au:N/C:N/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-3555" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-3555" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278124" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278436" version="27">
      <metadata>
        <title>Test for java-1_5_0-ibm On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-3555 at MITRE

Description

   The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the
   Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Services (NSS) 3.12.4 and
   earlier, multiple Cisco products, and other products, does not properly associate renegotiation handshakes with an existing connection, which
   allows man-in-the-middle attackers to insert data into HTTPS sessions, and possibly other types of sessions protected by TLS or SSL, by
   sending an unauthenticated request that is processed retroactively by a server in a post-renegotiation context, related to a "plaintext
   injection" attack, aka the "Project Mogul" issue.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.4 (AV:N/AC:L/Au:N/C:N/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-3555" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-3555" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278120" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278435" version="27">
      <metadata>
        <title>Test for java-1_4_2-ibm-jdbc On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-3555 at MITRE

Description

   The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the
   Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Services (NSS) 3.12.4 and
   earlier, multiple Cisco products, and other products, does not properly associate renegotiation handshakes with an existing connection, which
   allows man-in-the-middle attackers to insert data into HTTPS sessions, and possibly other types of sessions protected by TLS or SSL, by
   sending an unauthenticated request that is processed retroactively by a server in a post-renegotiation context, related to a "plaintext
   injection" attack, aka the "Project Mogul" issue.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.4 (AV:N/AC:L/Au:N/C:N/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-3555" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-3555" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278152" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278434" version="27">
      <metadata>
        <title>Test for java-1_4_2-ibm-devel On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-3555 at MITRE

Description

   The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the
   Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Services (NSS) 3.12.4 and
   earlier, multiple Cisco products, and other products, does not properly associate renegotiation handshakes with an existing connection, which
   allows man-in-the-middle attackers to insert data into HTTPS sessions, and possibly other types of sessions protected by TLS or SSL, by
   sending an unauthenticated request that is processed retroactively by a server in a post-renegotiation context, related to a "plaintext
   injection" attack, aka the "Project Mogul" issue.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.4 (AV:N/AC:L/Au:N/C:N/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-3555" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-3555" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278148" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278433" version="27">
      <metadata>
        <title>Test for java-1_4_2-ibm On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-3555 at MITRE

Description

   The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the
   Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Services (NSS) 3.12.4 and
   earlier, multiple Cisco products, and other products, does not properly associate renegotiation handshakes with an existing connection, which
   allows man-in-the-middle attackers to insert data into HTTPS sessions, and possibly other types of sessions protected by TLS or SSL, by
   sending an unauthenticated request that is processed retroactively by a server in a post-renegotiation context, related to a "plaintext
   injection" attack, aka the "Project Mogul" issue.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.4 (AV:N/AC:L/Au:N/C:N/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-3555" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-3555" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278144" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278432" version="27">
      <metadata>
        <title>Test for openssl-doc On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-3555 at MITRE

Description

   The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the
   Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Services (NSS) 3.12.4 and
   earlier, multiple Cisco products, and other products, does not properly associate renegotiation handshakes with an existing connection, which
   allows man-in-the-middle attackers to insert data into HTTPS sessions, and possibly other types of sessions protected by TLS or SSL, by
   sending an unauthenticated request that is processed retroactively by a server in a post-renegotiation context, related to a "plaintext
   injection" attack, aka the "Project Mogul" issue.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.4 (AV:N/AC:L/Au:N/C:N/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-3555" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-3555" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278429" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278428" version="27">
      <metadata>
        <title>Test for openssl-devel On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-3555 at MITRE

Description

   The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the
   Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Services (NSS) 3.12.4 and
   earlier, multiple Cisco products, and other products, does not properly associate renegotiation handshakes with an existing connection, which
   allows man-in-the-middle attackers to insert data into HTTPS sessions, and possibly other types of sessions protected by TLS or SSL, by
   sending an unauthenticated request that is processed retroactively by a server in a post-renegotiation context, related to a "plaintext
   injection" attack, aka the "Project Mogul" issue.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.4 (AV:N/AC:L/Au:N/C:N/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-3555" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-3555" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278425" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278424" version="27">
      <metadata>
        <title>Test for openssl On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-3555 at MITRE

Description

   The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the
   Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Services (NSS) 3.12.4 and
   earlier, multiple Cisco products, and other products, does not properly associate renegotiation handshakes with an existing connection, which
   allows man-in-the-middle attackers to insert data into HTTPS sessions, and possibly other types of sessions protected by TLS or SSL, by
   sending an unauthenticated request that is processed retroactively by a server in a post-renegotiation context, related to a "plaintext
   injection" attack, aka the "Project Mogul" issue.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.4 (AV:N/AC:L/Au:N/C:N/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-3555" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-3555" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278421" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278420" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner191-translations On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-1203 at MITRE

Description

   The JavaScript engine in Mozilla Firefox 3.6.x before 3.6.4 allow remote attackers to cause a denial of service (memory corruption and
   application crash) or possibly execute arbitrary code via vectors that trigger an assertion failure in jstracer.cpp.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-1203" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-1203" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278248" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278419" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner191-gnomevfs On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-1203 at MITRE

Description

   The JavaScript engine in Mozilla Firefox 3.6.x before 3.6.4 allow remote attackers to cause a denial of service (memory corruption and
   application crash) or possibly execute arbitrary code via vectors that trigger an assertion failure in jstracer.cpp.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-1203" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-1203" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278244" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278418" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner191 On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-1203 at MITRE

Description

   The JavaScript engine in Mozilla Firefox 3.6.x before 3.6.4 allow remote attackers to cause a denial of service (memory corruption and
   application crash) or possibly execute arbitrary code via vectors that trigger an assertion failure in jstracer.cpp.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-1203" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-1203" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278240" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278417" version="27">
      <metadata>
        <title>Test for MozillaFirefox-translations On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-1203 at MITRE

Description

   The JavaScript engine in Mozilla Firefox 3.6.x before 3.6.4 allow remote attackers to cause a denial of service (memory corruption and
   application crash) or possibly execute arbitrary code via vectors that trigger an assertion failure in jstracer.cpp.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-1203" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-1203" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278168" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278416" version="27">
      <metadata>
        <title>Test for MozillaFirefox On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-1203 at MITRE

Description

   The JavaScript engine in Mozilla Firefox 3.6.x before 3.6.4 allow remote attackers to cause a denial of service (memory corruption and
   application crash) or possibly execute arbitrary code via vectors that trigger an assertion failure in jstracer.cpp.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-1203" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-1203" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278160" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278415" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner191-translations On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-1202 at MITRE

Description

   Multiple unspecified vulnerabilities in the JavaScript engine in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, Thunderbird
   before 3.0.5, and SeaMonkey before 2.0.5 allow remote attackers to cause a denial of service (memory corruption and application crash) or
   possibly execute arbitrary code via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-1202" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-1202" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278248" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278414" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner191-gnomevfs On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-1202 at MITRE

Description

   Multiple unspecified vulnerabilities in the JavaScript engine in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, Thunderbird
   before 3.0.5, and SeaMonkey before 2.0.5 allow remote attackers to cause a denial of service (memory corruption and application crash) or
   possibly execute arbitrary code via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-1202" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-1202" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278244" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278413" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner191 On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-1202 at MITRE

Description

   Multiple unspecified vulnerabilities in the JavaScript engine in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, Thunderbird
   before 3.0.5, and SeaMonkey before 2.0.5 allow remote attackers to cause a denial of service (memory corruption and application crash) or
   possibly execute arbitrary code via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-1202" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-1202" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278240" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278412" version="27">
      <metadata>
        <title>Test for MozillaFirefox-translations On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-1202 at MITRE

Description

   Multiple unspecified vulnerabilities in the JavaScript engine in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, Thunderbird
   before 3.0.5, and SeaMonkey before 2.0.5 allow remote attackers to cause a denial of service (memory corruption and application crash) or
   possibly execute arbitrary code via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-1202" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-1202" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278168" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278411" version="27">
      <metadata>
        <title>Test for MozillaFirefox On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-1202 at MITRE

Description

   Multiple unspecified vulnerabilities in the JavaScript engine in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, Thunderbird
   before 3.0.5, and SeaMonkey before 2.0.5 allow remote attackers to cause a denial of service (memory corruption and application crash) or
   possibly execute arbitrary code via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-1202" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-1202" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278160" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278410" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner191-translations On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-1201 at MITRE

Description

   Unspecified vulnerability in the browser engine in Mozilla Firefox 3.5.x before 3.5.10, Thunderbird before 3.0.5, and SeaMonkey before 2.0.5
   allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown
   vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-1201" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-1201" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278248" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278409" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner191-gnomevfs On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-1201 at MITRE

Description

   Unspecified vulnerability in the browser engine in Mozilla Firefox 3.5.x before 3.5.10, Thunderbird before 3.0.5, and SeaMonkey before 2.0.5
   allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown
   vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-1201" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-1201" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278244" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278408" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner191 On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-1201 at MITRE

Description

   Unspecified vulnerability in the browser engine in Mozilla Firefox 3.5.x before 3.5.10, Thunderbird before 3.0.5, and SeaMonkey before 2.0.5
   allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown
   vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-1201" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-1201" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278240" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278407" version="27">
      <metadata>
        <title>Test for MozillaFirefox-translations On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-1201 at MITRE

Description

   Unspecified vulnerability in the browser engine in Mozilla Firefox 3.5.x before 3.5.10, Thunderbird before 3.0.5, and SeaMonkey before 2.0.5
   allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown
   vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-1201" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-1201" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278168" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278406" version="27">
      <metadata>
        <title>Test for MozillaFirefox On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-1201 at MITRE

Description

   Unspecified vulnerability in the browser engine in Mozilla Firefox 3.5.x before 3.5.10, Thunderbird before 3.0.5, and SeaMonkey before 2.0.5
   allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown
   vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-1201" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-1201" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278160" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278405" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner191-translations On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-1200 at MITRE

Description

   Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, Thunderbird before
   3.0.5, and SeaMonkey before 2.0.5 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly
   execute arbitrary code via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-1200" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-1200" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278248" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278404" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner191-gnomevfs On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-1200 at MITRE

Description

   Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, Thunderbird before
   3.0.5, and SeaMonkey before 2.0.5 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly
   execute arbitrary code via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-1200" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-1200" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278244" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278403" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner191 On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-1200 at MITRE

Description

   Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, Thunderbird before
   3.0.5, and SeaMonkey before 2.0.5 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly
   execute arbitrary code via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-1200" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-1200" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278240" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278402" version="27">
      <metadata>
        <title>Test for MozillaFirefox-translations On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-1200 at MITRE

Description

   Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, Thunderbird before
   3.0.5, and SeaMonkey before 2.0.5 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly
   execute arbitrary code via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-1200" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-1200" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278168" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278401" version="27">
      <metadata>
        <title>Test for MozillaFirefox On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-1200 at MITRE

Description

   Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, Thunderbird before
   3.0.5, and SeaMonkey before 2.0.5 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly
   execute arbitrary code via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-1200" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-1200" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278160" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278400" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner191-translations On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-1199 at MITRE

Description

   Integer overflow in the XSLT node sorting implementation in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, Thunderbird before
   3.0.5, and SeaMonkey before 2.0.5 allows remote attackers to execute arbitrary code via a large text value for a node.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-1199" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-1199" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278248" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278399" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner191-gnomevfs On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-1199 at MITRE

Description

   Integer overflow in the XSLT node sorting implementation in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, Thunderbird before
   3.0.5, and SeaMonkey before 2.0.5 allows remote attackers to execute arbitrary code via a large text value for a node.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-1199" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-1199" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278244" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278398" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner191 On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-1199 at MITRE

Description

   Integer overflow in the XSLT node sorting implementation in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, Thunderbird before
   3.0.5, and SeaMonkey before 2.0.5 allows remote attackers to execute arbitrary code via a large text value for a node.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-1199" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-1199" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278240" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278397" version="27">
      <metadata>
        <title>Test for MozillaFirefox-translations On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-1199 at MITRE

Description

   Integer overflow in the XSLT node sorting implementation in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, Thunderbird before
   3.0.5, and SeaMonkey before 2.0.5 allows remote attackers to execute arbitrary code via a large text value for a node.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-1199" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-1199" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278168" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278396" version="27">
      <metadata>
        <title>Test for MozillaFirefox On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-1199 at MITRE

Description

   Integer overflow in the XSLT node sorting implementation in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, Thunderbird before
   3.0.5, and SeaMonkey before 2.0.5 allows remote attackers to execute arbitrary code via a large text value for a node.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-1199" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-1199" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278160" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278395" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner191-translations On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-1198 at MITRE

Description

   Use-after-free vulnerability in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before 2.0.5, allows remote
   attackers to execute arbitrary code via vectors involving multiple plugin instances.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-1198" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-1198" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278248" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278394" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner191-gnomevfs On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-1198 at MITRE

Description

   Use-after-free vulnerability in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before 2.0.5, allows remote
   attackers to execute arbitrary code via vectors involving multiple plugin instances.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-1198" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-1198" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278244" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278393" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner191 On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-1198 at MITRE

Description

   Use-after-free vulnerability in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before 2.0.5, allows remote
   attackers to execute arbitrary code via vectors involving multiple plugin instances.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-1198" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-1198" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278240" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278392" version="27">
      <metadata>
        <title>Test for MozillaFirefox-translations On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-1198 at MITRE

Description

   Use-after-free vulnerability in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before 2.0.5, allows remote
   attackers to execute arbitrary code via vectors involving multiple plugin instances.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-1198" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-1198" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278168" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278391" version="27">
      <metadata>
        <title>Test for MozillaFirefox On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-1198 at MITRE

Description

   Use-after-free vulnerability in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before 2.0.5, allows remote
   attackers to execute arbitrary code via vectors involving multiple plugin instances.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-1198" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-1198" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278160" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278390" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner191-translations On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-1197 at MITRE

Description

   Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before 2.0.5, does not properly handle situations in which both
   "Content-Disposition: attachment" and "Content-Type: multipart" are present in HTTP headers, which allows remote attackers to conduct
   cross-site scripting (XSS) attacks via an uploaded HTML document.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-1197" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-1197" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278248" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278389" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner191-gnomevfs On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-1197 at MITRE

Description

   Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before 2.0.5, does not properly handle situations in which both
   "Content-Disposition: attachment" and "Content-Type: multipart" are present in HTTP headers, which allows remote attackers to conduct
   cross-site scripting (XSS) attacks via an uploaded HTML document.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-1197" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-1197" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278244" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278388" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner191 On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-1197 at MITRE

Description

   Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before 2.0.5, does not properly handle situations in which both
   "Content-Disposition: attachment" and "Content-Type: multipart" are present in HTTP headers, which allows remote attackers to conduct
   cross-site scripting (XSS) attacks via an uploaded HTML document.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-1197" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-1197" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278240" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278387" version="27">
      <metadata>
        <title>Test for MozillaFirefox-translations On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-1197 at MITRE

Description

   Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before 2.0.5, does not properly handle situations in which both
   "Content-Disposition: attachment" and "Content-Type: multipart" are present in HTTP headers, which allows remote attackers to conduct
   cross-site scripting (XSS) attacks via an uploaded HTML document.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-1197" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-1197" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278168" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278386" version="27">
      <metadata>
        <title>Test for MozillaFirefox On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-1197 at MITRE

Description

   Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before 2.0.5, does not properly handle situations in which both
   "Content-Disposition: attachment" and "Content-Type: multipart" are present in HTTP headers, which allows remote attackers to conduct
   cross-site scripting (XSS) attacks via an uploaded HTML document.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-1197" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-1197" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278160" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278385" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner191-translations On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-1196 at MITRE

Description

   Integer overflow in the nsGenericDOMDataNode::SetTextInternal function in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4,
   Thunderbird before 3.0.5, and SeaMonkey before 2.0.5 allows remote attackers to execute arbitrary code via a DOM node with a long text value
   that triggers a heap-based buffer overflow.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-1196" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-1196" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278248" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278384" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner191-gnomevfs On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-1196 at MITRE

Description

   Integer overflow in the nsGenericDOMDataNode::SetTextInternal function in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4,
   Thunderbird before 3.0.5, and SeaMonkey before 2.0.5 allows remote attackers to execute arbitrary code via a DOM node with a long text value
   that triggers a heap-based buffer overflow.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-1196" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-1196" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278244" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278383" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner191 On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-1196 at MITRE

Description

   Integer overflow in the nsGenericDOMDataNode::SetTextInternal function in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4,
   Thunderbird before 3.0.5, and SeaMonkey before 2.0.5 allows remote attackers to execute arbitrary code via a DOM node with a long text value
   that triggers a heap-based buffer overflow.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-1196" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-1196" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278240" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278382" version="27">
      <metadata>
        <title>Test for MozillaFirefox-translations On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-1196 at MITRE

Description

   Integer overflow in the nsGenericDOMDataNode::SetTextInternal function in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4,
   Thunderbird before 3.0.5, and SeaMonkey before 2.0.5 allows remote attackers to execute arbitrary code via a DOM node with a long text value
   that triggers a heap-based buffer overflow.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-1196" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-1196" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278168" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278381" version="27">
      <metadata>
        <title>Test for MozillaFirefox On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-1196 at MITRE

Description

   Integer overflow in the nsGenericDOMDataNode::SetTextInternal function in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4,
   Thunderbird before 3.0.5, and SeaMonkey before 2.0.5 allows remote attackers to execute arbitrary code via a DOM node with a long text value
   that triggers a heap-based buffer overflow.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-1196" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-1196" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278160" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278380" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner191-translations On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-1125 at MITRE

Description

   The JavaScript implementation in Mozilla Firefox 3.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before 2.0.5, allows remote
   attackers to send selected keystrokes to a form field in a hidden frame, instead of the intended form field in a visible frame, via certain
   calls to the focus method.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.8 (AV:N/AC:M/Au:N/C:P/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-1125" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-1125" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278248" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278379" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner191-gnomevfs On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-1125 at MITRE

Description

   The JavaScript implementation in Mozilla Firefox 3.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before 2.0.5, allows remote
   attackers to send selected keystrokes to a form field in a hidden frame, instead of the intended form field in a visible frame, via certain
   calls to the focus method.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.8 (AV:N/AC:M/Au:N/C:P/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-1125" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-1125" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278244" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278378" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner191 On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-1125 at MITRE

Description

   The JavaScript implementation in Mozilla Firefox 3.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before 2.0.5, allows remote
   attackers to send selected keystrokes to a form field in a hidden frame, instead of the intended form field in a visible frame, via certain
   calls to the focus method.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.8 (AV:N/AC:M/Au:N/C:P/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-1125" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-1125" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278240" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278377" version="27">
      <metadata>
        <title>Test for MozillaFirefox-translations On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-1125 at MITRE

Description

   The JavaScript implementation in Mozilla Firefox 3.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before 2.0.5, allows remote
   attackers to send selected keystrokes to a form field in a hidden frame, instead of the intended form field in a visible frame, via certain
   calls to the focus method.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.8 (AV:N/AC:M/Au:N/C:P/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-1125" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-1125" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278168" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278376" version="27">
      <metadata>
        <title>Test for MozillaFirefox On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-1125 at MITRE

Description

   The JavaScript implementation in Mozilla Firefox 3.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before 2.0.5, allows remote
   attackers to send selected keystrokes to a form field in a hidden frame, instead of the intended form field in a visible frame, via certain
   calls to the focus method.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.8 (AV:N/AC:M/Au:N/C:P/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-1125" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-1125" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278160" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278375" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner191-translations On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-1121 at MITRE

Description

   Mozilla Firefox 3.6.x before 3.6.3 does not properly manage the scopes of DOM nodes that are moved from one document to another, which allows
   remote attackers to conduct use-after-free attacks and execute arbitrary code via unspecified vectors involving improper interaction with
   garbage collection, as demonstrated by Nils during a Pwn2Own competition at CanSecWest 2010.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-1121" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-1121" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278248" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278374" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner191-gnomevfs On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-1121 at MITRE

Description

   Mozilla Firefox 3.6.x before 3.6.3 does not properly manage the scopes of DOM nodes that are moved from one document to another, which allows
   remote attackers to conduct use-after-free attacks and execute arbitrary code via unspecified vectors involving improper interaction with
   garbage collection, as demonstrated by Nils during a Pwn2Own competition at CanSecWest 2010.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-1121" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-1121" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278244" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278373" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner191 On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-1121 at MITRE

Description

   Mozilla Firefox 3.6.x before 3.6.3 does not properly manage the scopes of DOM nodes that are moved from one document to another, which allows
   remote attackers to conduct use-after-free attacks and execute arbitrary code via unspecified vectors involving improper interaction with
   garbage collection, as demonstrated by Nils during a Pwn2Own competition at CanSecWest 2010.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-1121" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-1121" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278240" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278372" version="27">
      <metadata>
        <title>Test for MozillaFirefox-translations On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-1121 at MITRE

Description

   Mozilla Firefox 3.6.x before 3.6.3 does not properly manage the scopes of DOM nodes that are moved from one document to another, which allows
   remote attackers to conduct use-after-free attacks and execute arbitrary code via unspecified vectors involving improper interaction with
   garbage collection, as demonstrated by Nils during a Pwn2Own competition at CanSecWest 2010.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-1121" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-1121" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278168" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278371" version="27">
      <metadata>
        <title>Test for MozillaFirefox On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-1121 at MITRE

Description

   Mozilla Firefox 3.6.x before 3.6.3 does not properly manage the scopes of DOM nodes that are moved from one document to another, which allows
   remote attackers to conduct use-after-free attacks and execute arbitrary code via unspecified vectors involving improper interaction with
   garbage collection, as demonstrated by Nils during a Pwn2Own competition at CanSecWest 2010.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-1121" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-1121" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278160" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278370" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner191-translations On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0183 at MITRE

Description

   Use-after-free vulnerability in the nsCycleCollector::MarkRoots function in Mozilla Firefox 3.5.x before 3.5.10 and SeaMonkey before 2.0.5
   allows remote attackers to execute arbitrary code via a crafted HTML document, related to an improper frame construction process for menus.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0183" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0183" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278248" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278369" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner191-gnomevfs On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0183 at MITRE

Description

   Use-after-free vulnerability in the nsCycleCollector::MarkRoots function in Mozilla Firefox 3.5.x before 3.5.10 and SeaMonkey before 2.0.5
   allows remote attackers to execute arbitrary code via a crafted HTML document, related to an improper frame construction process for menus.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0183" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0183" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278244" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278368" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner191 On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0183 at MITRE

Description

   Use-after-free vulnerability in the nsCycleCollector::MarkRoots function in Mozilla Firefox 3.5.x before 3.5.10 and SeaMonkey before 2.0.5
   allows remote attackers to execute arbitrary code via a crafted HTML document, related to an improper frame construction process for menus.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0183" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0183" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278240" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278367" version="27">
      <metadata>
        <title>Test for MozillaFirefox-translations On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0183 at MITRE

Description

   Use-after-free vulnerability in the nsCycleCollector::MarkRoots function in Mozilla Firefox 3.5.x before 3.5.10 and SeaMonkey before 2.0.5
   allows remote attackers to execute arbitrary code via a crafted HTML document, related to an improper frame construction process for menus.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0183" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0183" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278168" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278366" version="27">
      <metadata>
        <title>Test for MozillaFirefox On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0183 at MITRE

Description

   Use-after-free vulnerability in the nsCycleCollector::MarkRoots function in Mozilla Firefox 3.5.x before 3.5.10 and SeaMonkey before 2.0.5
   allows remote attackers to execute arbitrary code via a crafted HTML document, related to an improper frame construction process for menus.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0183" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0183" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278160" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278365" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner191-translations On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2008-5913 at MITRE

Description

   The Math.random function in the JavaScript implementation in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before
   2.0.5, uses a random number generator that is seeded only once per browser session, which makes it easier for remote attackers to track a
   user, or trick a user into acting upon a spoofed pop-up message, by calculating the seed value, related to a "temporary footprint" and an
   "in-session phishing attack."
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.1 (AV:N/AC:H/Au:S/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2008-5913" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2008-5913" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278248" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278364" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner191-gnomevfs On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2008-5913 at MITRE

Description

   The Math.random function in the JavaScript implementation in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before
   2.0.5, uses a random number generator that is seeded only once per browser session, which makes it easier for remote attackers to track a
   user, or trick a user into acting upon a spoofed pop-up message, by calculating the seed value, related to a "temporary footprint" and an
   "in-session phishing attack."
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.1 (AV:N/AC:H/Au:S/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2008-5913" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2008-5913" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278244" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278363" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner191 On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2008-5913 at MITRE

Description

   The Math.random function in the JavaScript implementation in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before
   2.0.5, uses a random number generator that is seeded only once per browser session, which makes it easier for remote attackers to track a
   user, or trick a user into acting upon a spoofed pop-up message, by calculating the seed value, related to a "temporary footprint" and an
   "in-session phishing attack."
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.1 (AV:N/AC:H/Au:S/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2008-5913" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2008-5913" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278240" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278362" version="27">
      <metadata>
        <title>Test for MozillaFirefox-translations On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2008-5913 at MITRE

Description

   The Math.random function in the JavaScript implementation in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before
   2.0.5, uses a random number generator that is seeded only once per browser session, which makes it easier for remote attackers to track a
   user, or trick a user into acting upon a spoofed pop-up message, by calculating the seed value, related to a "temporary footprint" and an
   "in-session phishing attack."
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.1 (AV:N/AC:H/Au:S/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2008-5913" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2008-5913" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278168" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278361" version="27">
      <metadata>
        <title>Test for MozillaFirefox On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2008-5913 at MITRE

Description

   The Math.random function in the JavaScript implementation in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before
   2.0.5, uses a random number generator that is seeded only once per browser session, which makes it easier for remote attackers to track a
   user, or trick a user into acting upon a spoofed pop-up message, by calculating the seed value, related to a "temporary footprint" and an
   "in-session phishing attack."
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.1 (AV:N/AC:H/Au:S/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2008-5913" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2008-5913" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278160" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278360" version="27">
      <metadata>
        <title>Test for kernel-xenpae On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-1087 at MITRE

Description

   The nfs_wait_on_request function in fs/nfs/pagelist.c in Linux kernel 2.6.x through 2.6.33-rc5 allows attackers to cause a denial of service
   (Oops) via unknown vectors related to truncating a file and an operation that is not interruptible.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.8 (AV:N/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-1087" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-1087" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278342" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278359" version="27">
      <metadata>
        <title>Test for kernel-xen On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-1087 at MITRE

Description

   The nfs_wait_on_request function in fs/nfs/pagelist.c in Linux kernel 2.6.x through 2.6.33-rc5 allows attackers to cause a denial of service
   (Oops) via unknown vectors related to truncating a file and an operation that is not interruptible.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.8 (AV:N/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-1087" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-1087" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278338" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278358" version="27">
      <metadata>
        <title>Test for kernel-vmipae On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-1087 at MITRE

Description

   The nfs_wait_on_request function in fs/nfs/pagelist.c in Linux kernel 2.6.x through 2.6.33-rc5 allows attackers to cause a denial of service
   (Oops) via unknown vectors related to truncating a file and an operation that is not interruptible.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.8 (AV:N/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-1087" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-1087" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278334" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278357" version="27">
      <metadata>
        <title>Test for kernel-vmi On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-1087 at MITRE

Description

   The nfs_wait_on_request function in fs/nfs/pagelist.c in Linux kernel 2.6.x through 2.6.33-rc5 allows attackers to cause a denial of service
   (Oops) via unknown vectors related to truncating a file and an operation that is not interruptible.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.8 (AV:N/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-1087" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-1087" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278330" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278356" version="27">
      <metadata>
        <title>Test for kernel-syms On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-1087 at MITRE

Description

   The nfs_wait_on_request function in fs/nfs/pagelist.c in Linux kernel 2.6.x through 2.6.33-rc5 allows attackers to cause a denial of service
   (Oops) via unknown vectors related to truncating a file and an operation that is not interruptible.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.8 (AV:N/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-1087" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-1087" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278326" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278355" version="27">
      <metadata>
        <title>Test for kernel-source On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-1087 at MITRE

Description

   The nfs_wait_on_request function in fs/nfs/pagelist.c in Linux kernel 2.6.x through 2.6.33-rc5 allows attackers to cause a denial of service
   (Oops) via unknown vectors related to truncating a file and an operation that is not interruptible.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.8 (AV:N/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-1087" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-1087" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278322" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278354" version="27">
      <metadata>
        <title>Test for kernel-smp On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-1087 at MITRE

Description

   The nfs_wait_on_request function in fs/nfs/pagelist.c in Linux kernel 2.6.x through 2.6.33-rc5 allows attackers to cause a denial of service
   (Oops) via unknown vectors related to truncating a file and an operation that is not interruptible.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.8 (AV:N/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-1087" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-1087" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278318" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278353" version="27">
      <metadata>
        <title>Test for kernel-kdumppae On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-1087 at MITRE

Description

   The nfs_wait_on_request function in fs/nfs/pagelist.c in Linux kernel 2.6.x through 2.6.33-rc5 allows attackers to cause a denial of service
   (Oops) via unknown vectors related to truncating a file and an operation that is not interruptible.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.8 (AV:N/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-1087" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-1087" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278350" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278349" version="27">
      <metadata>
        <title>Test for kernel-kdump On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-1087 at MITRE

Description

   The nfs_wait_on_request function in fs/nfs/pagelist.c in Linux kernel 2.6.x through 2.6.33-rc5 allows attackers to cause a denial of service
   (Oops) via unknown vectors related to truncating a file and an operation that is not interruptible.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.8 (AV:N/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-1087" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-1087" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278314" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278348" version="27">
      <metadata>
        <title>Test for kernel-default On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-1087 at MITRE

Description

   The nfs_wait_on_request function in fs/nfs/pagelist.c in Linux kernel 2.6.x through 2.6.33-rc5 allows attackers to cause a denial of service
   (Oops) via unknown vectors related to truncating a file and an operation that is not interruptible.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.8 (AV:N/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-1087" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-1087" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278310" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278347" version="27">
      <metadata>
        <title>Test for kernel-debug On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-1087 at MITRE

Description

   The nfs_wait_on_request function in fs/nfs/pagelist.c in Linux kernel 2.6.x through 2.6.33-rc5 allows attackers to cause a denial of service
   (Oops) via unknown vectors related to truncating a file and an operation that is not interruptible.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.8 (AV:N/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-1087" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-1087" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278306" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278346" version="27">
      <metadata>
        <title>Test for kernel-bigsmp On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-1087 at MITRE

Description

   The nfs_wait_on_request function in fs/nfs/pagelist.c in Linux kernel 2.6.x through 2.6.33-rc5 allows attackers to cause a denial of service
   (Oops) via unknown vectors related to truncating a file and an operation that is not interruptible.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.8 (AV:N/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-1087" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-1087" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278302" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278345" version="27">
      <metadata>
        <title>Test for kernel-xenpae On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-1389 at MITRE

Description

   Buffer overflow in the RTL8169 NIC driver (drivers/net/r8169.c) in the Linux kernel before 2.6.30 allows remote attackers to cause a denial
   of service (kernel memory corruption and crash) via a long packet.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.8 (AV:N/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-1389" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-1389" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278342" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278341" version="27">
      <metadata>
        <title>Test for kernel-xen On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-1389 at MITRE

Description

   Buffer overflow in the RTL8169 NIC driver (drivers/net/r8169.c) in the Linux kernel before 2.6.30 allows remote attackers to cause a denial
   of service (kernel memory corruption and crash) via a long packet.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.8 (AV:N/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-1389" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-1389" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278338" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278337" version="27">
      <metadata>
        <title>Test for kernel-vmipae On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-1389 at MITRE

Description

   Buffer overflow in the RTL8169 NIC driver (drivers/net/r8169.c) in the Linux kernel before 2.6.30 allows remote attackers to cause a denial
   of service (kernel memory corruption and crash) via a long packet.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.8 (AV:N/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-1389" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-1389" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278334" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278333" version="27">
      <metadata>
        <title>Test for kernel-vmi On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-1389 at MITRE

Description

   Buffer overflow in the RTL8169 NIC driver (drivers/net/r8169.c) in the Linux kernel before 2.6.30 allows remote attackers to cause a denial
   of service (kernel memory corruption and crash) via a long packet.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.8 (AV:N/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-1389" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-1389" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278330" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278329" version="27">
      <metadata>
        <title>Test for kernel-syms On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-1389 at MITRE

Description

   Buffer overflow in the RTL8169 NIC driver (drivers/net/r8169.c) in the Linux kernel before 2.6.30 allows remote attackers to cause a denial
   of service (kernel memory corruption and crash) via a long packet.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.8 (AV:N/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-1389" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-1389" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278326" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278325" version="27">
      <metadata>
        <title>Test for kernel-source On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-1389 at MITRE

Description

   Buffer overflow in the RTL8169 NIC driver (drivers/net/r8169.c) in the Linux kernel before 2.6.30 allows remote attackers to cause a denial
   of service (kernel memory corruption and crash) via a long packet.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.8 (AV:N/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-1389" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-1389" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278322" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278321" version="27">
      <metadata>
        <title>Test for kernel-smp On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-1389 at MITRE

Description

   Buffer overflow in the RTL8169 NIC driver (drivers/net/r8169.c) in the Linux kernel before 2.6.30 allows remote attackers to cause a denial
   of service (kernel memory corruption and crash) via a long packet.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.8 (AV:N/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-1389" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-1389" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278318" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278317" version="27">
      <metadata>
        <title>Test for kernel-kdump On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-1389 at MITRE

Description

   Buffer overflow in the RTL8169 NIC driver (drivers/net/r8169.c) in the Linux kernel before 2.6.30 allows remote attackers to cause a denial
   of service (kernel memory corruption and crash) via a long packet.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.8 (AV:N/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-1389" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-1389" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278314" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278313" version="27">
      <metadata>
        <title>Test for kernel-default On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-1389 at MITRE

Description

   Buffer overflow in the RTL8169 NIC driver (drivers/net/r8169.c) in the Linux kernel before 2.6.30 allows remote attackers to cause a denial
   of service (kernel memory corruption and crash) via a long packet.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.8 (AV:N/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-1389" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-1389" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278310" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278309" version="27">
      <metadata>
        <title>Test for kernel-debug On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-1389 at MITRE

Description

   Buffer overflow in the RTL8169 NIC driver (drivers/net/r8169.c) in the Linux kernel before 2.6.30 allows remote attackers to cause a denial
   of service (kernel memory corruption and crash) via a long packet.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.8 (AV:N/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-1389" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-1389" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278306" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278305" version="27">
      <metadata>
        <title>Test for kernel-bigsmp On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-1389 at MITRE

Description

   Buffer overflow in the RTL8169 NIC driver (drivers/net/r8169.c) in the Linux kernel before 2.6.30 allows remote attackers to cause a denial
   of service (kernel memory corruption and crash) via a long packet.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.8 (AV:N/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-1389" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-1389" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278302" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278301" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner191-translations On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-2753 at MITRE

Description

   Integer overflow in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x before 3.1.1, and
   SeaMonkey before 2.0.6 allows remote attackers to execute arbitrary code via a large selection attribute in a XUL tree element, which
   triggers a use-after-free.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-2753" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-2753" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278248" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278300" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner191-gnomevfs On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-2753 at MITRE

Description

   Integer overflow in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x before 3.1.1, and
   SeaMonkey before 2.0.6 allows remote attackers to execute arbitrary code via a large selection attribute in a XUL tree element, which
   triggers a use-after-free.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-2753" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-2753" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278244" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278299" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner191 On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-2753 at MITRE

Description

   Integer overflow in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x before 3.1.1, and
   SeaMonkey before 2.0.6 allows remote attackers to execute arbitrary code via a large selection attribute in a XUL tree element, which
   triggers a use-after-free.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-2753" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-2753" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278240" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278298" version="27">
      <metadata>
        <title>Test for MozillaFirefox-translations On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-2753 at MITRE

Description

   Integer overflow in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x before 3.1.1, and
   SeaMonkey before 2.0.6 allows remote attackers to execute arbitrary code via a large selection attribute in a XUL tree element, which
   triggers a use-after-free.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-2753" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-2753" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278168" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278297" version="27">
      <metadata>
        <title>Test for MozillaFirefox On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-2753 at MITRE

Description

   Integer overflow in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x before 3.1.1, and
   SeaMonkey before 2.0.6 allows remote attackers to execute arbitrary code via a large selection attribute in a XUL tree element, which
   triggers a use-after-free.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-2753" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-2753" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278160" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278296" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner191-translations On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-2752 at MITRE

Description

   Integer overflow in an array class in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x
   before 3.1.1, and SeaMonkey before 2.0.6 allows remote attackers to execute arbitrary code by placing many Cascading Style Sheets (CSS)
   values in an array, related to references to external font resources and an inconsistency between 16-bit and 32-bit integers.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-2752" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-2752" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278248" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278295" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner191-gnomevfs On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-2752 at MITRE

Description

   Integer overflow in an array class in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x
   before 3.1.1, and SeaMonkey before 2.0.6 allows remote attackers to execute arbitrary code by placing many Cascading Style Sheets (CSS)
   values in an array, related to references to external font resources and an inconsistency between 16-bit and 32-bit integers.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-2752" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-2752" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278244" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278294" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner191 On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-2752 at MITRE

Description

   Integer overflow in an array class in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x
   before 3.1.1, and SeaMonkey before 2.0.6 allows remote attackers to execute arbitrary code by placing many Cascading Style Sheets (CSS)
   values in an array, related to references to external font resources and an inconsistency between 16-bit and 32-bit integers.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-2752" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-2752" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278240" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278293" version="27">
      <metadata>
        <title>Test for MozillaFirefox-translations On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-2752 at MITRE

Description

   Integer overflow in an array class in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x
   before 3.1.1, and SeaMonkey before 2.0.6 allows remote attackers to execute arbitrary code by placing many Cascading Style Sheets (CSS)
   values in an array, related to references to external font resources and an inconsistency between 16-bit and 32-bit integers.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-2752" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-2752" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278168" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278292" version="27">
      <metadata>
        <title>Test for MozillaFirefox On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-2752 at MITRE

Description

   Integer overflow in an array class in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x
   before 3.1.1, and SeaMonkey before 2.0.6 allows remote attackers to execute arbitrary code by placing many Cascading Style Sheets (CSS)
   values in an array, related to references to external font resources and an inconsistency between 16-bit and 32-bit integers.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-2752" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-2752" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278160" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278291" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner191-translations On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-2751 at MITRE

Description

   The nsDocShell::OnRedirectStateChange function in docshell/base/nsDocShell.cpp in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7,
   and SeaMonkey before 2.0.6, allows remote attackers to spoof the SSL security status of a document via vectors involving multiple requests, a
   redirect, and the history.back and history.forward JavaScript functions.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.6 (AV:N/AC:H/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-2751" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-2751" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278248" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278290" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner191-gnomevfs On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-2751 at MITRE

Description

   The nsDocShell::OnRedirectStateChange function in docshell/base/nsDocShell.cpp in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7,
   and SeaMonkey before 2.0.6, allows remote attackers to spoof the SSL security status of a document via vectors involving multiple requests, a
   redirect, and the history.back and history.forward JavaScript functions.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.6 (AV:N/AC:H/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-2751" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-2751" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278244" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278289" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner191 On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-2751 at MITRE

Description

   The nsDocShell::OnRedirectStateChange function in docshell/base/nsDocShell.cpp in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7,
   and SeaMonkey before 2.0.6, allows remote attackers to spoof the SSL security status of a document via vectors involving multiple requests, a
   redirect, and the history.back and history.forward JavaScript functions.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.6 (AV:N/AC:H/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-2751" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-2751" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278240" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278288" version="27">
      <metadata>
        <title>Test for MozillaFirefox-translations On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-2751 at MITRE

Description

   The nsDocShell::OnRedirectStateChange function in docshell/base/nsDocShell.cpp in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7,
   and SeaMonkey before 2.0.6, allows remote attackers to spoof the SSL security status of a document via vectors involving multiple requests, a
   redirect, and the history.back and history.forward JavaScript functions.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.6 (AV:N/AC:H/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-2751" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-2751" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278168" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278287" version="27">
      <metadata>
        <title>Test for MozillaFirefox On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-2751 at MITRE

Description

   The nsDocShell::OnRedirectStateChange function in docshell/base/nsDocShell.cpp in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7,
   and SeaMonkey before 2.0.6, allows remote attackers to spoof the SSL security status of a document via vectors involving multiple requests, a
   redirect, and the history.back and history.forward JavaScript functions.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.6 (AV:N/AC:H/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-2751" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-2751" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278160" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278286" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner191-translations On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-1214 at MITRE

Description

   Integer overflow in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, and SeaMonkey before 2.0.6, allows remote attackers to
   execute arbitrary code via plugin content with many parameter elements.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-1214" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-1214" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278248" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278285" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner191-gnomevfs On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-1214 at MITRE

Description

   Integer overflow in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, and SeaMonkey before 2.0.6, allows remote attackers to
   execute arbitrary code via plugin content with many parameter elements.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-1214" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-1214" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278244" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278284" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner191 On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-1214 at MITRE

Description

   Integer overflow in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, and SeaMonkey before 2.0.6, allows remote attackers to
   execute arbitrary code via plugin content with many parameter elements.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-1214" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-1214" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278240" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278283" version="27">
      <metadata>
        <title>Test for MozillaFirefox-translations On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-1214 at MITRE

Description

   Integer overflow in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, and SeaMonkey before 2.0.6, allows remote attackers to
   execute arbitrary code via plugin content with many parameter elements.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-1214" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-1214" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278168" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278282" version="27">
      <metadata>
        <title>Test for MozillaFirefox On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-1214 at MITRE

Description

   Integer overflow in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, and SeaMonkey before 2.0.6, allows remote attackers to
   execute arbitrary code via plugin content with many parameter elements.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-1214" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-1214" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278160" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278281" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner191-translations On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-1213 at MITRE

Description

   The importScripts Web Worker method in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x
   before 3.1.1, and SeaMonkey before 2.0.6 does not verify that content is valid JavaScript code, which allows remote attackers to bypass the
   Same Origin Policy and obtain sensitive information via a crafted HTML document.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-1213" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-1213" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278248" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278280" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner191-gnomevfs On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-1213 at MITRE

Description

   The importScripts Web Worker method in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x
   before 3.1.1, and SeaMonkey before 2.0.6 does not verify that content is valid JavaScript code, which allows remote attackers to bypass the
   Same Origin Policy and obtain sensitive information via a crafted HTML document.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-1213" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-1213" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278244" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278279" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner191 On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-1213 at MITRE

Description

   The importScripts Web Worker method in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x
   before 3.1.1, and SeaMonkey before 2.0.6 does not verify that content is valid JavaScript code, which allows remote attackers to bypass the
   Same Origin Policy and obtain sensitive information via a crafted HTML document.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-1213" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-1213" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278240" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278278" version="27">
      <metadata>
        <title>Test for MozillaFirefox-translations On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-1213 at MITRE

Description

   The importScripts Web Worker method in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x
   before 3.1.1, and SeaMonkey before 2.0.6 does not verify that content is valid JavaScript code, which allows remote attackers to bypass the
   Same Origin Policy and obtain sensitive information via a crafted HTML document.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-1213" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-1213" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278168" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278277" version="27">
      <metadata>
        <title>Test for MozillaFirefox On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-1213 at MITRE

Description

   The importScripts Web Worker method in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x
   before 3.1.1, and SeaMonkey before 2.0.6 does not verify that content is valid JavaScript code, which allows remote attackers to bypass the
   Same Origin Policy and obtain sensitive information via a crafted HTML document.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-1213" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-1213" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278160" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278276" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner191-translations On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-1211 at MITRE

Description

   Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x
   before 3.0.6 and 3.1.x before 3.1.1, and SeaMonkey before 2.0.6 allow remote attackers to cause a denial of service (memory corruption and
   application crash) or possibly execute arbitrary code via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-1211" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-1211" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278248" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278275" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner191-gnomevfs On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-1211 at MITRE

Description

   Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x
   before 3.0.6 and 3.1.x before 3.1.1, and SeaMonkey before 2.0.6 allow remote attackers to cause a denial of service (memory corruption and
   application crash) or possibly execute arbitrary code via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-1211" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-1211" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278244" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278274" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner191 On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-1211 at MITRE

Description

   Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x
   before 3.0.6 and 3.1.x before 3.1.1, and SeaMonkey before 2.0.6 allow remote attackers to cause a denial of service (memory corruption and
   application crash) or possibly execute arbitrary code via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-1211" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-1211" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278240" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278273" version="27">
      <metadata>
        <title>Test for MozillaFirefox-translations On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-1211 at MITRE

Description

   Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x
   before 3.0.6 and 3.1.x before 3.1.1, and SeaMonkey before 2.0.6 allow remote attackers to cause a denial of service (memory corruption and
   application crash) or possibly execute arbitrary code via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-1211" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-1211" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278168" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278272" version="27">
      <metadata>
        <title>Test for MozillaFirefox On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-1211 at MITRE

Description

   Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x
   before 3.0.6 and 3.1.x before 3.1.1, and SeaMonkey before 2.0.6 allow remote attackers to cause a denial of service (memory corruption and
   application crash) or possibly execute arbitrary code via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-1211" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-1211" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278160" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278271" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner191-translations On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-1209 at MITRE

Description

   Use-after-free vulnerability in the NodeIterator implementation in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, and SeaMonkey
   before 2.0.6, allows remote attackers to execute arbitrary code via a crafted NodeFilter that detaches DOM nodes, related to the NodeIterator
   interface and an a javascript callback.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-1209" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-1209" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278248" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278270" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner191-gnomevfs On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-1209 at MITRE

Description

   Use-after-free vulnerability in the NodeIterator implementation in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, and SeaMonkey
   before 2.0.6, allows remote attackers to execute arbitrary code via a crafted NodeFilter that detaches DOM nodes, related to the NodeIterator
   interface and an a javascript callback.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-1209" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-1209" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278244" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278269" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner191 On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-1209 at MITRE

Description

   Use-after-free vulnerability in the NodeIterator implementation in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, and SeaMonkey
   before 2.0.6, allows remote attackers to execute arbitrary code via a crafted NodeFilter that detaches DOM nodes, related to the NodeIterator
   interface and an a javascript callback.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-1209" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-1209" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278240" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278268" version="27">
      <metadata>
        <title>Test for MozillaFirefox-translations On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-1209 at MITRE

Description

   Use-after-free vulnerability in the NodeIterator implementation in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, and SeaMonkey
   before 2.0.6, allows remote attackers to execute arbitrary code via a crafted NodeFilter that detaches DOM nodes, related to the NodeIterator
   interface and an a javascript callback.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-1209" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-1209" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278168" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278267" version="27">
      <metadata>
        <title>Test for MozillaFirefox On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-1209 at MITRE

Description

   Use-after-free vulnerability in the NodeIterator implementation in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, and SeaMonkey
   before 2.0.6, allows remote attackers to execute arbitrary code via a crafted NodeFilter that detaches DOM nodes, related to the NodeIterator
   interface and an a javascript callback.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-1209" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-1209" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278160" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278266" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner191-translations On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-1208 at MITRE

Description

   Use-after-free vulnerability in the attribute-cloning functionality in the DOM implementation in Mozilla Firefox 3.5.x before 3.5.11 and
   3.6.x before 3.6.7, and SeaMonkey before 2.0.6, allows remote attackers to execute arbitrary code via vectors related to deletion of an event
   attribute node with a nonzero reference count.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-1208" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-1208" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278248" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278265" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner191-gnomevfs On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-1208 at MITRE

Description

   Use-after-free vulnerability in the attribute-cloning functionality in the DOM implementation in Mozilla Firefox 3.5.x before 3.5.11 and
   3.6.x before 3.6.7, and SeaMonkey before 2.0.6, allows remote attackers to execute arbitrary code via vectors related to deletion of an event
   attribute node with a nonzero reference count.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-1208" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-1208" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278244" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278264" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner191 On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-1208 at MITRE

Description

   Use-after-free vulnerability in the attribute-cloning functionality in the DOM implementation in Mozilla Firefox 3.5.x before 3.5.11 and
   3.6.x before 3.6.7, and SeaMonkey before 2.0.6, allows remote attackers to execute arbitrary code via vectors related to deletion of an event
   attribute node with a nonzero reference count.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-1208" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-1208" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278240" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278263" version="27">
      <metadata>
        <title>Test for MozillaFirefox-translations On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-1208 at MITRE

Description

   Use-after-free vulnerability in the attribute-cloning functionality in the DOM implementation in Mozilla Firefox 3.5.x before 3.5.11 and
   3.6.x before 3.6.7, and SeaMonkey before 2.0.6, allows remote attackers to execute arbitrary code via vectors related to deletion of an event
   attribute node with a nonzero reference count.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-1208" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-1208" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278168" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278262" version="27">
      <metadata>
        <title>Test for MozillaFirefox On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-1208 at MITRE

Description

   Use-after-free vulnerability in the attribute-cloning functionality in the DOM implementation in Mozilla Firefox 3.5.x before 3.5.11 and
   3.6.x before 3.6.7, and SeaMonkey before 2.0.6, allows remote attackers to execute arbitrary code via vectors related to deletion of an event
   attribute node with a nonzero reference count.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-1208" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-1208" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278160" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278261" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner191-translations On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-1206 at MITRE

Description

   The startDocumentLoad function in browser/base/content/browser.js in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, and
   SeaMonkey before 2.0.6, does not properly implement the Same Origin Policy in certain circumstances related to the about:blank document and a
   document that is currently loading, which allows (1) remote web servers to conduct spoofing attacks via vectors involving a 204 (aka No
   Content) status code, and allows (2) remote attackers to conduct spoofing attacks via vectors involving a window.stop call.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-1206" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-1206" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278248" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278260" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner191-gnomevfs On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-1206 at MITRE

Description

   The startDocumentLoad function in browser/base/content/browser.js in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, and
   SeaMonkey before 2.0.6, does not properly implement the Same Origin Policy in certain circumstances related to the about:blank document and a
   document that is currently loading, which allows (1) remote web servers to conduct spoofing attacks via vectors involving a 204 (aka No
   Content) status code, and allows (2) remote attackers to conduct spoofing attacks via vectors involving a window.stop call.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-1206" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-1206" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278244" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278259" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner191 On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-1206 at MITRE

Description

   The startDocumentLoad function in browser/base/content/browser.js in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, and
   SeaMonkey before 2.0.6, does not properly implement the Same Origin Policy in certain circumstances related to the about:blank document and a
   document that is currently loading, which allows (1) remote web servers to conduct spoofing attacks via vectors involving a 204 (aka No
   Content) status code, and allows (2) remote attackers to conduct spoofing attacks via vectors involving a window.stop call.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-1206" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-1206" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278240" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278258" version="27">
      <metadata>
        <title>Test for MozillaFirefox-translations On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-1206 at MITRE

Description

   The startDocumentLoad function in browser/base/content/browser.js in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, and
   SeaMonkey before 2.0.6, does not properly implement the Same Origin Policy in certain circumstances related to the about:blank document and a
   document that is currently loading, which allows (1) remote web servers to conduct spoofing attacks via vectors involving a 204 (aka No
   Content) status code, and allows (2) remote attackers to conduct spoofing attacks via vectors involving a window.stop call.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-1206" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-1206" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278168" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278257" version="27">
      <metadata>
        <title>Test for MozillaFirefox On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-1206 at MITRE

Description

   The startDocumentLoad function in browser/base/content/browser.js in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, and
   SeaMonkey before 2.0.6, does not properly implement the Same Origin Policy in certain circumstances related to the about:blank document and a
   document that is currently loading, which allows (1) remote web servers to conduct spoofing attacks via vectors involving a 204 (aka No
   Content) status code, and allows (2) remote attackers to conduct spoofing attacks via vectors involving a window.stop call.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-1206" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-1206" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278160" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278256" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner191-translations On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-1205 at MITRE

Description

   Buffer overflow in pngpread.c in libpng before 1.2.44 and 1.4.x before 1.4.3, as used in progressive applications, might allow remote
   attackers to execute arbitrary code via a PNG image that triggers an additional data row.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-1205" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-1205" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278248" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278255" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner191-gnomevfs On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-1205 at MITRE

Description

   Buffer overflow in pngpread.c in libpng before 1.2.44 and 1.4.x before 1.4.3, as used in progressive applications, might allow remote
   attackers to execute arbitrary code via a PNG image that triggers an additional data row.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-1205" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-1205" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278244" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278254" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner191 On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-1205 at MITRE

Description

   Buffer overflow in pngpread.c in libpng before 1.2.44 and 1.4.x before 1.4.3, as used in progressive applications, might allow remote
   attackers to execute arbitrary code via a PNG image that triggers an additional data row.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-1205" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-1205" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278240" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278253" version="27">
      <metadata>
        <title>Test for MozillaFirefox-translations On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-1205 at MITRE

Description

   Buffer overflow in pngpread.c in libpng before 1.2.44 and 1.4.x before 1.4.3, as used in progressive applications, might allow remote
   attackers to execute arbitrary code via a PNG image that triggers an additional data row.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-1205" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-1205" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278168" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278252" version="27">
      <metadata>
        <title>Test for MozillaFirefox On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-1205 at MITRE

Description

   Buffer overflow in pngpread.c in libpng before 1.2.44 and 1.4.x before 1.4.3, as used in progressive applications, might allow remote
   attackers to execute arbitrary code via a PNG image that triggers an additional data row.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-1205" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-1205" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278160" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278251" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner191-translations On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0654 at MITRE

Description

   Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x before 3.1.1, and SeaMonkey before 2.0.6
   permit cross-origin loading of CSS stylesheets even when the stylesheet download has an incorrect MIME type and the stylesheet document is
   malformed, which allows remote HTTP servers to obtain sensitive information via a crafted document.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0654" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0654" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278248" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278247" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner191-gnomevfs On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0654 at MITRE

Description

   Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x before 3.1.1, and SeaMonkey before 2.0.6
   permit cross-origin loading of CSS stylesheets even when the stylesheet download has an incorrect MIME type and the stylesheet document is
   malformed, which allows remote HTTP servers to obtain sensitive information via a crafted document.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0654" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0654" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278244" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278243" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner191 On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0654 at MITRE

Description

   Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x before 3.1.1, and SeaMonkey before 2.0.6
   permit cross-origin loading of CSS stylesheets even when the stylesheet download has an incorrect MIME type and the stylesheet document is
   malformed, which allows remote HTTP servers to obtain sensitive information via a crafted document.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0654" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0654" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278240" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278239" version="27">
      <metadata>
        <title>Test for MozillaFirefox-translations On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0654 at MITRE

Description

   Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x before 3.1.1, and SeaMonkey before 2.0.6
   permit cross-origin loading of CSS stylesheets even when the stylesheet download has an incorrect MIME type and the stylesheet document is
   malformed, which allows remote HTTP servers to obtain sensitive information via a crafted document.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0654" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0654" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278168" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278238" version="27">
      <metadata>
        <title>Test for MozillaFirefox On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-0654 at MITRE

Description

   Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x before 3.1.1, and SeaMonkey before 2.0.6
   permit cross-origin loading of CSS stylesheets even when the stylesheet download has an incorrect MIME type and the stylesheet document is
   malformed, which allows remote HTTP servers to obtain sensitive information via a crafted document.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-0654" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-0654" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278160" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278237" version="27">
      <metadata>
        <title>Test for gpg2 On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2010-2547 at MITRE

Description

   Use-after-free vulnerability in kbx/keybox-blob.c in GPGSM in GnuPG 2.x through 2.0.16 allows remote attackers to cause a denial of service
   (crash) and possibly execute arbitrary code via a certificate with a large number of Subject Alternate Names, which is not properly handled
   in a realloc operation when importing the certificate or verifying its signature.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.1 (AV:N/AC:H/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2010-2547" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2010-2547" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278234" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278233" version="27">
      <metadata>
        <title>Test for expat On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-3720 at MITRE

Description

   The updatePosition function in lib/xmltok_impl.c in libexpat in Expat 2.0.1, as used in Python, PyXML, w3c-libwww, and other software, allows
   context-dependent attackers to cause a denial of service (application crash) via an XML document with crafted UTF-8 sequences that trigger a
   buffer over-read, a different vulnerability than CVE-2009-2625.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-3720" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-3720" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278220" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278232" version="27">
      <metadata>
        <title>Test for python-xml On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-3720 at MITRE

Description

   The updatePosition function in lib/xmltok_impl.c in libexpat in Expat 2.0.1, as used in Python, PyXML, w3c-libwww, and other software, allows
   context-dependent attackers to cause a denial of service (application crash) via an XML document with crafted UTF-8 sequences that trigger a
   buffer over-read, a different vulnerability than CVE-2009-2625.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-3720" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-3720" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278116" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278231" version="27">
      <metadata>
        <title>Test for python-tk On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-3720 at MITRE

Description

   The updatePosition function in lib/xmltok_impl.c in libexpat in Expat 2.0.1, as used in Python, PyXML, w3c-libwww, and other software, allows
   context-dependent attackers to cause a denial of service (application crash) via an XML document with crafted UTF-8 sequences that trigger a
   buffer over-read, a different vulnerability than CVE-2009-2625.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-3720" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-3720" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278112" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278230" version="27">
      <metadata>
        <title>Test for python-idle On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-3720 at MITRE

Description

   The updatePosition function in lib/xmltok_impl.c in libexpat in Expat 2.0.1, as used in Python, PyXML, w3c-libwww, and other software, allows
   context-dependent attackers to cause a denial of service (application crash) via an XML document with crafted UTF-8 sequences that trigger a
   buffer over-read, a different vulnerability than CVE-2009-2625.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-3720" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-3720" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278108" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278229" version="27">
      <metadata>
        <title>Test for python-gdbm On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-3720 at MITRE

Description

   The updatePosition function in lib/xmltok_impl.c in libexpat in Expat 2.0.1, as used in Python, PyXML, w3c-libwww, and other software, allows
   context-dependent attackers to cause a denial of service (application crash) via an XML document with crafted UTF-8 sequences that trigger a
   buffer over-read, a different vulnerability than CVE-2009-2625.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-3720" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-3720" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278104" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278228" version="27">
      <metadata>
        <title>Test for python-devel On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-3720 at MITRE

Description

   The updatePosition function in lib/xmltok_impl.c in libexpat in Expat 2.0.1, as used in Python, PyXML, w3c-libwww, and other software, allows
   context-dependent attackers to cause a denial of service (application crash) via an XML document with crafted UTF-8 sequences that trigger a
   buffer over-read, a different vulnerability than CVE-2009-2625.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-3720" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-3720" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278100" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278227" version="27">
      <metadata>
        <title>Test for python-demo On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-3720 at MITRE

Description

   The updatePosition function in lib/xmltok_impl.c in libexpat in Expat 2.0.1, as used in Python, PyXML, w3c-libwww, and other software, allows
   context-dependent attackers to cause a denial of service (application crash) via an XML document with crafted UTF-8 sequences that trigger a
   buffer over-read, a different vulnerability than CVE-2009-2625.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-3720" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-3720" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278096" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278226" version="27">
      <metadata>
        <title>Test for python-curses On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-3720 at MITRE

Description

   The updatePosition function in lib/xmltok_impl.c in libexpat in Expat 2.0.1, as used in Python, PyXML, w3c-libwww, and other software, allows
   context-dependent attackers to cause a denial of service (application crash) via an XML document with crafted UTF-8 sequences that trigger a
   buffer over-read, a different vulnerability than CVE-2009-2625.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-3720" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-3720" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278092" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278225" version="27">
      <metadata>
        <title>Test for python On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-3720 at MITRE

Description

   The updatePosition function in lib/xmltok_impl.c in libexpat in Expat 2.0.1, as used in Python, PyXML, w3c-libwww, and other software, allows
   context-dependent attackers to cause a denial of service (application crash) via an XML document with crafted UTF-8 sequences that trigger a
   buffer over-read, a different vulnerability than CVE-2009-2625.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-3720" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-3720" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278088" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278224" version="27">
      <metadata>
        <title>Test for pyxml On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-3720 at MITRE

Description

   The updatePosition function in lib/xmltok_impl.c in libexpat in Expat 2.0.1, as used in Python, PyXML, w3c-libwww, and other software, allows
   context-dependent attackers to cause a denial of service (application crash) via an XML document with crafted UTF-8 sequences that trigger a
   buffer over-read, a different vulnerability than CVE-2009-2625.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-3720" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-3720" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278208" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278223" version="27">
      <metadata>
        <title>Test for expat On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-3560 at MITRE

Description

   The big2_toUtf8 function in lib/xmltok.c in libexpat in Expat 2.0.1, as used in the XML-Twig module for Perl, allows context-dependent
   attackers to cause a denial of service (application crash) via an XML document with malformed UTF-8 sequences that trigger a buffer
   over-read, related to the doProlog function in lib/xmlparse.c, a different vulnerability than CVE-2009-2625 and CVE-2009-3720.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-3560" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-3560" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278220" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278219" version="27">
      <metadata>
        <title>Test for python-xml On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-3560 at MITRE

Description

   The big2_toUtf8 function in lib/xmltok.c in libexpat in Expat 2.0.1, as used in the XML-Twig module for Perl, allows context-dependent
   attackers to cause a denial of service (application crash) via an XML document with malformed UTF-8 sequences that trigger a buffer
   over-read, related to the doProlog function in lib/xmlparse.c, a different vulnerability than CVE-2009-2625 and CVE-2009-3720.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-3560" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-3560" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278116" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278218" version="27">
      <metadata>
        <title>Test for python-tk On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-3560 at MITRE

Description

   The big2_toUtf8 function in lib/xmltok.c in libexpat in Expat 2.0.1, as used in the XML-Twig module for Perl, allows context-dependent
   attackers to cause a denial of service (application crash) via an XML document with malformed UTF-8 sequences that trigger a buffer
   over-read, related to the doProlog function in lib/xmlparse.c, a different vulnerability than CVE-2009-2625 and CVE-2009-3720.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-3560" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-3560" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278112" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278217" version="27">
      <metadata>
        <title>Test for python-idle On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-3560 at MITRE

Description

   The big2_toUtf8 function in lib/xmltok.c in libexpat in Expat 2.0.1, as used in the XML-Twig module for Perl, allows context-dependent
   attackers to cause a denial of service (application crash) via an XML document with malformed UTF-8 sequences that trigger a buffer
   over-read, related to the doProlog function in lib/xmlparse.c, a different vulnerability than CVE-2009-2625 and CVE-2009-3720.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-3560" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-3560" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278108" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278216" version="27">
      <metadata>
        <title>Test for python-gdbm On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-3560 at MITRE

Description

   The big2_toUtf8 function in lib/xmltok.c in libexpat in Expat 2.0.1, as used in the XML-Twig module for Perl, allows context-dependent
   attackers to cause a denial of service (application crash) via an XML document with malformed UTF-8 sequences that trigger a buffer
   over-read, related to the doProlog function in lib/xmlparse.c, a different vulnerability than CVE-2009-2625 and CVE-2009-3720.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-3560" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-3560" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278104" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278215" version="27">
      <metadata>
        <title>Test for python-devel On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-3560 at MITRE

Description

   The big2_toUtf8 function in lib/xmltok.c in libexpat in Expat 2.0.1, as used in the XML-Twig module for Perl, allows context-dependent
   attackers to cause a denial of service (application crash) via an XML document with malformed UTF-8 sequences that trigger a buffer
   over-read, related to the doProlog function in lib/xmlparse.c, a different vulnerability than CVE-2009-2625 and CVE-2009-3720.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-3560" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-3560" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278100" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278214" version="27">
      <metadata>
        <title>Test for python-demo On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-3560 at MITRE

Description

   The big2_toUtf8 function in lib/xmltok.c in libexpat in Expat 2.0.1, as used in the XML-Twig module for Perl, allows context-dependent
   attackers to cause a denial of service (application crash) via an XML document with malformed UTF-8 sequences that trigger a buffer
   over-read, related to the doProlog function in lib/xmlparse.c, a different vulnerability than CVE-2009-2625 and CVE-2009-3720.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-3560" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-3560" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278096" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278213" version="27">
      <metadata>
        <title>Test for python-curses On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-3560 at MITRE

Description

   The big2_toUtf8 function in lib/xmltok.c in libexpat in Expat 2.0.1, as used in the XML-Twig module for Perl, allows context-dependent
   attackers to cause a denial of service (application crash) via an XML document with malformed UTF-8 sequences that trigger a buffer
   over-read, related to the doProlog function in lib/xmlparse.c, a different vulnerability than CVE-2009-2625 and CVE-2009-3720.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-3560" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-3560" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278092" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278212" version="27">
      <metadata>
        <title>Test for python On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-3560 at MITRE

Description

   The big2_toUtf8 function in lib/xmltok.c in libexpat in Expat 2.0.1, as used in the XML-Twig module for Perl, allows context-dependent
   attackers to cause a denial of service (application crash) via an XML document with malformed UTF-8 sequences that trigger a buffer
   over-read, related to the doProlog function in lib/xmlparse.c, a different vulnerability than CVE-2009-2625 and CVE-2009-3720.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-3560" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-3560" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278088" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278211" version="27">
      <metadata>
        <title>Test for pyxml On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-3560 at MITRE

Description

   The big2_toUtf8 function in lib/xmltok.c in libexpat in Expat 2.0.1, as used in the XML-Twig module for Perl, allows context-dependent
   attackers to cause a denial of service (application crash) via an XML document with malformed UTF-8 sequences that trigger a buffer
   over-read, related to the doProlog function in lib/xmlparse.c, a different vulnerability than CVE-2009-2625 and CVE-2009-3720.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-3560" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-3560" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278208" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278207" version="27">
      <metadata>
        <title>Test for libvorbis On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-2663 at MITRE

Description

   libvorbis before r16182, as used in Mozilla Firefox 3.5.x before 3.5.2 and other products, allows context-dependent attackers to cause a
   denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted .ogg file.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-2663" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-2663" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278204" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278203" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner190-translations On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-2663 at MITRE

Description

   libvorbis before r16182, as used in Mozilla Firefox 3.5.x before 3.5.2 and other products, allows context-dependent attackers to cause a
   denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted .ogg file.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-2663" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-2663" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278200" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278199" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner190-gnomevfs On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-2663 at MITRE

Description

   libvorbis before r16182, as used in Mozilla Firefox 3.5.x before 3.5.2 and other products, allows context-dependent attackers to cause a
   denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted .ogg file.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-2663" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-2663" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278196" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278195" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner190 On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-2663 at MITRE

Description

   libvorbis before r16182, as used in Mozilla Firefox 3.5.x before 3.5.2 and other products, allows context-dependent attackers to cause a
   denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted .ogg file.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-2663" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-2663" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278192" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278191" version="27">
      <metadata>
        <title>Test for firefox3-pango On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-2663 at MITRE

Description

   libvorbis before r16182, as used in Mozilla Firefox 3.5.x before 3.5.2 and other products, allows context-dependent attackers to cause a
   denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted .ogg file.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-2663" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-2663" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278188" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278187" version="27">
      <metadata>
        <title>Test for firefox3-gtk2 On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-2663 at MITRE

Description

   libvorbis before r16182, as used in Mozilla Firefox 3.5.x before 3.5.2 and other products, allows context-dependent attackers to cause a
   denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted .ogg file.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-2663" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-2663" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278184" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278183" version="27">
      <metadata>
        <title>Test for firefox3-glib2 On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-2663 at MITRE

Description

   libvorbis before r16182, as used in Mozilla Firefox 3.5.x before 3.5.2 and other products, allows context-dependent attackers to cause a
   denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted .ogg file.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-2663" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-2663" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278180" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278179" version="27">
      <metadata>
        <title>Test for firefox3-cairo On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-2663 at MITRE

Description

   libvorbis before r16182, as used in Mozilla Firefox 3.5.x before 3.5.2 and other products, allows context-dependent attackers to cause a
   denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted .ogg file.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-2663" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-2663" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278176" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278175" version="27">
      <metadata>
        <title>Test for firefox3-atk On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-2663 at MITRE

Description

   libvorbis before r16182, as used in Mozilla Firefox 3.5.x before 3.5.2 and other products, allows context-dependent attackers to cause a
   denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted .ogg file.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-2663" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-2663" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278172" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278171" version="27">
      <metadata>
        <title>Test for MozillaFirefox-translations On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-2663 at MITRE

Description

   libvorbis before r16182, as used in Mozilla Firefox 3.5.x before 3.5.2 and other products, allows context-dependent attackers to cause a
   denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted .ogg file.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-2663" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-2663" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278168" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278167" version="27">
      <metadata>
        <title>Test for MozillaFirefox-branding-SLED On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-2663 at MITRE

Description

   libvorbis before r16182, as used in Mozilla Firefox 3.5.x before 3.5.2 and other products, allows context-dependent attackers to cause a
   denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted .ogg file.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-2663" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-2663" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278164" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278163" version="27">
      <metadata>
        <title>Test for MozillaFirefox On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-2663 at MITRE

Description

   libvorbis before r16182, as used in Mozilla Firefox 3.5.x before 3.5.2 and other products, allows context-dependent attackers to cause a
   denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted .ogg file.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-2663" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-2663" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278160" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278159" version="27">
      <metadata>
        <title>Test for java-1_4_2-ibm-plugin On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-2625 at MITRE

Description

   XMLScanner.java in Apache Xerces2 Java, as used in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15 and JDK and JRE 5.0
   before Update 20, and in other products, allows remote attackers to cause a denial of service (infinite loop and application hang) via
   malformed XML input, as demonstrated by the Codenomicon XML fuzzing framework.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-2625" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-2625" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278156" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278155" version="27">
      <metadata>
        <title>Test for java-1_4_2-ibm-jdbc On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-2625 at MITRE

Description

   XMLScanner.java in Apache Xerces2 Java, as used in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15 and JDK and JRE 5.0
   before Update 20, and in other products, allows remote attackers to cause a denial of service (infinite loop and application hang) via
   malformed XML input, as demonstrated by the Codenomicon XML fuzzing framework.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-2625" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-2625" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278152" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278151" version="27">
      <metadata>
        <title>Test for java-1_4_2-ibm-devel On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-2625 at MITRE

Description

   XMLScanner.java in Apache Xerces2 Java, as used in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15 and JDK and JRE 5.0
   before Update 20, and in other products, allows remote attackers to cause a denial of service (infinite loop and application hang) via
   malformed XML input, as demonstrated by the Codenomicon XML fuzzing framework.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-2625" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-2625" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278148" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278147" version="27">
      <metadata>
        <title>Test for java-1_4_2-ibm On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-2625 at MITRE

Description

   XMLScanner.java in Apache Xerces2 Java, as used in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15 and JDK and JRE 5.0
   before Update 20, and in other products, allows remote attackers to cause a denial of service (infinite loop and application hang) via
   malformed XML input, as demonstrated by the Codenomicon XML fuzzing framework.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-2625" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-2625" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278144" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278143" version="27">
      <metadata>
        <title>Test for java-1_5_0-ibm-plugin On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-2625 at MITRE

Description

   XMLScanner.java in Apache Xerces2 Java, as used in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15 and JDK and JRE 5.0
   before Update 20, and in other products, allows remote attackers to cause a denial of service (infinite loop and application hang) via
   malformed XML input, as demonstrated by the Codenomicon XML fuzzing framework.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-2625" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-2625" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278140" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278139" version="27">
      <metadata>
        <title>Test for java-1_5_0-ibm-jdbc On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-2625 at MITRE

Description

   XMLScanner.java in Apache Xerces2 Java, as used in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15 and JDK and JRE 5.0
   before Update 20, and in other products, allows remote attackers to cause a denial of service (infinite loop and application hang) via
   malformed XML input, as demonstrated by the Codenomicon XML fuzzing framework.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-2625" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-2625" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278136" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278135" version="27">
      <metadata>
        <title>Test for java-1_5_0-ibm-fonts On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-2625 at MITRE

Description

   XMLScanner.java in Apache Xerces2 Java, as used in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15 and JDK and JRE 5.0
   before Update 20, and in other products, allows remote attackers to cause a denial of service (infinite loop and application hang) via
   malformed XML input, as demonstrated by the Codenomicon XML fuzzing framework.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-2625" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-2625" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278132" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278131" version="27">
      <metadata>
        <title>Test for java-1_5_0-ibm-devel On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-2625 at MITRE

Description

   XMLScanner.java in Apache Xerces2 Java, as used in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15 and JDK and JRE 5.0
   before Update 20, and in other products, allows remote attackers to cause a denial of service (infinite loop and application hang) via
   malformed XML input, as demonstrated by the Codenomicon XML fuzzing framework.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-2625" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-2625" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278128" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278127" version="27">
      <metadata>
        <title>Test for java-1_5_0-ibm-alsa On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-2625 at MITRE

Description

   XMLScanner.java in Apache Xerces2 Java, as used in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15 and JDK and JRE 5.0
   before Update 20, and in other products, allows remote attackers to cause a denial of service (infinite loop and application hang) via
   malformed XML input, as demonstrated by the Codenomicon XML fuzzing framework.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-2625" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-2625" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278124" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278123" version="27">
      <metadata>
        <title>Test for java-1_5_0-ibm On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-2625 at MITRE

Description

   XMLScanner.java in Apache Xerces2 Java, as used in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15 and JDK and JRE 5.0
   before Update 20, and in other products, allows remote attackers to cause a denial of service (infinite loop and application hang) via
   malformed XML input, as demonstrated by the Codenomicon XML fuzzing framework.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-2625" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-2625" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278120" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278119" version="27">
      <metadata>
        <title>Test for python-xml On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-2625 at MITRE

Description

   XMLScanner.java in Apache Xerces2 Java, as used in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15 and JDK and JRE 5.0
   before Update 20, and in other products, allows remote attackers to cause a denial of service (infinite loop and application hang) via
   malformed XML input, as demonstrated by the Codenomicon XML fuzzing framework.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-2625" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-2625" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278116" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278115" version="27">
      <metadata>
        <title>Test for python-tk On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-2625 at MITRE

Description

   XMLScanner.java in Apache Xerces2 Java, as used in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15 and JDK and JRE 5.0
   before Update 20, and in other products, allows remote attackers to cause a denial of service (infinite loop and application hang) via
   malformed XML input, as demonstrated by the Codenomicon XML fuzzing framework.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-2625" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-2625" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278112" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278111" version="27">
      <metadata>
        <title>Test for python-idle On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-2625 at MITRE

Description

   XMLScanner.java in Apache Xerces2 Java, as used in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15 and JDK and JRE 5.0
   before Update 20, and in other products, allows remote attackers to cause a denial of service (infinite loop and application hang) via
   malformed XML input, as demonstrated by the Codenomicon XML fuzzing framework.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-2625" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-2625" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278108" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278107" version="27">
      <metadata>
        <title>Test for python-gdbm On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-2625 at MITRE

Description

   XMLScanner.java in Apache Xerces2 Java, as used in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15 and JDK and JRE 5.0
   before Update 20, and in other products, allows remote attackers to cause a denial of service (infinite loop and application hang) via
   malformed XML input, as demonstrated by the Codenomicon XML fuzzing framework.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-2625" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-2625" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278104" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278103" version="27">
      <metadata>
        <title>Test for python-devel On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-2625 at MITRE

Description

   XMLScanner.java in Apache Xerces2 Java, as used in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15 and JDK and JRE 5.0
   before Update 20, and in other products, allows remote attackers to cause a denial of service (infinite loop and application hang) via
   malformed XML input, as demonstrated by the Codenomicon XML fuzzing framework.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-2625" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-2625" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278100" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278099" version="27">
      <metadata>
        <title>Test for python-demo On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-2625 at MITRE

Description

   XMLScanner.java in Apache Xerces2 Java, as used in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15 and JDK and JRE 5.0
   before Update 20, and in other products, allows remote attackers to cause a denial of service (infinite loop and application hang) via
   malformed XML input, as demonstrated by the Codenomicon XML fuzzing framework.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-2625" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-2625" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278096" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278095" version="27">
      <metadata>
        <title>Test for python-curses On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-2625 at MITRE

Description

   XMLScanner.java in Apache Xerces2 Java, as used in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15 and JDK and JRE 5.0
   before Update 20, and in other products, allows remote attackers to cause a denial of service (infinite loop and application hang) via
   malformed XML input, as demonstrated by the Codenomicon XML fuzzing framework.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-2625" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-2625" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278092" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278091" version="27">
      <metadata>
        <title>Test for python On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-2625 at MITRE

Description

   XMLScanner.java in Apache Xerces2 Java, as used in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15 and JDK and JRE 5.0
   before Update 20, and in other products, allows remote attackers to cause a denial of service (infinite loop and application hang) via
   malformed XML input, as demonstrated by the Codenomicon XML fuzzing framework.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-2625" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-2625" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278088" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278087" version="27">
      <metadata>
        <title>Test for xerces-j2-scripts On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-2625 at MITRE

Description

   XMLScanner.java in Apache Xerces2 Java, as used in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15 and JDK and JRE 5.0
   before Update 20, and in other products, allows remote attackers to cause a denial of service (infinite loop and application hang) via
   malformed XML input, as demonstrated by the Codenomicon XML fuzzing framework.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-2625" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-2625" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278084" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278083" version="27">
      <metadata>
        <title>Test for xerces-j2-javadoc-xni On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-2625 at MITRE

Description

   XMLScanner.java in Apache Xerces2 Java, as used in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15 and JDK and JRE 5.0
   before Update 20, and in other products, allows remote attackers to cause a denial of service (infinite loop and application hang) via
   malformed XML input, as demonstrated by the Codenomicon XML fuzzing framework.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-2625" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-2625" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278080" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278079" version="27">
      <metadata>
        <title>Test for xerces-j2-javadoc-other On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-2625 at MITRE

Description

   XMLScanner.java in Apache Xerces2 Java, as used in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15 and JDK and JRE 5.0
   before Update 20, and in other products, allows remote attackers to cause a denial of service (infinite loop and application hang) via
   malformed XML input, as demonstrated by the Codenomicon XML fuzzing framework.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-2625" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-2625" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278076" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278075" version="27">
      <metadata>
        <title>Test for xerces-j2-javadoc-impl On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-2625 at MITRE

Description

   XMLScanner.java in Apache Xerces2 Java, as used in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15 and JDK and JRE 5.0
   before Update 20, and in other products, allows remote attackers to cause a denial of service (infinite loop and application hang) via
   malformed XML input, as demonstrated by the Codenomicon XML fuzzing framework.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-2625" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-2625" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278072" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278071" version="27">
      <metadata>
        <title>Test for xerces-j2-javadoc-dom3 On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-2625 at MITRE

Description

   XMLScanner.java in Apache Xerces2 Java, as used in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15 and JDK and JRE 5.0
   before Update 20, and in other products, allows remote attackers to cause a denial of service (infinite loop and application hang) via
   malformed XML input, as demonstrated by the Codenomicon XML fuzzing framework.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-2625" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-2625" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278068" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278067" version="27">
      <metadata>
        <title>Test for xerces-j2-javadoc-apis On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-2625 at MITRE

Description

   XMLScanner.java in Apache Xerces2 Java, as used in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15 and JDK and JRE 5.0
   before Update 20, and in other products, allows remote attackers to cause a denial of service (infinite loop and application hang) via
   malformed XML input, as demonstrated by the Codenomicon XML fuzzing framework.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-2625" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-2625" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278064" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278063" version="27">
      <metadata>
        <title>Test for xerces-j2-demo On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-2625 at MITRE

Description

   XMLScanner.java in Apache Xerces2 Java, as used in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15 and JDK and JRE 5.0
   before Update 20, and in other products, allows remote attackers to cause a denial of service (infinite loop and application hang) via
   malformed XML input, as demonstrated by the Codenomicon XML fuzzing framework.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-2625" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-2625" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278060" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:278059" version="27">
      <metadata>
        <title>Test for xerces-j2 On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-2625 at MITRE

Description

   XMLScanner.java in Apache Xerces2 Java, as used in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15 and JDK and JRE 5.0
   before Update 20, and in other products, allows remote attackers to cause a denial of service (infinite loop and application hang) via
   malformed XML input, as demonstrated by the Codenomicon XML fuzzing framework.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="suseCVE-2009-2625" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=suseCVE-2009-2625" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <visible xmlns="http://pa.mcafee.com/XMLSchema/ovalExtensions">false</visible>
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278056" />
        </criteria>
      </criteria>
    </definition>
  </definitions>
  <tests>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for libmysql55client18" id="oval:com.mcafee.oval.gen:tst:326500" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:326501" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:326502" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for mysql-tools" id="oval:com.mcafee.oval.gen:tst:326496" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:326497" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:326498" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for libmysqlclient15" id="oval:com.mcafee.oval.gen:tst:326492" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:326493" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:326494" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for mysql-client" id="oval:com.mcafee.oval.gen:tst:326488" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:326489" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:326490" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for libmysql55client_r18" id="oval:com.mcafee.oval.gen:tst:326484" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:326485" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:326486" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for mysql" id="oval:com.mcafee.oval.gen:tst:326480" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:326481" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:326482" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for libmysqlclient_r15" id="oval:com.mcafee.oval.gen:tst:326476" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:326477" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:326478" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for libmysql55client18-32bit" id="oval:com.mcafee.oval.gen:tst:326472" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:326473" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:326474" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for libmysqlclient15-32bit" id="oval:com.mcafee.oval.gen:tst:326468" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:326469" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:326470" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for libgpgme11" id="oval:com.mcafee.oval.gen:tst:326464" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:326465" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:326466" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for gpgme" id="oval:com.mcafee.oval.gen:tst:326460" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:326461" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:326462" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for libgcrypt11" id="oval:com.mcafee.oval.gen:tst:326452" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:326453" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:326454" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for ppp" id="oval:com.mcafee.oval.gen:tst:326448" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:326449" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:326450" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for libsnmp15-32bit" id="oval:com.mcafee.oval.gen:tst:326444" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:326445" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:326446" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for perl-SNMP" id="oval:com.mcafee.oval.gen:tst:326440" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:326441" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:326442" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for snmp-mibs" id="oval:com.mcafee.oval.gen:tst:326436" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:326437" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:326438" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for libsnmp15" id="oval:com.mcafee.oval.gen:tst:326432" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:326433" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:326434" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for net-snmp" id="oval:com.mcafee.oval.gen:tst:326428" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:326429" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:326430" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for libQtWebKit4" id="oval:com.mcafee.oval.gen:tst:326336" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:326337" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:326338" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for libvirt-client" id="oval:com.mcafee.oval.gen:tst:325510" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:325511" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:325512" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for libvirt-doc" id="oval:com.mcafee.oval.gen:tst:325506" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:325507" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:325508" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for libvirt-python" id="oval:com.mcafee.oval.gen:tst:325502" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:325503" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:325504" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for libvirt-lock-sanlock" id="oval:com.mcafee.oval.gen:tst:325498" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:325499" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:325500" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for libvirt" id="oval:com.mcafee.oval.gen:tst:325494" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:325495" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:325496" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for libvirt-client-32bit" id="oval:com.mcafee.oval.gen:tst:325490" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:325491" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:325492" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for strongswan-doc" id="oval:com.mcafee.oval.gen:tst:325486" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:325487" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:325488" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for strongswan" id="oval:com.mcafee.oval.gen:tst:325482" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:325483" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:325484" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for openssl-certs" id="oval:com.mcafee.oval.gen:tst:325478" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:325479" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:325480" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php53-sysvshm" id="oval:com.mcafee.oval.gen:tst:325314" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:325315" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:325316" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php53-zlib" id="oval:com.mcafee.oval.gen:tst:325310" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:325311" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:325312" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php53-curl" id="oval:com.mcafee.oval.gen:tst:325306" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:325307" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:325308" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php53-dba" id="oval:com.mcafee.oval.gen:tst:325302" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:325303" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:325304" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php53-fileinfo" id="oval:com.mcafee.oval.gen:tst:325298" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:325299" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:325300" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php53-sysvmsg" id="oval:com.mcafee.oval.gen:tst:325294" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:325295" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:325296" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php53-xmlrpc" id="oval:com.mcafee.oval.gen:tst:325290" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:325291" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:325292" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php53" id="oval:com.mcafee.oval.gen:tst:325286" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:325287" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:325288" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php53-dom" id="oval:com.mcafee.oval.gen:tst:325282" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:325283" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:325284" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php53-ftp" id="oval:com.mcafee.oval.gen:tst:325278" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:325279" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:325280" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php53-odbc" id="oval:com.mcafee.oval.gen:tst:325274" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:325275" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:325276" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php53-suhosin" id="oval:com.mcafee.oval.gen:tst:325270" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:325271" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:325272" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php53-tokenizer" id="oval:com.mcafee.oval.gen:tst:325266" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:325267" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:325268" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php53-zip" id="oval:com.mcafee.oval.gen:tst:325262" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:325263" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:325264" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php53-bcmath" id="oval:com.mcafee.oval.gen:tst:325258" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:325259" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:325260" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php53-json" id="oval:com.mcafee.oval.gen:tst:325254" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:325255" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:325256" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php53-mysql" id="oval:com.mcafee.oval.gen:tst:325250" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:325251" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:325252" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php53-openssl" id="oval:com.mcafee.oval.gen:tst:325246" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:325247" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:325248" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php53-pgsql" id="oval:com.mcafee.oval.gen:tst:325242" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:325243" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:325244" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php53-shmop" id="oval:com.mcafee.oval.gen:tst:325238" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:325239" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:325240" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php53-wddx" id="oval:com.mcafee.oval.gen:tst:325234" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:325235" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:325236" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php53-gettext" id="oval:com.mcafee.oval.gen:tst:325230" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:325231" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:325232" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php53-gmp" id="oval:com.mcafee.oval.gen:tst:325226" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:325227" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:325228" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php53-exif" id="oval:com.mcafee.oval.gen:tst:325222" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:325223" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:325224" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php53-gd" id="oval:com.mcafee.oval.gen:tst:325218" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:325219" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:325220" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php53-intl" id="oval:com.mcafee.oval.gen:tst:325214" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:325215" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:325216" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php53-mcrypt" id="oval:com.mcafee.oval.gen:tst:325210" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:325211" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:325212" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php53-pear" id="oval:com.mcafee.oval.gen:tst:325206" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:325207" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:325208" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for xalan-j2" id="oval:com.mcafee.oval.gen:tst:325202" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:325203" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:325204" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for sendmail" id="oval:com.mcafee.oval.gen:tst:325198" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:325199" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:325200" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for puppet-server" id="oval:com.mcafee.oval.gen:tst:325194" version="4" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:325195" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:325196" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for puppet" id="oval:com.mcafee.oval.gen:tst:325190" version="4" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:325191" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:325192" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for kdm" id="oval:com.mcafee.oval.gen:tst:325186" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:325187" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:325188" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for kwin" id="oval:com.mcafee.oval.gen:tst:325182" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:325183" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:325184" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for kdebase4-workspace" id="oval:com.mcafee.oval.gen:tst:325178" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:325179" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:325180" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for kdebase4-workspace-ksysguardd" id="oval:com.mcafee.oval.gen:tst:325174" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:325175" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:325176" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for kde4-kgreeter-plugins" id="oval:com.mcafee.oval.gen:tst:325170" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:325171" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:325172" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for kdebase4-wallpapers" id="oval:com.mcafee.oval.gen:tst:325166" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:325167" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:325168" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for gpg2-lang" id="oval:com.mcafee.oval.gen:tst:325162" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:325163" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:325164" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for gpg2" id="oval:com.mcafee.oval.gen:tst:325158" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:325159" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:325160" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for libtdb1-32bit" id="oval:com.mcafee.oval.gen:tst:325154" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:325155" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:325156" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for libtevent0-32bit" id="oval:com.mcafee.oval.gen:tst:325150" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:325151" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:325152" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for libsmbclient0-32bit" id="oval:com.mcafee.oval.gen:tst:325146" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:325147" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:325148" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for samba-client-32bit" id="oval:com.mcafee.oval.gen:tst:325142" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:325143" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:325144" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for libtalloc2-32bit" id="oval:com.mcafee.oval.gen:tst:325138" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:325139" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:325140" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for libwbclient0-32bit" id="oval:com.mcafee.oval.gen:tst:325134" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:325135" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:325136" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for samba-winbind-32bit" id="oval:com.mcafee.oval.gen:tst:325130" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:325131" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:325132" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for samba-32bit" id="oval:com.mcafee.oval.gen:tst:325126" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:325127" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:325128" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for samba" id="oval:com.mcafee.oval.gen:tst:325122" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:325123" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:325124" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for libtdb1" id="oval:com.mcafee.oval.gen:tst:325118" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:325119" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:325120" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for libtalloc2" id="oval:com.mcafee.oval.gen:tst:325114" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:325115" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:325116" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for libsmbclient0" id="oval:com.mcafee.oval.gen:tst:325110" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:325111" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:325112" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for samba-client" id="oval:com.mcafee.oval.gen:tst:325106" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:325107" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:325108" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for ldapsmb" id="oval:com.mcafee.oval.gen:tst:325102" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:325103" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:325104" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for libldb1" id="oval:com.mcafee.oval.gen:tst:325098" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:325099" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:325100" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for glibc-html" id="oval:com.mcafee.oval.gen:tst:324958" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:324959" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:324960" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for glibc-info" id="oval:com.mcafee.oval.gen:tst:324954" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:324955" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:324956" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for glibc" id="oval:com.mcafee.oval.gen:tst:324950" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:324951" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:324952" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for glibc-devel" id="oval:com.mcafee.oval.gen:tst:324946" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:324947" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:324948" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for kdirstat" id="oval:com.mcafee.oval.gen:tst:324942" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:324943" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:324944" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for libtasn1-3-32bit" id="oval:com.mcafee.oval.gen:tst:324938" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:324939" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:324940" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for libtasn1" id="oval:com.mcafee.oval.gen:tst:324934" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:324935" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:324936" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for libtasn1-3" id="oval:com.mcafee.oval.gen:tst:324930" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:324931" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:324932" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for ntp" id="oval:com.mcafee.oval.gen:tst:324926" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:324927" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:324928" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for ntp-doc" id="oval:com.mcafee.oval.gen:tst:324922" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:324923" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:324924" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php53-calendar" id="oval:com.mcafee.oval.gen:tst:324918" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:324919" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:324920" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php53-xmlwriter" id="oval:com.mcafee.oval.gen:tst:324914" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:324915" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:324916" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php53-fastcgi" id="oval:com.mcafee.oval.gen:tst:324910" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:324911" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:324912" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php53-mbstring" id="oval:com.mcafee.oval.gen:tst:324906" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:324907" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:324908" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php53-sysvsem" id="oval:com.mcafee.oval.gen:tst:324902" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:324903" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:324904" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php53-iconv" id="oval:com.mcafee.oval.gen:tst:324898" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:324899" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:324900" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php53-ldap" id="oval:com.mcafee.oval.gen:tst:324894" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:324895" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:324896" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php53-pcntl" id="oval:com.mcafee.oval.gen:tst:324890" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:324891" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:324892" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php53-pdo" id="oval:com.mcafee.oval.gen:tst:324886" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:324887" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:324888" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php53-snmp" id="oval:com.mcafee.oval.gen:tst:324882" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:324883" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:324884" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php53-soap" id="oval:com.mcafee.oval.gen:tst:324878" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:324879" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:324880" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php53-xsl" id="oval:com.mcafee.oval.gen:tst:324874" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:324875" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:324876" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for apache2-mod_php53" id="oval:com.mcafee.oval.gen:tst:324870" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:324871" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:324872" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php53-bz2" id="oval:com.mcafee.oval.gen:tst:324866" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:324867" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:324868" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php53-xmlreader" id="oval:com.mcafee.oval.gen:tst:324862" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:324863" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:324864" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php53-ctype" id="oval:com.mcafee.oval.gen:tst:324858" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:324859" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:324860" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php53-pspell" id="oval:com.mcafee.oval.gen:tst:324854" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:324855" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:324856" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php53-sysvshm" id="oval:com.mcafee.oval.gen:tst:324850" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:324851" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:324852" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php53-zlib" id="oval:com.mcafee.oval.gen:tst:324846" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:324847" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:324848" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php53-curl" id="oval:com.mcafee.oval.gen:tst:324842" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:324843" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:324844" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for glibc-i18ndata" id="oval:com.mcafee.oval.gen:tst:324458" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:324459" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:324460" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for glibc-locale" id="oval:com.mcafee.oval.gen:tst:324454" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:324455" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:324456" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for nscd" id="oval:com.mcafee.oval.gen:tst:324450" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:324451" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:324452" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for glibc-profile" id="oval:com.mcafee.oval.gen:tst:324446" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:324447" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:324448" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for glibc-html" id="oval:com.mcafee.oval.gen:tst:324442" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:324443" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:324444" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for glibc-info" id="oval:com.mcafee.oval.gen:tst:324438" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:324439" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:324440" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for glibc" id="oval:com.mcafee.oval.gen:tst:324434" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:324435" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:324436" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for glibc-devel" id="oval:com.mcafee.oval.gen:tst:324430" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:324431" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:324432" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for krb5-32bit" id="oval:com.mcafee.oval.gen:tst:324426" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:324427" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:324428" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for krb5-apps-servers" id="oval:com.mcafee.oval.gen:tst:324422" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:324423" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:324424" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for krb5-client" id="oval:com.mcafee.oval.gen:tst:324418" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:324419" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:324420" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for krb5-plugin-kdb-ldap" id="oval:com.mcafee.oval.gen:tst:324414" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:324415" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:324416" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for krb5" id="oval:com.mcafee.oval.gen:tst:324410" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:324411" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:324412" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for krb5-server" id="oval:com.mcafee.oval.gen:tst:324406" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:324407" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:324408" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for krb5-apps-clients" id="oval:com.mcafee.oval.gen:tst:324402" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:324403" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:324404" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for krb5-plugin-preauth-pkinit" id="oval:com.mcafee.oval.gen:tst:324398" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:324399" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:324400" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for krb5-doc" id="oval:com.mcafee.oval.gen:tst:324394" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:324395" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:324396" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for java-1_7_0-ibm-jdbc" id="oval:com.mcafee.oval.gen:tst:324390" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:324391" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:324392" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for java-1_7_0-ibm" id="oval:com.mcafee.oval.gen:tst:324386" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:324387" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:324388" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for java-1_7_0-ibm-alsa" id="oval:com.mcafee.oval.gen:tst:324382" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:324383" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:324384" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for java-1_7_0-ibm-plugin" id="oval:com.mcafee.oval.gen:tst:324378" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:324379" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:324380" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for libopenssl0_9_8-hmac-32bit" id="oval:com.mcafee.oval.gen:tst:324374" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:324375" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:324376" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for libopenssl0_9_8-32bit" id="oval:com.mcafee.oval.gen:tst:324370" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:324371" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:324372" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for libopenssl0_9_8-hmac" id="oval:com.mcafee.oval.gen:tst:324366" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:324367" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:324368" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for openssl" id="oval:com.mcafee.oval.gen:tst:324362" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:324363" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:324364" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for openssl-doc" id="oval:com.mcafee.oval.gen:tst:324358" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:324359" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:324360" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for libopenssl0_9_8" id="oval:com.mcafee.oval.gen:tst:324354" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:324355" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:324356" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for java-1_6_0-ibm-jdbc" id="oval:com.mcafee.oval.gen:tst:324350" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:324351" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:324352" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for java-1_6_0-ibm-fonts" id="oval:com.mcafee.oval.gen:tst:324346" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:324347" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:324348" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for java-1_6_0-ibm" id="oval:com.mcafee.oval.gen:tst:324342" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:324343" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:324344" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for java-1_6_0-ibm-plugin" id="oval:com.mcafee.oval.gen:tst:324338" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:324339" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:324340" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for java-1_6_0-ibm-alsa" id="oval:com.mcafee.oval.gen:tst:324334" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:324335" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:324336" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for kernel-xen-devel" id="oval:com.mcafee.oval.gen:tst:323009" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:323010" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:323011" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for xen-kmp-default" id="oval:com.mcafee.oval.gen:tst:323005" version="4" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:323006" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:323007" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for kernel-default-base" id="oval:com.mcafee.oval.gen:tst:322973" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:322974" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:322975" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for xen-kmp-trace" id="oval:com.mcafee.oval.gen:tst:321111" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:321112" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:321113" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for xen-tools" id="oval:com.mcafee.oval.gen:tst:321107" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:321108" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:321109" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for xen-kmp-default" id="oval:com.mcafee.oval.gen:tst:321103" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:321104" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:321105" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for xen-libs" id="oval:com.mcafee.oval.gen:tst:321099" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:321100" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:321101" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for xen" id="oval:com.mcafee.oval.gen:tst:321095" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:321096" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:321097" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for xen-doc-html" id="oval:com.mcafee.oval.gen:tst:321091" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:321092" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:321093" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for libxml2-devel" id="oval:com.mcafee.oval.gen:tst:321087" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:321088" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:321089" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for libxml2" id="oval:com.mcafee.oval.gen:tst:321083" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:321084" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:321085" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for libxml2-python" id="oval:com.mcafee.oval.gen:tst:321067" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:321068" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:321069" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for libxml2-32bit" id="oval:com.mcafee.oval.gen:tst:321063" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:321064" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:321065" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for libxml2-devel-32bit" id="oval:com.mcafee.oval.gen:tst:321059" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:321060" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:321061" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for libxml2-32bit" id="oval:com.mcafee.oval.gen:tst:321055" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:321056" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:321057" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for glibc-i18ndata" id="oval:com.mcafee.oval.gen:tst:321051" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:321052" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:321053" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for glibc-devel" id="oval:com.mcafee.oval.gen:tst:321007" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:321008" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:321009" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for glibc-locale" id="oval:com.mcafee.oval.gen:tst:320999" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:321000" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:321001" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for glibc-profile" id="oval:com.mcafee.oval.gen:tst:320991" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:320992" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:320993" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for glibc-info" id="oval:com.mcafee.oval.gen:tst:320983" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:320984" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:320985" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for glibc-devel" id="oval:com.mcafee.oval.gen:tst:320975" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:320976" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:320977" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for glibc-32bit" id="oval:com.mcafee.oval.gen:tst:320971" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:320972" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:320973" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for glibc-profile-32bit" id="oval:com.mcafee.oval.gen:tst:320967" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:320968" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:320969" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for gnutls" id="oval:com.mcafee.oval.gen:tst:320410" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:320411" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:320412" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for libgnutls26" id="oval:com.mcafee.oval.gen:tst:320406" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:320407" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:320408" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for openssl-certs" id="oval:com.mcafee.oval.gen:tst:320402" version="4" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:320403" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:320404" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for libpython2_6-1_0-32bit" id="oval:com.mcafee.oval.gen:tst:320398" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:320399" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:320400" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for python-base-32bit" id="oval:com.mcafee.oval.gen:tst:320394" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:320395" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:320396" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for libpython2_6-1_0" id="oval:com.mcafee.oval.gen:tst:320378" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:320379" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:320380" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for python-idle" id="oval:com.mcafee.oval.gen:tst:320358" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:320359" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:320360" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for libMagickCore1" id="oval:com.mcafee.oval.gen:tst:320338" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:320339" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:320340" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for xen-libs-32bit" id="oval:com.mcafee.oval.gen:tst:320334" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:320335" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:320336" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for xen-doc-pdf" id="oval:com.mcafee.oval.gen:tst:320330" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:320331" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:320332" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for xen-tools" id="oval:com.mcafee.oval.gen:tst:320326" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:320327" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:320328" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for openswan-doc" id="oval:com.mcafee.oval.gen:tst:319774" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:319775" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:319776" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for bind-doc" id="oval:com.mcafee.oval.gen:tst:319770" version="4" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:319771" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:319772" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for bind-utils" id="oval:com.mcafee.oval.gen:tst:319758" version="4" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:319759" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:319760" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for bind-libs-32bit" id="oval:com.mcafee.oval.gen:tst:319750" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:319751" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:319752" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for kernel-ec2" id="oval:com.mcafee.oval.gen:tst:319742" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:319743" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:319744" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for xen-kmp-default" id="oval:com.mcafee.oval.gen:tst:319726" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:319727" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:319728" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for kernel-ec2-devel" id="oval:com.mcafee.oval.gen:tst:319722" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:319723" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:319724" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for xen-kmp-pae" id="oval:com.mcafee.oval.gen:tst:319710" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:319711" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:319712" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for kernel-trace-base" id="oval:com.mcafee.oval.gen:tst:319698" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:319699" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:319700" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for hplip" id="oval:com.mcafee.oval.gen:tst:319654" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:319655" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:319656" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php53-dom" id="oval:com.mcafee.oval.gen:tst:317973" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:317974" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:317975" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php53-suhosin" id="oval:com.mcafee.oval.gen:tst:317961" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:317962" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:317963" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php53-tokenizer" id="oval:com.mcafee.oval.gen:tst:317957" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:317958" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:317959" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php53-zip" id="oval:com.mcafee.oval.gen:tst:317953" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:317954" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:317955" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php53-bcmath" id="oval:com.mcafee.oval.gen:tst:317949" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:317950" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:317951" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php53-gmp" id="oval:com.mcafee.oval.gen:tst:317917" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:317918" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:317919" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php53-exif" id="oval:com.mcafee.oval.gen:tst:317913" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:317914" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:317915" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php53-gd" id="oval:com.mcafee.oval.gen:tst:317909" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:317910" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:317911" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php53-intl" id="oval:com.mcafee.oval.gen:tst:317905" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:317906" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:317907" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php53-pear" id="oval:com.mcafee.oval.gen:tst:317717" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:317718" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:317719" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for wireshark" id="oval:com.mcafee.oval.gen:tst:317713" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:317714" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:317715" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for kernel-trace-devel" id="oval:com.mcafee.oval.gen:tst:317697" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:317698" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:317699" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for kernel-trace" id="oval:com.mcafee.oval.gen:tst:317689" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:317690" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:317691" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for kernel-source" id="oval:com.mcafee.oval.gen:tst:317681" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:317682" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:317683" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for kernel-pae" id="oval:com.mcafee.oval.gen:tst:317677" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:317678" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:317679" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for kernel-pae-devel" id="oval:com.mcafee.oval.gen:tst:317673" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:317674" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:317675" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for xen-kmp-pae" id="oval:com.mcafee.oval.gen:tst:317669" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:317670" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:317671" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for java-1_6_0-ibm-fonts" id="oval:com.mcafee.oval.gen:tst:311668" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:311669" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:311670" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for java-1_6_0-ibm" id="oval:com.mcafee.oval.gen:tst:311664" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:311665" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:311666" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for java-1_6_0-ibm-alsa" id="oval:com.mcafee.oval.gen:tst:311660" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:311661" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:311662" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for xorg-x11-libXp-32bit" id="oval:com.mcafee.oval.gen:tst:311628" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:311629" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:311630" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for xorg-x11-libXp" id="oval:com.mcafee.oval.gen:tst:311624" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:311625" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:311626" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for websphere-as_ce" id="oval:com.mcafee.oval.gen:tst:281319" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:281320" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:281321" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for mozilla-xulrunner190-translations-32bit" id="oval:com.mcafee.oval.gen:tst:279748" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:279749" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:279750" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for mozilla-xulrunner190-gnomevfs-32bit" id="oval:com.mcafee.oval.gen:tst:279739" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:279740" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:279741" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for mozilla-xulrunner190-32bit" id="oval:com.mcafee.oval.gen:tst:279726" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:279727" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:279728" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php5-fastcgi" id="oval:com.mcafee.oval.gen:tst:279220" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:279221" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:279222" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php5-exif" id="oval:com.mcafee.oval.gen:tst:279216" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:279217" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:279218" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php5-dom" id="oval:com.mcafee.oval.gen:tst:279212" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:279213" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:279214" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php5-devel" id="oval:com.mcafee.oval.gen:tst:279208" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:279209" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:279210" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php5-dbase" id="oval:com.mcafee.oval.gen:tst:279204" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:279205" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:279206" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php5-dba" id="oval:com.mcafee.oval.gen:tst:279200" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:279201" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:279202" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php5-curl" id="oval:com.mcafee.oval.gen:tst:279196" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:279197" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:279198" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php5-ctype" id="oval:com.mcafee.oval.gen:tst:279192" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:279193" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:279194" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php5-calendar" id="oval:com.mcafee.oval.gen:tst:279188" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:279189" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:279190" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php5-bz2" id="oval:com.mcafee.oval.gen:tst:279184" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:279185" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:279186" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php5-bcmath" id="oval:com.mcafee.oval.gen:tst:279180" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:279181" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:279182" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php5" id="oval:com.mcafee.oval.gen:tst:279176" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:279177" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:279178" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for apache2-mod_php5" id="oval:com.mcafee.oval.gen:tst:279172" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:279173" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:279174" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for netpbm" id="oval:com.mcafee.oval.gen:tst:279080" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:279081" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:279082" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for libnetpbm" id="oval:com.mcafee.oval.gen:tst:279076" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:279077" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:279078" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for libtool" id="oval:com.mcafee.oval.gen:tst:279072" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:279073" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:279074" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for cron" id="oval:com.mcafee.oval.gen:tst:279056" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:279057" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:279058" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for squid" id="oval:com.mcafee.oval.gen:tst:279040" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:279041" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:279042" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for ethereal-devel" id="oval:com.mcafee.oval.gen:tst:279036" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:279037" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:279038" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for ethereal" id="oval:com.mcafee.oval.gen:tst:279032" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:279033" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:279034" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for tomcat5-webapps" id="oval:com.mcafee.oval.gen:tst:278995" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278996" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278997" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for tomcat5-admin-webapps" id="oval:com.mcafee.oval.gen:tst:278991" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278992" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278993" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for tomcat5" id="oval:com.mcafee.oval.gen:tst:278987" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278988" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278989" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for kdebase3-session" id="oval:com.mcafee.oval.gen:tst:278983" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278984" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278985" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for kdebase3-samba" id="oval:com.mcafee.oval.gen:tst:278979" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278980" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278981" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for kdebase3-nsplugin" id="oval:com.mcafee.oval.gen:tst:278975" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278976" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278977" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for kdebase3-ksysguardd" id="oval:com.mcafee.oval.gen:tst:278971" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278972" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278973" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for kdebase3-kdm" id="oval:com.mcafee.oval.gen:tst:278967" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278968" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278969" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for kdebase3-extra" id="oval:com.mcafee.oval.gen:tst:278963" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278964" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278965" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for kdebase3-devel" id="oval:com.mcafee.oval.gen:tst:278959" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278960" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278961" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for kdebase3" id="oval:com.mcafee.oval.gen:tst:278955" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278956" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278957" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for fileshareset" id="oval:com.mcafee.oval.gen:tst:278951" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278952" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278953" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for tar" id="oval:com.mcafee.oval.gen:tst:278887" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278888" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278889" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for cpio" id="oval:com.mcafee.oval.gen:tst:278883" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278884" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278885" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for libmikmod" id="oval:com.mcafee.oval.gen:tst:278863" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278864" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278865" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for libapr1-devel" id="oval:com.mcafee.oval.gen:tst:278859" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278860" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278861" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for libapr1" id="oval:com.mcafee.oval.gen:tst:278855" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278856" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278857" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for libapr-util1-devel" id="oval:com.mcafee.oval.gen:tst:278849" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278850" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278851" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for libapr-util1" id="oval:com.mcafee.oval.gen:tst:278845" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278846" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278847" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for evolution-data-server-devel" id="oval:com.mcafee.oval.gen:tst:278841" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278842" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278843" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for evolution-data-server" id="oval:com.mcafee.oval.gen:tst:278837" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278838" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278839" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for mysql-shared" id="oval:com.mcafee.oval.gen:tst:278833" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278834" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278835" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for mysql-devel" id="oval:com.mcafee.oval.gen:tst:278829" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278830" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278831" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for mysql-client" id="oval:com.mcafee.oval.gen:tst:278825" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278826" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278827" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for mysql-Max" id="oval:com.mcafee.oval.gen:tst:278821" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278822" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278823" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for mysql" id="oval:com.mcafee.oval.gen:tst:278817" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278818" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278819" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for ncpfs-devel" id="oval:com.mcafee.oval.gen:tst:278809" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278810" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278811" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for ncpfs" id="oval:com.mcafee.oval.gen:tst:278805" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278806" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278807" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for libpng-devel" id="oval:com.mcafee.oval.gen:tst:278801" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278802" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278803" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for libpng" id="oval:com.mcafee.oval.gen:tst:278797" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278798" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278799" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for kdelibs3-doc" id="oval:com.mcafee.oval.gen:tst:278668" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278669" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278670" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for kdelibs3-devel" id="oval:com.mcafee.oval.gen:tst:278664" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278665" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278666" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for kdelibs3-arts" id="oval:com.mcafee.oval.gen:tst:278660" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278661" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278662" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for kdelibs3" id="oval:com.mcafee.oval.gen:tst:278656" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278657" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278658" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for samba-winbind" id="oval:com.mcafee.oval.gen:tst:278640" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278641" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278642" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for samba-vscan" id="oval:com.mcafee.oval.gen:tst:278636" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278637" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278638" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for samba-python" id="oval:com.mcafee.oval.gen:tst:278632" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278633" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278634" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for samba-krb-printing" id="oval:com.mcafee.oval.gen:tst:278628" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278629" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278630" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for samba-client" id="oval:com.mcafee.oval.gen:tst:278624" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278625" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278626" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for samba" id="oval:com.mcafee.oval.gen:tst:278620" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278621" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278622" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for libsmbclient-devel" id="oval:com.mcafee.oval.gen:tst:278616" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278617" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278618" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for libsmbclient" id="oval:com.mcafee.oval.gen:tst:278612" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278613" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278614" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for libmsrpc-devel" id="oval:com.mcafee.oval.gen:tst:278608" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278609" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278610" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for libmsrpc" id="oval:com.mcafee.oval.gen:tst:278604" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278605" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278606" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for ldapsmb" id="oval:com.mcafee.oval.gen:tst:278600" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278601" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278602" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for cifs-mount" id="oval:com.mcafee.oval.gen:tst:278596" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278597" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278598" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for compat-openssl097g" id="oval:com.mcafee.oval.gen:tst:278461" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278462" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278463" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for mozilla-nss-devel" id="oval:com.mcafee.oval.gen:tst:278454" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278455" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278456" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for mozilla-nss" id="oval:com.mcafee.oval.gen:tst:278450" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278451" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278452" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for mozilla-nspr-devel" id="oval:com.mcafee.oval.gen:tst:278446" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278447" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278448" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for mozilla-nspr" id="oval:com.mcafee.oval.gen:tst:278442" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278443" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278444" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for openssl-doc" id="oval:com.mcafee.oval.gen:tst:278429" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278430" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278431" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for openssl-devel" id="oval:com.mcafee.oval.gen:tst:278425" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278426" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278427" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for openssl" id="oval:com.mcafee.oval.gen:tst:278421" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278422" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278423" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for kernel-kdumppae" id="oval:com.mcafee.oval.gen:tst:278350" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278351" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278352" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for kernel-xenpae" id="oval:com.mcafee.oval.gen:tst:278342" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278343" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278344" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for kernel-xen" id="oval:com.mcafee.oval.gen:tst:278338" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278339" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278340" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for kernel-vmipae" id="oval:com.mcafee.oval.gen:tst:278334" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278335" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278336" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for kernel-vmi" id="oval:com.mcafee.oval.gen:tst:278330" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278331" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278332" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for kernel-syms" id="oval:com.mcafee.oval.gen:tst:278326" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278327" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278328" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for kernel-source" id="oval:com.mcafee.oval.gen:tst:278322" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278323" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278324" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for kernel-smp" id="oval:com.mcafee.oval.gen:tst:278318" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278319" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278320" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for kernel-kdump" id="oval:com.mcafee.oval.gen:tst:278314" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278315" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278316" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for kernel-default" id="oval:com.mcafee.oval.gen:tst:278310" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278311" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278312" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for kernel-debug" id="oval:com.mcafee.oval.gen:tst:278306" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278307" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278308" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for kernel-bigsmp" id="oval:com.mcafee.oval.gen:tst:278302" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278303" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278304" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for mozilla-xulrunner191-translations" id="oval:com.mcafee.oval.gen:tst:278248" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278249" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278250" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for mozilla-xulrunner191-gnomevfs" id="oval:com.mcafee.oval.gen:tst:278244" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278245" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278246" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for mozilla-xulrunner191" id="oval:com.mcafee.oval.gen:tst:278240" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278241" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278242" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for gpg2" id="oval:com.mcafee.oval.gen:tst:278234" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278235" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278236" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for expat" id="oval:com.mcafee.oval.gen:tst:278220" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278221" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278222" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for pyxml" id="oval:com.mcafee.oval.gen:tst:278208" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278209" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278210" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for libvorbis" id="oval:com.mcafee.oval.gen:tst:278204" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278205" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278206" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for mozilla-xulrunner190-translations" id="oval:com.mcafee.oval.gen:tst:278200" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278201" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278202" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for mozilla-xulrunner190-gnomevfs" id="oval:com.mcafee.oval.gen:tst:278196" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278197" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278198" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for mozilla-xulrunner190" id="oval:com.mcafee.oval.gen:tst:278192" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278193" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278194" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for firefox3-pango" id="oval:com.mcafee.oval.gen:tst:278188" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278189" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278190" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for firefox3-gtk2" id="oval:com.mcafee.oval.gen:tst:278184" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278185" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278186" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for firefox3-glib2" id="oval:com.mcafee.oval.gen:tst:278180" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278181" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278182" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for firefox3-cairo" id="oval:com.mcafee.oval.gen:tst:278176" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278177" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278178" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for firefox3-atk" id="oval:com.mcafee.oval.gen:tst:278172" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278173" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278174" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for MozillaFirefox-translations" id="oval:com.mcafee.oval.gen:tst:278168" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278169" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278170" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for MozillaFirefox-branding-SLED" id="oval:com.mcafee.oval.gen:tst:278164" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278165" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278166" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for MozillaFirefox" id="oval:com.mcafee.oval.gen:tst:278160" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278161" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278162" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for java-1_4_2-ibm-plugin" id="oval:com.mcafee.oval.gen:tst:278156" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278157" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278158" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for java-1_4_2-ibm-jdbc" id="oval:com.mcafee.oval.gen:tst:278152" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278153" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278154" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for java-1_4_2-ibm-devel" id="oval:com.mcafee.oval.gen:tst:278148" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278149" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278150" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for java-1_4_2-ibm" id="oval:com.mcafee.oval.gen:tst:278144" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278145" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278146" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for java-1_5_0-ibm-plugin" id="oval:com.mcafee.oval.gen:tst:278140" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278141" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278142" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for java-1_5_0-ibm-jdbc" id="oval:com.mcafee.oval.gen:tst:278136" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278137" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278138" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for java-1_5_0-ibm-fonts" id="oval:com.mcafee.oval.gen:tst:278132" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278133" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278134" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for java-1_5_0-ibm-devel" id="oval:com.mcafee.oval.gen:tst:278128" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278129" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278130" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for java-1_5_0-ibm-alsa" id="oval:com.mcafee.oval.gen:tst:278124" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278125" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278126" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for java-1_5_0-ibm" id="oval:com.mcafee.oval.gen:tst:278120" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278121" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278122" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for python-xml" id="oval:com.mcafee.oval.gen:tst:278116" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278117" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278118" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for python-tk" id="oval:com.mcafee.oval.gen:tst:278112" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278113" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278114" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for python-idle" id="oval:com.mcafee.oval.gen:tst:278108" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278109" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278110" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for python-gdbm" id="oval:com.mcafee.oval.gen:tst:278104" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278105" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278106" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for python-devel" id="oval:com.mcafee.oval.gen:tst:278100" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278101" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278102" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for python-demo" id="oval:com.mcafee.oval.gen:tst:278096" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278097" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278098" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for python-curses" id="oval:com.mcafee.oval.gen:tst:278092" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278093" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278094" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for python" id="oval:com.mcafee.oval.gen:tst:278088" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278089" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278090" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for xerces-j2-scripts" id="oval:com.mcafee.oval.gen:tst:278084" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278085" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278086" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for xerces-j2-javadoc-xni" id="oval:com.mcafee.oval.gen:tst:278080" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278081" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278082" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for xerces-j2-javadoc-other" id="oval:com.mcafee.oval.gen:tst:278076" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278077" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278078" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for xerces-j2-javadoc-impl" id="oval:com.mcafee.oval.gen:tst:278072" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278073" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278074" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for xerces-j2-javadoc-dom3" id="oval:com.mcafee.oval.gen:tst:278068" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278069" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278070" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for xerces-j2-javadoc-apis" id="oval:com.mcafee.oval.gen:tst:278064" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278065" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278066" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for xerces-j2-demo" id="oval:com.mcafee.oval.gen:tst:278060" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278061" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278062" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for xerces-j2" id="oval:com.mcafee.oval.gen:tst:278056" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278057" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278058" />
    </rpminfo_test>
  </tests>
  <objects>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:326501" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libmysql55client18</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:326497" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>mysql-tools</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:326493" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libmysqlclient15</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:326489" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>mysql-client</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:326485" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libmysql55client_r18</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:326481" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>mysql</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:326477" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libmysqlclient_r15</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:326473" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libmysql55client18-32bit</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:326469" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libmysqlclient15-32bit</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:326465" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libgpgme11</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:326461" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>gpgme</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:326453" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libgcrypt11</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:326449" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>ppp</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:326445" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libsnmp15-32bit</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:326441" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>perl-SNMP</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:326437" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>snmp-mibs</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:326433" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libsnmp15</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:326429" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>net-snmp</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:326337" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libQtWebKit4</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:325511" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libvirt-client</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:325507" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libvirt-doc</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:325503" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libvirt-python</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:325499" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libvirt-lock-sanlock</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:325495" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libvirt</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:325491" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libvirt-client-32bit</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:325487" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>strongswan-doc</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:325483" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>strongswan</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:325479" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openssl-certs</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:325315" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php53-sysvshm</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:325311" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php53-zlib</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:325307" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php53-curl</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:325303" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php53-dba</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:325299" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php53-fileinfo</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:325295" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php53-sysvmsg</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:325291" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php53-xmlrpc</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:325287" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php53</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:325283" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php53-dom</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:325279" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php53-ftp</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:325275" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php53-odbc</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:325271" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php53-suhosin</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:325267" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php53-tokenizer</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:325263" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php53-zip</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:325259" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php53-bcmath</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:325255" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php53-json</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:325251" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php53-mysql</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:325247" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php53-openssl</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:325243" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php53-pgsql</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:325239" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php53-shmop</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:325235" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php53-wddx</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:325231" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php53-gettext</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:325227" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php53-gmp</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:325223" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php53-exif</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:325219" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php53-gd</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:325215" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php53-intl</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:325211" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php53-mcrypt</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:325207" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php53-pear</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:325203" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>xalan-j2</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:325199" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>sendmail</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:325195" version="4" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>puppet-server</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:325191" version="4" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>puppet</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:325187" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>kdm</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:325183" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>kwin</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:325179" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>kdebase4-workspace</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:325175" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>kdebase4-workspace-ksysguardd</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:325171" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>kde4-kgreeter-plugins</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:325167" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>kdebase4-wallpapers</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:325163" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>gpg2-lang</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:325159" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>gpg2</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:325155" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libtdb1-32bit</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:325151" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libtevent0-32bit</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:325147" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libsmbclient0-32bit</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:325143" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>samba-client-32bit</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:325139" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libtalloc2-32bit</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:325135" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libwbclient0-32bit</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:325131" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>samba-winbind-32bit</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:325127" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>samba-32bit</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:325123" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>samba</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:325119" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libtdb1</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:325115" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libtalloc2</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:325111" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libsmbclient0</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:325107" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>samba-client</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:325103" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>ldapsmb</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:325099" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libldb1</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:324959" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>glibc-html</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:324955" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>glibc-info</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:324951" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>glibc</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:324947" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>glibc-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:324943" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>kdirstat</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:324939" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libtasn1-3-32bit</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:324935" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libtasn1</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:324931" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libtasn1-3</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:324927" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>ntp</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:324923" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>ntp-doc</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:324919" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php53-calendar</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:324915" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php53-xmlwriter</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:324911" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php53-fastcgi</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:324907" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php53-mbstring</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:324903" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php53-sysvsem</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:324899" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php53-iconv</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:324895" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php53-ldap</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:324891" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php53-pcntl</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:324887" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php53-pdo</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:324883" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php53-snmp</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:324879" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php53-soap</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:324875" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php53-xsl</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:324871" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>apache2-mod_php53</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:324867" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php53-bz2</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:324863" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php53-xmlreader</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:324859" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php53-ctype</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:324855" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php53-pspell</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:324851" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php53-sysvshm</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:324847" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php53-zlib</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:324843" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php53-curl</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:324459" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>glibc-i18ndata</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:324455" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>glibc-locale</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:324451" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>nscd</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:324447" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>glibc-profile</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:324443" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>glibc-html</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:324439" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>glibc-info</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:324435" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>glibc</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:324431" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>glibc-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:324427" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>krb5-32bit</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:324423" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>krb5-apps-servers</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:324419" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>krb5-client</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:324415" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>krb5-plugin-kdb-ldap</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:324411" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>krb5</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:324407" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>krb5-server</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:324403" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>krb5-apps-clients</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:324399" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>krb5-plugin-preauth-pkinit</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:324395" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>krb5-doc</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:324391" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>java-1_7_0-ibm-jdbc</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:324387" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>java-1_7_0-ibm</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:324383" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>java-1_7_0-ibm-alsa</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:324379" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>java-1_7_0-ibm-plugin</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:324375" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libopenssl0_9_8-hmac-32bit</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:324371" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libopenssl0_9_8-32bit</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:324367" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libopenssl0_9_8-hmac</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:324363" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openssl</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:324359" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openssl-doc</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:324355" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libopenssl0_9_8</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:324351" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>java-1_6_0-ibm-jdbc</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:324347" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>java-1_6_0-ibm-fonts</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:324343" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>java-1_6_0-ibm</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:324339" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>java-1_6_0-ibm-plugin</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:324335" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>java-1_6_0-ibm-alsa</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:323010" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>kernel-xen-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:323006" version="4" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>xen-kmp-default</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:322974" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>kernel-default-base</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:321112" version="4" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>xen-kmp-trace</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:321108" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>xen-tools</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:321104" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>xen-kmp-default</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:321100" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>xen-libs</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:321096" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>xen</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:321092" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>xen-doc-html</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:321088" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libxml2-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:321084" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libxml2</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:321068" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libxml2-python</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:321064" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libxml2-32bit</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:321060" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libxml2-devel-32bit</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:321056" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libxml2-32bit</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:321052" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>glibc-i18ndata</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:321008" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>glibc-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:321000" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>glibc-locale</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:320992" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>glibc-profile</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:320984" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>glibc-info</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:320976" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>glibc-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:320972" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>glibc-32bit</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:320968" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>glibc-profile-32bit</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:320411" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>gnutls</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:320407" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libgnutls26</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:320403" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openssl-certs</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:320399" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libpython2_6-1_0-32bit</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:320395" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>python-base-32bit</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:320379" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libpython2_6-1_0</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:320359" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>python-idle</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:320339" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libMagickCore1</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:320335" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>xen-libs-32bit</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:320331" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>xen-doc-pdf</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:320327" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>xen-tools</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:319775" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openswan-doc</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:319771" version="4" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>bind-doc</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:319759" version="4" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>bind-utils</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:319751" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>bind-libs-32bit</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:319743" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>kernel-ec2</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:319727" version="4" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>xen-kmp-default</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:319723" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>kernel-ec2-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:319711" version="4" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>xen-kmp-pae</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:319699" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>kernel-trace-base</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:319655" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>hplip</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:317974" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php53-dom</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:317962" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php53-suhosin</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:317958" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php53-tokenizer</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:317954" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php53-zip</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:317950" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php53-bcmath</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:317918" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php53-gmp</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:317914" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php53-exif</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:317910" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php53-gd</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:317906" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php53-intl</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:317718" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php53-pear</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:317714" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>wireshark</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:317698" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>kernel-trace-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:317690" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>kernel-trace</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:317682" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>kernel-source</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:317678" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>kernel-pae</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:317674" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>kernel-pae-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:317670" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>xen-kmp-pae</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:311669" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>java-1_6_0-ibm-fonts</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:311665" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>java-1_6_0-ibm</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:311661" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>java-1_6_0-ibm-alsa</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:311629" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>xorg-x11-libXp-32bit</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:311625" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>xorg-x11-libXp</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:281320" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>websphere-as_ce</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:279749" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>mozilla-xulrunner190-translations-32bit</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:279740" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>mozilla-xulrunner190-gnomevfs-32bit</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:279727" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>mozilla-xulrunner190-32bit</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:279221" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php5-fastcgi</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:279217" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php5-exif</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:279213" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php5-dom</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:279209" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php5-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:279205" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php5-dbase</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:279201" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php5-dba</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:279197" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php5-curl</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:279193" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php5-ctype</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:279189" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php5-calendar</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:279185" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php5-bz2</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:279181" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php5-bcmath</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:279177" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php5</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:279173" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>apache2-mod_php5</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:279081" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>netpbm</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:279077" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libnetpbm</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:279073" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libtool</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:279057" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>cron</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:279041" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>squid</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:279037" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>ethereal-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:279033" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>ethereal</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278996" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>tomcat5-webapps</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278992" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>tomcat5-admin-webapps</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278988" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>tomcat5</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278984" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>kdebase3-session</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278980" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>kdebase3-samba</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278976" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>kdebase3-nsplugin</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278972" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>kdebase3-ksysguardd</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278968" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>kdebase3-kdm</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278964" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>kdebase3-extra</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278960" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>kdebase3-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278956" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>kdebase3</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278952" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>fileshareset</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278888" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>tar</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278884" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>cpio</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278864" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libmikmod</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278860" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libapr1-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278856" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libapr1</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278850" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libapr-util1-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278846" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libapr-util1</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278842" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>evolution-data-server-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278838" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>evolution-data-server</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278834" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>mysql-shared</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278830" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>mysql-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278826" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>mysql-client</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278822" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>mysql-Max</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278818" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>mysql</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278810" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>ncpfs-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278806" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>ncpfs</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278802" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libpng-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278798" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libpng</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278669" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>kdelibs3-doc</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278665" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>kdelibs3-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278661" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>kdelibs3-arts</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278657" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>kdelibs3</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278641" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>samba-winbind</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278637" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>samba-vscan</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278633" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>samba-python</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278629" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>samba-krb-printing</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278625" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>samba-client</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278621" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>samba</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278617" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libsmbclient-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278613" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libsmbclient</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278609" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libmsrpc-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278605" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libmsrpc</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278601" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>ldapsmb</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278597" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>cifs-mount</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278462" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>compat-openssl097g</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278455" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>mozilla-nss-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278451" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>mozilla-nss</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278447" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>mozilla-nspr-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278443" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>mozilla-nspr</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278430" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openssl-doc</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278426" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openssl-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278422" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openssl</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278351" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>kernel-kdumppae</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278343" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>kernel-xenpae</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278339" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>kernel-xen</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278335" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>kernel-vmipae</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278331" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>kernel-vmi</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278327" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>kernel-syms</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278323" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>kernel-source</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278319" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>kernel-smp</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278315" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>kernel-kdump</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278311" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>kernel-default</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278307" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>kernel-debug</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278303" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>kernel-bigsmp</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278249" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>mozilla-xulrunner191-translations</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278245" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>mozilla-xulrunner191-gnomevfs</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278241" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>mozilla-xulrunner191</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278235" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>gpg2</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278221" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>expat</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278209" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>pyxml</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278205" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libvorbis</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278201" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>mozilla-xulrunner190-translations</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278197" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>mozilla-xulrunner190-gnomevfs</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278193" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>mozilla-xulrunner190</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278189" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>firefox3-pango</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278185" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>firefox3-gtk2</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278181" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>firefox3-glib2</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278177" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>firefox3-cairo</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278173" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>firefox3-atk</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278169" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>MozillaFirefox-translations</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278165" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>MozillaFirefox-branding-SLED</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278161" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>MozillaFirefox</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278157" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>java-1_4_2-ibm-plugin</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278153" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>java-1_4_2-ibm-jdbc</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278149" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>java-1_4_2-ibm-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278145" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>java-1_4_2-ibm</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278141" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>java-1_5_0-ibm-plugin</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278137" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>java-1_5_0-ibm-jdbc</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278133" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>java-1_5_0-ibm-fonts</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278129" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>java-1_5_0-ibm-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278125" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>java-1_5_0-ibm-alsa</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278121" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>java-1_5_0-ibm</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278117" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>python-xml</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278113" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>python-tk</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278109" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>python-idle</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278105" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>python-gdbm</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278101" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>python-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278097" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>python-demo</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278093" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>python-curses</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278089" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>python</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278085" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>xerces-j2-scripts</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278081" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>xerces-j2-javadoc-xni</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278077" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>xerces-j2-javadoc-other</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278073" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>xerces-j2-javadoc-impl</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278069" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>xerces-j2-javadoc-dom3</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278065" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>xerces-j2-javadoc-apis</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278061" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>xerces-j2-demo</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278057" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>xerces-j2</name>
    </rpminfo_object>
  </objects>
  <states>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:326502" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">0.7.1</release>
      <version datatype="version" operation="greater than or equal">5.5.39</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:326498" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">0.7.1</release>
      <version datatype="version" operation="greater than or equal">5.5.39</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:326494" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">0.6.13</release>
      <version datatype="version" operation="greater than or equal">5.0.96</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:326490" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">0.7.1</release>
      <version datatype="version" operation="greater than or equal">5.5.39</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:326486" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">0.7.1</release>
      <version datatype="version" operation="greater than or equal">5.5.39</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:326482" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">0.7.1</release>
      <version datatype="version" operation="greater than or equal">5.5.39</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:326478" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">0.6.13</release>
      <version datatype="version" operation="greater than or equal">5.0.96</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:326474" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">0.7.1</release>
      <version datatype="version" operation="greater than or equal">5.5.39</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:326470" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">0.6.13</release>
      <version datatype="version" operation="greater than or equal">5.0.96</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:326466" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">25.32.1</release>
      <version datatype="version" operation="greater than or equal">1.1.6</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:326462" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">25.32.1</release>
      <version datatype="version" operation="greater than or equal">1.1.6</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:326454" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">0.17.1</release>
      <version datatype="version" operation="greater than or equal">1.5.0</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:326450" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">2.29.1</release>
      <version datatype="version" operation="greater than or equal">2.4.5.git</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:326446" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">8.12.22.1</release>
      <version datatype="version" operation="greater than or equal">5.4.2.1</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:326442" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">8.12.22.1</release>
      <version datatype="version" operation="greater than or equal">5.4.2.1</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:326438" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">8.12.22.1</release>
      <version datatype="version" operation="greater than or equal">5.4.2.1</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:326434" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">8.12.22.1</release>
      <version datatype="version" operation="greater than or equal">5.4.2.1</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:326430" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">8.12.22.1</release>
      <version datatype="version" operation="greater than or equal">5.4.2.1</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:326338" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">5.32.1</release>
      <version datatype="version" operation="greater than or equal">4.6.3</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:325512" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">0.9.1</release>
      <version datatype="version" operation="greater than or equal">1.0.5.9</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:325508" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">0.9.1</release>
      <version datatype="version" operation="greater than or equal">1.0.5.9</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:325504" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">0.9.1</release>
      <version datatype="version" operation="greater than or equal">1.0.5.9</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:325500" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">0.9.1</release>
      <version datatype="version" operation="greater than or equal">1.0.5.9</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:325496" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">0.9.1</release>
      <version datatype="version" operation="greater than or equal">1.0.5.9</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:325492" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">0.9.1</release>
      <version datatype="version" operation="greater than or equal">1.0.5.9</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:325488" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">6.25.1</release>
      <version datatype="version" operation="greater than or equal">4.4.0</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:325484" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">6.25.1</release>
      <version datatype="version" operation="greater than or equal">4.4.0</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:325480" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">0.3.1</release>
      <version datatype="version" operation="greater than or equal">1.97</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:325316" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">0.23.5</release>
      <version datatype="version" operation="greater than or equal">5.3.17</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:325312" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">0.23.5</release>
      <version datatype="version" operation="greater than or equal">5.3.17</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:325308" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">0.23.5</release>
      <version datatype="version" operation="greater than or equal">5.3.17</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:325304" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">0.23.5</release>
      <version datatype="version" operation="greater than or equal">5.3.17</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:325300" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">0.23.5</release>
      <version datatype="version" operation="greater than or equal">5.3.17</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:325296" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">0.23.5</release>
      <version datatype="version" operation="greater than or equal">5.3.17</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:325292" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">0.23.5</release>
      <version datatype="version" operation="greater than or equal">5.3.17</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:325288" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">0.23.5</release>
      <version datatype="version" operation="greater than or equal">5.3.17</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:325284" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">0.23.5</release>
      <version datatype="version" operation="greater than or equal">5.3.17</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:325280" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">0.23.5</release>
      <version datatype="version" operation="greater than or equal">5.3.17</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:325276" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">0.23.5</release>
      <version datatype="version" operation="greater than or equal">5.3.17</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:325272" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">0.23.5</release>
      <version datatype="version" operation="greater than or equal">5.3.17</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:325268" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">0.23.5</release>
      <version datatype="version" operation="greater than or equal">5.3.17</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:325264" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">0.23.5</release>
      <version datatype="version" operation="greater than or equal">5.3.17</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:325260" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">0.23.5</release>
      <version datatype="version" operation="greater than or equal">5.3.17</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:325256" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">0.23.5</release>
      <version datatype="version" operation="greater than or equal">5.3.17</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:325252" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">0.23.5</release>
      <version datatype="version" operation="greater than or equal">5.3.17</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:325248" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">0.23.5</release>
      <version datatype="version" operation="greater than or equal">5.3.17</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:325244" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">0.23.5</release>
      <version datatype="version" operation="greater than or equal">5.3.17</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:325240" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">0.23.5</release>
      <version datatype="version" operation="greater than or equal">5.3.17</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:325236" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">0.23.5</release>
      <version datatype="version" operation="greater than or equal">5.3.17</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:325232" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">0.23.5</release>
      <version datatype="version" operation="greater than or equal">5.3.17</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:325228" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">0.23.5</release>
      <version datatype="version" operation="greater than or equal">5.3.17</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:325224" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">0.23.5</release>
      <version datatype="version" operation="greater than or equal">5.3.17</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:325220" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">0.23.5</release>
      <version datatype="version" operation="greater than or equal">5.3.17</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:325216" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">0.23.5</release>
      <version datatype="version" operation="greater than or equal">5.3.17</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:325212" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">0.23.5</release>
      <version datatype="version" operation="greater than or equal">5.3.17</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:325208" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">0.23.5</release>
      <version datatype="version" operation="greater than or equal">5.3.17</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:325204" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">217.26.1</release>
      <version datatype="version" operation="greater than or equal">2.7.0</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:325200" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">50.24.1</release>
      <version datatype="version" operation="greater than or equal">8.14.3</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:325196" version="4" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <version datatype="version" operation="greater than or equal">2.6.18</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:325192" version="4" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <version datatype="version" operation="greater than or equal">2.6.18</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:325188" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">0.12.18.1</release>
      <version datatype="version" operation="greater than or equal">4.3.5</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:325184" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">0.12.18.1</release>
      <version datatype="version" operation="greater than or equal">4.3.5</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:325180" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">0.12.18.1</release>
      <version datatype="version" operation="greater than or equal">4.3.5</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:325176" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">0.12.18.1</release>
      <version datatype="version" operation="greater than or equal">4.3.5</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:325172" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">0.12.18.1</release>
      <version datatype="version" operation="greater than or equal">4.3.5</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:325168" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">0.11.18.1</release>
      <version datatype="version" operation="greater than or equal">4.3.5</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:325164" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">25.33.39.1</release>
      <version datatype="version" operation="greater than or equal">2.0.9</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:325160" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">25.33.39.1</release>
      <version datatype="version" operation="greater than or equal">2.0.9</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:325156" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">0.52.5</release>
      <version datatype="version" operation="greater than or equal">3.6.3</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:325152" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">0.52.5</release>
      <version datatype="version" operation="greater than or equal">3.6.3</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:325148" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">0.52.5</release>
      <version datatype="version" operation="greater than or equal">3.6.3</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:325144" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">0.52.5</release>
      <version datatype="version" operation="greater than or equal">3.6.3</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:325140" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">0.52.5</release>
      <version datatype="version" operation="greater than or equal">3.6.3</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:325136" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">0.52.5</release>
      <version datatype="version" operation="greater than or equal">3.6.3</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:325132" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">0.52.5</release>
      <version datatype="version" operation="greater than or equal">3.6.3</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:325128" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">0.52.5</release>
      <version datatype="version" operation="greater than or equal">3.6.3</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:325124" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">0.52.5</release>
      <version datatype="version" operation="greater than or equal">3.6.3</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:325120" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">0.52.5</release>
      <version datatype="version" operation="greater than or equal">3.6.3</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:325116" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">0.52.5</release>
      <version datatype="version" operation="greater than or equal">3.6.3</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:325112" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">0.52.5</release>
      <version datatype="version" operation="greater than or equal">3.6.3</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:325108" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">0.52.5</release>
      <version datatype="version" operation="greater than or equal">3.6.3</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:325104" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">12.52.5</release>
      <version datatype="version" operation="greater than or equal">1.34b</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:325100" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">0.52.5</release>
      <version datatype="version" operation="greater than or equal">3.6.3</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:324960" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">17.66.1</release>
      <version datatype="version" operation="greater than or equal">2.11.3</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:324956" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">17.66.1</release>
      <version datatype="version" operation="greater than or equal">2.11.3</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:324952" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">17.66.1</release>
      <version datatype="version" operation="greater than or equal">2.11.3</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:324948" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">17.66.1</release>
      <version datatype="version" operation="greater than or equal">2.11.3</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:324944" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">255.28.1</release>
      <version datatype="version" operation="greater than or equal">2.4.4</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:324940" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">1.28.1</release>
      <version datatype="version" operation="greater than or equal">1.5</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:324936" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">1.28.1</release>
      <version datatype="version" operation="greater than or equal">1.5</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:324932" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">1.28.1</release>
      <version datatype="version" operation="greater than or equal">1.5</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:324928" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">1.24.1</release>
      <version datatype="version" operation="greater than or equal">4.2.4p8</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:324924" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">1.24.1</release>
      <version datatype="version" operation="greater than or equal">4.2.4p8</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:324920" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">0.27.1</release>
      <version datatype="version" operation="greater than or equal">5.3.17</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:324916" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">0.27.1</release>
      <version datatype="version" operation="greater than or equal">5.3.17</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:324912" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">0.27.1</release>
      <version datatype="version" operation="greater than or equal">5.3.17</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:324908" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">0.27.1</release>
      <version datatype="version" operation="greater than or equal">5.3.17</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:324904" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">0.27.1</release>
      <version datatype="version" operation="greater than or equal">5.3.17</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:324900" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">0.27.1</release>
      <version datatype="version" operation="greater than or equal">5.3.17</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:324896" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">0.27.1</release>
      <version datatype="version" operation="greater than or equal">5.3.17</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:324892" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">0.27.1</release>
      <version datatype="version" operation="greater than or equal">5.3.17</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:324888" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">0.27.1</release>
      <version datatype="version" operation="greater than or equal">5.3.17</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:324884" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">0.27.1</release>
      <version datatype="version" operation="greater than or equal">5.3.17</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:324880" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">0.27.1</release>
      <version datatype="version" operation="greater than or equal">5.3.17</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:324876" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">0.27.1</release>
      <version datatype="version" operation="greater than or equal">5.3.17</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:324872" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">0.27.1</release>
      <version datatype="version" operation="greater than or equal">5.3.17</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:324868" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">0.27.1</release>
      <version datatype="version" operation="greater than or equal">5.3.17</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:324864" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">0.27.1</release>
      <version datatype="version" operation="greater than or equal">5.3.17</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:324860" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">0.27.1</release>
      <version datatype="version" operation="greater than or equal">5.3.17</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:324856" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">0.27.1</release>
      <version datatype="version" operation="greater than or equal">5.3.17</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:324852" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">0.27.1</release>
      <version datatype="version" operation="greater than or equal">5.3.17</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:324848" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">0.27.1</release>
      <version datatype="version" operation="greater than or equal">5.3.17</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:324844" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">0.27.1</release>
      <version datatype="version" operation="greater than or equal">5.3.17</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:324460" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">17.68.1</release>
      <version datatype="version" operation="greater than or equal">2.11.3</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:324456" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">17.68.1</release>
      <version datatype="version" operation="greater than or equal">2.11.3</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:324452" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">17.68.1</release>
      <version datatype="version" operation="greater than or equal">2.11.3</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:324448" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">17.68.1</release>
      <version datatype="version" operation="greater than or equal">2.11.3</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:324444" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">17.68.1</release>
      <version datatype="version" operation="greater than or equal">2.11.3</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:324440" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">17.68.1</release>
      <version datatype="version" operation="greater than or equal">2.11.3</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:324436" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">17.68.1</release>
      <version datatype="version" operation="greater than or equal">2.11.3</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:324432" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">17.68.1</release>
      <version datatype="version" operation="greater than or equal">2.11.3</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:324428" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">133.49.62.1</release>
      <version datatype="version" operation="greater than or equal">1.6.3</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:324424" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">133.49.62.1</release>
      <version datatype="version" operation="greater than or equal">1.6.3</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:324420" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">133.49.62.1</release>
      <version datatype="version" operation="greater than or equal">1.6.3</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:324416" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">133.49.62.1</release>
      <version datatype="version" operation="greater than or equal">1.6.3</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:324412" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">133.49.62.1</release>
      <version datatype="version" operation="greater than or equal">1.6.3</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:324408" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">133.49.62.1</release>
      <version datatype="version" operation="greater than or equal">1.6.3</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:324404" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">133.49.62.1</release>
      <version datatype="version" operation="greater than or equal">1.6.3</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:324400" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">133.49.62.1</release>
      <version datatype="version" operation="greater than or equal">1.6.3</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:324396" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">133.49.62.1</release>
      <version datatype="version" operation="greater than or equal">1.6.3</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:324392" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">0.5.1</release>
      <version datatype="version" operation="greater than or equal">1.7.0_sr7.1</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:324388" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">0.5.1</release>
      <version datatype="version" operation="greater than or equal">1.7.0_sr7.1</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:324384" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">0.5.1</release>
      <version datatype="version" operation="greater than or equal">1.7.0_sr7.1</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:324380" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">0.5.1</release>
      <version datatype="version" operation="greater than or equal">1.7.0_sr7.1</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:324376" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">0.62.1</release>
      <version datatype="version" operation="greater than or equal">0.9.8j</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:324372" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">0.62.1</release>
      <version datatype="version" operation="greater than or equal">0.9.8j</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:324368" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">0.62.1</release>
      <version datatype="version" operation="greater than or equal">0.9.8j</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:324364" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">0.62.1</release>
      <version datatype="version" operation="greater than or equal">0.9.8j</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:324360" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">0.62.1</release>
      <version datatype="version" operation="greater than or equal">0.9.8j</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:324356" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">0.62.1</release>
      <version datatype="version" operation="greater than or equal">0.9.8j</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:324352" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">0.3.1</release>
      <version datatype="version" operation="greater than or equal">1.6.0_sr16.1</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:324348" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">0.3.1</release>
      <version datatype="version" operation="greater than or equal">1.6.0_sr16.1</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:324344" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">0.3.1</release>
      <version datatype="version" operation="greater than or equal">1.6.0_sr16.1</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:324340" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">0.3.1</release>
      <version datatype="version" operation="greater than or equal">1.6.0_sr16.1</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:324336" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">0.3.1</release>
      <version datatype="version" operation="greater than or equal">1.6.0_sr16.1</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:323011" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">0.31.1</release>
      <version datatype="version" operation="greater than or equal">3.0.101</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:323007" version="4" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <version datatype="version" operation="greater than or equal">4.2.4_02_3.0.101_0.31</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:322975" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">0.31.1</release>
      <version datatype="version" operation="greater than or equal">3.0.101</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:321113" version="4" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <version datatype="version" operation="greater than or equal">4.1.3_06_3.0.51_0.7.9</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:321109" version="4" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <version datatype="version" operation="greater than or equal">4.1.3_06</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:321105" version="4" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <version datatype="version" operation="greater than or equal">4.1.3_06_3.0.51_0.7.9</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:321101" version="4" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <version datatype="version" operation="greater than or equal">4.1.3_06</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:321097" version="4" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <version datatype="version" operation="greater than or equal">4.1.3_06</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:321093" version="4" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <version datatype="version" operation="greater than or equal">4.1.3_06</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:321089" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">15.35.1</release>
      <version datatype="version" operation="greater than or equal">2.6.23</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:321085" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">15.35.1</release>
      <version datatype="version" operation="greater than or equal">2.6.23</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:321069" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">0.21.1</release>
      <version datatype="version" operation="greater than or equal">2.7.6</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:321065" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">0.21.1</release>
      <version datatype="version" operation="greater than or equal">2.7.6</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:321061" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">15.35.1</release>
      <version datatype="version" operation="greater than or equal">2.6.23</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:321057" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">15.35.1</release>
      <version datatype="version" operation="greater than or equal">2.6.23</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:321053" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">17.43.1</release>
      <version datatype="version" operation="greater than or equal">2.11.3</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:321009" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">17.43.1</release>
      <version datatype="version" operation="greater than or equal">2.11.3</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:321001" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">31.107.1</release>
      <version datatype="version" operation="greater than or equal">2.4</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:320993" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">31.107.1</release>
      <version datatype="version" operation="greater than or equal">2.4</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:320985" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">31.107.1</release>
      <version datatype="version" operation="greater than or equal">2.4</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:320977" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">31.107.1</release>
      <version datatype="version" operation="greater than or equal">2.4</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:320973" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">31.107.1</release>
      <version datatype="version" operation="greater than or equal">2.4</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:320969" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">31.107.1</release>
      <version datatype="version" operation="greater than or equal">2.4</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:320412" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">24.39.49.1</release>
      <version datatype="version" operation="greater than or equal">2.4.1</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:320408" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">24.39.49.1</release>
      <version datatype="version" operation="greater than or equal">2.4.1</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:320404" version="4" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <version datatype="version" operation="greater than or equal">1.96</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:320400" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">0.25.1</release>
      <version datatype="version" operation="greater than or equal">2.6.9</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:320396" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">0.25.1</release>
      <version datatype="version" operation="greater than or equal">2.6.9</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:320380" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">0.25.1</release>
      <version datatype="version" operation="greater than or equal">2.6.9</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:320360" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">0.25.1</release>
      <version datatype="version" operation="greater than or equal">2.6.9</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:320340" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">7.28.1</release>
      <version datatype="version" operation="greater than or equal">6.4.3.6</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:320336" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">0.7.1</release>
      <version datatype="version" operation="greater than or equal">4.2.4_02</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:320332" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">0.7.1</release>
      <version datatype="version" operation="greater than or equal">4.2.4_02</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:320328" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">0.7.1</release>
      <version datatype="version" operation="greater than or equal">4.2.4_02</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:319776" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">1.40.1</release>
      <version datatype="version" operation="greater than or equal">2.6.16</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:319772" version="4" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <version datatype="version" operation="greater than or equal">9.9.4P2</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:319760" version="4" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <version datatype="version" operation="greater than or equal">9.9.4P2</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:319752" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">0.6.1</release>
      <version datatype="version" operation="greater than or equal">9.9.4P2</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:319744" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">0.15.1</release>
      <version datatype="version" operation="greater than or equal">3.0.101</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:319728" version="4" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <version datatype="version" operation="greater than or equal">4.2.3_08_3.0.101_0.15</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:319724" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">0.15.1</release>
      <version datatype="version" operation="greater than or equal">3.0.101</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:319712" version="4" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <version datatype="version" operation="greater than or equal">4.2.3_08_3.0.101_0.15</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:319700" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">0.15.1</release>
      <version datatype="version" operation="greater than or equal">3.0.101</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:319656" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">0.6.11.1</release>
      <version datatype="version" operation="greater than or equal">3.11.10</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:317975" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">0.43.1</release>
      <version datatype="version" operation="greater than or equal">5.3.8</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:317963" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">0.43.1</release>
      <version datatype="version" operation="greater than or equal">5.3.8</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:317959" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">0.43.1</release>
      <version datatype="version" operation="greater than or equal">5.3.8</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:317955" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">0.43.1</release>
      <version datatype="version" operation="greater than or equal">5.3.8</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:317951" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">0.43.1</release>
      <version datatype="version" operation="greater than or equal">5.3.8</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:317919" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">0.43.1</release>
      <version datatype="version" operation="greater than or equal">5.3.8</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:317915" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">0.43.1</release>
      <version datatype="version" operation="greater than or equal">5.3.8</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:317911" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">0.43.1</release>
      <version datatype="version" operation="greater than or equal">5.3.8</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:317907" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">0.43.1</release>
      <version datatype="version" operation="greater than or equal">5.3.8</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:317719" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">0.17.1</release>
      <version datatype="version" operation="greater than or equal">5.3.17</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:317715" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">0.2.1</release>
      <version datatype="version" operation="greater than or equal">1.8.12</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:317699" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">0.7.15.1</release>
      <version datatype="version" operation="greater than or equal">3.0.101</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:317691" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">0.7.15.1</release>
      <version datatype="version" operation="greater than or equal">3.0.101</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:317683" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">0.7.15.1</release>
      <version datatype="version" operation="greater than or equal">3.0.101</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:317679" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">0.7.15.1</release>
      <version datatype="version" operation="greater than or equal">3.0.101</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:317675" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">0.7.15.1</release>
      <version datatype="version" operation="greater than or equal">3.0.101</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:317671" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">0.5.12</release>
      <version datatype="version" operation="greater than or equal">4.1.6_04_3.0.101_0.7.15</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:311670" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">0.3.1</release>
      <version datatype="version" operation="greater than or equal">1.6.0_sr14.0</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:311666" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">0.3.1</release>
      <version datatype="version" operation="greater than or equal">1.6.0_sr14.0</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:311662" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">0.3.1</release>
      <version datatype="version" operation="greater than or equal">1.6.0_sr14.0</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:311630" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">1.18.1</release>
      <version datatype="version" operation="greater than or equal">7.4</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:311626" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <release datatype="version" operation="greater than or equal">1.18.1</release>
      <version datatype="version" operation="greater than or equal">7.4</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:281321" version="89" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:2.1.1.2-2.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:279750" version="7" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:1.9.0.16-0.4.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:279741" version="7" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:1.9.0.16-0.4.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:279728" version="7" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:1.9.0.15-0.1.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:279222" version="78" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:5.2.5-9.25.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:279218" version="78" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:5.2.5-9.25.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:279214" version="78" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:5.2.5-9.25.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:279210" version="78" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:5.2.5-9.25.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:279206" version="78" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:5.2.5-9.25.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:279202" version="78" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:5.2.5-9.25.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:279198" version="78" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:5.2.5-9.25.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:279194" version="78" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:5.2.5-9.25.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:279190" version="78" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:5.2.5-9.25.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:279186" version="78" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:5.2.5-9.25.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:279182" version="78" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:5.2.5-9.25.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:279178" version="78" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:5.2.5-9.25.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:279174" version="78" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:5.2.5-9.25.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:279082" version="6" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:10.26.44-101.9.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:279078" version="5" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:1.0.0-657.10.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:279074" version="6" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:2.2.6-2.131.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:279058" version="6" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:4.1-194.19.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:279042" version="11" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:2.5.STABLE12-18.13.982.2.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:279038" version="81" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:0.10.14-16.41.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:279034" version="81" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:0.10.14-16.41.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278997" version="74" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:5.0.30-27.45</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278993" version="74" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:5.0.30-27.45</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278989" version="74" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:5.0.30-27.45</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278985" version="6" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:3.5.1-69.77.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278981" version="6" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:3.5.1-69.77.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278977" version="6" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:3.5.1-69.77.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278973" version="6" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:3.5.1-69.77.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278969" version="6" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:3.5.1-69.77.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278965" version="6" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:3.5.1-69.77.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278961" version="6" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:3.5.1-69.77.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278957" version="6" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:3.5.1-69.77.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278953" version="6" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:2.0-84.77.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278889" version="6" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:1.20-23.23.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278885" version="6" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:2.9-75.27.24.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278865" version="18" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:3.1.11-14.10.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278861" version="7" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:1.2.2-13.8.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278857" version="7" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:1.3.3-11.16.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278851" version="21" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:1.2.2-13.9.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278847" version="21" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:1.3.4-12.20.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278843" version="9" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:1.6.0-43.92.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278839" version="12" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <version datatype="version" operation="greater than or equal">1.6.0</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278835" version="46" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:5.0.26-12.28.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278831" version="46" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:5.0.26-12.28.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278827" version="46" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:5.0.26-12.28.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278823" version="46" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:5.0.26-12.28.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278819" version="46" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:5.0.26-12.28.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278811" version="15" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:2.2.6-24.17.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278807" version="15" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:2.2.6-24.17.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278803" version="10" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:1.2.8-19.28.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278799" version="10" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:1.2.8-19.28.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278670" version="7" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:3.5.1-49.52.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278666" version="7" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:3.5.1-49.52.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278662" version="7" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:3.5.1-49.52.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278658" version="7" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:3.5.10-23.27.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278642" version="37" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:3.0.32-0.18</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278638" version="37" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:0.3.6b-42.85.7</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278634" version="37" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:3.0.32-0.18</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278630" version="37" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:3.0.32-0.18</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278626" version="37" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:3.0.32-0.18</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278622" version="37" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:3.0.32-0.18</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278618" version="37" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:3.0.32-0.18</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278614" version="37" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:3.0.32-0.18</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278610" version="37" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:3.0.32-0.18</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278606" version="37" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:3.0.32-0.18</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278602" version="34" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <version datatype="version" operation="greater than or equal">1.34b</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278598" version="37" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:3.0.32-0.18</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278463" version="19" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:0.9.7g-13.19.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278456" version="7" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:3.12.6-3.4.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278452" version="7" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:3.12.6-3.1.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278448" version="17" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:4.8.2-1.5.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278444" version="17" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:4.8.2-1.1.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278431" version="44" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:0.9.8a-18.42.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278427" version="44" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:0.9.8a-18.42.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278423" version="44" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:0.9.8a-18.42.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278352" version="129" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:2.6.16.60-0.58.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278344" version="247" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:2.6.16.60-0.59.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278340" version="247" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:2.6.16.60-0.59.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278336" version="247" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:2.6.16.60-0.59.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278332" version="247" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:2.6.16.60-0.59.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278328" version="247" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:2.6.16.60-0.59.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278324" version="247" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:2.6.16.60-0.59.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278320" version="247" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:2.6.16.60-0.59.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278316" version="247" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:2.6.16.60-0.59.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278312" version="247" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:2.6.16.60-0.59.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278308" version="247" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:2.6.16.60-0.59.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278304" version="247" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:2.6.16.60-0.59.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278250" version="288" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <version datatype="version" operation="greater than or equal">1.9.1.8</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278246" version="288" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <version datatype="version" operation="greater than or equal">1.9.1.8</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278242" version="288" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <version datatype="version" operation="greater than or equal">1.9.1.8</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278236" version="6" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:2.0.9-25.26.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278222" version="13" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:2.0.0-13.9.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278210" version="13" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:0.8.4-17.9.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278206" version="7" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:1.2.0-79.13.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278202" version="182" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:1.9.0.18-0.4.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278198" version="182" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:1.9.0.18-0.4.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278194" version="182" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:1.9.0.18-0.4.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278190" version="19" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:1.14.5-0.4.3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278186" version="19" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:2.10.6-0.4.3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278182" version="19" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:2.12.4-0.4.3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278178" version="19" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:1.2.4-0.4.3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278174" version="19" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:1.12.3-0.4.3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278170" version="384" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <version datatype="version" operation="greater than or equal">3.5.8</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278166" version="61" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:3.5-1.6.7</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278162" version="384" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <version datatype="version" operation="greater than or equal">3.5.8</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278158" version="152" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <version datatype="version" operation="greater than or equal">1.4.2_sr13.3</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278154" version="158" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <version datatype="version" operation="greater than or equal">1.4.2_sr13.3</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278150" version="157" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:1.4.2_sr13.1-0.3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278146" version="158" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <version datatype="version" operation="greater than or equal">1.4.2_sr13.3</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278142" version="324" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:1.5.0_sr11.2-0.4.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278138" version="324" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:1.5.0_sr11.2-0.4.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278134" version="325" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <version datatype="version" operation="greater than or equal">1.5.0_sr11.2</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278130" version="325" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <version datatype="version" operation="greater than or equal">1.5.0_sr11.2</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278126" version="324" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:1.5.0_sr11.2-0.4.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278122" version="325" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <version datatype="version" operation="greater than or equal">1.5.0_sr11.2</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278118" version="27" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:2.6.0-8.8.1.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278114" version="27" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:2.6.0-8.9.1.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278110" version="27" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:2.6.0-8.9.1.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278106" version="27" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:2.6.0-8.9.1.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278102" version="27" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:2.4.2-18.29.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278098" version="27" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:2.6.0-8.9.1.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278094" version="27" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:2.6.0-8.9.1.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278090" version="27" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:2.6.0-8.9.1.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278086" version="7" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:2.7.1-16.7</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278082" version="7" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:2.7.1-16.7</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278078" version="7" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:2.7.1-16.7</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278074" version="7" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:2.7.1-16.7</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278070" version="7" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:2.7.1-16.7</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278066" version="7" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:2.7.1-16.7</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278062" version="7" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:2.7.1-16.7</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278058" version="7" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:2.8.1-238.27.1</evr>
    </rpminfo_state>
  </states>
</oval_definitions>
