<?xml version="1.0" encoding="UTF-8"?>
<oval_definitions xsi:schemaLocation="http://oval.mitre.org/XMLSchema/oval-definitions-5 oval-definitions-schema.xsd http://oval.mitre.org/XMLSchema/oval-definitions-5#linux linux-definitions-schema.xsd http://oval.mitre.org/XMLSchema/oval-common-5 oval-common-schema.xsd" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:oval="http://oval.mitre.org/XMLSchema/oval-common-5" xmlns:oval-def="http://oval.mitre.org/XMLSchema/oval-definitions-5">
  <generator>
    <oval:product_name>The OVAL Repository</oval:product_name>
    <oval:schema_version>5.4</oval:schema_version>
    <oval:timestamp>2015-09-03T06:36:39.786-04:00</oval:timestamp>
  </generator>
  <definitions>
    <definition id="oval:org.mitre.oval:def:17338" version="7" class="vulnerability">
      <metadata>
        <title>DoS for arbitrary chosen IP addresses</title>
        <affected family="unix">
          <platform>openSUSE 11.4</platform>
          <platform>openSUSE 12.2</platform>
          <platform>openSUSE 12.3</platform>
        </affected>
        <reference ref_id="CVE-2013-2178" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2178" source="CVE"/>
        <description>The apache-auth.conf, apache-nohome.conf, apache-noscript.conf, and apache-overflows.conf files in Fail2ban before 0.8.10 do not properly validate log messages, which allows remote attackers to block arbitrary IP addresses via certain messages in a request.</description>
        <oval_repository>
          <dates>
            <submitted date="2013-07-03T10:26:26.748+04:00">
              <contributor organization="ALTX-SOFT">Maria Kedovskaya</contributor>
            </submitted>
            <status_change date="2013-07-05T16:52:54.958-04:00">DRAFT</status_change>
            <status_change date="2013-07-22T04:02:59.266-04:00">INTERIM</status_change>
            <status_change date="2013-08-12T04:09:09.092-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:17338 - Replace the occurrences of OpenSUSE by openSUSE in Platform" date="2014-06-10T14:43:00.558-04:00">
              <contributor organization="McAfee, Inc.">Jerome Athias</contributor>
            </modified>
            <status_change date="2014-06-10T14:44:51.447-04:00">INTERIM</status_change>
            <status_change date="2014-06-30T04:06:31.504-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria operator="OR">
        <criteria operator="AND" comment="Package List">
          <extend_definition comment="openSUSE 12.3 is installed" definition_ref="oval:org.mitre.oval:def:17041"/>
          <criterion comment="Package fail2ban is less than 0.8.8-2.8.1" test_ref="oval:org.mitre.oval:tst:81573"/>
        </criteria>
        <criteria operator="AND" comment="Package List">
          <extend_definition comment="openSUSE 12.2 is installed" definition_ref="oval:org.mitre.oval:def:17262"/>
          <criterion comment="Package fail2ban is less than 0.8.6-2.9.1" test_ref="oval:org.mitre.oval:tst:81765"/>
        </criteria>
        <criteria operator="AND" comment="Package List">
          <extend_definition comment="openSUSE 11.4 is installed" definition_ref="oval:org.mitre.oval:def:16752"/>
          <criterion comment="Package fail2ban is less than 0.8.4-22.1" test_ref="oval:org.mitre.oval:tst:81672"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:17041" version="5" class="inventory">
      <metadata>
        <title>openSUSE 12.3 is installed</title>
        <affected family="unix">
          <platform>openSUSE 12.3</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/o:novell:opensuse:12.3"/>
        <description>openSUSE 12.3 is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2013-07-03T10:26:26.748+04:00">
              <contributor organization="ALTX-SOFT">Maria Kedovskaya</contributor>
            </submitted>
            <status_change date="2013-07-05T16:52:53.149-04:00">DRAFT</status_change>
            <status_change date="2013-07-22T04:02:25.813-04:00">INTERIM</status_change>
            <status_change date="2013-08-12T04:08:56.140-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:tst:81714 - Replace the occurrences of OpenSUSE by openSUSE in Platform" date="2014-06-10T14:43:00.558-04:00">
              <contributor organization="McAfee, Inc.">Jerome Athias</contributor>
            </modified>
            <status_change date="2014-06-10T14:44:51.802-04:00">INTERIM</status_change>
            <status_change date="2014-06-30T04:06:10.654-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria>
        <criterion comment="openSUSE 12.3 is installed" test_ref="oval:org.mitre.oval:tst:81714"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:16752" version="5" class="inventory">
      <metadata>
        <title>openSUSE 11.4 is installed</title>
        <affected family="unix">
          <platform>openSUSE 11.4</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/o:novell:opensuse:11.4"/>
        <description>openSUSE 11.4 is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2013-07-03T10:26:26.748+04:00">
              <contributor organization="ALTX-SOFT">Maria Kedovskaya</contributor>
            </submitted>
            <status_change date="2013-07-05T16:52:52.230-04:00">DRAFT</status_change>
            <status_change date="2013-07-22T04:01:17.565-04:00">INTERIM</status_change>
            <status_change date="2013-08-12T04:08:46.605-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:16752 - Replace the occurrences of OpenSUSE by openSUSE in Platform" date="2014-06-10T14:43:00.558-04:00">
              <contributor organization="McAfee, Inc.">Jerome Athias</contributor>
            </modified>
            <status_change date="2014-06-10T14:44:51.234-04:00">INTERIM</status_change>
            <status_change date="2014-06-30T04:06:01.759-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria>
        <criterion comment="openSUSE 11.4 is installed" test_ref="oval:org.mitre.oval:tst:81660"/>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:17242" version="6" class="vulnerability">
      <metadata>
        <title>openconnect vulnerability</title>
        <affected family="unix">
          <platform>openSUSE 12.2</platform>
        </affected>
        <reference ref_id="CVE-2012-3291" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3291" source="CVE"/>
        <description>Heap-based buffer overflow in OpenConnect 3.18 allows remote servers to cause a denial of service via a crafted greeting banner.</description>
        <oval_repository>
          <dates>
            <submitted date="2013-07-03T10:26:26.748+04:00">
              <contributor organization="ALTX-SOFT">Maria Kedovskaya</contributor>
            </submitted>
            <status_change date="2013-07-05T16:52:55.955-04:00">DRAFT</status_change>
            <status_change date="2013-07-22T04:02:53.598-04:00">INTERIM</status_change>
            <status_change date="2013-08-12T04:09:03.273-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:17242 - Replace the occurrences of OpenSUSE by openSUSE in Platform" date="2014-06-10T14:43:00.558-04:00">
              <contributor organization="McAfee, Inc.">Jerome Athias</contributor>
            </modified>
            <status_change date="2014-06-10T14:44:50.654-04:00">INTERIM</status_change>
            <status_change date="2014-06-30T04:06:23.509-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria>
        <extend_definition comment="openSUSE 12.2 is installed" definition_ref="oval:org.mitre.oval:def:17262"/>
        <criteria operator="OR" comment="Packages section">
          <criterion comment="Package openconnect is less than 3.20-2.4.1" test_ref="oval:org.mitre.oval:tst:81334"/>
          <criterion comment="Package openconnect-debuginfo is less than 3.20-2.4.1" test_ref="oval:org.mitre.oval:tst:81495"/>
          <criterion comment="Package openconnect-debugsource is less than 3.20-2.4.1" test_ref="oval:org.mitre.oval:tst:81319"/>
          <criterion comment="Package openconnect-devel is less than 3.20-2.4.1" test_ref="oval:org.mitre.oval:tst:80847"/>
          <criterion comment="Package openconnect-doc is less than 3.20-2.4.1" test_ref="oval:org.mitre.oval:tst:81816"/>
          <criterion comment="Package openconnect-lang is less than 3.20-2.4.1" test_ref="oval:org.mitre.oval:tst:81297"/>
        </criteria>
      </criteria>
    </definition>
    <definition id="oval:org.mitre.oval:def:17262" version="5" class="inventory">
      <metadata>
        <title>openSUSE 12.2 is installed</title>
        <affected family="unix">
          <platform>openSUSE 12.2</platform>
        </affected>
        <reference source="CPE" ref_id="cpe:/o:novell:opensuse:12.2"/>
        <description>openSUSE 12.2 is installed.</description>
        <oval_repository>
          <dates>
            <submitted date="2013-07-03T10:26:26.748+04:00">
              <contributor organization="ALTX-SOFT">Maria Kedovskaya</contributor>
            </submitted>
            <status_change date="2013-07-05T16:52:51.858-04:00">DRAFT</status_change>
            <status_change date="2013-07-22T04:02:54.583-04:00">INTERIM</status_change>
            <status_change date="2013-08-12T04:09:04.124-04:00">ACCEPTED</status_change>
            <modified comment="EDITED oval:org.mitre.oval:def:17262 - Replace the occurrences of OpenSUSE by openSUSE in Platform" date="2014-06-10T14:43:00.558-04:00">
              <contributor organization="McAfee, Inc.">Jerome Athias</contributor>
            </modified>
            <status_change date="2014-06-10T14:44:50.534-04:00">INTERIM</status_change>
            <status_change date="2014-06-30T04:06:24.631-04:00">ACCEPTED</status_change>
          </dates>
          <status>ACCEPTED</status>
        </oval_repository>
      </metadata>
      <criteria>
        <criterion comment="openSUSE 12.2 is installed" test_ref="oval:org.mitre.oval:tst:81626"/>
      </criteria>
    </definition>
  </definitions>
  <tests>
    <rpminfo_test id="oval:org.mitre.oval:tst:81714" version="2" comment="openSUSE 12.3 is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:2455"/>
      <state state_ref="oval:org.mitre.oval:ste:20860"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:81660" version="2" comment="openSUSE 11.4 is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:2455"/>
      <state state_ref="oval:org.mitre.oval:ste:21043"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:81765" version="1" comment="Package fail2ban is less than 0.8.6-2.9.1" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:24586"/>
      <state state_ref="oval:org.mitre.oval:ste:20779"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:81672" version="1" comment="Package fail2ban is less than 0.8.4-22.1" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:24586"/>
      <state state_ref="oval:org.mitre.oval:ste:20648"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:81573" version="1" comment="Package fail2ban is less than 0.8.8-2.8.1" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:24586"/>
      <state state_ref="oval:org.mitre.oval:ste:21165"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:81626" version="2" comment="openSUSE 12.2 is installed" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:2455"/>
      <state state_ref="oval:org.mitre.oval:ste:20258"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:81816" version="1" comment="Package openconnect-doc is less than 3.20-2.4.1" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:24374"/>
      <state state_ref="oval:org.mitre.oval:ste:21072"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:81495" version="1" comment="Package openconnect-debuginfo is less than 3.20-2.4.1" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:24455"/>
      <state state_ref="oval:org.mitre.oval:ste:21072"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:81334" version="1" comment="Package openconnect is less than 3.20-2.4.1" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:24152"/>
      <state state_ref="oval:org.mitre.oval:ste:21072"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:81319" version="1" comment="Package openconnect-debugsource is less than 3.20-2.4.1" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:24548"/>
      <state state_ref="oval:org.mitre.oval:ste:21072"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:81297" version="1" comment="Package openconnect-lang is less than 3.20-2.4.1" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:24112"/>
      <state state_ref="oval:org.mitre.oval:ste:21165"/>
    </rpminfo_test>
    <rpminfo_test id="oval:org.mitre.oval:tst:80847" version="1" comment="Package openconnect-devel is less than 3.20-2.4.1" check_existence="at_least_one_exists" check="all" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:org.mitre.oval:obj:24504"/>
      <state state_ref="oval:org.mitre.oval:ste:21072"/>
    </rpminfo_test>
  </tests>
  <objects>
    <rpminfo_object id="oval:org.mitre.oval:obj:24586" version="1" comment="fail2ban package information" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>fail2ban</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:2455" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openSUSE-release</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:24374" version="1" comment="openconnect-doc package information" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openconnect-doc</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:24455" version="1" comment="openconnect-debuginfo package information" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openconnect-debuginfo</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:24152" version="1" comment="openconnect package information" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openconnect</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:24548" version="1" comment="openconnect-debugsource package information" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openconnect-debugsource</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:24112" version="1" comment="openconnect-lang package information" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openconnect-lang</name>
    </rpminfo_object>
    <rpminfo_object id="oval:org.mitre.oval:obj:24504" version="1" comment="openconnect-devel package information" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openconnect-devel</name>
    </rpminfo_object>
  </objects>
  <states>
    <rpminfo_state id="oval:org.mitre.oval:ste:20860" version="1" comment="version is equal to 12.3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <version datatype="version">12.3</version>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:21043" version="1" comment="version is equal to 11.4" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <version datatype="version">11.4</version>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:20779" version="1" comment="version is earlier than 0.8.6-2.9.1 and arch matches noarch" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <arch>noarch</arch>
      <evr datatype="evr_string" operation="less than">0:0.8.6-2.9.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:20648" version="1" comment="version is earlier than 0.8.4-22.1 and arch matches noarch" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <arch>noarch</arch>
      <evr datatype="evr_string" operation="less than">0:0.8.4-22.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:20258" version="1" comment="version is equal to 12.2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <version datatype="version">12.2</version>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:21165" version="1" comment="version is earlier than 0.8.8-2.8.1 and arch matches noarch" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <arch>noarch</arch>
      <evr datatype="evr_string" operation="less than">0:0.8.8-2.8.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:org.mitre.oval:ste:21072" version="1" comment="version is earlier than 1.6.8-2.6.1 and arch matches noarch" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <arch>noarch</arch>
      <evr datatype="evr_string" operation="less than">0:1.6.8-2.6.1</evr>
    </rpminfo_state>
  </states>
</oval_definitions>