github.com/quay/claircore@v1.5.28/rhel/testdata/Red_Hat_Enterprise_Linux_3.xml

<?xml version="1.0" encoding="utf-8"?>
<oval_definitions xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" xmlns:oval="http://oval.mitre.org/XMLSchema/oval-common-5" xmlns:red-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" xmlns:unix-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://oval.mitre.org/XMLSchema/oval-common-5 oval-common-schema.xsd http://oval.mitre.org/XMLSchema/oval-definitions-5 oval-definitions-schema.xsd http://oval.mitre.org/XMLSchema/oval-definitions-5#unix unix-definitions-schema.xsd http://oval.mitre.org/XMLSchema/oval-definitions-5#linux linux-definitions-schema.xsd">
 <generator>
  <oval:product_name>Red Hat OVAL Patch Definition Merger</oval:product_name>
  <oval:product_version>3</oval:product_version>
  <oval:schema_version>5.10</oval:schema_version>
  <oval:timestamp>2019-07-23T16:56:09</oval:timestamp>
  <oval:content_version>1563900969</oval:content_version>
 </generator>
 <definitions>
  <definition class="patch" id="oval:com.redhat.rhba:def:20070026" version="634">
   <metadata>
    <title>RHBA-2007:0026: htdig bug fix update (None)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
    </affected>
    <reference ref_id="RHBA-2007:0026" ref_url="https://access.redhat.com/errata/RHBA-2007:0026" source="RHBA"/>
    <reference ref_id="CVE-2000-1191" ref_url="https://access.redhat.com/security/cve/CVE-2000-1191" source="CVE"/>
    <description>The htdig system is a complete world wide web indexing and searching
system for a small domain or intranet. This system is not meant to replace
the need for powerful internet-wide search systems like Lycos, Infoseek,
Webcrawler and AltaVista. Instead it is meant to cover the search needs for
a single company, campus, or even a particular sub section of a web site. As
opposed to some WAIS-based or web-server based search engines, htdig can
span several web servers at a site. The type of these different web servers
doesn't matter as long as they understand the HTTP 1.0 protocol.
htdig is also used by KDE to search KDE's HTML documentation.

Bugs fixed in this update include:

* rundig script (/usr/bin/rundig) missed &quot;$opts&quot; on two calls to htfuzzy.

* htfuzzy segfaulted when database is empty.

* htdig was unable to open empty database on 64bits.

* htdig showed full path to configuration file when accessed from the web.

Users should upgrade to this updated package, which resolves these issues.</description>
    <advisory from="secalert@redhat.com">
     <severity>None</severity>
     <rights>Copyright 2008 Red Hat, Inc.</rights>
     <issued date="2007-06-07"/>
     <updated date="2008-03-20"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2000-1191" impact="low" public="20000418">CVE-2000-1191</cve>
     <bugzilla href="https://bugzilla.redhat.com/130528" id="130528">/usr/bin/rundig is missing &quot;$opts&quot; on two calls to htfuzzy</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/133840" id="133840">htdig will not run</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/218715" id="218715">CVE-2000-1191 htdig configuration file path disclosure flaw</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="AND">
    <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
    <criterion comment="htdig is earlier than 2:3.1.6-7.el3" test_ref="oval:com.redhat.rhba:tst:20070026001"/>
    <criterion comment="htdig is signed with Red Hat master key" test_ref="oval:com.redhat.rhba:tst:20070026002"/>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhba:def:20070418" version="632">
   <metadata>
    <title>RHBA-2007:0418: unzip bug fix update (None)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
    </affected>
    <reference ref_id="RHBA-2007:0418" ref_url="https://access.redhat.com/errata/RHBA-2007:0418" source="RHBA"/>
    <reference ref_id="CVE-2005-2475" ref_url="https://access.redhat.com/security/cve/CVE-2005-2475" source="CVE"/>
    <reference ref_id="CVE-2005-4667" ref_url="https://access.redhat.com/security/cve/CVE-2005-4667" source="CVE"/>
    <description>The unzip utility is used to list, test, or extract files from a zip
archive. 

This update addresses the following issues:

* a TOCTOU bug that could be exploited to change file permissions (CVE-2005-2475)

* a long filename buffer overflow vulnerability (CVE-2005-4667)

All users of unzip should upgrade to these updated packages, which
resolve these issues.</description>
    <advisory from="secalert@redhat.com">
     <severity>None</severity>
     <rights>Copyright 2007 Red Hat, Inc.</rights>
     <issued date="2007-06-07"/>
     <updated date="2007-06-07"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2005-2475" impact="low" public="20050802">CVE-2005-2475</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2005-4667" impact="low" public="20051219">CVE-2005-4667</cve>
     <bugzilla href="https://bugzilla.redhat.com/186570" id="186570">CVE-2005-4667 unzip long filename buffer overflow</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/226749" id="226749">CVE-2005-2475 TOCTOU issue in unzip</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="AND">
    <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
    <criterion comment="unzip is earlier than 0:5.50-35.EL3" test_ref="oval:com.redhat.rhba:tst:20070418001"/>
    <criterion comment="unzip is signed with Red Hat master key" test_ref="oval:com.redhat.rhba:tst:20070418002"/>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20060015" version="644">
   <metadata>
    <title>RHSA-2006:0015: initscripts security update (Moderate)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
    </affected>
    <reference ref_id="RHSA-2006:0015" ref_url="https://access.redhat.com/errata/RHSA-2006:0015" source="RHSA"/>
    <reference ref_id="CVE-2005-3629" ref_url="https://access.redhat.com/security/cve/CVE-2005-3629" source="CVE"/>
    <description>The initscripts package contains the basic system scripts used to boot your
Red Hat system, change runlevels, and shut the system down cleanly.
Initscripts also contains the scripts that activate and deactivate most
network interfaces.

A bug was found in the way initscripts handled various environment
variables when the /sbin/service command is run. It is possible for a local
user with permissions to execute /sbin/service via sudo to execute
arbitrary commands as the 'root' user. The Common Vulnerabilities and
Exposures project assigned the name CVE-2005-3629 to this issue.

The following issues have also been fixed in this update:

* extraneous characters were logged on bootup.

* fsck would be attempted on filesystems marked with _netdev in rc.sysinit
  before they were available.

Additionally, support for multi-core Itanium processors has been added to
redhat-support-check.

All users of initscripts should upgrade to these updated packages, which
contain backported patches to resolve these issues.</description>
    <advisory from="secalert@redhat.com">
     <severity>Moderate</severity>
     <rights>Copyright 2008 Red Hat, Inc.</rights>
     <issued date="2006-03-15"/>
     <updated date="2008-03-20"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2005-3629" public="20050307">CVE-2005-3629</cve>
     <bugzilla href="https://bugzilla.redhat.com/169403" id="169403">Automount of the emcpower device fails if fsck is enabled for the device in /etc/fstab.</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/171198" id="171198">Bogus messages in system log (/var/log/messages)</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="AND">
    <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
    <criterion comment="initscripts is earlier than 0:7.31.30.EL-1" test_ref="oval:com.redhat.rhsa:tst:20060015001"/>
    <criterion comment="initscripts is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060015002"/>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20060045" version="638">
   <metadata>
    <title>RHSA-2006:0045: squid security update (Moderate)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
    </affected>
    <reference ref_id="RHSA-2006:0045" ref_url="https://access.redhat.com/errata/RHSA-2006:0045" source="RHSA"/>
    <reference ref_id="CVE-2005-2917" ref_url="https://access.redhat.com/security/cve/CVE-2005-2917" source="CVE"/>
    <description>Squid is a high-performance proxy caching server for Web clients,
supporting FTP, gopher, and HTTP data objects.

A denial of service flaw was found in the way squid processes certain NTLM
authentication requests.  A remote attacker could send a specially crafted
NTLM authentication request which would cause the Squid server to crash. 
The Common Vulnerabilities and Exposures project assigned the name
CVE-2005-2917 to this issue.

Several bugs have also been addressed in this update:

* An error introduced in 2.5.STABLE3-6.3E.14 where Squid can crash if a
user visits a site which has a long DNS record.

* Some authentication helpers were missing needed setuid rights.

* Squid couldn't handle a reply from a HTTP server when the reply began
with the new-line character or wasn't HTTP/1.0 or HTTP/1.1 compliant.

* User-defined error pages were not kept when the squid package was upgraded.

All users of squid should upgrade to these updated packages, which contain
backported patches to resolve these issues.</description>
    <advisory from="secalert@redhat.com">
     <severity>Moderate</severity>
     <rights>Copyright 2006 Red Hat, Inc.</rights>
     <issued date="2006-03-15"/>
     <updated date="2006-03-15"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2005-2917" public="20050915">CVE-2005-2917</cve>
     <bugzilla href="https://bugzilla.redhat.com/127836" id="127836">Error pages should not be replaced by updates</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/150781" id="150781">Squid doesn't handle headers split across packets</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/163595" id="163595">Squid blocks page served by broken server</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/165367" id="165367">Squid dies with signal 6 and restarts and dies ...</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/169269" id="169269">Error in script /usr/lib/squid/wbinfo_group.pl</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/170397" id="170397">pam authentication fails</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/172693" id="172693">One translated Polish language error is missing preventing squid from startup</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/174029" id="174029">CVE-2005-2917 Squid malformed NTLM authentication DoS</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="AND">
    <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
    <criterion comment="squid is earlier than 7:2.5.STABLE3-6.3E.16" test_ref="oval:com.redhat.rhsa:tst:20060045001"/>
    <criterion comment="squid is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060045002"/>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20060117" version="637">
   <metadata>
    <title>RHSA-2006:0117: vixie-cron security update (Low)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
    </affected>
    <reference ref_id="RHSA-2006:0117" ref_url="https://access.redhat.com/errata/RHSA-2006:0117" source="RHSA"/>
    <reference ref_id="CVE-2005-1038" ref_url="https://access.redhat.com/security/cve/CVE-2005-1038" source="CVE"/>
    <description>The vixie-cron package contains the Vixie version of cron. Cron is a
standard UNIX daemon that runs specified programs at scheduled times.

A bug was found in the way vixie-cron installs new crontab files. It is
possible for a local attacker to execute the crontab command in such a way
that they can view the contents of another user's crontab file. The Common
Vulnerabilities and Exposures project assigned the name CVE-2005-1038 to
this issue.

This update also fixes an issue where cron jobs could start before their
scheduled time.

All users of vixie-cron should upgrade to this updated package, which
contains backported patches and is not vulnerable to these issues.</description>
    <advisory from="secalert@redhat.com">
     <severity>Low</severity>
     <rights>Copyright 2008 Red Hat, Inc.</rights>
     <issued date="2006-03-15"/>
     <updated date="2008-03-20"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2005-1038" public="20050406">CVE-2005-1038</cve>
     <bugzilla href="https://bugzilla.redhat.com/154424" id="154424">[RHEL-3] cronjobs start too early</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/162022" id="162022">CVE-2005-1038 vixie-cron information leak</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/178432" id="178432">prediction: vixie-cron-4.1's pam_unix session log messages will be most unpopular</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/178436" id="178436">network service interruption can cause initgroups() to delay cron job execution by more than one minute</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="AND">
    <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
    <criterion comment="vixie-cron is earlier than 0:4.1-10.EL3" test_ref="oval:com.redhat.rhsa:tst:20060117001"/>
    <criterion comment="vixie-cron is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060117002"/>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20060140" version="639">
   <metadata>
    <title>RHSA-2006:0140: kernel security update (Important)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
    </affected>
    <reference ref_id="RHSA-2006:0140" ref_url="https://access.redhat.com/errata/RHSA-2006:0140" source="RHSA"/>
    <reference ref_id="CVE-2002-2185" ref_url="https://access.redhat.com/security/cve/CVE-2002-2185" source="CVE"/>
    <reference ref_id="CVE-2004-1057" ref_url="https://access.redhat.com/security/cve/CVE-2004-1057" source="CVE"/>
    <reference ref_id="CVE-2005-2708" ref_url="https://access.redhat.com/security/cve/CVE-2005-2708" source="CVE"/>
    <reference ref_id="CVE-2005-2709" ref_url="https://access.redhat.com/security/cve/CVE-2005-2709" source="CVE"/>
    <reference ref_id="CVE-2005-2973" ref_url="https://access.redhat.com/security/cve/CVE-2005-2973" source="CVE"/>
    <reference ref_id="CVE-2005-3044" ref_url="https://access.redhat.com/security/cve/CVE-2005-3044" source="CVE"/>
    <reference ref_id="CVE-2005-3180" ref_url="https://access.redhat.com/security/cve/CVE-2005-3180" source="CVE"/>
    <reference ref_id="CVE-2005-3275" ref_url="https://access.redhat.com/security/cve/CVE-2005-3275" source="CVE"/>
    <reference ref_id="CVE-2005-3806" ref_url="https://access.redhat.com/security/cve/CVE-2005-3806" source="CVE"/>
    <reference ref_id="CVE-2005-3848" ref_url="https://access.redhat.com/security/cve/CVE-2005-3848" source="CVE"/>
    <reference ref_id="CVE-2005-3857" ref_url="https://access.redhat.com/security/cve/CVE-2005-3857" source="CVE"/>
    <reference ref_id="CVE-2005-3858" ref_url="https://access.redhat.com/security/cve/CVE-2005-3858" source="CVE"/>
    <description>The Linux kernel handles the basic functions of the operating system.

These new kernel packages contain fixes for the security issues
described below:

- a flaw in network IGMP processing that a allowed a remote user on the
local network to cause a denial of service (disabling of multicast reports)
if the system is running multicast applications (CVE-2002-2185, moderate)

- a flaw in remap_page_range() with O_DIRECT writes that allowed a local
user to cause a denial of service (crash)  (CVE-2004-1057, important)

- a flaw in exec() handling on some 64-bit architectures that allowed
a local user to cause a denial of service (crash)  (CVE-2005-2708, important)

- a flaw in procfs handling during unloading of modules that allowed a
local user to cause a denial of service or potentially gain privileges 
(CVE-2005-2709, moderate)

- a flaw in IPv6 network UDP port hash table lookups that allowed a local
user to cause a denial of service (hang)  (CVE-2005-2973, important)

- a flaw in 32-bit-compat handling of the TIOCGDEV ioctl that allowed
a local user to cause a denial of service (crash)  (CVE-2005-3044, important)

- a network buffer info leak using the orinoco driver that allowed
a remote user to possibly view uninitialized data  (CVE-2005-3180, important)

- a flaw in IPv4 network TCP and UDP netfilter handling that allowed
a local user to cause a denial of service (crash)  (CVE-2005-3275, important)

- a flaw in the IPv6 flowlabel code that allowed a local user to cause a
denial of service (crash)  (CVE-2005-3806, important)

- a flaw in network ICMP processing that allowed a local user to cause
a denial of service (memory exhaustion)  (CVE-2005-3848, important)

- a flaw in file lease time-out handling that allowed a local user to cause
a denial of service (log file overflow)  (CVE-2005-3857, moderate)

- a flaw in network IPv6 xfrm handling that allowed a local user to
cause a denial of service (memory exhaustion)  (CVE-2005-3858, important)

All Red Hat Enterprise Linux 3 users are advised to upgrade their kernels
to the packages associated with their machine architecture and
configurations as listed in this erratum.</description>
    <advisory from="secalert@redhat.com">
     <severity>Important</severity>
     <rights>Copyright 2006 Red Hat, Inc.</rights>
     <issued date="2006-01-19"/>
     <updated date="2006-01-19"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2002-2185" impact="moderate" public="20020625">CVE-2002-2185</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2004-1057" impact="moderate" public="20050107">CVE-2004-1057</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2005-2708" public="20050628">CVE-2005-2708</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2005-2709" impact="moderate" public="20051108:1400">CVE-2005-2709</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2005-2973" public="20051004">CVE-2005-2973</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2005-3044" public="20050909">CVE-2005-3044</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2005-3180" public="20051004">CVE-2005-3180</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2005-3275" public="20050722">CVE-2005-3275</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2005-3806" public="20051025">CVE-2005-3806</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2005-3848" public="20050818">CVE-2005-3848</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2005-3857" impact="moderate" public="20051113">CVE-2005-3857</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2005-3858" public="20050826">CVE-2005-3858</cve>
     <bugzilla href="https://bugzilla.redhat.com/137820" id="137820">CVE-2004-1057 VM_IO refcount issue</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/161925" id="161925">CVE-2005-2708 user code panics kernel in exec.c</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/168661" id="168661">CVE-2005-3044 lost fput could lead to DoS</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/168925" id="168925">CVE-2005-2709 More sysctl flaws</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/170278" id="170278">CVE-2005-3180 orinoco driver information leakage</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/170774" id="170774">CVE-2005-2973 ipv6 infinite loop</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/171386" id="171386">CVE-2005-3275 NAT DoS</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/174082" id="174082">CVE-2005-3806 ipv6 DOS</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/174338" id="174338">CVE-2005-3857 lease printk DoS</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/174344" id="174344">CVE-2005-3858 ip6_input_finish DoS</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/174347" id="174347">CVE-2005-3848 dst_entry leak DoS</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/174808" id="174808">CVE-2002-2185 IGMP DoS</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="AND">
    <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
    <criteria operator="OR">
     <criteria operator="AND">
      <criterion comment="kernel-unsupported is earlier than 0:2.4.21-37.0.1.EL" test_ref="oval:com.redhat.rhsa:tst:20060140001"/>
      <criterion comment="kernel-unsupported is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060140002"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-37.0.1.EL" test_ref="oval:com.redhat.rhsa:tst:20060140003"/>
      <criterion comment="kernel-smp-unsupported is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060140004"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="kernel-doc is earlier than 0:2.4.21-37.0.1.EL" test_ref="oval:com.redhat.rhsa:tst:20060140005"/>
      <criterion comment="kernel-doc is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060140006"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="kernel-smp is earlier than 0:2.4.21-37.0.1.EL" test_ref="oval:com.redhat.rhsa:tst:20060140007"/>
      <criterion comment="kernel-smp is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060140008"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="kernel is earlier than 0:2.4.21-37.0.1.EL" test_ref="oval:com.redhat.rhsa:tst:20060140009"/>
      <criterion comment="kernel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060140010"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="kernel-source is earlier than 0:2.4.21-37.0.1.EL" test_ref="oval:com.redhat.rhsa:tst:20060140011"/>
      <criterion comment="kernel-source is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060140012"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-37.0.1.EL" test_ref="oval:com.redhat.rhsa:tst:20060140013"/>
      <criterion comment="kernel-hugemem-unsupported is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060140014"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="kernel-BOOT is earlier than 0:2.4.21-37.0.1.EL" test_ref="oval:com.redhat.rhsa:tst:20060140015"/>
      <criterion comment="kernel-BOOT is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060140016"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="kernel-hugemem is earlier than 0:2.4.21-37.0.1.EL" test_ref="oval:com.redhat.rhsa:tst:20060140017"/>
      <criterion comment="kernel-hugemem is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060140018"/>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20060144" version="640">
   <metadata>
    <title>RHSA-2006:0144: Updated kernel packages available for Red Hat Enterprise Linux 3 Update 7 (Moderate)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
    </affected>
    <reference ref_id="RHSA-2006:0144" ref_url="https://access.redhat.com/errata/RHSA-2006:0144" source="RHSA"/>
    <reference ref_id="CVE-2005-2458" ref_url="https://access.redhat.com/security/cve/CVE-2005-2458" source="CVE"/>
    <reference ref_id="CVE-2005-2801" ref_url="https://access.redhat.com/security/cve/CVE-2005-2801" source="CVE"/>
    <reference ref_id="CVE-2005-3276" ref_url="https://access.redhat.com/security/cve/CVE-2005-3276" source="CVE"/>
    <reference ref_id="CVE-2005-4798" ref_url="https://access.redhat.com/security/cve/CVE-2005-4798" source="CVE"/>
    <description>The Linux kernel handles the basic functions of the operating system.

This is the seventh regular kernel update to Red Hat Enterprise Linux 3.

New features introduced by this update include:

  - addition of the bnx2, dell_rbu, and megaraid_sas device drivers
  - support for multi-core, multi-threaded Intel Itanium processors
  - upgrade of the SATA subsystem to include ATAPI and SMART support
  - optional tuning via the new numa_memory_allocator, arp_announce,
      and printk_ratelimit sysctls

There were many bug fixes in various parts of the kernel.  The ongoing
effort to resolve these problems has resulted in a marked improvement in
the reliability and scalability of Red Hat Enterprise Linux 3.

There were numerous driver updates and security fixes (elaborated below).
Other key areas affected by fixes in this update include the networking
subsystem, the VM subsystem, NPTL handling, autofs4, the USB subsystem,
CPU enumeration, and 32-bit-exec-mode handling on 64-bit architectures.

The following device drivers have been upgraded to new versions:

  aacraid -------- 1.1.5-2412
  bnx2 ----------- 1.4.30 (new)
  dell_rbu ------- 2.1 (new)
  e1000 ---------- 6.1.16-k3
  emulex --------- 7.3.3
  fusion --------- 2.06.16.02
  ipmi ----------- 35.11
  megaraid2 ------ v2.10.10.1
  megaraid_sas --- 00.00.02.00 (new)
  tg3 ------------ 3.43RH

The following security bugs were fixed in this update:

  - a flaw in gzip/zlib handling internal to the kernel that allowed
    a local user to cause a denial of service (crash)
    (CVE-2005-2458,low)

  - a flaw in ext3 EA/ACL handling of attribute sharing that allowed
    a local user to gain privileges (CVE-2005-2801, moderate)

  - a minor info leak with the get_thread_area() syscall that allowed
    a local user to view uninitialized kernel stack data
    (CVE-2005-3276, low)

Note: The kernel-unsupported package contains various drivers and modules
that are unsupported and therefore might contain security problems that
have not been addressed.

All Red Hat Enterprise Linux 3 users are advised to upgrade their
kernels to the packages associated with their machine architectures
and configurations as listed in this erratum.</description>
    <advisory from="secalert@redhat.com">
     <severity>Moderate</severity>
     <rights>Copyright 2008 Red Hat, Inc.</rights>
     <issued date="2006-03-15"/>
     <updated date="2008-03-20"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2005-2458" impact="low" public="19990625">CVE-2005-2458</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2005-2801" public="20050205">CVE-2005-2801</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2005-3276" impact="low" public="20050727">CVE-2005-3276</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2005-4798" public="20050925">CVE-2005-4798</cve>
     <bugzilla href="https://bugzilla.redhat.com/112004" id="112004">pppd receives error &quot;Couldn't get channel number: bad address&quot;</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/112066" id="112066">RHEL3 U5:  Support for SATA features of ICH6R (for U3, AHCI only)</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/117067" id="117067">RHEL3 U3:  ICH6 SATA support in ACHI mode</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/122256" id="122256">RHEL3 U6:  SATA ATAPI support (HW)</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/125642" id="125642">kernel's Makefile not suited for long directory paths</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/128015" id="128015">RHEL3 U4: SATA AHCI (ICH6)</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/129265" id="129265">kernel panic when repeatedly accessing /proc/bus/usb/devices and hot-swapping usb device</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/130387" id="130387">Processes with Large memory requirment causes swap usage with free memory is present.</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/130489" id="130489">kernel kills db2 processes because of OOM error on RHEL Update2 and Update3</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/130712" id="130712">RHEL3 U7:  Add SMART capabilities to libata.</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/131295" id="131295">Hugepages configured on kernel boot line causes x86_64 kernel boot to fail with OOM.</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/132547" id="132547">oops when &quot;scsi add-single-device&quot; sent to /proc/scsi/scsi using aic79xx</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/134506" id="134506">[RHEL3 U3] kernel BUG at exit.c:620!</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/136583" id="136583">LTC18371-  [RHEL3 U4]cpu_sibling_map[] is incorrect on x445/x440</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/137101" id="137101">'noht' does not work for ia32e</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/137344" id="137344">Cannot disable hyperthreading on x86_64 platform</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/137998" id="137998">autofs removes leading path components of /net mounts on timeout</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/138730" id="138730">LTC12369-In RHEL 3 U4 -- top command gave segmentation fault</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/142579" id="142579">Viper: install kernel panics on DP system with 4GB all on cpu#2</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/144033" id="144033">[RHEL3] poll() seems to ignore large timeout</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/145596" id="145596">SMART support in SATA driver</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/146663" id="146663">pl2303 kernel module doesn't work with 'Aten UC-232A'</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/147870" id="147870">O_DIRECT to sparse areas of files give incomplete writes</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/150559" id="150559">Can't install RHEL3 on system with Adaptec AAR 1210SA SATA controller (sata_sil - siimage problem)</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/152103" id="152103">RHEL3 U5:  rhgb-client shows illegal instruction and fails.</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/152650" id="152650">aacraid driver in RHEL 3 U4 em64t causes kernel panic</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/154028" id="154028">megaraid2 driver causes panic if loaded for a second time</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/154385" id="154385">Crash on relocated automounts with --bind</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/156396" id="156396">System crash when dump or tar 64k blocksize to tape from raid</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/156397" id="156397">LTC13414-32-bit ping6 on 64-bit kernel not working</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/156645" id="156645">[RHEL3 U5] fails to boot installer on multiple platforms</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/156987" id="156987">FEAT: RHEL3 U5: need hint@pause in ia64 spinloops</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/156988" id="156988">FEAT RHEL3 U7 IPF - performance improvement for the system which CPEI occur continuously.</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/156999" id="156999">RHEL 3 U6: Support for cache identification through 'Deterministic Cache Parameters' [cpuid(4)]</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/157006" id="157006">[ CRM 488904 ] driver update for Adaptec 2410SA needed (1.1.5-2361 &gt; 1.1.5-2371 or higher)</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/158819" id="158819">RHEL3 does not support USBDEVFS 32-bit ioctls on x86_64</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/158821" id="158821">Advanced server 3 ARP timeout messages</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/159326" id="159326">RSS limited to 1.8GB if process pinned to one CPU</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/159523" id="159523">[RHEL3] Does not boot on system with ACPI table crossing page boundary</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/159874" id="159874">[RHEL 3 U5] adding hotplug drive causes kernel panic</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/159977" id="159977">[RHEL3] vi --- files getting deleted</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/160009" id="160009">agpgart will not load for kernel 2.4.21-32 on tyan S2885 motherboard with AMD-8151 agp tunnel</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/160337" id="160337">Keyboard &quot;jammed&quot; during smp runlevel 5 boot on IBM HS20-8843 BladeServer</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/160539" id="160539">[RHEL3] hidden bomb of kmap_atomic/kunmap_atomic bug?</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/161056" id="161056">CVE-2005-2801 Lost ACLs on ext3</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/161160" id="161160">Reproducable panic in mdadm multipathing</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/161188" id="161188">Sometimes data/bss can be executable</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/161336" id="161336">xserver issue on blade center</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/161866" id="161866">Race condition accessing PCI config space</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/161875" id="161875">autofs doesn't remount if nfs server is unreachable at expire time</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/162065" id="162065">aacraid driver hangs if Adaptec 2230SLP array not optimal</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/162212" id="162212">st causes system hang and kernel panic when writing to tape on x86_64</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/162271" id="162271">Problem with b44: SIOCSIFFLAGS: Cannot allocate memory</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/162417" id="162417">(VM) Excessive swapping when free memory is ample</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/162683" id="162683">[RHEL3 and RHEL2.1] ps command core dump</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/162735" id="162735">LTC8356-LSB runtime testcase T.c_oflag_X failed [PATCH]</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/163176" id="163176">Endless loop printing traceback during kernel OOPs</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/163184" id="163184">Explain why the SCSI inquiry is not being returned from the sd for nearly 5 minutes</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/163239" id="163239">[RHEL3] change_page_attr may set _PAGE_NX for kernel code pages</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/163307" id="163307">LTC13178-panic on i5 - sys_ppc32.c 32 bit sys_recvmsg corrupting kernel data structures</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/163381" id="163381">RHEL3U5 x86-64 : xw9300 &amp; numa=on swaps behaviour is unexpected</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/163901" id="163901">FEAT: RHEL3 U6: ia64 multi-core and multi-threading detection</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/163929" id="163929">[RHEL3] [x86_64/ia64] sys_time and sys_gettimeofday disagree</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/164206" id="164206">U5 beta encounters NMI watchdog on Celestica Quartet with 4 Opteron 875 dualcores</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/164304" id="164304">[RHEL3 U5] __wtd_down_from_wakeup not in EL3 ia64 tree</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/164438" id="164438">LTC12403-CMVC482920:I/O errors caused by eeh error injection-drive unavailable</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/164580" id="164580">NFS lockd deadlock</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/164795" id="164795">/usr/src/linux-2.4.21-32.EL/Documentation/networking/e100.txt contians bad info</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/164828" id="164828">RHEL 3 - request to add bnx2 driver</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/165006" id="165006">acct does not have Large File Support</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/165119" id="165119">FEAT RHEL3U7: Need Intel e1000 driver update for the Dell Ophir/Rimon based PCI-E NICs</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/165364" id="165364">SMP kernel does not honor boot parameter &quot;noht&quot;</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/165412" id="165412">[RHEL3] The system hangs when SysRq + c is pressed</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/165453" id="165453">Panic after ENXIO with usb-uhci</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/165475" id="165475">Problem removing a USB device</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/165680" id="165680">CVE-2005-2458 gzip/zlib flaws</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/165825" id="165825">Inquiry (sg) command hang after a write to tape with mptscsi driver</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/165989" id="165989">The msync(MS_SYNC) call should fail after cable pulled from scsi disk</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/166345" id="166345">HA NFS Cluster Problem</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/166363" id="166363">cciss disk dump hangs if module is ever unloaded/reloaded</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/166364" id="166364">Erratic behaviour when system fd limit reached</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/166578" id="166578">aacraid driver needs to be updated to support IBM ServeRAID 8i</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/166583" id="166583">aacraid driver needs to be updated to support IBM ServeRAID 8i</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/166600" id="166600">CRM619504: setrlimit RLIMIT_FSIZE limited to 32-bit values, even on 64-bit kernels</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/166669" id="166669">[RHEL3 U5] waitpid() returns unexpected ECHILD</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/167674" id="167674">RHEL3: need updated forcedeth.o driver?</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/167800" id="167800">CRM648268: kernel reporting init process cutime as very large negative value</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/167942" id="167942">FEAT RHEL3 U7: Need 'bnx2' driver inclusion to support Broadcom 5708C B0 NIC and 5708S BO LOM</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/168226" id="168226">FEAT RHEL3 U7: LSI megaraid_sas driver</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/168293" id="168293">Potential netconsole regression in transmit path</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/168315" id="168315">LTC17567-Fields 'system_potential_processor' and 'partition_max_entiteled_capacity' fields are missing from lparcfg file</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/168358" id="168358">FEAT RHEL3 U7: ipmi driver speedup patch</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/168359" id="168359">FEAT RHEL3 U7: ipmi_poweroff driver update for Dell &lt;8G servers</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/168390" id="168390">Large O_DIRECT write will hang system (MPT fusion)</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/168392" id="168392">kill -6 of multi-threaded application takes 30 minutes to finish</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/168474" id="168474">FEAT RHEL3-U7: Support for  HT1000 IDE chipset needed</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/168541" id="168541">RHEL3 U7: x86_64: Remove unique APIC/IO-APIC ID check</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/168581" id="168581">RH EL 3 U7: add support for Broadcom 5714 and 5715C NICs</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/168597" id="168597">FEAT RHEL3 U7: add dell_rbu driver for Dell BIOS updates</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/168603" id="168603">FEAT RHEL3 U7: Need TG3 update to support Broadcom 5721 C1 stepping</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/168681" id="168681">kernel BUG at page_alloc.c:391!</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/168780" id="168780">CVE-2005-3276 sys_get_thread_area minor info leak</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/168795" id="168795">RHEL3U7: ipmi driver fix for PE2650</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/168896" id="168896">LSI MegaRAID RHEL3 Feature - Updated SCSI driver submission</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/169230" id="169230">CVE-2005-4798 nfs client: handle long symlinks properly</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/169294" id="169294">[RHEL3 U6] __copy_user/memcpy causes random kernel panic on IA-64 systems</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/169393" id="169393">CRM# 685278 scsi scan not seeing all luns when one lun removed</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/169511" id="169511">[RHEL3] 'getpriority/setpriority' broken with PRIO_USER, who=0</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/169662" id="169662">[RHEL3 U5] Performance problem while extracting tarballs on Fujitsu Siemens Computing D1409, Adaptec S30 array, connected to an aacraid controller.</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/169992" id="169992">LTC18779-Lost dirty bit in kernel memory managment [PATCH]</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/170429" id="170429">RHEL-3: 'physical id' field in /proc/cpuinfo incorrect on AMD-64 hosts</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/170440" id="170440">[RHEL3 U5] Kernel crashing, multiple panics in aacraid driver</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/170446" id="170446">[RHEL3 U7] netdump hangs in processing of CPU stop after diskdump failed.</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/170529" id="170529">LTC17955-82222: Support for Serverworks chipset HT2000 Ethernet Driver (BCM5700 &amp; TG3)</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/170561" id="170561">Broadcom 5706/5708 support</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/170633" id="170633">System Stops responding with &quot;queue 6 full&quot; messages</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/171129" id="171129">RedHat / XW9300 / system panic when logout from GNOME with USB mouse</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/171377" id="171377">LTC18818-pfault interupt race</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/172233" id="172233">rename(2) onto an empty directory fails on NFS file systems</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/172334" id="172334">Invalid message 'Aieee!!!  Remote IRR still set after unlock'</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/172664" id="172664">Updated header file with modified author permissions</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/173280" id="173280">New icache prune export</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/174005" id="174005">Update Emulex lpfc driver for RHEL 3</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/175017" id="175017">Assertion failed! idx &gt;= ARRAY_SIZE(xfer_mode_str),libata-core.c,ata_dev_set_mode,line=1673</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/175154" id="175154">[RHEL3 U6] IOs hang in __wait_on_buffer when segments &gt; 170</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/175211" id="175211">Multicast domain membership doesn't follow bonding failover</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/175365" id="175365">LTC19816-Cannot see a concho adapter on U7 kernel</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/175624" id="175624">[RHEL3 U7 PATCH] LSI PCI Express chips to operate properly</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/175625" id="175625">[RHEL3 U7] x86-64: Can't boot with 16 logical processors</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/175767" id="175767">Installer appears to hang when loading mptbase module</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/176264" id="176264">x366 NMI error logged in infinite loop - [crm#769552] Possible regression U7 beta</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/177023" id="177023">CRM 724200: when an active USB serial port device is removed, the system panics and locks up.</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/177573" id="177573">autofs doesn't attempt to remount failed mount points</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/177691" id="177691">negative dentry caching causes long delay when dentry becomes valid</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/179168" id="179168">RHEL3U7Beta-32: Booting/Installing with SATA ATAPI Optical panics</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="AND">
    <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
    <criteria operator="OR">
     <criteria operator="AND">
      <criterion comment="kernel-doc is earlier than 0:2.4.21-40.EL" test_ref="oval:com.redhat.rhsa:tst:20060144001"/>
      <criterion comment="kernel-doc is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060140006"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="kernel-smp is earlier than 0:2.4.21-40.EL" test_ref="oval:com.redhat.rhsa:tst:20060144003"/>
      <criterion comment="kernel-smp is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060140008"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="kernel-source is earlier than 0:2.4.21-40.EL" test_ref="oval:com.redhat.rhsa:tst:20060144005"/>
      <criterion comment="kernel-source is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060140012"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="kernel is earlier than 0:2.4.21-40.EL" test_ref="oval:com.redhat.rhsa:tst:20060144007"/>
      <criterion comment="kernel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060140010"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-40.EL" test_ref="oval:com.redhat.rhsa:tst:20060144009"/>
      <criterion comment="kernel-smp-unsupported is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060140004"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="kernel-unsupported is earlier than 0:2.4.21-40.EL" test_ref="oval:com.redhat.rhsa:tst:20060144011"/>
      <criterion comment="kernel-unsupported is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060140002"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-40.EL" test_ref="oval:com.redhat.rhsa:tst:20060144013"/>
      <criterion comment="kernel-hugemem-unsupported is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060140014"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="kernel-hugemem is earlier than 0:2.4.21-40.EL" test_ref="oval:com.redhat.rhsa:tst:20060144015"/>
      <criterion comment="kernel-hugemem is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060140018"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="kernel-BOOT is earlier than 0:2.4.21-40.EL" test_ref="oval:com.redhat.rhsa:tst:20060144017"/>
      <criterion comment="kernel-BOOT is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060140016"/>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20060156" version="636">
   <metadata>
    <title>RHSA-2006:0156: ethereal security update (Moderate)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
    </affected>
    <reference ref_id="RHSA-2006:0156" ref_url="https://access.redhat.com/errata/RHSA-2006:0156" source="RHSA"/>
    <reference ref_id="CVE-2005-3313" ref_url="https://access.redhat.com/security/cve/CVE-2005-3313" source="CVE"/>
    <reference ref_id="CVE-2005-3651" ref_url="https://access.redhat.com/security/cve/CVE-2005-3651" source="CVE"/>
    <reference ref_id="CVE-2005-4585" ref_url="https://access.redhat.com/security/cve/CVE-2005-4585" source="CVE"/>
    <description>Ethereal is a program for monitoring network traffic.

Two denial of service bugs were found in Ethereal's IRC and GTP protocol
dissectors. Ethereal could crash or stop responding if it reads a malformed
IRC or GTP packet off the network. The Common Vulnerabilities and Exposures
project (cve.mitre.org) assigned the names CVE-2005-3313 and CVE-2005-4585
to these issues.

A buffer overflow bug was found in Ethereal's OSPF protocol dissector.
Ethereal could crash or execute arbitrary code if it reads a malformed OSPF
packet off the network.  (CVE-2005-3651)

Users of ethereal should upgrade to these updated packages containing
version 0.10.14, which is not vulnerable to these issues.</description>
    <advisory from="secalert@redhat.com">
     <severity>Moderate</severity>
     <rights>Copyright 2006 Red Hat, Inc.</rights>
     <issued date="2006-01-11"/>
     <updated date="2006-01-11"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2005-3313" public="20051023">CVE-2005-3313</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2005-3651" public="20051209:2145">CVE-2005-3651</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2005-4585" impact="low" public="20051227">CVE-2005-4585</cve>
     <bugzilla href="https://bugzilla.redhat.com/172297" id="172297">CVE-2005-3313 Ethereal IRC dissector DoS</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/176828" id="176828">CVE-2005-4585 ethereal GTP dissector could go into an infinite loop</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/176940" id="176940">CVE-2005-3651 ethereal OSPF Protocol Dissector Buffer Overflow Vulnerability</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="AND">
    <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
    <criteria operator="OR">
     <criteria operator="AND">
      <criterion comment="ethereal is earlier than 0:0.10.14-1.EL3.1" test_ref="oval:com.redhat.rhsa:tst:20060156001"/>
      <criterion comment="ethereal is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060156002"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="ethereal-gnome is earlier than 0:0.10.14-1.EL3.1" test_ref="oval:com.redhat.rhsa:tst:20060156003"/>
      <criterion comment="ethereal-gnome is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060156004"/>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20060159" version="638">
   <metadata>
    <title>RHSA-2006:0159: httpd security update (Moderate)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
    </affected>
    <reference ref_id="RHSA-2006:0159" ref_url="https://access.redhat.com/errata/RHSA-2006:0159" source="RHSA"/>
    <reference ref_id="CVE-2005-2970" ref_url="https://access.redhat.com/security/cve/CVE-2005-2970" source="CVE"/>
    <reference ref_id="CVE-2005-3352" ref_url="https://access.redhat.com/security/cve/CVE-2005-3352" source="CVE"/>
    <reference ref_id="CVE-2005-3357" ref_url="https://access.redhat.com/security/cve/CVE-2005-3357" source="CVE"/>
    <description>The Apache HTTP Server is a popular and freely-available Web server.

A memory leak in the worker MPM could allow remote attackers to cause a
denial of service (memory consumption) via aborted connections, which
prevents the memory for the transaction pool from being reused for other
connections.  The Common Vulnerabilities and Exposures project assigned the
name CVE-2005-2970 to this issue.  This vulnerability only affects users
who are using the non-default worker MPM.

A flaw in mod_imap when using the Referer directive with image maps was
discovered.  With certain site configurations, a remote attacker could
perform a cross-site scripting attack if a victim can be forced to visit a
malicious URL using certain web browsers.  (CVE-2005-3352)

A NULL pointer dereference flaw in mod_ssl was discovered affecting server
configurations where an SSL virtual host is configured with access control
and a custom 400 error document.  A remote attacker could send a carefully
crafted request to trigger this issue which would lead to a crash.  This
crash would only be a denial of service if using the non-default worker
MPM.  (CVE-2005-3357)

Users of httpd should update to these erratum packages which contain
backported patches to correct these issues along with some additional bugs.</description>
    <advisory from="secalert@redhat.com">
     <severity>Moderate</severity>
     <rights>Copyright 2006 Red Hat, Inc.</rights>
     <issued date="2006-01-05"/>
     <updated date="2006-01-05"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2005-2970" impact="low" public="20051025">CVE-2005-2970</cve>
     <cve cwe="CWE-79" href="https://access.redhat.com/security/cve/CVE-2005-3352" public="20051212">CVE-2005-3352</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2005-3357" impact="low" public="20051205">CVE-2005-3357</cve>
     <bugzilla href="https://bugzilla.redhat.com/170383" id="170383">mod_ssl per-directory renegotiation with request body</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/171756" id="171756">CVE-2005-2970 httpd worker MPM memory consumption DoS</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/175602" id="175602">CVE-2005-3352 cross-site scripting flaw in mod_imap</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/175720" id="175720">CVE-2005-3357 mod_ssl crash</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="mod_ssl is earlier than 1:2.0.46-56.ent" test_ref="oval:com.redhat.rhsa:tst:20060159001"/>
       <criterion comment="mod_ssl is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060159002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="httpd-devel is earlier than 0:2.0.46-56.ent" test_ref="oval:com.redhat.rhsa:tst:20060159003"/>
       <criterion comment="httpd-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060159004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="httpd is earlier than 0:2.0.46-56.ent" test_ref="oval:com.redhat.rhsa:tst:20060159005"/>
       <criterion comment="httpd is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060159006"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="httpd-suexec is earlier than 0:2.0.52-22.ent" test_ref="oval:com.redhat.rhsa:tst:20060159008"/>
       <criterion comment="httpd-suexec is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060159009"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="httpd-manual is earlier than 0:2.0.52-22.ent" test_ref="oval:com.redhat.rhsa:tst:20060159010"/>
       <criterion comment="httpd-manual is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060159011"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="httpd is earlier than 0:2.0.52-22.ent" test_ref="oval:com.redhat.rhsa:tst:20060159012"/>
       <criterion comment="httpd is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060159006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="httpd-devel is earlier than 0:2.0.52-22.ent" test_ref="oval:com.redhat.rhsa:tst:20060159013"/>
       <criterion comment="httpd-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060159004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="mod_ssl is earlier than 1:2.0.52-22.ent" test_ref="oval:com.redhat.rhsa:tst:20060159014"/>
       <criterion comment="mod_ssl is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060159002"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20060160" version="644">
   <metadata>
    <title>RHSA-2006:0160: tetex security update (Moderate)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
    </affected>
    <reference ref_id="RHSA-2006:0160" ref_url="https://access.redhat.com/errata/RHSA-2006:0160" source="RHSA"/>
    <reference ref_id="CVE-2005-3191" ref_url="https://access.redhat.com/security/cve/CVE-2005-3191" source="CVE"/>
    <reference ref_id="CVE-2005-3192" ref_url="https://access.redhat.com/security/cve/CVE-2005-3192" source="CVE"/>
    <reference ref_id="CVE-2005-3193" ref_url="https://access.redhat.com/security/cve/CVE-2005-3193" source="CVE"/>
    <reference ref_id="CVE-2005-3624" ref_url="https://access.redhat.com/security/cve/CVE-2005-3624" source="CVE"/>
    <reference ref_id="CVE-2005-3625" ref_url="https://access.redhat.com/security/cve/CVE-2005-3625" source="CVE"/>
    <reference ref_id="CVE-2005-3626" ref_url="https://access.redhat.com/security/cve/CVE-2005-3626" source="CVE"/>
    <reference ref_id="CVE-2005-3627" ref_url="https://access.redhat.com/security/cve/CVE-2005-3627" source="CVE"/>
    <reference ref_id="CVE-2005-3628" ref_url="https://access.redhat.com/security/cve/CVE-2005-3628" source="CVE"/>
    <description>TeTeX is an implementation of TeX. TeX takes a text file and a set of
formatting commands as input and creates a typesetter-independent .dvi
(DeVice Independent) file as output.

Several flaws were discovered in the teTeX PDF parsing library. An attacker
could construct a carefully crafted PDF file that could cause teTeX to
crash or possibly execute arbitrary code when opened. The Common
Vulnerabilities and Exposures project assigned the names CVE-2005-3191,
CVE-2005-3192, CVE-2005-3193, CVE-2005-3624, CVE-2005-3625, CVE-2005-3626,
CVE-2005-3627 and CVE-2005-3628 to these issues.

Users of teTeX should upgrade to these updated packages, which contain
backported patches and are not vulnerable to these issues.</description>
    <advisory from="secalert@redhat.com">
     <severity>Moderate</severity>
     <rights>Copyright 2008 Red Hat, Inc.</rights>
     <issued date="2006-01-19"/>
     <updated date="2008-03-20"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2005-3191" impact="important" public="20051206">CVE-2005-3191</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2005-3192" impact="important" public="20051206">CVE-2005-3192</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2005-3193" impact="important" public="20051206">CVE-2005-3193</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2005-3624" impact="important" public="20060103">CVE-2005-3624</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2005-3625" impact="important" public="20060103">CVE-2005-3625</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2005-3626" impact="important" public="20060103">CVE-2005-3626</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2005-3627" impact="important" public="20060103">CVE-2005-3627</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2005-3628" impact="important" public="20051206">CVE-2005-3628</cve>
     <bugzilla href="https://bugzilla.redhat.com/175109" id="175109">CVE-2005-3193 xpdf issues (CVE-2005-3191 CVE-2005-3192 CVE-2005-3628)</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/177127" id="177127">[RHEL4] CVE-2005-3624 Additional xpdf issues (CVE-2005-3625 CVE-2005-3626 CVE-2005-3627)</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="tetex is earlier than 0:1.0.7-67.9" test_ref="oval:com.redhat.rhsa:tst:20060160001"/>
       <criterion comment="tetex is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060160002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="tetex-xdvi is earlier than 0:1.0.7-67.9" test_ref="oval:com.redhat.rhsa:tst:20060160003"/>
       <criterion comment="tetex-xdvi is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060160004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="tetex-latex is earlier than 0:1.0.7-67.9" test_ref="oval:com.redhat.rhsa:tst:20060160005"/>
       <criterion comment="tetex-latex is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060160006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="tetex-dvips is earlier than 0:1.0.7-67.9" test_ref="oval:com.redhat.rhsa:tst:20060160007"/>
       <criterion comment="tetex-dvips is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060160008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="tetex-afm is earlier than 0:1.0.7-67.9" test_ref="oval:com.redhat.rhsa:tst:20060160009"/>
       <criterion comment="tetex-afm is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060160010"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="tetex-fonts is earlier than 0:1.0.7-67.9" test_ref="oval:com.redhat.rhsa:tst:20060160011"/>
       <criterion comment="tetex-fonts is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060160012"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="tetex is earlier than 0:2.0.2-22.EL4.7" test_ref="oval:com.redhat.rhsa:tst:20060160014"/>
       <criterion comment="tetex is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060160002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="tetex-doc is earlier than 0:2.0.2-22.EL4.7" test_ref="oval:com.redhat.rhsa:tst:20060160015"/>
       <criterion comment="tetex-doc is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060160016"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="tetex-latex is earlier than 0:2.0.2-22.EL4.7" test_ref="oval:com.redhat.rhsa:tst:20060160017"/>
       <criterion comment="tetex-latex is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060160006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="tetex-dvips is earlier than 0:2.0.2-22.EL4.7" test_ref="oval:com.redhat.rhsa:tst:20060160018"/>
       <criterion comment="tetex-dvips is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060160008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="tetex-afm is earlier than 0:2.0.2-22.EL4.7" test_ref="oval:com.redhat.rhsa:tst:20060160019"/>
       <criterion comment="tetex-afm is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060160010"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="tetex-xdvi is earlier than 0:2.0.2-22.EL4.7" test_ref="oval:com.redhat.rhsa:tst:20060160020"/>
       <criterion comment="tetex-xdvi is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060160004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="tetex-fonts is earlier than 0:2.0.2-22.EL4.7" test_ref="oval:com.redhat.rhsa:tst:20060160021"/>
       <criterion comment="tetex-fonts is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060160012"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20060163" version="632">
   <metadata>
    <title>RHSA-2006:0163: cups security update (Important)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
    </affected>
    <reference ref_id="RHSA-2006:0163" ref_url="https://access.redhat.com/errata/RHSA-2006:0163" source="RHSA"/>
    <reference ref_id="CVE-2005-3624" ref_url="https://access.redhat.com/security/cve/CVE-2005-3624" source="CVE"/>
    <reference ref_id="CVE-2005-3625" ref_url="https://access.redhat.com/security/cve/CVE-2005-3625" source="CVE"/>
    <reference ref_id="CVE-2005-3626" ref_url="https://access.redhat.com/security/cve/CVE-2005-3626" source="CVE"/>
    <reference ref_id="CVE-2005-3627" ref_url="https://access.redhat.com/security/cve/CVE-2005-3627" source="CVE"/>
    <description>The Common UNIX Printing System (CUPS) provides a portable printing layer
for UNIX(R) operating systems.

Chris Evans discovered several flaws in the way CUPS processes PDF files.
An attacker could construct a carefully crafted PDF file that could cause
CUPS to crash or possibly execute arbitrary code when opened. The Common
Vulnerabilities and Exposures project assigned the names CVE-2005-3624,
CVE-2005-3625, CVE-2005-3626, and CVE-2005-3627 to these issues.

All users of CUPS should upgrade to these updated packages, which contain
backported patches to resolve these issues.</description>
    <advisory from="secalert@redhat.com">
     <severity>Important</severity>
     <rights>Copyright 2006 Red Hat, Inc.</rights>
     <issued date="2006-01-11"/>
     <updated date="2006-01-11"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2005-3624" public="20060103">CVE-2005-3624</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2005-3625" public="20060103">CVE-2005-3625</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2005-3626" public="20060103">CVE-2005-3626</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2005-3627" public="20060103">CVE-2005-3627</cve>
     <bugzilla href="https://bugzilla.redhat.com/176868" id="176868">CVE-2005-3624 Additional xpdf issues (CVE-2005-3625 CVE-2005-3626 CVE-2005-3627)</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="cups-devel is earlier than 1:1.1.17-13.3.36" test_ref="oval:com.redhat.rhsa:tst:20060163001"/>
       <criterion comment="cups-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060163002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="cups-libs is earlier than 1:1.1.17-13.3.36" test_ref="oval:com.redhat.rhsa:tst:20060163003"/>
       <criterion comment="cups-libs is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060163004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="cups is earlier than 1:1.1.17-13.3.36" test_ref="oval:com.redhat.rhsa:tst:20060163005"/>
       <criterion comment="cups is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060163006"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="cups-devel is earlier than 1:1.1.22-0.rc1.9.10" test_ref="oval:com.redhat.rhsa:tst:20060163008"/>
       <criterion comment="cups-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060163002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="cups-libs is earlier than 1:1.1.22-0.rc1.9.10" test_ref="oval:com.redhat.rhsa:tst:20060163009"/>
       <criterion comment="cups-libs is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060163004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="cups is earlier than 1:1.1.22-0.rc1.9.10" test_ref="oval:com.redhat.rhsa:tst:20060163010"/>
       <criterion comment="cups is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060163006"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20060164" version="637">
   <metadata>
    <title>RHSA-2006:0164: mod_auth_pgsql security update (Critical)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
    </affected>
    <reference ref_id="RHSA-2006:0164" ref_url="https://access.redhat.com/errata/RHSA-2006:0164" source="RHSA"/>
    <reference ref_id="CVE-2005-3656" ref_url="https://access.redhat.com/security/cve/CVE-2005-3656" source="CVE"/>
    <description>The mod_auth_pgsql package is an httpd module that allows user
authentication against information stored in a PostgreSQL database.

Several format string flaws were found in the way mod_auth_pgsql logs
information.  It may be possible for a remote attacker to execute arbitrary
code as the 'apache' user if mod_auth_pgsql is used for user
authentication. The Common Vulnerabilities and Exposures project assigned
the name CVE-2005-3656 to this issue.

Please note that this issue only affects servers which have mod_auth_pgsql
installed and configured to perform user authentication against a
PostgreSQL database.

All users of mod_auth_pgsql should upgrade to these updated packages, which
contain a backported patch to resolve this issue.

This issue does not affect the mod_auth_pgsql package supplied with Red Hat
Enterprise Linux 2.1.

Red Hat would like to thank iDefense for reporting this issue.</description>
    <advisory from="secalert@redhat.com">
     <severity>Critical</severity>
     <rights>Copyright 2006 Red Hat, Inc.</rights>
     <issued date="2006-01-05"/>
     <updated date="2006-01-05"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2005-3656" public="20060109:2216">CVE-2005-3656</cve>
     <bugzilla href="https://bugzilla.redhat.com/177042" id="177042">CVE-2005-3656 mod_auth_pgsql format string issue</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criterion comment="mod_auth_pgsql is earlier than 0:2.0.1-4.ent.1" test_ref="oval:com.redhat.rhsa:tst:20060164001"/>
     <criterion comment="mod_auth_pgsql is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060164002"/>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criterion comment="mod_auth_pgsql is earlier than 0:2.0.1-7.1" test_ref="oval:com.redhat.rhsa:tst:20060164004"/>
     <criterion comment="mod_auth_pgsql is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060164002"/>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20060178" version="634">
   <metadata>
    <title>RHSA-2006:0178: ImageMagick security update (Moderate)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
    </affected>
    <reference ref_id="RHSA-2006:0178" ref_url="https://access.redhat.com/errata/RHSA-2006:0178" source="RHSA"/>
    <reference ref_id="CVE-2005-4601" ref_url="https://access.redhat.com/security/cve/CVE-2005-4601" source="CVE"/>
    <reference ref_id="CVE-2006-0082" ref_url="https://access.redhat.com/security/cve/CVE-2006-0082" source="CVE"/>
    <description>ImageMagick(TM) is an image display and manipulation tool for the X Window
System that can read and write multiple image formats.

A shell command injection flaw was found in ImageMagick's &quot;display&quot;
command. It is possible to execute arbitrary commands by tricking a user
into running &quot;display&quot; on a file with a specially crafted name. The Common
Vulnerabilities and Exposures project (cve.mitre.org) assigned the name
CVE-2005-4601 to this issue.

A format string flaw was discovered in the way ImageMagick handles
filenames. It may be possible to execute arbitrary commands by tricking a
user into running a carefully crafted ImageMagick command. (CVE-2006-0082)

Users of ImageMagick should upgrade to these updated packages, which
contain backported patches and are not vulnerable to these issues.</description>
    <advisory from="secalert@redhat.com">
     <severity>Moderate</severity>
     <rights>Copyright 2006 Red Hat, Inc.</rights>
     <issued date="2006-02-14"/>
     <updated date="2006-02-14"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2005-4601" public="20051229">CVE-2005-4601</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-0082" public="20060104">CVE-2006-0082</cve>
     <bugzilla href="https://bugzilla.redhat.com/176837" id="176837">CVE-2005-4601 ImageMagick display command shell command injection</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/176925" id="176925">CVE-2006-0082 ImageMagick format string vulnerability.</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="ImageMagick-devel is earlier than 0:5.5.6-18" test_ref="oval:com.redhat.rhsa:tst:20060178001"/>
       <criterion comment="ImageMagick-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060178002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="ImageMagick is earlier than 0:5.5.6-18" test_ref="oval:com.redhat.rhsa:tst:20060178003"/>
       <criterion comment="ImageMagick is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060178004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="ImageMagick-perl is earlier than 0:5.5.6-18" test_ref="oval:com.redhat.rhsa:tst:20060178005"/>
       <criterion comment="ImageMagick-perl is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060178006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="ImageMagick-c++ is earlier than 0:5.5.6-18" test_ref="oval:com.redhat.rhsa:tst:20060178007"/>
       <criterion comment="ImageMagick-c++ is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060178008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="ImageMagick-c++-devel is earlier than 0:5.5.6-18" test_ref="oval:com.redhat.rhsa:tst:20060178009"/>
       <criterion comment="ImageMagick-c++-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060178010"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="ImageMagick-c++-devel is earlier than 0:6.0.7.1-14" test_ref="oval:com.redhat.rhsa:tst:20060178012"/>
       <criterion comment="ImageMagick-c++-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060178010"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="ImageMagick-devel is earlier than 0:6.0.7.1-14" test_ref="oval:com.redhat.rhsa:tst:20060178013"/>
       <criterion comment="ImageMagick-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060178002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="ImageMagick-perl is earlier than 0:6.0.7.1-14" test_ref="oval:com.redhat.rhsa:tst:20060178014"/>
       <criterion comment="ImageMagick-perl is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060178006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="ImageMagick is earlier than 0:6.0.7.1-14" test_ref="oval:com.redhat.rhsa:tst:20060178015"/>
       <criterion comment="ImageMagick is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060178004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="ImageMagick-c++ is earlier than 0:6.0.7.1-14" test_ref="oval:com.redhat.rhsa:tst:20060178016"/>
       <criterion comment="ImageMagick-c++ is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060178008"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20060195" version="638">
   <metadata>
    <title>RHSA-2006:0195: tar security update (Low)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
    </affected>
    <reference ref_id="RHSA-2006:0195" ref_url="https://access.redhat.com/errata/RHSA-2006:0195" source="RHSA"/>
    <reference ref_id="CVE-2005-1918" ref_url="https://access.redhat.com/security/cve/CVE-2005-1918" source="CVE"/>
    <description>The GNU tar program saves many files together in one archive and can
restore individual files (or all of the files) from that archive. 

In 2002, a path traversal flaw was found in the way GNU tar extracted
archives. A malicious user could create a tar archive that could write to
arbitrary files to which the user running GNU tar has write access
(CVE-2002-0399).  Red Hat included a backported security patch to correct
this issue in Red Hat Enterprise Linux 3, and an erratum for Red Hat
Enterprise Linux 2.1 users was issued.

During internal testing, we discovered that our backported security patch
contained an incorrect optimization and therefore was not sufficient to
completely correct this vulnerability.  The Common Vulnerabilities and
Exposures project (cve.mitre.org) assigned the name CVE-2005-1918 to this
issue.

Users of tar should upgrade to this updated package, which contains a
replacement backported patch to correct this issue.</description>
    <advisory from="secalert@redhat.com">
     <severity>Low</severity>
     <rights>Copyright 2006 Red Hat, Inc.</rights>
     <issued date="2006-02-21"/>
     <updated date="2006-02-21"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2005-1918" public="20030721">CVE-2005-1918</cve>
     <bugzilla href="https://bugzilla.redhat.com/140589" id="140589">CVE-2005-1918 tar archive path traversal issue</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/140598" id="140598">CVE-2005-1918 tar archive path traversal issue</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="AND">
    <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
    <criterion comment="tar is earlier than 0:1.13.25-14.RHEL3" test_ref="oval:com.redhat.rhsa:tst:20060195001"/>
    <criterion comment="tar is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060195002"/>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20060197" version="635">
   <metadata>
    <title>RHSA-2006:0197: python security update (Moderate)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
    </affected>
    <reference ref_id="RHSA-2006:0197" ref_url="https://access.redhat.com/errata/RHSA-2006:0197" source="RHSA"/>
    <reference ref_id="CVE-2005-2491" ref_url="https://access.redhat.com/security/cve/CVE-2005-2491" source="CVE"/>
    <description>Python is an interpreted, interactive, object-oriented programming language.

An integer overflow flaw was found in Python's PCRE library that could be
triggered by a maliciously crafted regular expression. On systems that
accept arbitrary regular expressions from untrusted users, this could be
exploited to execute arbitrary code with the privileges of the application
using the library.  The Common Vulnerabilities and Exposures project
assigned the name CVE-2005-2491 to this issue.

Users of Python should upgrade to these updated packages, which contain a
backported patch that is not vulnerable to this issue.</description>
    <advisory from="secalert@redhat.com">
     <severity>Moderate</severity>
     <rights>Copyright 2006 Red Hat, Inc.</rights>
     <issued date="2006-03-09"/>
     <updated date="2006-03-09"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2005-2491" public="20050801">CVE-2005-2491</cve>
     <bugzilla href="https://bugzilla.redhat.com/166335" id="166335">CVE-2005-2491 PCRE heap overflow</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="python-tools is earlier than 0:2.2.3-6.2" test_ref="oval:com.redhat.rhsa:tst:20060197001"/>
       <criterion comment="python-tools is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060197002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="python-devel is earlier than 0:2.2.3-6.2" test_ref="oval:com.redhat.rhsa:tst:20060197003"/>
       <criterion comment="python-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060197004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="python is earlier than 0:2.2.3-6.2" test_ref="oval:com.redhat.rhsa:tst:20060197005"/>
       <criterion comment="python is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060197006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="tkinter is earlier than 0:2.2.3-6.2" test_ref="oval:com.redhat.rhsa:tst:20060197007"/>
       <criterion comment="tkinter is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060197008"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="python is earlier than 0:2.3.4-14.2" test_ref="oval:com.redhat.rhsa:tst:20060197010"/>
       <criterion comment="python is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060197006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="python-docs is earlier than 0:2.3.4-14.2" test_ref="oval:com.redhat.rhsa:tst:20060197011"/>
       <criterion comment="python-docs is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060197012"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="python-tools is earlier than 0:2.3.4-14.2" test_ref="oval:com.redhat.rhsa:tst:20060197013"/>
       <criterion comment="python-tools is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060197002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="python-devel is earlier than 0:2.3.4-14.2" test_ref="oval:com.redhat.rhsa:tst:20060197014"/>
       <criterion comment="python-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060197004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="tkinter is earlier than 0:2.3.4-14.2" test_ref="oval:com.redhat.rhsa:tst:20060197015"/>
       <criterion comment="tkinter is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060197008"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20060204" version="640">
   <metadata>
    <title>RHSA-2006:0204: mailman security update (Moderate)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
    </affected>
    <reference ref_id="RHSA-2006:0204" ref_url="https://access.redhat.com/errata/RHSA-2006:0204" source="RHSA"/>
    <reference ref_id="CVE-2005-3573" ref_url="https://access.redhat.com/security/cve/CVE-2005-3573" source="CVE"/>
    <reference ref_id="CVE-2005-4153" ref_url="https://access.redhat.com/security/cve/CVE-2005-4153" source="CVE"/>
    <description>Mailman is software to help manage email discussion lists.

A flaw in handling of UTF8 character encodings was found in Mailman.  An
attacker could send a carefully crafted email message to a mailing list run
by Mailman which would cause that particular mailing list to stop working.
The Common Vulnerabilities and Exposures project assigned the name
CVE-2005-3573 to this issue.

A flaw in date handling was found in Mailman version 2.1.4 through 2.1.6. 
An attacker could send a carefully crafted email message to a mailing list
run by Mailman which would cause the Mailman server to crash.  (CVE-2005-4153).

Users of Mailman should upgrade to this updated package, which contains
backported patches to correct these issues.</description>
    <advisory from="secalert@redhat.com">
     <severity>Moderate</severity>
     <rights>Copyright 2008 Red Hat, Inc.</rights>
     <issued date="2006-03-07"/>
     <updated date="2008-03-20"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2005-3573" public="20050912">CVE-2005-3573</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2005-4153" public="20050901">CVE-2005-4153</cve>
     <bugzilla href="https://bugzilla.redhat.com/173139" id="173139">CVE-2005-3573 Mailman Denial of Service</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/176089" id="176089">CVE-2005-4153 Mailman DOS</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criterion comment="mailman is earlier than 3:2.1.5.1-25.rhel3.4" test_ref="oval:com.redhat.rhsa:tst:20060204001"/>
     <criterion comment="mailman is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060204002"/>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criterion comment="mailman is earlier than 3:2.1.5.1-34.rhel4.2" test_ref="oval:com.redhat.rhsa:tst:20060204004"/>
     <criterion comment="mailman is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060204002"/>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20060264" version="638">
   <metadata>
    <title>RHSA-2006:0264: sendmail security update (Critical)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
    </affected>
    <reference ref_id="RHSA-2006:0264" ref_url="https://access.redhat.com/errata/RHSA-2006:0264" source="RHSA"/>
    <reference ref_id="CVE-2006-0058" ref_url="https://access.redhat.com/security/cve/CVE-2006-0058" source="CVE"/>
    <description>Sendmail is a Mail Transport Agent (MTA) used to send mail between machines.

A flaw in the handling of asynchronous signals was discovered in Sendmail.
A remote attacker may be able to exploit a race condition to execute
arbitrary code as root.  The Common Vulnerabilities and Exposures project
assigned the name CVE-2006-0058 to this issue.

By default on Red Hat Enterprise Linux 3 and 4, Sendmail is configured to
only accept connections from the local host.  Therefore, only users who have
configured Sendmail to listen to remote hosts would be able to be remotely
exploited by this vulnerability.

Users of Sendmail are advised to upgrade to these erratum packages, which
contain a backported patch from the Sendmail team to correct this issue.</description>
    <advisory from="secalert@redhat.com">
     <severity>Critical</severity>
     <rights>Copyright 2008 Red Hat, Inc.</rights>
     <issued date="2006-03-22"/>
     <updated date="2008-03-20"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-0058" public="20060322:1600">CVE-2006-0058</cve>
     <bugzilla href="https://bugzilla.redhat.com/184465" id="184465">CVE-2006-0058  Sendmail race condition issue</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="sendmail-cf is earlier than 0:8.12.11-4.RHEL3.4" test_ref="oval:com.redhat.rhsa:tst:20060264001"/>
       <criterion comment="sendmail-cf is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060264002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="sendmail-devel is earlier than 0:8.12.11-4.RHEL3.4" test_ref="oval:com.redhat.rhsa:tst:20060264003"/>
       <criterion comment="sendmail-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060264004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="sendmail-doc is earlier than 0:8.12.11-4.RHEL3.4" test_ref="oval:com.redhat.rhsa:tst:20060264005"/>
       <criterion comment="sendmail-doc is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060264006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="sendmail is earlier than 0:8.12.11-4.RHEL3.4" test_ref="oval:com.redhat.rhsa:tst:20060264007"/>
       <criterion comment="sendmail is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060264008"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="sendmail is earlier than 0:8.13.1-3.RHEL4.3" test_ref="oval:com.redhat.rhsa:tst:20060264010"/>
       <criterion comment="sendmail is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060264008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="sendmail-devel is earlier than 0:8.13.1-3.RHEL4.3" test_ref="oval:com.redhat.rhsa:tst:20060264011"/>
       <criterion comment="sendmail-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060264004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="sendmail-doc is earlier than 0:8.13.1-3.RHEL4.3" test_ref="oval:com.redhat.rhsa:tst:20060264012"/>
       <criterion comment="sendmail-doc is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060264006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="sendmail-cf is earlier than 0:8.13.1-3.RHEL4.3" test_ref="oval:com.redhat.rhsa:tst:20060264013"/>
       <criterion comment="sendmail-cf is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060264002"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20060266" version="639">
   <metadata>
    <title>RHSA-2006:0266: gnupg security update (Important)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
    </affected>
    <reference ref_id="RHSA-2006:0266" ref_url="https://access.redhat.com/errata/RHSA-2006:0266" source="RHSA"/>
    <reference ref_id="CVE-2006-0049" ref_url="https://access.redhat.com/security/cve/CVE-2006-0049" source="CVE"/>
    <reference ref_id="CVE-2006-0455" ref_url="https://access.redhat.com/security/cve/CVE-2006-0455" source="CVE"/>
    <description>GnuPG is a utility for encrypting data and creating digital signatures.

Tavis Ormandy discovered a bug in the way GnuPG verifies cryptographically
signed data with detached signatures. It is possible for an attacker to
construct a cryptographically signed message which could appear to come
from a third party.  When a victim processes a GnuPG message with a
malformed detached signature, GnuPG ignores the malformed signature,
processes and outputs the signed data, and exits with status 0, just as it
would if the signature had been valid.  In this case, GnuPG's exit status
would not indicate that no signature verification had taken place. This
issue would primarily be of concern when processing GnuPG results via an
automated script. The Common Vulnerabilities and Exposures project assigned
the name CVE-2006-0455 to this issue.

Tavis Ormandy also discovered a bug in the way GnuPG verifies
cryptographically signed data with inline signatures. It is possible for an
attacker to inject unsigned data into a signed message in such a way that
when a victim processes the message to recover the data, the unsigned data
is output along with the signed data, giving the appearance of having been
signed.  This issue is mitigated in the GnuPG shipped with Red Hat
Enterprise Linux as the --ignore-crc-error option must be passed to the gpg
executable for this attack to be successful. The Common Vulnerabilities and
Exposures project assigned the name CVE-2006-0049 to this issue.

Note that neither of these issues affect the way RPM or up2date verify RPM
package files, nor is RPM vulnerable to either of these issues.

All users of GnuPG are advised to upgrade to this updated package, which
contains backported patches to correct these issues.</description>
    <advisory from="secalert@redhat.com">
     <severity>Important</severity>
     <rights>Copyright 2006 Red Hat, Inc.</rights>
     <issued date="2006-03-15"/>
     <updated date="2006-03-15"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-0049" public="20060309">CVE-2006-0049</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-0455" impact="moderate" public="20060215">CVE-2006-0455</cve>
     <bugzilla href="https://bugzilla.redhat.com/167392" id="167392">initial gpg run doesn't create .gnupg/secring.gpg</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/179506" id="179506">RHEL3, gnupg-1.2.1-10, gpg: Creates corrupt files (probably 2GB problem)</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/183484" id="183484">CVE-2006-0455 gpg will quietly exit when attempting to verify a malformed message</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/184556" id="184556">CVE-2006-0049 Gnupg incorrect malformed message verification</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criterion comment="gnupg is earlier than 0:1.2.1-15" test_ref="oval:com.redhat.rhsa:tst:20060266001"/>
     <criterion comment="gnupg is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060266002"/>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criterion comment="gnupg is earlier than 0:1.2.6-3" test_ref="oval:com.redhat.rhsa:tst:20060266004"/>
     <criterion comment="gnupg is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060266002"/>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20060267" version="641">
   <metadata>
    <title>RHSA-2006:0267: ipsec-tools security update (Moderate)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
    </affected>
    <reference ref_id="RHSA-2006:0267" ref_url="https://access.redhat.com/errata/RHSA-2006:0267" source="RHSA"/>
    <reference ref_id="CVE-2005-3732" ref_url="https://access.redhat.com/security/cve/CVE-2005-3732" source="CVE"/>
    <description>The ipsec-tools package is used in conjunction with the IPsec functionality
in the linux kernel and includes racoon, an IKEv1 keying daemon.

A denial of service flaw was found in the ipsec-tools racoon daemon.  If a
victim's machine has racoon configured in a non-recommended insecure
manner, it is possible for a remote attacker to crash the racoon daemon. 
(CVE-2005-3732)

Users of ipsec-tools should upgrade to these updated packages, which contain
backported patches, and are not vulnerable to these issues.</description>
    <advisory from="secalert@redhat.com">
     <severity>Moderate</severity>
     <rights>Copyright 2008 Red Hat, Inc.</rights>
     <issued date="2006-04-25"/>
     <updated date="2008-03-20"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2005-3732" impact="low" public="20051120">CVE-2005-3732</cve>
     <bugzilla href="https://bugzilla.redhat.com/173841" id="173841">CVE-2005-3732 ipsec-tools IKE DoS</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/181605" id="181605">CVE-2005-3732 ipsec-tools IKE DoS</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criterion comment="ipsec-tools is earlier than 0:0.2.5-0.7.rhel3.3" test_ref="oval:com.redhat.rhsa:tst:20060267001"/>
     <criterion comment="ipsec-tools is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060267002"/>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criterion comment="ipsec-tools is earlier than 0:0.3.3-6.rhel4.1" test_ref="oval:com.redhat.rhsa:tst:20060267004"/>
     <criterion comment="ipsec-tools is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060267002"/>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20060271" version="642">
   <metadata>
    <title>RHSA-2006:0271: freeradius security update (Important)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
    </affected>
    <reference ref_id="RHSA-2006:0271" ref_url="https://access.redhat.com/errata/RHSA-2006:0271" source="RHSA"/>
    <reference ref_id="CVE-2005-4744" ref_url="https://access.redhat.com/security/cve/CVE-2005-4744" source="CVE"/>
    <reference ref_id="CVE-2006-1354" ref_url="https://access.redhat.com/security/cve/CVE-2006-1354" source="CVE"/>
    <description>FreeRADIUS is a high-performance and highly configurable free RADIUS server
designed to allow centralized authentication and authorization for a network. 

A bug was found in the way FreeRADIUS authenticates users via the MSCHAP V2
protocol. It is possible for a remote attacker to authenticate as a victim
by sending a malformed MSCHAP V2 login request to the FreeRADIUS server.
(CVE-2006-1354)

Please note that FreeRADIUS installations not using the MSCHAP V2 protocol
for authentication are not vulnerable to this issue.

A bug was also found in the way FreeRADIUS logs SQL errors from the
sql_unixodbc module. It may be possible for an attacker to cause FreeRADIUS
to crash or execute arbitrary code if they are able to manipulate the SQL
database FreeRADIUS is connecting to. (CVE-2005-4744)

Users of FreeRADIUS should update to these erratum packages, which contain
backported patches and are not vulnerable to these issues.</description>
    <advisory from="secalert@redhat.com">
     <severity>Important</severity>
     <rights>Copyright 2006 Red Hat, Inc.</rights>
     <issued date="2006-04-04"/>
     <updated date="2006-04-13"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2005-4744" impact="low" public="20050909">CVE-2005-4744</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-1354" public="20060320">CVE-2006-1354</cve>
     <bugzilla href="https://bugzilla.redhat.com/167676" id="167676">CVE-2005-4744 Multiple freeradius security issues</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/186083" id="186083">CVE-2006-1354 FreeRADIUS authentication bypass</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criterion comment="freeradius is earlier than 0:1.0.1-2.RHEL3.2" test_ref="oval:com.redhat.rhsa:tst:20060271001"/>
     <criterion comment="freeradius is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060271002"/>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="freeradius-mysql is earlier than 0:1.0.1-3.RHEL4.3" test_ref="oval:com.redhat.rhsa:tst:20060271004"/>
       <criterion comment="freeradius-mysql is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060271005"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="freeradius is earlier than 0:1.0.1-3.RHEL4.3" test_ref="oval:com.redhat.rhsa:tst:20060271006"/>
       <criterion comment="freeradius is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060271002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="freeradius-unixODBC is earlier than 0:1.0.1-3.RHEL4.3" test_ref="oval:com.redhat.rhsa:tst:20060271007"/>
       <criterion comment="freeradius-unixODBC is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060271008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="freeradius-postgresql is earlier than 0:1.0.1-3.RHEL4.3" test_ref="oval:com.redhat.rhsa:tst:20060271009"/>
       <criterion comment="freeradius-postgresql is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060271010"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20060272" version="638">
   <metadata>
    <title>RHSA-2006:0272: openmotif security update (Moderate)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
    </affected>
    <reference ref_id="RHSA-2006:0272" ref_url="https://access.redhat.com/errata/RHSA-2006:0272" source="RHSA"/>
    <reference ref_id="CVE-2005-3964" ref_url="https://access.redhat.com/security/cve/CVE-2005-3964" source="CVE"/>
    <description>OpenMotif provides libraries which implement the Motif industry standard
graphical user interface. 

A number of buffer overflow flaws were discovered in OpenMotif's libUil
library. It is possible for an attacker to execute arbitrary code as a
victim who has been tricked into executing a program linked against
OpenMotif, which then loads a malicious User Interface Language (UIL) file.
(CVE-2005-3964)

Users of OpenMotif are advised to upgrade to these erratum packages, which
contain a backported security patch to correct this issue.</description>
    <advisory from="secalert@redhat.com">
     <severity>Moderate</severity>
     <rights>Copyright 2006 Red Hat, Inc.</rights>
     <issued date="2006-04-04"/>
     <updated date="2006-04-04"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2005-3964" public="20051202">CVE-2005-3964</cve>
     <bugzilla href="https://bugzilla.redhat.com/174815" id="174815">CVE-2005-3964 openmotif libUil buffer overflows</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="openmotif-devel is earlier than 0:2.2.3-5.RHEL3.3" test_ref="oval:com.redhat.rhsa:tst:20060272001"/>
       <criterion comment="openmotif-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060272002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openmotif is earlier than 0:2.2.3-5.RHEL3.3" test_ref="oval:com.redhat.rhsa:tst:20060272003"/>
       <criterion comment="openmotif is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060272004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openmotif21 is earlier than 0:2.1.30-9.RHEL3.7" test_ref="oval:com.redhat.rhsa:tst:20060272005"/>
       <criterion comment="openmotif21 is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060272006"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="openmotif21 is earlier than 0:2.1.30-11.RHEL4.5" test_ref="oval:com.redhat.rhsa:tst:20060272008"/>
       <criterion comment="openmotif21 is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060272006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openmotif is earlier than 0:2.2.3-10.RHEL4.1" test_ref="oval:com.redhat.rhsa:tst:20060272009"/>
       <criterion comment="openmotif is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060272004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openmotif-devel is earlier than 0:2.2.3-10.RHEL4.1" test_ref="oval:com.redhat.rhsa:tst:20060272010"/>
       <criterion comment="openmotif-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060272002"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20060276" version="639">
   <metadata>
    <title>RHSA-2006:0276: php security update (Moderate)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
    </affected>
    <reference ref_id="RHSA-2006:0276" ref_url="https://access.redhat.com/errata/RHSA-2006:0276" source="RHSA"/>
    <reference ref_id="CVE-2003-1303" ref_url="https://access.redhat.com/security/cve/CVE-2003-1303" source="CVE"/>
    <reference ref_id="CVE-2005-2933" ref_url="https://access.redhat.com/security/cve/CVE-2005-2933" source="CVE"/>
    <reference ref_id="CVE-2005-3883" ref_url="https://access.redhat.com/security/cve/CVE-2005-3883" source="CVE"/>
    <reference ref_id="CVE-2006-0208" ref_url="https://access.redhat.com/security/cve/CVE-2006-0208" source="CVE"/>
    <reference ref_id="CVE-2006-0996" ref_url="https://access.redhat.com/security/cve/CVE-2006-0996" source="CVE"/>
    <reference ref_id="CVE-2006-1490" ref_url="https://access.redhat.com/security/cve/CVE-2006-1490" source="CVE"/>
    <description>PHP is an HTML-embedded scripting language commonly used with the Apache
HTTP Web server. 

The phpinfo() PHP function did not properly sanitize long strings.  An
attacker could use this to perform cross-site scripting attacks against
sites that have publicly-available PHP scripts that call phpinfo(). 
(CVE-2006-0996)

The html_entity_decode() PHP function was found to not be binary safe. An
attacker could use this flaw to disclose a certain part of the memory.  In
order for this issue to be exploitable the target site would need to have a
PHP script which called the &quot;html_entity_decode()&quot; function with untrusted
input from the user and displayed the result.  (CVE-2006-1490)

The error handling output was found to not properly escape HTML output in
certain cases.  An attacker could use this flaw to perform cross-site
scripting attacks against sites where both display_errors and html_errors
are enabled.  (CVE-2006-0208)

An input validation error was found in the &quot;mb_send_mail()&quot; function.  An
attacker could use this flaw to inject arbitrary headers in a mail sent via
a script calling the &quot;mb_send_mail()&quot; function where the &quot;To&quot; parameter can
be controlled by the attacker.  (CVE-2005-3883)

A buffer overflow flaw was discovered in uw-imap, the University of
Washington's IMAP Server.  php-imap is compiled against the static c-client
libraries from imap and therefore needed to be recompiled against the fixed
version.  This issue only affected Red Hat Enterprise Linux 3.
(CVE-2005-2933).

Users of PHP should upgrade to these updated packages, which contain
backported patches that resolve these issues.</description>
    <advisory from="secalert@redhat.com">
     <severity>Moderate</severity>
     <rights>Copyright 2006 Red Hat, Inc.</rights>
     <issued date="2006-04-25"/>
     <updated date="2006-04-25"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2003-1303" impact="important" public="20030612">CVE-2003-1303</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2005-2933" public="20051004">CVE-2005-2933</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2005-3883" public="20051124">CVE-2005-3883</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-0208" impact="low" public="20060112">CVE-2006-0208</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-0996" impact="low" public="20060330">CVE-2006-0996</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-1490" public="20060328">CVE-2006-1490</cve>
     <bugzilla href="https://bugzilla.redhat.com/163490" id="163490">PEAR::DB autoExecute function does not work when updating with WHERE clause</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/174463" id="174463">CVE-2005-3883 PHP mb_send_mail() header parsing issue</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/174528" id="174528">CVE-2005-2933 imap buffer overflow</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/178028" id="178028">CVE-2006-0208 PHP Cross Site Scripting (XSS) flaw</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/182719" id="182719">ImageCreateFromGif does not clean up its temporary file</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/187230" id="187230">CVE-2006-1490 PHP memory disclosure issue</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/187510" id="187510">CVE-2006-0996 phpinfo() XSS issue</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="php is earlier than 0:4.3.2-30.ent" test_ref="oval:com.redhat.rhsa:tst:20060276001"/>
       <criterion comment="php is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-odbc is earlier than 0:4.3.2-30.ent" test_ref="oval:com.redhat.rhsa:tst:20060276003"/>
       <criterion comment="php-odbc is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-ldap is earlier than 0:4.3.2-30.ent" test_ref="oval:com.redhat.rhsa:tst:20060276005"/>
       <criterion comment="php-ldap is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-devel is earlier than 0:4.3.2-30.ent" test_ref="oval:com.redhat.rhsa:tst:20060276007"/>
       <criterion comment="php-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-imap is earlier than 0:4.3.2-30.ent" test_ref="oval:com.redhat.rhsa:tst:20060276009"/>
       <criterion comment="php-imap is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276010"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-pgsql is earlier than 0:4.3.2-30.ent" test_ref="oval:com.redhat.rhsa:tst:20060276011"/>
       <criterion comment="php-pgsql is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276012"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-mysql is earlier than 0:4.3.2-30.ent" test_ref="oval:com.redhat.rhsa:tst:20060276013"/>
       <criterion comment="php-mysql is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276014"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="php-imap is earlier than 0:4.3.9-3.12" test_ref="oval:com.redhat.rhsa:tst:20060276016"/>
       <criterion comment="php-imap is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276010"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-pgsql is earlier than 0:4.3.9-3.12" test_ref="oval:com.redhat.rhsa:tst:20060276017"/>
       <criterion comment="php-pgsql is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276012"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-xmlrpc is earlier than 0:4.3.9-3.12" test_ref="oval:com.redhat.rhsa:tst:20060276018"/>
       <criterion comment="php-xmlrpc is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276019"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-odbc is earlier than 0:4.3.9-3.12" test_ref="oval:com.redhat.rhsa:tst:20060276020"/>
       <criterion comment="php-odbc is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-mysql is earlier than 0:4.3.9-3.12" test_ref="oval:com.redhat.rhsa:tst:20060276021"/>
       <criterion comment="php-mysql is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276014"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php is earlier than 0:4.3.9-3.12" test_ref="oval:com.redhat.rhsa:tst:20060276022"/>
       <criterion comment="php is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-snmp is earlier than 0:4.3.9-3.12" test_ref="oval:com.redhat.rhsa:tst:20060276023"/>
       <criterion comment="php-snmp is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276024"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-ncurses is earlier than 0:4.3.9-3.12" test_ref="oval:com.redhat.rhsa:tst:20060276025"/>
       <criterion comment="php-ncurses is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276026"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-pear is earlier than 0:4.3.9-3.12" test_ref="oval:com.redhat.rhsa:tst:20060276027"/>
       <criterion comment="php-pear is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276028"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-mbstring is earlier than 0:4.3.9-3.12" test_ref="oval:com.redhat.rhsa:tst:20060276029"/>
       <criterion comment="php-mbstring is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276030"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-domxml is earlier than 0:4.3.9-3.12" test_ref="oval:com.redhat.rhsa:tst:20060276031"/>
       <criterion comment="php-domxml is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276032"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-ldap is earlier than 0:4.3.9-3.12" test_ref="oval:com.redhat.rhsa:tst:20060276033"/>
       <criterion comment="php-ldap is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-gd is earlier than 0:4.3.9-3.12" test_ref="oval:com.redhat.rhsa:tst:20060276034"/>
       <criterion comment="php-gd is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276035"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-devel is earlier than 0:4.3.9-3.12" test_ref="oval:com.redhat.rhsa:tst:20060276036"/>
       <criterion comment="php-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276008"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20060283" version="636">
   <metadata>
    <title>RHSA-2006:0283: squirrelmail security update (Moderate)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
    </affected>
    <reference ref_id="RHSA-2006:0283" ref_url="https://access.redhat.com/errata/RHSA-2006:0283" source="RHSA"/>
    <reference ref_id="CVE-2006-0188" ref_url="https://access.redhat.com/security/cve/CVE-2006-0188" source="CVE"/>
    <reference ref_id="CVE-2006-0195" ref_url="https://access.redhat.com/security/cve/CVE-2006-0195" source="CVE"/>
    <reference ref_id="CVE-2006-0377" ref_url="https://access.redhat.com/security/cve/CVE-2006-0377" source="CVE"/>
    <description>SquirrelMail is a standards-based webmail package written in PHP4.

A bug was found in the way SquirrelMail presents the right frame to the
user. If a user can be tricked into opening a carefully crafted URL, it is
possible to present the user with arbitrary HTML data. (CVE-2006-0188)

A bug was found in the way SquirrelMail filters incoming HTML email. It is
possible to cause a victim's web browser to request remote content by
opening a HTML email while running a web browser that processes certain
types of invalid style sheets. Only Internet Explorer is known to process
such malformed style sheets. (CVE-2006-0195)

A bug was found in the way SquirrelMail processes a request to select an
IMAP mailbox. If a user can be tricked into opening a carefully crafted
URL, it is possible to execute arbitrary IMAP commands as the user viewing
their mail with SquirrelMail. (CVE-2006-0377)

Users of SquirrelMail are advised to upgrade to this updated package, which
contains SquirrelMail version 1.4.6 and is not vulnerable to these issues.</description>
    <advisory from="secalert@redhat.com">
     <severity>Moderate</severity>
     <rights>Copyright 2006 Red Hat, Inc.</rights>
     <issued date="2006-05-03"/>
     <updated date="2006-05-03"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-0188" public="20060201">CVE-2006-0188</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-0195" public="20060210">CVE-2006-0195</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-0377" public="20060215">CVE-2006-0377</cve>
     <bugzilla href="https://bugzilla.redhat.com/182579" id="182579">CVE-2006-0188 Possible XSS through right_frame parameter in webmail.php</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/182581" id="182581">CVE-2006-0195 Possible XSS in MagicHTML (IE only)</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/182584" id="182584">CVE-2006-0377 IMAP injection in sqimap_mailbox_select mailbox parameter</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criterion comment="squirrelmail is earlier than 0:1.4.6-5.el3" test_ref="oval:com.redhat.rhsa:tst:20060283001"/>
     <criterion comment="squirrelmail is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060283002"/>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criterion comment="squirrelmail is earlier than 0:1.4.6-5.el4" test_ref="oval:com.redhat.rhsa:tst:20060283004"/>
     <criterion comment="squirrelmail is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060283002"/>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20060298" version="634">
   <metadata>
    <title>RHSA-2006:0298: openssh security update (Low)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
    </affected>
    <reference ref_id="RHSA-2006:0298" ref_url="https://access.redhat.com/errata/RHSA-2006:0298" source="RHSA"/>
    <reference ref_id="CVE-2003-0386" ref_url="https://access.redhat.com/security/cve/CVE-2003-0386" source="CVE"/>
    <reference ref_id="CVE-2006-0225" ref_url="https://access.redhat.com/security/cve/CVE-2006-0225" source="CVE"/>
    <description>OpenSSH is OpenBSD's SSH (Secure SHell) protocol implementation. This
package includes the core files necessary for both the OpenSSH client and
server.

An arbitrary command execution flaw was discovered in the way scp copies
files locally. It is possible for a local attacker to create a file with a
carefully crafted name that could execute arbitrary commands as the user
running scp to copy files locally. (CVE-2006-0225)

The SSH daemon, when restricting host access by numeric IP addresses and
with VerifyReverseMapping disabled, allows remote attackers to bypass
&quot;from=&quot; and &quot;user@host&quot; address restrictions by connecting to a host from a
system whose reverse DNS hostname contains the numeric IP address.
(CVE-2003-0386)

The following issues have also been fixed in this update:

* If the sshd service was stopped using the sshd init script while the
  main sshd daemon was not running, the init script would kill other sshd
  processes, such as the running sessions.  For example, this could happen
  when the 'service sshd stop' command was issued twice.

* When privilege separation was enabled, the last login message was printed
  only for the root user.

* The sshd daemon was sending messages to the system log from a signal
  handler when debug logging was enabled. This could cause a deadlock of
  the user's connection.

All users of openssh should upgrade to these updated packages, which
resolve these issues.</description>
    <advisory from="secalert@redhat.com">
     <severity>Low</severity>
     <rights>Copyright 2008 Red Hat, Inc.</rights>
     <issued date="2006-07-20"/>
     <updated date="2008-03-20"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2003-0386" public="20030605">CVE-2003-0386</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-0225" public="20050928">CVE-2006-0225</cve>
     <bugzilla href="https://bugzilla.redhat.com/164661" id="164661">CVE-2003-0386 host based access bypass</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/167886" id="167886">init script kills all running sshd's if listening server is stopped</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/170463" id="170463">CVE-2006-0225 local to local copy uses shell expansion twice</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/172564" id="172564">I can't see &quot;Last login&quot; message after logged via ssh</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="AND">
    <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
    <criteria operator="OR">
     <criteria operator="AND">
      <criterion comment="openssh-askpass-gnome is earlier than 0:3.6.1p2-33.30.9" test_ref="oval:com.redhat.rhsa:tst:20060298001"/>
      <criterion comment="openssh-askpass-gnome is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060298002"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="openssh-server is earlier than 0:3.6.1p2-33.30.9" test_ref="oval:com.redhat.rhsa:tst:20060298003"/>
      <criterion comment="openssh-server is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060298004"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="openssh is earlier than 0:3.6.1p2-33.30.9" test_ref="oval:com.redhat.rhsa:tst:20060298005"/>
      <criterion comment="openssh is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060298006"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="openssh-clients is earlier than 0:3.6.1p2-33.30.9" test_ref="oval:com.redhat.rhsa:tst:20060298007"/>
      <criterion comment="openssh-clients is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060298008"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="openssh-askpass is earlier than 0:3.6.1p2-33.30.9" test_ref="oval:com.redhat.rhsa:tst:20060298009"/>
      <criterion comment="openssh-askpass is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060298010"/>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20060329" version="643">
   <metadata>
    <title>RHSA-2006:0329: mozilla security update (Critical)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
    </affected>
    <reference ref_id="RHSA-2006:0329" ref_url="https://access.redhat.com/errata/RHSA-2006:0329" source="RHSA"/>
    <reference ref_id="CVE-2006-0748" ref_url="https://access.redhat.com/security/cve/CVE-2006-0748" source="CVE"/>
    <reference ref_id="CVE-2006-0749" ref_url="https://access.redhat.com/security/cve/CVE-2006-0749" source="CVE"/>
    <reference ref_id="CVE-2006-0884" ref_url="https://access.redhat.com/security/cve/CVE-2006-0884" source="CVE"/>
    <reference ref_id="CVE-2006-1724" ref_url="https://access.redhat.com/security/cve/CVE-2006-1724" source="CVE"/>
    <reference ref_id="CVE-2006-1727" ref_url="https://access.redhat.com/security/cve/CVE-2006-1727" source="CVE"/>
    <reference ref_id="CVE-2006-1728" ref_url="https://access.redhat.com/security/cve/CVE-2006-1728" source="CVE"/>
    <reference ref_id="CVE-2006-1729" ref_url="https://access.redhat.com/security/cve/CVE-2006-1729" source="CVE"/>
    <reference ref_id="CVE-2006-1730" ref_url="https://access.redhat.com/security/cve/CVE-2006-1730" source="CVE"/>
    <reference ref_id="CVE-2006-1731" ref_url="https://access.redhat.com/security/cve/CVE-2006-1731" source="CVE"/>
    <reference ref_id="CVE-2006-1732" ref_url="https://access.redhat.com/security/cve/CVE-2006-1732" source="CVE"/>
    <reference ref_id="CVE-2006-1733" ref_url="https://access.redhat.com/security/cve/CVE-2006-1733" source="CVE"/>
    <reference ref_id="CVE-2006-1734" ref_url="https://access.redhat.com/security/cve/CVE-2006-1734" source="CVE"/>
    <reference ref_id="CVE-2006-1735" ref_url="https://access.redhat.com/security/cve/CVE-2006-1735" source="CVE"/>
    <reference ref_id="CVE-2006-1737" ref_url="https://access.redhat.com/security/cve/CVE-2006-1737" source="CVE"/>
    <reference ref_id="CVE-2006-1738" ref_url="https://access.redhat.com/security/cve/CVE-2006-1738" source="CVE"/>
    <reference ref_id="CVE-2006-1739" ref_url="https://access.redhat.com/security/cve/CVE-2006-1739" source="CVE"/>
    <reference ref_id="CVE-2006-1740" ref_url="https://access.redhat.com/security/cve/CVE-2006-1740" source="CVE"/>
    <reference ref_id="CVE-2006-1741" ref_url="https://access.redhat.com/security/cve/CVE-2006-1741" source="CVE"/>
    <reference ref_id="CVE-2006-1742" ref_url="https://access.redhat.com/security/cve/CVE-2006-1742" source="CVE"/>
    <reference ref_id="CVE-2006-1790" ref_url="https://access.redhat.com/security/cve/CVE-2006-1790" source="CVE"/>
    <description>Mozilla is an open source Web browser, advanced email and newsgroup client,
IRC chat client, and HTML editor.

Several bugs were found in the way Mozilla processes malformed javascript.
A malicious web page could modify the content of a different open web
page, possibly stealing sensitive information or conducting a cross-site
scripting attack. (CVE-2006-1731, CVE-2006-1732, CVE-2006-1741)

Several bugs were found in the way Mozilla processes certain javascript
actions. A malicious web page could execute arbitrary javascript
instructions with the permissions of &quot;chrome&quot;, allowing the page to steal
sensitive information or install browser malware. (CVE-2006-1727,
CVE-2006-1728, CVE-2006-1733, CVE-2006-1734, CVE-2006-1735, CVE-2006-1742)

Several bugs were found in the way Mozilla processes malformed web pages. 
A carefully crafted malicious web page could cause the execution of
arbitrary code as the user running Mozilla. (CVE-2006-0748, CVE-2006-0749,
CVE-2006-1730, CVE-2006-1737, CVE-2006-1738, CVE-2006-1739, CVE-2006-1790)

A bug was found in the way Mozilla displays the secure site icon. If a
browser is configured to display the non-default secure site modal warning
dialog, it may be possible to trick a user into believing they are viewing
a secure site. (CVE-2006-1740)

A bug was found in the way Mozilla allows javascript mutation events on
&quot;input&quot; form elements. A malicious web page could be created in such a way
that when a user submits a form, an arbitrary file could be uploaded to the
attacker. (CVE-2006-1729)

A bug was found in the way Mozilla executes in-line mail forwarding. If a
user can be tricked into forwarding a maliciously crafted mail message as
in-line content, it is possible for the message to execute javascript with
the permissions of &quot;chrome&quot;. (CVE-2006-0884)

Users of Mozilla are advised to upgrade to these updated packages
containing Mozilla version 1.7.13 which corrects these issues.</description>
    <advisory from="secalert@redhat.com">
     <severity>Critical</severity>
     <rights>Copyright 2006 Red Hat, Inc.</rights>
     <issued date="2006-04-18"/>
     <updated date="2006-04-25"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-0748" public="20060421">CVE-2006-0748</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-0749" public="20060414">CVE-2006-0749</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-0884" impact="moderate" public="20060421">CVE-2006-0884</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-1724" public="20060414">CVE-2006-1724</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-1727" impact="moderate" public="20060414">CVE-2006-1727</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-1728" public="20060414">CVE-2006-1728</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-1729" impact="moderate" public="20060414">CVE-2006-1729</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-1730" public="20060414">CVE-2006-1730</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-1731" impact="moderate" public="20060414">CVE-2006-1731</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-1732" impact="moderate" public="20060414">CVE-2006-1732</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-1733" public="20060414">CVE-2006-1733</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-1734" public="20060414">CVE-2006-1734</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-1735" public="20060414">CVE-2006-1735</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-1737" public="20060414">CVE-2006-1737</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-1738" public="20060414">CVE-2006-1738</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-1739" public="20060414">CVE-2006-1739</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-1740" impact="low" public="20060414">CVE-2006-1740</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-1741" impact="moderate" public="20060414">CVE-2006-1741</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-1742" public="20060414">CVE-2006-1742</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-1790" public="20060414">CVE-2006-1790</cve>
     <bugzilla href="https://bugzilla.redhat.com/188776" id="188776">CVE-2006-1741 Cross-site JavaScript injection using event handlers</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/188778" id="188778">CVE-2006-1742 JavaScript garbage-collection hazard audit</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/188780" id="188780">CVE-2006-1737 Crashes with evidence of memory corruption (CVE-2006-1738, CVE-2006-1739, CVE-2006-1790)</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/188782" id="188782">CVE-2006-1740 Secure-site spoof (requires security warning dialog)</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/188784" id="188784">CVE-2006-1735 Privilege escalation via XBL.method.eval</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/188787" id="188787">CVE-2006-1734 Privilege escalation using a JavaScript function's cloned parent</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/188789" id="188789">CVE-2006-1733 Accessing XBL compilation scope via valueOf.call()</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/188791" id="188791">CVE-2006-1732 cross-site scripting through window.controllers</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/188793" id="188793">CVE-2006-0749 Mozilla Firefox Tag Order Vulnerability</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/188795" id="188795">CVE-2006-1731 Cross-site scripting using .valueOf.call()</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/188799" id="188799">CVE-2006-0884 JavaScript execution in mail when forwarding in-line</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/188801" id="188801">CVE-2006-1730 CSS Letter-Spacing Heap Overflow Vulnerability</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/188803" id="188803">CVE-2006-1729 File stealing by changing input type</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/188805" id="188805">CVE-2006-1728 Privilege escalation using crypto.generateCRMFRequest</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/188807" id="188807">CVE-2006-1727 Privilege escalation through Print Preview</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/188810" id="188810">CVE-2006-0748 Table Rebuilding Code Execution Vulnerability</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="AND">
    <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
    <criteria operator="OR">
     <criteria operator="AND">
      <criterion comment="devhelp-devel is earlier than 0:0.9.2-2.4.8" test_ref="oval:com.redhat.rhsa:tst:20060329001"/>
      <criterion comment="devhelp-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060329002"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="devhelp is earlier than 0:0.9.2-2.4.8" test_ref="oval:com.redhat.rhsa:tst:20060329003"/>
      <criterion comment="devhelp is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060329004"/>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20060368" version="637">
   <metadata>
    <title>RHSA-2006:0368: elfutils security update (Low)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
    </affected>
    <reference ref_id="RHSA-2006:0368" ref_url="https://access.redhat.com/errata/RHSA-2006:0368" source="RHSA"/>
    <reference ref_id="CVE-2005-1704" ref_url="https://access.redhat.com/security/cve/CVE-2005-1704" source="CVE"/>
    <description>The elfutils packages contain a number of utility programs and libraries
related to the creation and maintenance of executable code.

The elfutils packages that originally shipped with Red Hat Enterprise Linux
3 were GPL-licensed versions which lacked some functionality. Previous
updates provided fully functional versions of elfutils only under the OSL
license. This update provides a fully functional, GPL-licensed version of
elfutils. 

In the OSL-licensed elfutils versions provided in previous updates, some
tools could sometimes crash when given corrupted input files. (CVE-2005-1704)

Also, when the eu-strip tool was used to create separate debuginfo files
from relocatable objects such as kernel modules (.ko), the resulting
debuginfo files (.ko.debug) were sometimes corrupted.  Both of these
problems are fixed in the new version.

Users of elfutils should upgrade to these updated packages, which resolve
these issues.</description>
    <advisory from="secalert@redhat.com">
     <severity>Low</severity>
     <rights>Copyright 2008 Red Hat, Inc.</rights>
     <issued date="2006-07-20"/>
     <updated date="2008-03-20"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2005-1704" public="20050525">CVE-2005-1704</cve>
     <bugzilla href="https://bugzilla.redhat.com/159908" id="159908">CVE-2005-1704 Integer overflow in libelf</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/187507" id="187507">RHEL3 U8: Elfutils license upgrade</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/189114" id="189114">eu-strip mangles separate debuginfo with relocation sections</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="AND">
    <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
    <criteria operator="OR">
     <criteria operator="AND">
      <criterion comment="elfutils-libelf-devel is earlier than 0:0.94.1-2" test_ref="oval:com.redhat.rhsa:tst:20060368001"/>
      <criterion comment="elfutils-libelf-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060368002"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="elfutils is earlier than 0:0.94.1-2" test_ref="oval:com.redhat.rhsa:tst:20060368003"/>
      <criterion comment="elfutils is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060368004"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="elfutils-libelf is earlier than 0:0.94.1-2" test_ref="oval:com.redhat.rhsa:tst:20060368005"/>
      <criterion comment="elfutils-libelf is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060368006"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="elfutils-devel is earlier than 0:0.94.1-2" test_ref="oval:com.redhat.rhsa:tst:20060368007"/>
      <criterion comment="elfutils-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060368008"/>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20060420" version="638">
   <metadata>
    <title>RHSA-2006:0420: ethereal security update (Moderate)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
    </affected>
    <reference ref_id="RHSA-2006:0420" ref_url="https://access.redhat.com/errata/RHSA-2006:0420" source="RHSA"/>
    <reference ref_id="CVE-2006-1932" ref_url="https://access.redhat.com/security/cve/CVE-2006-1932" source="CVE"/>
    <reference ref_id="CVE-2006-1933" ref_url="https://access.redhat.com/security/cve/CVE-2006-1933" source="CVE"/>
    <reference ref_id="CVE-2006-1934" ref_url="https://access.redhat.com/security/cve/CVE-2006-1934" source="CVE"/>
    <reference ref_id="CVE-2006-1935" ref_url="https://access.redhat.com/security/cve/CVE-2006-1935" source="CVE"/>
    <reference ref_id="CVE-2006-1936" ref_url="https://access.redhat.com/security/cve/CVE-2006-1936" source="CVE"/>
    <reference ref_id="CVE-2006-1937" ref_url="https://access.redhat.com/security/cve/CVE-2006-1937" source="CVE"/>
    <reference ref_id="CVE-2006-1938" ref_url="https://access.redhat.com/security/cve/CVE-2006-1938" source="CVE"/>
    <reference ref_id="CVE-2006-1939" ref_url="https://access.redhat.com/security/cve/CVE-2006-1939" source="CVE"/>
    <reference ref_id="CVE-2006-1940" ref_url="https://access.redhat.com/security/cve/CVE-2006-1940" source="CVE"/>
    <description>Ethereal is a program for monitoring network traffic.

Several denial of service bugs were found in Ethereal's protocol
dissectors. Ethereal could crash or stop responding if it reads a malformed
packet off the network.  (CVE-2006-1932, CVE-2006-1933, CVE-2006-1937,
CVE-2006-1938, CVE-2006-1939, CVE-2006-1940)

Several buffer overflow bugs were found in Ethereal's COPS, telnet, and
ALCAP dissectors as well as Network Instruments file code and
NetXray/Windows Sniffer file code.  Ethereal could crash or execute
arbitrary code if it reads a malformed packet off the network.
(CVE-2006-1934, CVE-2006-1935, CVE-2006-1936)

Users of ethereal should upgrade to these updated packages containing
version 0.99.0, which is not vulnerable to these issues.</description>
    <advisory from="secalert@redhat.com">
     <severity>Moderate</severity>
     <rights>Copyright 2006 Red Hat, Inc.</rights>
     <issued date="2006-06-16"/>
     <updated date="2006-05-03"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-1932" impact="low" public="20060424">CVE-2006-1932</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-1933" impact="low" public="20060424">CVE-2006-1933</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-1934" public="20060424">CVE-2006-1934</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-1935" public="20060424">CVE-2006-1935</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-1936" public="20060424">CVE-2006-1936</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-1937" impact="low" public="20060424">CVE-2006-1937</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-1938" impact="low" public="20060424">CVE-2006-1938</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-1939" impact="low" public="20060424">CVE-2006-1939</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-1940" impact="low" public="20060424">CVE-2006-1940</cve>
     <bugzilla href="https://bugzilla.redhat.com/189906" id="189906">CVE-2006-1932 Multiple ethereal issues (CVE-2006-1933, CVE-2006-1934, CVE-2006-1935, CVE-2006-1936, CVE-2006-1937, CVE-2006-1938, CVE-2006-1939, CVE-2006-1940)</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="AND">
    <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
    <criteria operator="OR">
     <criteria operator="AND">
      <criterion comment="ethereal is earlier than 0:0.99.0-EL3.2" test_ref="oval:com.redhat.rhsa:tst:20060420001"/>
      <criterion comment="ethereal is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060156002"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="ethereal-gnome is earlier than 0:0.99.0-EL3.2" test_ref="oval:com.redhat.rhsa:tst:20060420003"/>
      <criterion comment="ethereal-gnome is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060156004"/>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20060425" version="635">
   <metadata>
    <title>RHSA-2006:0425: libtiff security update (Important)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
    </affected>
    <reference ref_id="RHSA-2006:0425" ref_url="https://access.redhat.com/errata/RHSA-2006:0425" source="RHSA"/>
    <reference ref_id="CVE-2006-2024" ref_url="https://access.redhat.com/security/cve/CVE-2006-2024" source="CVE"/>
    <reference ref_id="CVE-2006-2025" ref_url="https://access.redhat.com/security/cve/CVE-2006-2025" source="CVE"/>
    <reference ref_id="CVE-2006-2026" ref_url="https://access.redhat.com/security/cve/CVE-2006-2026" source="CVE"/>
    <reference ref_id="CVE-2006-2120" ref_url="https://access.redhat.com/security/cve/CVE-2006-2120" source="CVE"/>
    <description>The libtiff package contains a library of functions for manipulating TIFF
(Tagged Image File Format) image format files.

An integer overflow flaw was discovered in libtiff. An attacker could
create a carefully crafted TIFF file in such a way that it could cause an
application linked with libtiff to crash or possibly execute arbitrary
code. (CVE-2006-2025)

A double free flaw was discovered in libtiff. An attacker could create a
carefully crafted TIFF file in such a way that it could cause an
application linked with libtiff to crash or possibly execute arbitrary
code. (CVE-2006-2026)

Several denial of service flaws were discovered in libtiff. An attacker
could create a carefully crafted TIFF file in such a way that it could
cause an application linked with libtiff to crash. (CVE-2006-2024,
CVE-2006-2120)

All users are advised to upgrade to these updated packages, which contain
backported fixes for these issues.</description>
    <advisory from="secalert@redhat.com">
     <severity>Important</severity>
     <rights>Copyright 2006 Red Hat, Inc.</rights>
     <issued date="2006-05-09"/>
     <updated date="2006-05-09"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-2024" public="20060303">CVE-2006-2024</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-2025" public="20060303">CVE-2006-2025</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-2026" public="20060303">CVE-2006-2026</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-2120" impact="moderate" public="20060208">CVE-2006-2120</cve>
     <bugzilla href="https://bugzilla.redhat.com/189933" id="189933">CVE-2006-2024 multiple libtiff issues (CVE-2006-2025, CVE-2006-2026)</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/189974" id="189974">CVE-2006-2120 libtiff DoS</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="libtiff-devel is earlier than 0:3.5.7-25.el3.1" test_ref="oval:com.redhat.rhsa:tst:20060425001"/>
       <criterion comment="libtiff-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060425002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="libtiff is earlier than 0:3.5.7-25.el3.1" test_ref="oval:com.redhat.rhsa:tst:20060425003"/>
       <criterion comment="libtiff is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060425004"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="libtiff is earlier than 0:3.6.1-10" test_ref="oval:com.redhat.rhsa:tst:20060425006"/>
       <criterion comment="libtiff is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060425004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="libtiff-devel is earlier than 0:3.6.1-10" test_ref="oval:com.redhat.rhsa:tst:20060425007"/>
       <criterion comment="libtiff-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060425002"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20060437" version="652">
   <metadata>
    <title>RHSA-2006:0437: Updated kernel packages for Red Hat Enterprise Linux 3 Update 8 (Important)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
    </affected>
    <reference ref_id="RHSA-2006:0437" ref_url="https://access.redhat.com/errata/RHSA-2006:0437" source="RHSA"/>
    <reference ref_id="CVE-2005-3055" ref_url="https://access.redhat.com/security/cve/CVE-2005-3055" source="CVE"/>
    <reference ref_id="CVE-2005-3107" ref_url="https://access.redhat.com/security/cve/CVE-2005-3107" source="CVE"/>
    <reference ref_id="CVE-2006-0741" ref_url="https://access.redhat.com/security/cve/CVE-2006-0741" source="CVE"/>
    <reference ref_id="CVE-2006-0742" ref_url="https://access.redhat.com/security/cve/CVE-2006-0742" source="CVE"/>
    <reference ref_id="CVE-2006-0744" ref_url="https://access.redhat.com/security/cve/CVE-2006-0744" source="CVE"/>
    <reference ref_id="CVE-2006-1056" ref_url="https://access.redhat.com/security/cve/CVE-2006-1056" source="CVE"/>
    <reference ref_id="CVE-2006-1242" ref_url="https://access.redhat.com/security/cve/CVE-2006-1242" source="CVE"/>
    <reference ref_id="CVE-2006-1343" ref_url="https://access.redhat.com/security/cve/CVE-2006-1343" source="CVE"/>
    <reference ref_id="CVE-2006-2444" ref_url="https://access.redhat.com/security/cve/CVE-2006-2444" source="CVE"/>
    <description>The Linux kernel handles the basic functions of the operating system.

This is the eighth regular kernel update to Red Hat Enterprise Linux 3.

New features introduced by this update include:

  - addition of the adp94xx and dcdbas device drivers
  - diskdump support on megaraid_sas, qlogic, and swap partitions
  - support for new hardware via driver and SCSI white-list updates

There were many bug fixes in various parts of the kernel.  The ongoing
effort to resolve these problems has resulted in a marked improvement in
the reliability and scalability of Red Hat Enterprise Linux 3.

There were numerous driver updates and security fixes (elaborated below).
Other key areas affected by fixes in this update include the networking
subsystem, the NFS and autofs4 file systems, the SCSI and USB subsystems,
and architecture-specific handling affecting AMD Opteron and Intel EM64T
processors.

The following device drivers have been added or upgraded to new versions:

  adp94xx -------- 1.0.8 (new)
  bnx2 ----------- 1.4.38
  cciss ---------- 2.4.60.RH1
  dcdbas --------- 5.6.0-1 (new)
  e1000 ---------- 7.0.33-k2
  emulex --------- 7.3.6
  forcedeth ------ 0.30
  ipmi ----------- 35.13
  qlogic --------- 7.07.04b6
  tg3 ------------ 3.52RH

The following security bugs were fixed in this update:

  - a flaw in the USB devio handling of device removal that allowed a
    local user to cause a denial of service (crash)  (CVE-2005-3055,
    moderate)

  - a flaw in the exec() handling of multi-threaded tasks using ptrace()
    that allowed a local user to cause a denial of service (hang of a
    user process)  (CVE-2005-3107, low)

  - a difference in &quot;sysretq&quot; operation of EM64T (as opposed to Opteron)
    processors that allowed a local user to cause a denial of service
    (crash) upon return from certain system calls  (CVE-2006-0741 and
    CVE-2006-0744, important)

  - a flaw in unaligned accesses handling on Intel Itanium processors
    that allowed a local user to cause a denial of service (crash)
    (CVE-2006-0742, important)

  - an info leak on AMD-based x86 and x86_64 systems that allowed a local
    user to retrieve the floating point exception state of a process
    run by a different user  (CVE-2006-1056, important)

  - a flaw in IPv4 packet output handling that allowed a remote user to
    bypass the zero IP ID countermeasure on systems with a disabled
    firewall  (CVE-2006-1242, low)

  - a minor info leak in socket option handling in the network code
    (CVE-2006-1343, low)

  - a flaw in IPv4 netfilter handling for the unlikely use of SNMP NAT
    processing that allowed a remote user to cause a denial of service
    (crash) or potential memory corruption  (CVE-2006-2444, moderate)

Note: The kernel-unsupported package contains various drivers and modules
that are unsupported and therefore might contain security problems that
have not been addressed.

All Red Hat Enterprise Linux 3 users are advised to upgrade their
kernels to the packages associated with their machine architectures
and configurations as listed in this erratum.</description>
    <advisory from="secalert@redhat.com">
     <severity>Important</severity>
     <rights>Copyright 2008 Red Hat, Inc.</rights>
     <issued date="2006-07-20"/>
     <updated date="2008-03-20"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2005-3055" impact="moderate" public="20050925">CVE-2005-3055</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2005-3107" impact="low" public="20050111">CVE-2005-3107</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-0741" public="20060226">CVE-2006-0741</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-0742" public="20060228">CVE-2006-0742</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-0744" public="20060309">CVE-2006-0744</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-1056" public="20060419">CVE-2006-1056</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-1242" impact="low" public="20060314">CVE-2006-1242</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-1343" impact="low" public="20060304">CVE-2006-1343</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-2444" impact="moderate" public="20060520">CVE-2006-2444</cve>
     <bugzilla href="https://bugzilla.redhat.com/97000" id="97000">i8253 count too high! resetting...</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/102504" id="102504">cannot reboot on Dell 6450 with RHEL 3</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/102973" id="102973">i8253 count too high</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/103024" id="103024">&quot;i8253 count too high! resetting..&quot; ?</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/119457" id="119457">panics in generic_aio_complete_rw and unmap_kvec after __iodesc_free calls generic_aio_complete_read()</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/127689" id="127689">Reboot fails on Dell PowerEdge 6450</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/129477" id="129477">kernel panic in umount</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/131881" id="131881">clock_gettime() triggers audit kill from i386 binary on x86_64</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/132105" id="132105">autofs (automount) failover does not work</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/132994" id="132994">kernel oops when unplugging usb serial adapter using pl2303 and mct_u232</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/134555" id="134555">System hangs when rebooting Dell PE6450</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/134736" id="134736">kernel panic in md driver (md lacks proper locking of device lists)</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/142718" id="142718">[PATCH] [RHEL3] dpt_i2o modules in RHEL gets oops</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/146789" id="146789">Implement a better solution to the dma memory allocation done in the kernel</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/146954" id="146954">megaraid2 driver fails to recognize all LSI RAID adapters when there are more than 4 with &gt;=4GB</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/149732" id="149732">Hang with radeon driver when DRM DRI actve</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/152630" id="152630">timer interrupt received twice on ATI chipset motherboard, clock runs at double speed</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/153954" id="153954">kernel panic when removing active USB serial converter used as serial console</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/154680" id="154680">Kernel panic on 8GB machines under stress running e1000 diagnostics</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/157667" id="157667">I/O Errors when swtiching Blade USB Media Tray</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/159862" id="159862">kernel oops with usbserial (minicom key pressed)</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/160600" id="160600">Accessing automounted directories can cause a process to hang forever</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/165246" id="165246">EHCI Host driver violates USB2.0 Specification leading to device failures.</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/167636" id="167636">Unable to unmount a local file system exported by NFS</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/167672" id="167672">GART error during bootup</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/167839" id="167839">kernel crashes with an Ooops</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/169261" id="169261">CVE-2005-3055 async usb devio oops</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/170261" id="170261">CVE-2005-3107 zap_threads DoS</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/171277" id="171277">MCE arg parsing broken on x86-64</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/174818" id="174818">[PATCH] bonding: don't drop non-VLAN traffic</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/175143" id="175143">sys_io_setup() can leak an mm reference on failure</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/175759" id="175759">Reboot of Dell 6450 fails</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/177451" id="177451">Kernel panic :  Unable to handle kernel paging request at virtual address    6668c79a</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/177571" id="177571">[RHEL3] [RFE] forcedeth driver on xw9300 has minimal support for ethtool and mii-tool</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/178119" id="178119">[RHEL3] dump_stack() isn't implemented on x86_64</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/178131" id="178131">syslog-only netdump still tries to dump memory</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/178885" id="178885">bonding mode=6 + dhcp doesn't work correctly</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/179657" id="179657">Intermittently unable to mount NFS filesystem using autofs --ghost</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/180968" id="180968">Data corruption in ext3 FS when running hazard (corrupt inodes)</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/181815" id="181815">Phantom escalating load due to flawed rq-&gt;nr_uninterruptible increment</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/182961" id="182961">IBM x336, x260, and x460 requires acpi=noirq bootup option.</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/182996" id="182996">ST Tape Driver Bug!!</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/183881" id="183881">kernel/libc type mismatch on siginfo_t-&gt;si_band - breaks FAM on 64bit arches</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/185183" id="185183">Kernel BUG at pci_dma:43 encountered</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/185735" id="185735">BNX2 Patch in 2.4.21-40.EL kills &quot;Network Device Support&quot; config menu</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/186058" id="186058">CVE-2006-1242 Linux zero IP ID vulnerability?</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/186244" id="186244">CVE-2006-1343 Small information leak in SO_ORIGINAL_DST</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/186307" id="186307">RHEL3U7 fails installation using RSA(2).</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/186455" id="186455">Submission of a patch for non-sequential LUN mapping</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/186901" id="186901">make menuconfig crashes</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/187548" id="187548">IPMI startup race condition</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/187911" id="187911">CVE-2006-1056 FPU Information leak on i386/x86-64 on AMD CPUs</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/192633" id="192633">CVE-2006-2444 SNMP NAT netfilter memory corruption</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/196938" id="196938">[Beta RHEL3 U8 Regression] Processes hung while allocating stack using gdb</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="AND">
    <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
    <criteria operator="OR">
     <criteria operator="AND">
      <criterion comment="kernel-source is earlier than 0:2.4.21-47.EL" test_ref="oval:com.redhat.rhsa:tst:20060437001"/>
      <criterion comment="kernel-source is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060140012"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="kernel is earlier than 0:2.4.21-47.EL" test_ref="oval:com.redhat.rhsa:tst:20060437003"/>
      <criterion comment="kernel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060140010"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="kernel-doc is earlier than 0:2.4.21-47.EL" test_ref="oval:com.redhat.rhsa:tst:20060437005"/>
      <criterion comment="kernel-doc is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060140006"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="kernel-unsupported is earlier than 0:2.4.21-47.EL" test_ref="oval:com.redhat.rhsa:tst:20060437007"/>
      <criterion comment="kernel-unsupported is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060140002"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="kernel-smp is earlier than 0:2.4.21-47.EL" test_ref="oval:com.redhat.rhsa:tst:20060437009"/>
      <criterion comment="kernel-smp is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060140008"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-47.EL" test_ref="oval:com.redhat.rhsa:tst:20060437011"/>
      <criterion comment="kernel-smp-unsupported is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060140004"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-47.EL" test_ref="oval:com.redhat.rhsa:tst:20060437013"/>
      <criterion comment="kernel-hugemem-unsupported is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060140014"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="kernel-BOOT is earlier than 0:2.4.21-47.EL" test_ref="oval:com.redhat.rhsa:tst:20060437015"/>
      <criterion comment="kernel-BOOT is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060140016"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="kernel-hugemem is earlier than 0:2.4.21-47.EL" test_ref="oval:com.redhat.rhsa:tst:20060437017"/>
      <criterion comment="kernel-hugemem is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060140018"/>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20060486" version="634">
   <metadata>
    <title>RHSA-2006:0486: mailman security update (Moderate)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
    </affected>
    <reference ref_id="RHSA-2006:0486" ref_url="https://access.redhat.com/errata/RHSA-2006:0486" source="RHSA"/>
    <reference ref_id="CVE-2006-0052" ref_url="https://access.redhat.com/security/cve/CVE-2006-0052" source="CVE"/>
    <description>Mailman is software to help manage email discussion lists.

A flaw was found in the way Mailman handles MIME multipart messages. An
attacker could send a carefully crafted MIME multipart email message to a
mailing list run by Mailman which would cause that particular mailing list
to stop working. (CVE-2006-0052)

Users of Mailman should upgrade to this updated package, which contains
backported patches to correct this issue.</description>
    <advisory from="secalert@redhat.com">
     <severity>Moderate</severity>
     <rights>Copyright 2006 Red Hat, Inc.</rights>
     <issued date="2006-06-09"/>
     <updated date="2006-06-06"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-0052" public="20050606">CVE-2006-0052</cve>
     <bugzilla href="https://bugzilla.redhat.com/187420" id="187420">CVE-2006-0052 Mailman DoS</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criterion comment="mailman is earlier than 3:2.1.5.1-25.rhel3.5" test_ref="oval:com.redhat.rhsa:tst:20060486001"/>
     <criterion comment="mailman is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060204002"/>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criterion comment="mailman is earlier than 3:2.1.5.1-34.rhel4.3" test_ref="oval:com.redhat.rhsa:tst:20060486004"/>
     <criterion comment="mailman is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060204002"/>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20060498" version="635">
   <metadata>
    <title>RHSA-2006:0498: xscreensaver security update (Moderate)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
    </affected>
    <reference ref_id="RHSA-2006:0498" ref_url="https://access.redhat.com/errata/RHSA-2006:0498" source="RHSA"/>
    <reference ref_id="CVE-2003-1294" ref_url="https://access.redhat.com/security/cve/CVE-2003-1294" source="CVE"/>
    <reference ref_id="CVE-2004-2655" ref_url="https://access.redhat.com/security/cve/CVE-2004-2655" source="CVE"/>
    <description>XScreenSaver is a collection of screensavers.

A keyboard focus flaw was found in the way XScreenSaver prompts the user to
enter their password to unlock the screen. XScreenSaver did not properly
ensure it had proper keyboard focus, which could leak a users password to
the program with keyboard focus. This behavior is not common, as only certain
applications exhibit this focus error. (CVE-2004-2655)

Several flaws were found in the way various XScreenSaver screensavers
create temporary files. It may be possible for a local attacker to create a
temporary file in way that could overwrite a different file to which the user
running XScreenSaver has write permissions. (CVE-2003-1294)

Users of XScreenSaver should upgrade to this updated package, which
contains backported patches to correct these issues.</description>
    <advisory from="secalert@redhat.com">
     <severity>Moderate</severity>
     <rights>Copyright 2008 Red Hat, Inc.</rights>
     <issued date="2006-05-23"/>
     <updated date="2008-03-20"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2003-1294" impact="low" public="20031128">CVE-2003-1294</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2004-2655" public="20040512">CVE-2004-2655</cve>
     <bugzilla href="https://bugzilla.redhat.com/182287" id="182287">CVE-2003-1294 xscreensaver temporary file flaws</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/188149" id="188149">CVE-2004-2655 xscreensaver passes password to other applications</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="AND">
    <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
    <criterion comment="xscreensaver is earlier than 1:4.10-20" test_ref="oval:com.redhat.rhsa:tst:20060498001"/>
    <criterion comment="xscreensaver is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060498002"/>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20060500" version="640">
   <metadata>
    <title>RHSA-2006:0500: freetype security update (Moderate)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
    </affected>
    <reference ref_id="RHSA-2006:0500" ref_url="https://access.redhat.com/errata/RHSA-2006:0500" source="RHSA"/>
    <reference ref_id="CVE-2006-0747" ref_url="https://access.redhat.com/security/cve/CVE-2006-0747" source="CVE"/>
    <reference ref_id="CVE-2006-1861" ref_url="https://access.redhat.com/security/cve/CVE-2006-1861" source="CVE"/>
    <reference ref_id="CVE-2006-2661" ref_url="https://access.redhat.com/security/cve/CVE-2006-2661" source="CVE"/>
    <reference ref_id="CVE-2006-3467" ref_url="https://access.redhat.com/security/cve/CVE-2006-3467" source="CVE"/>
    <description>FreeType is a free, high-quality, and portable font engine.

Chris Evans discovered several integer underflow and overflow flaws in the
FreeType font engine. If a user loads a carefully crafted font file with a
program linked against FreeType, it could cause the application to crash or
execute arbitrary code as the user. While it is uncommon for a user to
explicitly load a font file, there are several application file formats
which contain embedded fonts that are parsed by FreeType. (CVE-2006-0747,
CVE-2006-1861, CVE-2006-3467)

A NULL pointer dereference flaw was found in the FreeType font engine. An
application linked against FreeType can crash upon loading a malformed font
file. (CVE-2006-2661)

Users of FreeType should upgrade to these updated packages, which contain
backported patches to correct these issues.</description>
    <advisory from="secalert@redhat.com">
     <severity>Moderate</severity>
     <rights>Copyright 2008 Red Hat, Inc.</rights>
     <issued date="2006-07-18"/>
     <updated date="2008-03-20"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-0747" public="20060515">CVE-2006-0747</cve>
     <cve cwe="CWE-190" href="https://access.redhat.com/security/cve/CVE-2006-1861" public="20060515">CVE-2006-1861</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-2661" impact="low" public="20060515">CVE-2006-2661</cve>
     <cve cwe="CWE-190" href="https://access.redhat.com/security/cve/CVE-2006-3467" public="20060718">CVE-2006-3467</cve>
     <bugzilla href="https://bugzilla.redhat.com/183676" id="183676">CVE-2006-0747 Freetype integer underflow (CVE-2006-2661)</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/190593" id="190593">CVE-2006-1861 freetype multiple integer overflows (CVE-2006-3467)</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="freetype is earlier than 0:2.1.4-4.0.rhel3.2" test_ref="oval:com.redhat.rhsa:tst:20060500001"/>
       <criterion comment="freetype is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060500002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="freetype-devel is earlier than 0:2.1.4-4.0.rhel3.2" test_ref="oval:com.redhat.rhsa:tst:20060500003"/>
       <criterion comment="freetype-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060500004"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="freetype-devel is earlier than 0:2.1.9-1.rhel4.4" test_ref="oval:com.redhat.rhsa:tst:20060500006"/>
       <criterion comment="freetype-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060500004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="freetype-demos is earlier than 0:2.1.9-1.rhel4.4" test_ref="oval:com.redhat.rhsa:tst:20060500007"/>
       <criterion comment="freetype-demos is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060500008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="freetype-utils is earlier than 0:2.1.9-1.rhel4.4" test_ref="oval:com.redhat.rhsa:tst:20060500009"/>
       <criterion comment="freetype-utils is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060500010"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="freetype is earlier than 0:2.1.9-1.rhel4.4" test_ref="oval:com.redhat.rhsa:tst:20060500011"/>
       <criterion comment="freetype is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060500002"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20060515" version="644">
   <metadata>
    <title>RHSA-2006:0515: sendmail security update (Important)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
    </affected>
    <reference ref_id="RHSA-2006:0515" ref_url="https://access.redhat.com/errata/RHSA-2006:0515" source="RHSA"/>
    <reference ref_id="CVE-2006-1173" ref_url="https://access.redhat.com/security/cve/CVE-2006-1173" source="CVE"/>
    <description>Sendmail is a Mail Transport Agent (MTA) used to send mail between machines.

A flaw in the handling of multi-part MIME messages was discovered in
Sendmail.  A remote attacker could create a carefully crafted message that
could crash the sendmail process during delivery (CVE-2006-1173).  By
default on Red Hat Enterprise Linux, Sendmail is configured to only accept
connections from the local host. Therefore, only users who have configured
Sendmail to listen to remote hosts would be remotely vulnerable to this issue.

Users of Sendmail are advised to upgrade to these erratum packages, which
contain a backported patch from the Sendmail team to correct this issue.</description>
    <advisory from="secalert@redhat.com">
     <severity>Important</severity>
     <rights>Copyright 2008 Red Hat, Inc.</rights>
     <issued date="2006-06-14"/>
     <updated date="2008-03-20"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-1173" public="20060614:0106">CVE-2006-1173</cve>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="sendmail-devel is earlier than 0:8.12.11-4.RHEL3.6" test_ref="oval:com.redhat.rhsa:tst:20060515001"/>
       <criterion comment="sendmail-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060264004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="sendmail-doc is earlier than 0:8.12.11-4.RHEL3.6" test_ref="oval:com.redhat.rhsa:tst:20060515003"/>
       <criterion comment="sendmail-doc is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060264006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="sendmail is earlier than 0:8.12.11-4.RHEL3.6" test_ref="oval:com.redhat.rhsa:tst:20060515005"/>
       <criterion comment="sendmail is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060264008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="sendmail-cf is earlier than 0:8.12.11-4.RHEL3.6" test_ref="oval:com.redhat.rhsa:tst:20060515007"/>
       <criterion comment="sendmail-cf is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060264002"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="sendmail is earlier than 0:8.13.1-3.RHEL4.5" test_ref="oval:com.redhat.rhsa:tst:20060515010"/>
       <criterion comment="sendmail is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060264008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="sendmail-devel is earlier than 0:8.13.1-3.RHEL4.5" test_ref="oval:com.redhat.rhsa:tst:20060515011"/>
       <criterion comment="sendmail-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060264004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="sendmail-cf is earlier than 0:8.13.1-3.RHEL4.5" test_ref="oval:com.redhat.rhsa:tst:20060515012"/>
       <criterion comment="sendmail-cf is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060264002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="sendmail-doc is earlier than 0:8.13.1-3.RHEL4.5" test_ref="oval:com.redhat.rhsa:tst:20060515013"/>
       <criterion comment="sendmail-doc is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060264006"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20060525" version="635">
   <metadata>
    <title>RHSA-2006:0525: quagga security update (Moderate)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
    </affected>
    <reference ref_id="RHSA-2006:0525" ref_url="https://access.redhat.com/errata/RHSA-2006:0525" source="RHSA"/>
    <reference ref_id="CVE-2006-2223" ref_url="https://access.redhat.com/security/cve/CVE-2006-2223" source="CVE"/>
    <reference ref_id="CVE-2006-2224" ref_url="https://access.redhat.com/security/cve/CVE-2006-2224" source="CVE"/>
    <reference ref_id="CVE-2006-2276" ref_url="https://access.redhat.com/security/cve/CVE-2006-2276" source="CVE"/>
    <description>Quagga manages the TCP/IP based routing protocol. It takes a multi-server
and multi-thread approach to resolve the current complexity of the Internet.

An information disclosure flaw was found in the way Quagga interprets RIP
REQUEST packets. RIPd in Quagga will respond to RIP REQUEST packets for RIP
versions that have been disabled or that have authentication enabled,
allowing a remote attacker to acquire information about the local network.
(CVE-2006-2223)

A route injection flaw was found in the way Quagga interprets RIPv1
RESPONSE packets when RIPv2 authentication is enabled. It is possible for a
remote attacker to inject arbitrary route information into the RIPd routing
tables. This issue does not affect Quagga configurations where only RIPv2
is specified. (CVE-2006-2224)

A denial of service flaw was found in Quagga's telnet interface. If an
attacker is able to connect to the Quagga telnet interface, it is possible
to cause Quagga to consume vast quantities of CPU resources by issuing a
malformed 'sh' command. (CVE-2006-2276)

Users of Quagga should upgrade to these updated packages, which contain
backported patches that correct these issues.</description>
    <advisory from="secalert@redhat.com">
     <severity>Moderate</severity>
     <rights>Copyright 2006 Red Hat, Inc.</rights>
     <issued date="2006-06-01"/>
     <updated date="2006-06-01"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-2223" public="20060503">CVE-2006-2223</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-2224" public="20060503">CVE-2006-2224</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-2276" public="20060329">CVE-2006-2276</cve>
     <bugzilla href="https://bugzilla.redhat.com/191080" id="191080">CVE-2006-2223 Quagga RIPd information disclosure</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/191084" id="191084">CVE-2006-2224 Quagga RIPd route injection</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/191376" id="191376">CVE-2006-2276 quagga locks with command sh ip bgp</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criterion comment="quagga is earlier than 0:0.96.2-11.3E" test_ref="oval:com.redhat.rhsa:tst:20060525001"/>
     <criterion comment="quagga is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060525002"/>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="quagga is earlier than 0:0.98.3-2.4E" test_ref="oval:com.redhat.rhsa:tst:20060525004"/>
       <criterion comment="quagga is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060525002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="quagga-devel is earlier than 0:0.98.3-2.4E" test_ref="oval:com.redhat.rhsa:tst:20060525005"/>
       <criterion comment="quagga-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060525006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="quagga-contrib is earlier than 0:0.98.3-2.4E" test_ref="oval:com.redhat.rhsa:tst:20060525007"/>
       <criterion comment="quagga-contrib is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060525008"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20060526" version="638">
   <metadata>
    <title>RHSA-2006:0526: postgresql security update (Important)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
    </affected>
    <reference ref_id="RHSA-2006:0526" ref_url="https://access.redhat.com/errata/RHSA-2006:0526" source="RHSA"/>
    <reference ref_id="CVE-2006-0591" ref_url="https://access.redhat.com/security/cve/CVE-2006-0591" source="CVE"/>
    <reference ref_id="CVE-2006-2313" ref_url="https://access.redhat.com/security/cve/CVE-2006-2313" source="CVE"/>
    <reference ref_id="CVE-2006-2314" ref_url="https://access.redhat.com/security/cve/CVE-2006-2314" source="CVE"/>
    <description>PostgreSQL is an advanced Object-Relational database management system
(DBMS).

A bug was found in the way PostgreSQL's PQescapeString function escapes
strings when operating in a multibyte character encoding. It is possible
for an attacker to provide an application a carefully crafted string
containing invalidly-encoded characters, which may be improperly escaped,
allowing the attacker to inject malicious SQL. While this update fixes how
PQescapeString operates, the PostgreSQL server has also been modified to
prevent such an attack occurring through unpatched clients. 
(CVE-2006-2313, CVE-2006-2314).  More details about this issue are
available in the linked PostgreSQL technical documentation.

An integer signedness bug was found in the way PostgreSQL generated
password salts. The actual salt size is only half the size of the expected
salt, making the process of brute forcing password hashes slightly easier.
This update will not strengthen already existing passwords, but all newly
assigned passwords will have the proper salt length. (CVE-2006-0591)

Users of PostgreSQL should upgrade to these updated packages containing
PostgreSQL version 7.4.13, which corrects these issues.</description>
    <advisory from="secalert@redhat.com">
     <severity>Important</severity>
     <rights>Copyright 2006 Red Hat, Inc.</rights>
     <issued date="2006-05-23"/>
     <updated date="2006-05-23"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-0591" impact="low" public="20060207">CVE-2006-0591</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-2313" public="20050523">CVE-2006-2313</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-2314" public="20050523">CVE-2006-2314</cve>
     <bugzilla href="https://bugzilla.redhat.com/180536" id="180536">CVE-2006-0591 postgresql pgcrypt minor salt generation flaw</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/192169" id="192169">CVE-2006-2313, CVE-2006-2314: PostgreSQL remote SQL injection vulnerability</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/192171" id="192171">CVE-2006-2313, CVE-2006-2314: PostgreSQL remote SQL injection vulnerability</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="rh-postgresql-contrib is earlier than 0:7.3.15-2" test_ref="oval:com.redhat.rhsa:tst:20060526001"/>
       <criterion comment="rh-postgresql-contrib is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060526002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="rh-postgresql-test is earlier than 0:7.3.15-2" test_ref="oval:com.redhat.rhsa:tst:20060526003"/>
       <criterion comment="rh-postgresql-test is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060526004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="rh-postgresql-server is earlier than 0:7.3.15-2" test_ref="oval:com.redhat.rhsa:tst:20060526005"/>
       <criterion comment="rh-postgresql-server is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060526006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="rh-postgresql-libs is earlier than 0:7.3.15-2" test_ref="oval:com.redhat.rhsa:tst:20060526007"/>
       <criterion comment="rh-postgresql-libs is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060526008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="rh-postgresql-docs is earlier than 0:7.3.15-2" test_ref="oval:com.redhat.rhsa:tst:20060526009"/>
       <criterion comment="rh-postgresql-docs is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060526010"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="rh-postgresql-jdbc is earlier than 0:7.3.15-2" test_ref="oval:com.redhat.rhsa:tst:20060526011"/>
       <criterion comment="rh-postgresql-jdbc is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060526012"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="rh-postgresql-python is earlier than 0:7.3.15-2" test_ref="oval:com.redhat.rhsa:tst:20060526013"/>
       <criterion comment="rh-postgresql-python is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060526014"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="rh-postgresql-pl is earlier than 0:7.3.15-2" test_ref="oval:com.redhat.rhsa:tst:20060526015"/>
       <criterion comment="rh-postgresql-pl is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060526016"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="rh-postgresql-devel is earlier than 0:7.3.15-2" test_ref="oval:com.redhat.rhsa:tst:20060526017"/>
       <criterion comment="rh-postgresql-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060526018"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="rh-postgresql-tcl is earlier than 0:7.3.15-2" test_ref="oval:com.redhat.rhsa:tst:20060526019"/>
       <criterion comment="rh-postgresql-tcl is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060526020"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="rh-postgresql is earlier than 0:7.3.15-2" test_ref="oval:com.redhat.rhsa:tst:20060526021"/>
       <criterion comment="rh-postgresql is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060526022"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="postgresql-pl is earlier than 0:7.4.13-2.RHEL4.1" test_ref="oval:com.redhat.rhsa:tst:20060526024"/>
       <criterion comment="postgresql-pl is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060526025"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="postgresql-test is earlier than 0:7.4.13-2.RHEL4.1" test_ref="oval:com.redhat.rhsa:tst:20060526026"/>
       <criterion comment="postgresql-test is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060526027"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="postgresql-python is earlier than 0:7.4.13-2.RHEL4.1" test_ref="oval:com.redhat.rhsa:tst:20060526028"/>
       <criterion comment="postgresql-python is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060526029"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="postgresql-server is earlier than 0:7.4.13-2.RHEL4.1" test_ref="oval:com.redhat.rhsa:tst:20060526030"/>
       <criterion comment="postgresql-server is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060526031"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="postgresql-devel is earlier than 0:7.4.13-2.RHEL4.1" test_ref="oval:com.redhat.rhsa:tst:20060526032"/>
       <criterion comment="postgresql-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060526033"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="postgresql-contrib is earlier than 0:7.4.13-2.RHEL4.1" test_ref="oval:com.redhat.rhsa:tst:20060526034"/>
       <criterion comment="postgresql-contrib is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060526035"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="postgresql-libs is earlier than 0:7.4.13-2.RHEL4.1" test_ref="oval:com.redhat.rhsa:tst:20060526036"/>
       <criterion comment="postgresql-libs is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060526037"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="postgresql-tcl is earlier than 0:7.4.13-2.RHEL4.1" test_ref="oval:com.redhat.rhsa:tst:20060526038"/>
       <criterion comment="postgresql-tcl is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060526039"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="postgresql-jdbc is earlier than 0:7.4.13-2.RHEL4.1" test_ref="oval:com.redhat.rhsa:tst:20060526040"/>
       <criterion comment="postgresql-jdbc is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060526041"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="postgresql-docs is earlier than 0:7.4.13-2.RHEL4.1" test_ref="oval:com.redhat.rhsa:tst:20060526042"/>
       <criterion comment="postgresql-docs is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060526043"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="postgresql is earlier than 0:7.4.13-2.RHEL4.1" test_ref="oval:com.redhat.rhsa:tst:20060526044"/>
       <criterion comment="postgresql is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060526045"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20060547" version="635">
   <metadata>
    <title>RHSA-2006:0547: squirrelmail security update (Moderate)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
    </affected>
    <reference ref_id="RHSA-2006:0547" ref_url="https://access.redhat.com/errata/RHSA-2006:0547" source="RHSA"/>
    <reference ref_id="CVE-2006-2842" ref_url="https://access.redhat.com/security/cve/CVE-2006-2842" source="CVE"/>
    <description>SquirrelMail is a standards-based webmail package written in PHP4.

A local file disclosure flaw was found in the way SquirrelMail loads
plugins. In SquirrelMail 1.4.6 or earlier, if register_globals is on and
magic_quotes_gpc is off, it became possible for an unauthenticated remote
user to view the contents of arbitrary local files the web server has
read-access to. This configuration is neither default nor safe, and
configuring PHP with the register_globals set on is dangerous and not
recommended.  (CVE-2006-2842) 

Users of SquirrelMail should upgrade to this erratum package, which
contains a backported patch to correct this issue.</description>
    <advisory from="secalert@redhat.com">
     <severity>Moderate</severity>
     <rights>Copyright 2006 Red Hat, Inc.</rights>
     <issued date="2006-07-03"/>
     <updated date="2006-07-03"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-2842" public="20060601">CVE-2006-2842</cve>
     <bugzilla href="https://bugzilla.redhat.com/194283" id="194283">CVE-2006-2842 Squirrelmail file inclusion</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criterion comment="squirrelmail is earlier than 0:1.4.6-7.el3" test_ref="oval:com.redhat.rhsa:tst:20060547001"/>
     <criterion comment="squirrelmail is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060283002"/>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criterion comment="squirrelmail is earlier than 0:1.4.6-7.el4" test_ref="oval:com.redhat.rhsa:tst:20060547004"/>
     <criterion comment="squirrelmail is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060283002"/>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20060568" version="638">
   <metadata>
    <title>RHSA-2006:0568: php security update (Moderate)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
    </affected>
    <reference ref_id="RHSA-2006:0568" ref_url="https://access.redhat.com/errata/RHSA-2006:0568" source="RHSA"/>
    <reference ref_id="CVE-2006-1494" ref_url="https://access.redhat.com/security/cve/CVE-2006-1494" source="CVE"/>
    <reference ref_id="CVE-2006-1990" ref_url="https://access.redhat.com/security/cve/CVE-2006-1990" source="CVE"/>
    <reference ref_id="CVE-2006-3017" ref_url="https://access.redhat.com/security/cve/CVE-2006-3017" source="CVE"/>
    <description>PHP is an HTML-embedded scripting language commonly used with the Apache
HTTP Web server. 

A directory traversal vulnerability was found in PHP.  Local users could
bypass open_basedir restrictions allowing remote attackers to create files
in arbitrary directories via the tempnam() function.  (CVE-2006-1494)

The wordwrap() PHP function did not properly check for integer overflow in
the handling of the &quot;break&quot; parameter. An attacker who could control the
string passed to the &quot;break&quot; parameter could cause a heap overflow.
(CVE-2006-1990) 

A flaw was found in the zend_hash_del() PHP function.  For PHP scripts that
rely on the use of the unset() function, a remote attacker could force
variable initialization to be bypassed.  This would be a security issue
particularly for installations that enable the &quot;register_globals&quot; setting.
&quot;register_globals&quot; is disabled by default in Red Hat Enterprise Linux.
(CVE-2006-3017)

Users of PHP should upgrade to these updated packages, which contain
backported patches that resolve these issues.</description>
    <advisory from="secalert@redhat.com">
     <severity>Moderate</severity>
     <rights>Copyright 2006 Red Hat, Inc.</rights>
     <issued date="2006-07-12"/>
     <updated date="2006-07-12"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-1494" impact="low" public="20060408">CVE-2006-1494</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-1990" impact="low" public="20060424">CVE-2006-1990</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-3017" public="20060614">CVE-2006-3017</cve>
     <bugzilla href="https://bugzilla.redhat.com/189591" id="189591">CVE-2006-1494 PHP tempname open_basedir issue</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/190033" id="190033">CVE-2006-1990 wordwrap integer overflow</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/196256" id="196256">CVE-2006-3017 zend_hash_del bug</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="php-odbc is earlier than 0:4.3.2-33.ent" test_ref="oval:com.redhat.rhsa:tst:20060568001"/>
       <criterion comment="php-odbc is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-ldap is earlier than 0:4.3.2-33.ent" test_ref="oval:com.redhat.rhsa:tst:20060568003"/>
       <criterion comment="php-ldap is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-imap is earlier than 0:4.3.2-33.ent" test_ref="oval:com.redhat.rhsa:tst:20060568005"/>
       <criterion comment="php-imap is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276010"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-pgsql is earlier than 0:4.3.2-33.ent" test_ref="oval:com.redhat.rhsa:tst:20060568007"/>
       <criterion comment="php-pgsql is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276012"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php is earlier than 0:4.3.2-33.ent" test_ref="oval:com.redhat.rhsa:tst:20060568009"/>
       <criterion comment="php is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-mysql is earlier than 0:4.3.2-33.ent" test_ref="oval:com.redhat.rhsa:tst:20060568011"/>
       <criterion comment="php-mysql is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276014"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-devel is earlier than 0:4.3.2-33.ent" test_ref="oval:com.redhat.rhsa:tst:20060568013"/>
       <criterion comment="php-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276008"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="php-odbc is earlier than 0:4.3.9-3.15" test_ref="oval:com.redhat.rhsa:tst:20060568016"/>
       <criterion comment="php-odbc is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-mysql is earlier than 0:4.3.9-3.15" test_ref="oval:com.redhat.rhsa:tst:20060568017"/>
       <criterion comment="php-mysql is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276014"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php is earlier than 0:4.3.9-3.15" test_ref="oval:com.redhat.rhsa:tst:20060568018"/>
       <criterion comment="php is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-snmp is earlier than 0:4.3.9-3.15" test_ref="oval:com.redhat.rhsa:tst:20060568019"/>
       <criterion comment="php-snmp is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276024"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-ncurses is earlier than 0:4.3.9-3.15" test_ref="oval:com.redhat.rhsa:tst:20060568021"/>
       <criterion comment="php-ncurses is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276026"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-pear is earlier than 0:4.3.9-3.15" test_ref="oval:com.redhat.rhsa:tst:20060568023"/>
       <criterion comment="php-pear is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276028"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-mbstring is earlier than 0:4.3.9-3.15" test_ref="oval:com.redhat.rhsa:tst:20060568025"/>
       <criterion comment="php-mbstring is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276030"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-domxml is earlier than 0:4.3.9-3.15" test_ref="oval:com.redhat.rhsa:tst:20060568027"/>
       <criterion comment="php-domxml is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276032"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-ldap is earlier than 0:4.3.9-3.15" test_ref="oval:com.redhat.rhsa:tst:20060568029"/>
       <criterion comment="php-ldap is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-gd is earlier than 0:4.3.9-3.15" test_ref="oval:com.redhat.rhsa:tst:20060568030"/>
       <criterion comment="php-gd is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276035"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-devel is earlier than 0:4.3.9-3.15" test_ref="oval:com.redhat.rhsa:tst:20060568032"/>
       <criterion comment="php-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-imap is earlier than 0:4.3.9-3.15" test_ref="oval:com.redhat.rhsa:tst:20060568033"/>
       <criterion comment="php-imap is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276010"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-pgsql is earlier than 0:4.3.9-3.15" test_ref="oval:com.redhat.rhsa:tst:20060568034"/>
       <criterion comment="php-pgsql is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276012"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-xmlrpc is earlier than 0:4.3.9-3.15" test_ref="oval:com.redhat.rhsa:tst:20060568035"/>
       <criterion comment="php-xmlrpc is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276019"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20060571" version="634">
   <metadata>
    <title>RHSA-2006:0571: gnupg security update (Moderate)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
    </affected>
    <reference ref_id="RHSA-2006:0571" ref_url="https://access.redhat.com/errata/RHSA-2006:0571" source="RHSA"/>
    <reference ref_id="CVE-2006-3082" ref_url="https://access.redhat.com/security/cve/CVE-2006-3082" source="CVE"/>
    <description>GnuPG is a utility for encrypting data and creating digital signatures.

An integer overflow flaw was found in GnuPG.  An attacker could create a
carefully crafted message packet with a large length that could cause GnuPG
to crash or possibly overwrite memory when opened. (CVE-2006-3082)

All users of GnuPG are advised to upgrade to this updated package, which
contains a backported patch to correct this issue.</description>
    <advisory from="secalert@redhat.com">
     <severity>Moderate</severity>
     <rights>Copyright 2006 Red Hat, Inc.</rights>
     <issued date="2006-07-18"/>
     <updated date="2006-07-18"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-3082" public="20060531">CVE-2006-3082</cve>
     <bugzilla href="https://bugzilla.redhat.com/195945" id="195945">CVE-2006-3082 gnupg integer overflow</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criterion comment="gnupg is earlier than 0:1.2.1-16" test_ref="oval:com.redhat.rhsa:tst:20060571001"/>
     <criterion comment="gnupg is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060266002"/>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criterion comment="gnupg is earlier than 0:1.2.6-5" test_ref="oval:com.redhat.rhsa:tst:20060571004"/>
     <criterion comment="gnupg is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060266002"/>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20060573" version="640">
   <metadata>
    <title>RHSA-2006:0573: openoffice.org security update (Important)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
    </affected>
    <reference ref_id="RHSA-2006:0573" ref_url="https://access.redhat.com/errata/RHSA-2006:0573" source="RHSA"/>
    <reference ref_id="CVE-2006-2198" ref_url="https://access.redhat.com/security/cve/CVE-2006-2198" source="CVE"/>
    <reference ref_id="CVE-2006-2199" ref_url="https://access.redhat.com/security/cve/CVE-2006-2199" source="CVE"/>
    <reference ref_id="CVE-2006-3117" ref_url="https://access.redhat.com/security/cve/CVE-2006-3117" source="CVE"/>
    <description>OpenOffice.org is an office productivity suite that includes desktop
applications such as a word processor, spreadsheet, presentation manager,
formula editor, and drawing program.

A Sun security specialist reported an issue with the application framework.
An attacker could put macros into document locations that could cause
OpenOffice.org to execute them when the file was opened by a victim.
(CVE-2006-2198)

A bug was found in the OpenOffice.org Java virtual machine implementation.
An attacker could write a carefully crafted Java applet that can break
through the &quot;sandbox&quot; and have full access to system resources with the
current user privileges. (CVE-2006-2199)

A buffer overflow bug was found in the OpenOffice.org file processor. An
attacker could create a carefully crafted XML file that could cause
OpenOffice.org to write data to an arbitrary location in memory when the
file was opened by a victim. (CVE-2006-3117)

All users of OpenOffice.org are advised to upgrade to these updated
packages, which contain backported fixes for these issues.</description>
    <advisory from="secalert@redhat.com">
     <severity>Important</severity>
     <rights>Copyright 2008 Red Hat, Inc.</rights>
     <issued date="2006-07-03"/>
     <updated date="2008-03-20"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-2198" public="20060629">CVE-2006-2198</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-2199" public="20060629">CVE-2006-2199</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-3117" public="20060629">CVE-2006-3117</cve>
     <bugzilla href="https://bugzilla.redhat.com/196679" id="196679">CVE-2006-2198 various OOo advisories (CVE-2006-2199, CVE-2006-3117)</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="openoffice.org-i18n is earlier than 0:1.1.2-34.2.0.EL3" test_ref="oval:com.redhat.rhsa:tst:20060573001"/>
       <criterion comment="openoffice.org-i18n is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060573002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-libs is earlier than 0:1.1.2-34.2.0.EL3" test_ref="oval:com.redhat.rhsa:tst:20060573003"/>
       <criterion comment="openoffice.org-libs is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060573004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org is earlier than 0:1.1.2-34.2.0.EL3" test_ref="oval:com.redhat.rhsa:tst:20060573005"/>
       <criterion comment="openoffice.org is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060573006"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="openoffice.org is earlier than 0:1.1.2-34.6.0.EL4" test_ref="oval:com.redhat.rhsa:tst:20060573008"/>
       <criterion comment="openoffice.org is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060573006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-i18n is earlier than 0:1.1.2-34.6.0.EL4" test_ref="oval:com.redhat.rhsa:tst:20060573009"/>
       <criterion comment="openoffice.org-i18n is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060573002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-kde is earlier than 0:1.1.2-34.6.0.EL4" test_ref="oval:com.redhat.rhsa:tst:20060573010"/>
       <criterion comment="openoffice.org-kde is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060573011"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-libs is earlier than 0:1.1.2-34.6.0.EL4" test_ref="oval:com.redhat.rhsa:tst:20060573012"/>
       <criterion comment="openoffice.org-libs is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060573004"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20060576" version="637">
   <metadata>
    <title>RHSA-2006:0576: kdebase security fix (Moderate)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
    </affected>
    <reference ref_id="RHSA-2006:0576" ref_url="https://access.redhat.com/errata/RHSA-2006:0576" source="RHSA"/>
    <reference ref_id="CVE-2006-2933" ref_url="https://access.redhat.com/security/cve/CVE-2006-2933" source="CVE"/>
    <description>The kdebase packages provide the core applications for KDE, the K Desktop
Environment.

A flaw was found in KDE where the kdesktop_lock process sometimes
failed to terminate properly.  This issue could either block the user's
ability to manually lock the desktop or prevent the screensaver to
activate, both of which could have a security impact for users who rely on
these functionalities. 
(CVE-2006-2933)

Please note that this issue only affected Red Hat Enterprise Linux 3.

All users of kdebase should upgrade to these updated packages, which
contain a patch to resolve this issue.</description>
    <advisory from="secalert@redhat.com">
     <severity>Moderate</severity>
     <rights>Copyright 2006 Red Hat, Inc.</rights>
     <issued date="2006-07-25"/>
     <updated date="2006-07-25"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-2933" public="20060625">CVE-2006-2933</cve>
     <bugzilla href="https://bugzilla.redhat.com/177755" id="177755">CVE-2006-2933 occasionally KDE screensaver fails to start</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="AND">
    <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
    <criteria operator="OR">
     <criteria operator="AND">
      <criterion comment="kdebase is earlier than 6:3.1.3-5.11" test_ref="oval:com.redhat.rhsa:tst:20060576001"/>
      <criterion comment="kdebase is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060576002"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="kdebase-devel is earlier than 6:3.1.3-5.11" test_ref="oval:com.redhat.rhsa:tst:20060576003"/>
      <criterion comment="kdebase-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060576004"/>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20060577" version="633">
   <metadata>
    <title>RHSA-2006:0577: mutt security update (Moderate)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
    </affected>
    <reference ref_id="RHSA-2006:0577" ref_url="https://access.redhat.com/errata/RHSA-2006:0577" source="RHSA"/>
    <reference ref_id="CVE-2006-3242" ref_url="https://access.redhat.com/security/cve/CVE-2006-3242" source="CVE"/>
    <description>Mutt is a text-mode mail user agent.

A buffer overflow flaw was found in the way Mutt processes an overly
long namespace from a malicious imap server.  In order to exploit this
flaw a user would have to use Mutt to connect to a malicious IMAP server.
(CVE-2006-3242)

Users of Mutt are advised to upgrade to these erratum packages, which
contain a backported patch to correct this issue.</description>
    <advisory from="secalert@redhat.com">
     <severity>Moderate</severity>
     <rights>Copyright 2006 Red Hat, Inc.</rights>
     <issued date="2006-07-12"/>
     <updated date="2006-07-12"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-3242" public="20060619">CVE-2006-3242</cve>
     <bugzilla href="https://bugzilla.redhat.com/197151" id="197151">CVE-2006-3242 Mutt IMAP namespace buffer overflow</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criterion comment="mutt is earlier than 5:1.4.1-3.5.rhel3" test_ref="oval:com.redhat.rhsa:tst:20060577001"/>
     <criterion comment="mutt is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060577002"/>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criterion comment="mutt is earlier than 5:1.4.1-11.rhel4" test_ref="oval:com.redhat.rhsa:tst:20060577004"/>
     <criterion comment="mutt is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060577002"/>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20060578" version="640">
   <metadata>
    <title>RHSA-2006:0578: seamonkey security update (was mozilla) (Critical)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
    </affected>
    <reference ref_id="RHSA-2006:0578" ref_url="https://access.redhat.com/errata/RHSA-2006:0578" source="RHSA"/>
    <reference ref_id="CVE-2006-2776" ref_url="https://access.redhat.com/security/cve/CVE-2006-2776" source="CVE"/>
    <reference ref_id="CVE-2006-2778" ref_url="https://access.redhat.com/security/cve/CVE-2006-2778" source="CVE"/>
    <reference ref_id="CVE-2006-2779" ref_url="https://access.redhat.com/security/cve/CVE-2006-2779" source="CVE"/>
    <reference ref_id="CVE-2006-2780" ref_url="https://access.redhat.com/security/cve/CVE-2006-2780" source="CVE"/>
    <reference ref_id="CVE-2006-2781" ref_url="https://access.redhat.com/security/cve/CVE-2006-2781" source="CVE"/>
    <reference ref_id="CVE-2006-2782" ref_url="https://access.redhat.com/security/cve/CVE-2006-2782" source="CVE"/>
    <reference ref_id="CVE-2006-2783" ref_url="https://access.redhat.com/security/cve/CVE-2006-2783" source="CVE"/>
    <reference ref_id="CVE-2006-2784" ref_url="https://access.redhat.com/security/cve/CVE-2006-2784" source="CVE"/>
    <reference ref_id="CVE-2006-2785" ref_url="https://access.redhat.com/security/cve/CVE-2006-2785" source="CVE"/>
    <reference ref_id="CVE-2006-2786" ref_url="https://access.redhat.com/security/cve/CVE-2006-2786" source="CVE"/>
    <reference ref_id="CVE-2006-2787" ref_url="https://access.redhat.com/security/cve/CVE-2006-2787" source="CVE"/>
    <reference ref_id="CVE-2006-2788" ref_url="https://access.redhat.com/security/cve/CVE-2006-2788" source="CVE"/>
    <description>SeaMonkey is an open source Web browser, advanced email and newsgroup
client, IRC chat client, and HTML editor.

The Mozilla Foundation has discontinued support for the Mozilla Suite. This
update deprecates the Mozilla Suite in Red Hat Enterprise Linux 3 in favor
of the supported SeaMonkey Suite.

This update also resolves a number of outstanding Mozilla security issues:

Several flaws were found in the way Mozilla processed certain javascript
actions. A malicious web page could execute arbitrary javascript
instructions with the permissions of &quot;chrome&quot;, allowing the page to steal
sensitive information or install browser malware. (CVE-2006-2776,
CVE-2006-2784, CVE-2006-2785, CVE-2006-2787)

Several denial of service flaws were found in the way Mozilla processed
certain web content. A malicious web page could crash firefox or possibly
execute arbitrary code. These issues to date were not proven to be
exploitable, but do show evidence of memory corruption. (CVE-2006-2779,
CVE-2006-2780)

A double-free flaw was found in the way Mozilla-mail displayed malformed
inline vcard attachments. If a victim viewed an email message containing
a carefully crafted vcard it could execute arbitrary code as the user
running Mozilla-mail. (CVE-2006-2781) 

A cross site scripting flaw was found in the way Mozilla processed Unicode
Byte-order-Mark (BOM) markers in UTF-8 web pages. A malicious web page
could execute a script within the browser that a web input sanitizer could
miss due to a malformed &quot;script&quot; tag. (CVE-2006-2783)

A form file upload flaw was found in the way Mozilla handled javascript
input object mutation. A malicious web page could upload an arbitrary local
file at form submission time without user interaction. (CVE-2006-2782)

A denial of service flaw was found in the way Mozilla called the
crypto.signText() javascript function. A malicious web page could crash the
browser if the victim had a client certificate loaded. (CVE-2006-2778)

Two HTTP response smuggling flaws were found in the way Mozilla processed
certain invalid HTTP response headers. A malicious web site could return
specially crafted HTTP response headers which may bypass HTTP proxy
restrictions. (CVE-2006-2786)

A double free flaw was found in the way the nsIX509::getRawDER method was
called. If a victim visited a carefully crafted web page it could execute
arbitrary code as the user running Mozilla. (CVE-2006-2788)

Users of Mozilla are advised to upgrade to this update, which contains
SeaMonkey version 1.0.2 that is not vulnerable to these issues.</description>
    <advisory from="secalert@redhat.com">
     <severity>Critical</severity>
     <rights>Copyright 2006 Red Hat, Inc.</rights>
     <issued date="2006-07-20"/>
     <updated date="2006-07-20"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-2776" impact="moderate" public="20060601">CVE-2006-2776</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-2778" impact="moderate" public="20060601">CVE-2006-2778</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-2779" public="20060602">CVE-2006-2779</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-2780" public="20060602">CVE-2006-2780</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-2781" public="20060602">CVE-2006-2781</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-2782" impact="moderate" public="20060601">CVE-2006-2782</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-2783" impact="moderate" public="20060601">CVE-2006-2783</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-2784" impact="moderate" public="20060601">CVE-2006-2784</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-2785" impact="moderate" public="20060601">CVE-2006-2785</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-2786" impact="moderate" public="20060601">CVE-2006-2786</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-2787" impact="moderate" public="20060601">CVE-2006-2787</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-2788" impact="moderate" public="20060601">CVE-2006-2788</cve>
     <bugzilla href="https://bugzilla.redhat.com/196971" id="196971">CVE-2006-2783 multiple Seamonkey issues (CVE-2006-2782,CVE-2006-2778,CVE-2006-2776,CVE-2006-2784,CVE-2006-2785,CVE-2006-2786,CVE-2006-2787,CVE-2006-2788)</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/198683" id="198683">CVE-2006-2779 Multiple Mozilla issues (CVE-2006-2780, CVE-2006-2781)</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="AND">
    <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
    <criteria operator="OR">
     <criteria operator="AND">
      <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.2-0.1.0.EL3" test_ref="oval:com.redhat.rhsa:tst:20060578001"/>
      <criterion comment="seamonkey-dom-inspector is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578002"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.2-0.1.0.EL3" test_ref="oval:com.redhat.rhsa:tst:20060578003"/>
      <criterion comment="seamonkey-nspr-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578004"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="seamonkey-chat is earlier than 0:1.0.2-0.1.0.EL3" test_ref="oval:com.redhat.rhsa:tst:20060578005"/>
      <criterion comment="seamonkey-chat is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578006"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.2-0.1.0.EL3" test_ref="oval:com.redhat.rhsa:tst:20060578007"/>
      <criterion comment="seamonkey-js-debugger is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578008"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="seamonkey-nspr is earlier than 0:1.0.2-0.1.0.EL3" test_ref="oval:com.redhat.rhsa:tst:20060578009"/>
      <criterion comment="seamonkey-nspr is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578010"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.2-0.1.0.EL3" test_ref="oval:com.redhat.rhsa:tst:20060578011"/>
      <criterion comment="seamonkey-nss-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578012"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="seamonkey-devel is earlier than 0:1.0.2-0.1.0.EL3" test_ref="oval:com.redhat.rhsa:tst:20060578013"/>
      <criterion comment="seamonkey-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578014"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="seamonkey-nss is earlier than 0:1.0.2-0.1.0.EL3" test_ref="oval:com.redhat.rhsa:tst:20060578015"/>
      <criterion comment="seamonkey-nss is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578016"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="seamonkey is earlier than 0:1.0.2-0.1.0.EL3" test_ref="oval:com.redhat.rhsa:tst:20060578017"/>
      <criterion comment="seamonkey is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578018"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="seamonkey-mail is earlier than 0:1.0.2-0.1.0.EL3" test_ref="oval:com.redhat.rhsa:tst:20060578019"/>
      <criterion comment="seamonkey-mail is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578020"/>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20060591" version="636">
   <metadata>
    <title>RHSA-2006:0591: samba security update (Important)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
    </affected>
    <reference ref_id="RHSA-2006:0591" ref_url="https://access.redhat.com/errata/RHSA-2006:0591" source="RHSA"/>
    <reference ref_id="CVE-2006-3403" ref_url="https://access.redhat.com/security/cve/CVE-2006-3403" source="CVE"/>
    <description>Samba provides file and printer sharing services to SMB/CIFS clients.

A denial of service bug was found in the way the smbd daemon tracks active
connections to shares. It was possible for a remote attacker to cause the
smbd daemon to consume a large amount of system memory by sending carefully
crafted smb requests. (CVE-2006-3403)

Users of Samba are advised to upgrade to these packages, which
contain a backported patch to correct this issue.</description>
    <advisory from="secalert@redhat.com">
     <severity>Important</severity>
     <rights>Copyright 2006 Red Hat, Inc.</rights>
     <issued date="2006-07-25"/>
     <updated date="2006-07-25"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-3403" public="20060710">CVE-2006-3403</cve>
     <bugzilla href="https://bugzilla.redhat.com/197836" id="197836">CVE-2006-3403 Samba denial of service</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="samba-common is earlier than 0:3.0.9-1.3E.10" test_ref="oval:com.redhat.rhsa:tst:20060591001"/>
       <criterion comment="samba-common is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060591002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="samba is earlier than 0:3.0.9-1.3E.10" test_ref="oval:com.redhat.rhsa:tst:20060591003"/>
       <criterion comment="samba is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060591004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="samba-swat is earlier than 0:3.0.9-1.3E.10" test_ref="oval:com.redhat.rhsa:tst:20060591005"/>
       <criterion comment="samba-swat is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060591006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="samba-client is earlier than 0:3.0.9-1.3E.10" test_ref="oval:com.redhat.rhsa:tst:20060591007"/>
       <criterion comment="samba-client is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060591008"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="samba-common is earlier than 0:3.0.10-1.4E.6.2" test_ref="oval:com.redhat.rhsa:tst:20060591010"/>
       <criterion comment="samba-common is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060591002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="samba-client is earlier than 0:3.0.10-1.4E.6.2" test_ref="oval:com.redhat.rhsa:tst:20060591011"/>
       <criterion comment="samba-client is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060591008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="samba is earlier than 0:3.0.10-1.4E.6.2" test_ref="oval:com.redhat.rhsa:tst:20060591012"/>
       <criterion comment="samba is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060591004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="samba-swat is earlier than 0:3.0.10-1.4E.6.2" test_ref="oval:com.redhat.rhsa:tst:20060591013"/>
       <criterion comment="samba-swat is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060591006"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20060600" version="641">
   <metadata>
    <title>RHSA-2006:0600: mailman security update (Moderate)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
    </affected>
    <reference ref_id="RHSA-2006:0600" ref_url="https://access.redhat.com/errata/RHSA-2006:0600" source="RHSA"/>
    <reference ref_id="CVE-2006-2941" ref_url="https://access.redhat.com/security/cve/CVE-2006-2941" source="CVE"/>
    <reference ref_id="CVE-2006-3636" ref_url="https://access.redhat.com/security/cve/CVE-2006-3636" source="CVE"/>
    <description>Mailman is a program used to help manage email discussion lists.

A flaw was found in the way Mailman handled MIME multipart messages. An
attacker could send a carefully crafted MIME multipart email message to a
mailing list run by Mailman which caused that particular mailing list
to stop working.  (CVE-2006-2941)

Several cross-site scripting (XSS) issues were found in Mailman.  An
attacker could exploit these issues to perform cross-site scripting attacks
against the Mailman administrator.  (CVE-2006-3636)

Red Hat would like to thank Barry Warsaw for disclosing these vulnerabilities.

Users of Mailman should upgrade to these updated packages, which contain
backported patches to correct this issue.</description>
    <advisory from="secalert@redhat.com">
     <severity>Moderate</severity>
     <rights>Copyright 2008 Red Hat, Inc.</rights>
     <issued date="2006-09-06"/>
     <updated date="2008-03-20"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-2941" public="20060904">CVE-2006-2941</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-3636" public="20060904">CVE-2006-3636</cve>
     <bugzilla href="https://bugzilla.redhat.com/198344" id="198344">CVE-2006-2941 Mailman DoS</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/203704" id="203704">CVE-2006-3636 Mailman XSS issues</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criterion comment="mailman is earlier than 3:2.1.5.1-25.rhel3.7" test_ref="oval:com.redhat.rhsa:tst:20060600001"/>
     <criterion comment="mailman is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060204002"/>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criterion comment="mailman is earlier than 3:2.1.5.1-34.rhel4.5" test_ref="oval:com.redhat.rhsa:tst:20060600004"/>
     <criterion comment="mailman is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060204002"/>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20060602" version="634">
   <metadata>
    <title>RHSA-2006:0602: wireshark security update (was ethereal) (Moderate)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
    </affected>
    <reference ref_id="RHSA-2006:0602" ref_url="https://access.redhat.com/errata/RHSA-2006:0602" source="RHSA"/>
    <reference ref_id="CVE-2006-3627" ref_url="https://access.redhat.com/security/cve/CVE-2006-3627" source="CVE"/>
    <reference ref_id="CVE-2006-3628" ref_url="https://access.redhat.com/security/cve/CVE-2006-3628" source="CVE"/>
    <reference ref_id="CVE-2006-3629" ref_url="https://access.redhat.com/security/cve/CVE-2006-3629" source="CVE"/>
    <reference ref_id="CVE-2006-3630" ref_url="https://access.redhat.com/security/cve/CVE-2006-3630" source="CVE"/>
    <reference ref_id="CVE-2006-3631" ref_url="https://access.redhat.com/security/cve/CVE-2006-3631" source="CVE"/>
    <reference ref_id="CVE-2006-3632" ref_url="https://access.redhat.com/security/cve/CVE-2006-3632" source="CVE"/>
    <description>Ethereal is a program for monitoring network traffic.

In May 2006, Ethereal changed its name to Wireshark.  This update
deprecates the Ethereal packages in Red Hat Enterprise Linux 2.1, 3, and 4
in favor of the supported Wireshark packages.

Several denial of service bugs were found in Ethereal's protocol
dissectors. It was possible for Ethereal to crash or stop responding if it
read a malformed packet off the network.  (CVE-2006-3627, CVE-2006-3629,
CVE-2006-3631)

Several buffer overflow bugs were found in Ethereal's ANSI MAP, NCP NMAS,
and NDPStelnet dissectors. It was possible for Ethereal to crash or execute
arbitrary code if it read a malformed packet off the network.
(CVE-2006-3630, CVE-2006-3632)

Several format string bugs were found in Ethereal's Checkpoint FW-1, MQ,
XML, and NTP dissectors. It was possible for Ethereal to crash or execute
arbitrary code if it read a malformed packet off the network. (CVE-2006-3628)

Users of Ethereal should upgrade to these updated packages containing
Wireshark version 0.99.2, which is not vulnerable to these issues</description>
    <advisory from="secalert@redhat.com">
     <severity>Moderate</severity>
     <rights>Copyright 2006 Red Hat, Inc.</rights>
     <issued date="2006-08-16"/>
     <updated date="2006-08-16"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-3627" impact="low" public="20060717">CVE-2006-3627</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-3628" public="20060717">CVE-2006-3628</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-3629" impact="low" public="20060717">CVE-2006-3629</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-3630" public="20060717">CVE-2006-3630</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-3631" impact="low" public="20060717">CVE-2006-3631</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-3632" public="20060717">CVE-2006-3632</cve>
     <bugzilla href="https://bugzilla.redhat.com/199231" id="199231">Replace (EOL) Ethereal with Wireshark</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/199232" id="199232">CVE-2006-3627 Mulitple security issues (CVE-2006-3628 CVE-2006-3629 CVE-2006-3630 CVE-2006-3631 CVE-2006-3632)</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="wireshark is earlier than 0:0.99.2-EL3.1" test_ref="oval:com.redhat.rhsa:tst:20060602001"/>
       <criterion comment="wireshark is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060602002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="wireshark-gnome is earlier than 0:0.99.2-EL3.1" test_ref="oval:com.redhat.rhsa:tst:20060602003"/>
       <criterion comment="wireshark-gnome is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060602004"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="wireshark-gnome is earlier than 0:0.99.2-EL4.1" test_ref="oval:com.redhat.rhsa:tst:20060602006"/>
       <criterion comment="wireshark-gnome is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060602004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="wireshark is earlier than 0:0.99.2-EL4.1" test_ref="oval:com.redhat.rhsa:tst:20060602007"/>
       <criterion comment="wireshark is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060602002"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20060603" version="634">
   <metadata>
    <title>RHSA-2006:0603: libtiff security update (Important)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
    </affected>
    <reference ref_id="RHSA-2006:0603" ref_url="https://access.redhat.com/errata/RHSA-2006:0603" source="RHSA"/>
    <reference ref_id="CVE-2006-2656" ref_url="https://access.redhat.com/security/cve/CVE-2006-2656" source="CVE"/>
    <reference ref_id="CVE-2006-3459" ref_url="https://access.redhat.com/security/cve/CVE-2006-3459" source="CVE"/>
    <reference ref_id="CVE-2006-3460" ref_url="https://access.redhat.com/security/cve/CVE-2006-3460" source="CVE"/>
    <reference ref_id="CVE-2006-3461" ref_url="https://access.redhat.com/security/cve/CVE-2006-3461" source="CVE"/>
    <reference ref_id="CVE-2006-3462" ref_url="https://access.redhat.com/security/cve/CVE-2006-3462" source="CVE"/>
    <reference ref_id="CVE-2006-3463" ref_url="https://access.redhat.com/security/cve/CVE-2006-3463" source="CVE"/>
    <reference ref_id="CVE-2006-3464" ref_url="https://access.redhat.com/security/cve/CVE-2006-3464" source="CVE"/>
    <reference ref_id="CVE-2006-3465" ref_url="https://access.redhat.com/security/cve/CVE-2006-3465" source="CVE"/>
    <description>The libtiff package contains a library of functions for manipulating TIFF
(Tagged Image File Format) files.

Tavis Ormandy of Google discovered a number of flaws in libtiff during a
security audit.  An attacker could create a carefully crafted TIFF file in
such a way that it was possible to cause an application linked with libtiff
to crash or possibly execute arbitrary code. (CVE-2006-3459, CVE-2006-3460,
CVE-2006-3461, CVE-2006-3462, CVE-2006-3463, CVE-2006-3464, CVE-2006-3465)

All users are advised to upgrade to these updated packages, which contain
backported fixes for these issues.</description>
    <advisory from="secalert@redhat.com">
     <severity>Important</severity>
     <rights>Copyright 2008 Red Hat, Inc.</rights>
     <issued date="2006-08-01"/>
     <updated date="2008-03-20"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-2656" impact="low" public="20060525">CVE-2006-2656</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-3459" public="20060801">CVE-2006-3459</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-3460" public="20060801">CVE-2006-3460</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-3461" public="20060801">CVE-2006-3461</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-3462" public="20060801">CVE-2006-3462</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-3463" public="20060801">CVE-2006-3463</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-3464" public="20060801">CVE-2006-3464</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-3465" public="20060801">CVE-2006-3465</cve>
     <bugzilla href="https://bugzilla.redhat.com/199111" id="199111">CVE-2006-3459 Multiple libtiff flaws (CVE-2006-3460 CVE-2006-3461 CVE-2006-3462 CVE-2006-3463 CVE-2006-3464 CVE-2006-3465)</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="libtiff-devel is earlier than 0:3.5.7-25.el3.4" test_ref="oval:com.redhat.rhsa:tst:20060603001"/>
       <criterion comment="libtiff-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060425002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="libtiff is earlier than 0:3.5.7-25.el3.4" test_ref="oval:com.redhat.rhsa:tst:20060603003"/>
       <criterion comment="libtiff is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060425004"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="libtiff is earlier than 0:3.6.1-12" test_ref="oval:com.redhat.rhsa:tst:20060603006"/>
       <criterion comment="libtiff is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060425004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="libtiff-devel is earlier than 0:3.6.1-12" test_ref="oval:com.redhat.rhsa:tst:20060603007"/>
       <criterion comment="libtiff-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060425002"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20060604" version="635">
   <metadata>
    <title>RHSA-2006:0604: ruby security update (Moderate)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
    </affected>
    <reference ref_id="RHSA-2006:0604" ref_url="https://access.redhat.com/errata/RHSA-2006:0604" source="RHSA"/>
    <reference ref_id="CVE-2006-3694" ref_url="https://access.redhat.com/security/cve/CVE-2006-3694" source="CVE"/>
    <description>Ruby is an interpreted scripting language for object-oriented programming. 

A number of flaws were found in the safe-level restrictions in Ruby.  It
was possible for an attacker to create a carefully crafted malicious script
that can allow the bypass of certain safe-level restrictions. (CVE-2006-3694)

Users of Ruby should update to these erratum packages, which contain a
backported patch and are not vulnerable to this issue.</description>
    <advisory from="secalert@redhat.com">
     <severity>Moderate</severity>
     <rights>Copyright 2006 Red Hat, Inc.</rights>
     <issued date="2006-07-27"/>
     <updated date="2006-07-27"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-3694" public="20060711">CVE-2006-3694</cve>
     <bugzilla href="https://bugzilla.redhat.com/199539" id="199539">CVE-2006-3694 Insecure operations in the certain safe-level restrictions</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/199545" id="199545">CVE-2006-3694 ruby safe-level bypass</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="ruby-libs is earlier than 0:1.6.8-9.EL3.6" test_ref="oval:com.redhat.rhsa:tst:20060604001"/>
       <criterion comment="ruby-libs is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060604002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="ruby-devel is earlier than 0:1.6.8-9.EL3.6" test_ref="oval:com.redhat.rhsa:tst:20060604003"/>
       <criterion comment="ruby-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060604004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="ruby-docs is earlier than 0:1.6.8-9.EL3.6" test_ref="oval:com.redhat.rhsa:tst:20060604005"/>
       <criterion comment="ruby-docs is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060604006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="ruby-tcltk is earlier than 0:1.6.8-9.EL3.6" test_ref="oval:com.redhat.rhsa:tst:20060604007"/>
       <criterion comment="ruby-tcltk is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060604008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="ruby is earlier than 0:1.6.8-9.EL3.6" test_ref="oval:com.redhat.rhsa:tst:20060604009"/>
       <criterion comment="ruby is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060604010"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="ruby-mode is earlier than 0:1.6.8-9.EL3.6" test_ref="oval:com.redhat.rhsa:tst:20060604011"/>
       <criterion comment="ruby-mode is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060604012"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="irb is earlier than 0:1.6.8-9.EL3.6" test_ref="oval:com.redhat.rhsa:tst:20060604013"/>
       <criterion comment="irb is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060604014"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="irb is earlier than 0:1.8.1-7.EL4.6" test_ref="oval:com.redhat.rhsa:tst:20060604016"/>
       <criterion comment="irb is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060604014"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="ruby-libs is earlier than 0:1.8.1-7.EL4.6" test_ref="oval:com.redhat.rhsa:tst:20060604017"/>
       <criterion comment="ruby-libs is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060604002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="ruby-tcltk is earlier than 0:1.8.1-7.EL4.6" test_ref="oval:com.redhat.rhsa:tst:20060604018"/>
       <criterion comment="ruby-tcltk is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060604008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="ruby is earlier than 0:1.8.1-7.EL4.6" test_ref="oval:com.redhat.rhsa:tst:20060604019"/>
       <criterion comment="ruby is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060604010"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="ruby-docs is earlier than 0:1.8.1-7.EL4.6" test_ref="oval:com.redhat.rhsa:tst:20060604020"/>
       <criterion comment="ruby-docs is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060604006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="ruby-devel is earlier than 0:1.8.1-7.EL4.6" test_ref="oval:com.redhat.rhsa:tst:20060604021"/>
       <criterion comment="ruby-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060604004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="ruby-mode is earlier than 0:1.8.1-7.EL4.6" test_ref="oval:com.redhat.rhsa:tst:20060604022"/>
       <criterion comment="ruby-mode is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060604012"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20060608" version="636">
   <metadata>
    <title>RHSA-2006:0608: seamonkey security update (Critical)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
    </affected>
    <reference ref_id="RHSA-2006:0608" ref_url="https://access.redhat.com/errata/RHSA-2006:0608" source="RHSA"/>
    <reference ref_id="CVE-2006-3113" ref_url="https://access.redhat.com/security/cve/CVE-2006-3113" source="CVE"/>
    <reference ref_id="CVE-2006-3677" ref_url="https://access.redhat.com/security/cve/CVE-2006-3677" source="CVE"/>
    <reference ref_id="CVE-2006-3801" ref_url="https://access.redhat.com/security/cve/CVE-2006-3801" source="CVE"/>
    <reference ref_id="CVE-2006-3802" ref_url="https://access.redhat.com/security/cve/CVE-2006-3802" source="CVE"/>
    <reference ref_id="CVE-2006-3803" ref_url="https://access.redhat.com/security/cve/CVE-2006-3803" source="CVE"/>
    <reference ref_id="CVE-2006-3804" ref_url="https://access.redhat.com/security/cve/CVE-2006-3804" source="CVE"/>
    <reference ref_id="CVE-2006-3805" ref_url="https://access.redhat.com/security/cve/CVE-2006-3805" source="CVE"/>
    <reference ref_id="CVE-2006-3806" ref_url="https://access.redhat.com/security/cve/CVE-2006-3806" source="CVE"/>
    <reference ref_id="CVE-2006-3807" ref_url="https://access.redhat.com/security/cve/CVE-2006-3807" source="CVE"/>
    <reference ref_id="CVE-2006-3808" ref_url="https://access.redhat.com/security/cve/CVE-2006-3808" source="CVE"/>
    <reference ref_id="CVE-2006-3809" ref_url="https://access.redhat.com/security/cve/CVE-2006-3809" source="CVE"/>
    <reference ref_id="CVE-2006-3810" ref_url="https://access.redhat.com/security/cve/CVE-2006-3810" source="CVE"/>
    <reference ref_id="CVE-2006-3811" ref_url="https://access.redhat.com/security/cve/CVE-2006-3811" source="CVE"/>
    <reference ref_id="CVE-2006-3812" ref_url="https://access.redhat.com/security/cve/CVE-2006-3812" source="CVE"/>
    <description>SeaMonkey is an open source Web browser, advanced email and newsgroup
client, IRC chat client, and HTML editor.

Several flaws were found in the way SeaMonkey processed certain javascript
actions. A malicious web page could execute arbitrary javascript
instructions with the permissions of &quot;chrome&quot;, allowing the page to steal
sensitive information or install browser malware. (CVE-2006-3807,
CVE-2006-3809, CVE-2006-3812)

Several denial of service flaws were found in the way SeaMonkey processed
certain web content. A malicious web page could crash the browser or
possibly execute arbitrary code as the user running SeaMonkey.
(CVE-2006-3801, CVE-2006-3677, CVE-2006-3113, CVE-2006-3803, CVE-2006-3805,
CVE-2006-3806, CVE-2006-3811)

A buffer overflow flaw was found in the way SeaMonkey Messenger displayed
malformed inline vcard attachments. If a victim viewed an email message
containing a carefully crafted vcard, it was possible to execute arbitrary
code as the user running SeaMonkey Messenger. (CVE-2006-3804)

Several flaws were found in the way SeaMonkey processed certain javascript
actions. A malicious web page could conduct a cross-site scripting attack
or steal sensitive information (such as cookies owned by other domains).
(CVE-2006-3802, CVE-2006-3810)

A flaw was found in the way SeaMonkey processed Proxy AutoConfig scripts. A
malicious Proxy AutoConfig server could execute arbitrary javascript
instructions with the permissions of &quot;chrome&quot;, allowing the page to steal
sensitive information or install browser malware. (CVE-2006-3808)

Users of SeaMonkey are advised to upgrade to this update, which contains
SeaMonkey version 1.0.3 that corrects these issues.</description>
    <advisory from="secalert@redhat.com">
     <severity>Critical</severity>
     <rights>Copyright 2006 Red Hat, Inc.</rights>
     <issued date="2006-07-27"/>
     <updated date="2006-07-27"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-3113" public="20060726">CVE-2006-3113</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-3677" public="20060726">CVE-2006-3677</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-3801" public="20060726">CVE-2006-3801</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-3802" impact="important" public="20060726">CVE-2006-3802</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-3803" public="20060726">CVE-2006-3803</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-3804" public="20060726">CVE-2006-3804</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-3805" public="20060726">CVE-2006-3805</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-3806" public="20060726">CVE-2006-3806</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-3807" public="20060726">CVE-2006-3807</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-3808" impact="important" public="20060726">CVE-2006-3808</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-3809" public="20060726">CVE-2006-3809</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-3810" impact="important" public="20060726">CVE-2006-3810</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-3811" public="20060726">CVE-2006-3811</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-3812" impact="important" public="20060726">CVE-2006-3812</cve>
     <bugzilla href="https://bugzilla.redhat.com/200253" id="200253">CVE-2006-3801 Multiple Seamonkey issues (CVE-2006-3677, CVE-2006-3113, CVE-2006-3802, CVE-2006-3803, CVE-2006-3804, CVE-2006-3805, CVE-2006-3806, CVE-2006-3807, CVE-2006-3808, CVE-2006-3809, CVE-2006-3810, CVE-2006-3811, CVE-2006-3812)</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="AND">
    <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
    <criteria operator="OR">
     <criteria operator="AND">
      <criterion comment="seamonkey-mail is earlier than 0:1.0.3-0.el3.1" test_ref="oval:com.redhat.rhsa:tst:20060608001"/>
      <criterion comment="seamonkey-mail is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578020"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.3-0.el3.1" test_ref="oval:com.redhat.rhsa:tst:20060608003"/>
      <criterion comment="seamonkey-js-debugger is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578008"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="seamonkey-nss is earlier than 0:1.0.3-0.el3.1" test_ref="oval:com.redhat.rhsa:tst:20060608005"/>
      <criterion comment="seamonkey-nss is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578016"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="seamonkey-chat is earlier than 0:1.0.3-0.el3.1" test_ref="oval:com.redhat.rhsa:tst:20060608007"/>
      <criterion comment="seamonkey-chat is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578006"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="seamonkey is earlier than 0:1.0.3-0.el3.1" test_ref="oval:com.redhat.rhsa:tst:20060608009"/>
      <criterion comment="seamonkey is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578018"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.3-0.el3.1" test_ref="oval:com.redhat.rhsa:tst:20060608011"/>
      <criterion comment="seamonkey-nspr-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578004"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.3-0.el3.1" test_ref="oval:com.redhat.rhsa:tst:20060608013"/>
      <criterion comment="seamonkey-dom-inspector is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578002"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="seamonkey-devel is earlier than 0:1.0.3-0.el3.1" test_ref="oval:com.redhat.rhsa:tst:20060608015"/>
      <criterion comment="seamonkey-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578014"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.3-0.el3.1" test_ref="oval:com.redhat.rhsa:tst:20060608017"/>
      <criterion comment="seamonkey-nss-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578012"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="seamonkey-nspr is earlier than 0:1.0.3-0.el3.1" test_ref="oval:com.redhat.rhsa:tst:20060608019"/>
      <criterion comment="seamonkey-nspr is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578010"/>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20060615" version="634">
   <metadata>
    <title>RHSA-2006:0615: gnupg security update (Moderate)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
    </affected>
    <reference ref_id="RHSA-2006:0615" ref_url="https://access.redhat.com/errata/RHSA-2006:0615" source="RHSA"/>
    <reference ref_id="CVE-2006-3746" ref_url="https://access.redhat.com/security/cve/CVE-2006-3746" source="CVE"/>
    <description>GnuPG is a utility for encrypting data and creating digital signatures.

An integer overflow flaw was found in GnuPG. An attacker could create a
carefully crafted message packet with a large length that could cause GnuPG
to crash or possibly overwrite memory when opened. (CVE-2006-3746)

All users of GnuPG are advised to upgrade to these updated packages, which
contain a backported patch to correct this issue.</description>
    <advisory from="secalert@redhat.com">
     <severity>Moderate</severity>
     <rights>Copyright 2006 Red Hat, Inc.</rights>
     <issued date="2006-08-02"/>
     <updated date="2006-08-02"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-3746" public="20060721">CVE-2006-3746</cve>
     <bugzilla href="https://bugzilla.redhat.com/200502" id="200502">CVE-2006-3746 GnuPG Parse_Comment Remote Buffer Overflow</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criterion comment="gnupg is earlier than 0:1.2.1-17" test_ref="oval:com.redhat.rhsa:tst:20060615001"/>
     <criterion comment="gnupg is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060266002"/>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criterion comment="gnupg is earlier than 0:1.2.6-6" test_ref="oval:com.redhat.rhsa:tst:20060615004"/>
     <criterion comment="gnupg is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060266002"/>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20060619" version="639">
   <metadata>
    <title>RHSA-2006:0619: httpd security update (Moderate)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
    </affected>
    <reference ref_id="RHSA-2006:0619" ref_url="https://access.redhat.com/errata/RHSA-2006:0619" source="RHSA"/>
    <reference ref_id="CVE-2006-3918" ref_url="https://access.redhat.com/security/cve/CVE-2006-3918" source="CVE"/>
    <description>The Apache HTTP Server is a popular Web server available for free.

A bug was found in Apache where an invalid Expect header sent to the server
was returned to the user in an unescaped error message.  This could
allow an attacker to perform a cross-site scripting attack if a victim was
tricked into connecting to a site and sending a carefully crafted Expect
header.  (CVE-2006-3918)

While a web browser cannot be forced to send an arbitrary Expect
header by a third-party attacker, it was recently discovered that
certain versions of the Flash plugin can manipulate request headers.
If users running such versions can be persuaded to load a web page
with a malicious Flash applet, a cross-site scripting attack against
the server may be possible.

On Red Hat Enterprise Linux 3 and 4 systems, due to an unrelated issue in
the handling of malformed Expect headers, the page produced by the
cross-site scripting attack will only be returned after a timeout expires
(2-5 minutes by default) if not first canceled by the user.

Users of httpd should update to these erratum packages, which contain a
backported patch to correct these issues.</description>
    <advisory from="secalert@redhat.com">
     <severity>Moderate</severity>
     <rights>Copyright 2006 Red Hat, Inc.</rights>
     <issued date="2006-08-10"/>
     <updated date="2006-08-10"/>
     <cve cwe="CWE-79" href="https://access.redhat.com/security/cve/CVE-2006-3918" public="20060508">CVE-2006-3918</cve>
     <bugzilla href="https://bugzilla.redhat.com/200732" id="200732">CVE-2006-3918 httpd: Expect header XSS</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="httpd-devel is earlier than 0:2.0.46-61.ent" test_ref="oval:com.redhat.rhsa:tst:20060619001"/>
       <criterion comment="httpd-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060159004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="httpd is earlier than 0:2.0.46-61.ent" test_ref="oval:com.redhat.rhsa:tst:20060619003"/>
       <criterion comment="httpd is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060159006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="mod_ssl is earlier than 1:2.0.46-61.ent" test_ref="oval:com.redhat.rhsa:tst:20060619005"/>
       <criterion comment="mod_ssl is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060159002"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="httpd-suexec is earlier than 0:2.0.52-28.ent" test_ref="oval:com.redhat.rhsa:tst:20060619008"/>
       <criterion comment="httpd-suexec is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060159009"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="httpd is earlier than 0:2.0.52-28.ent" test_ref="oval:com.redhat.rhsa:tst:20060619010"/>
       <criterion comment="httpd is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060159006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="httpd-manual is earlier than 0:2.0.52-28.ent" test_ref="oval:com.redhat.rhsa:tst:20060619011"/>
       <criterion comment="httpd-manual is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060159011"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="httpd-devel is earlier than 0:2.0.52-28.ent" test_ref="oval:com.redhat.rhsa:tst:20060619013"/>
       <criterion comment="httpd-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060159004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="mod_ssl is earlier than 1:2.0.52-28.ent" test_ref="oval:com.redhat.rhsa:tst:20060619014"/>
       <criterion comment="mod_ssl is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060159002"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20060633" version="635">
   <metadata>
    <title>RHSA-2006:0633: ImageMagick security update (Moderate)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
    </affected>
    <reference ref_id="RHSA-2006:0633" ref_url="https://access.redhat.com/errata/RHSA-2006:0633" source="RHSA"/>
    <reference ref_id="CVE-2006-3743" ref_url="https://access.redhat.com/security/cve/CVE-2006-3743" source="CVE"/>
    <reference ref_id="CVE-2006-3744" ref_url="https://access.redhat.com/security/cve/CVE-2006-3744" source="CVE"/>
    <reference ref_id="CVE-2006-4144" ref_url="https://access.redhat.com/security/cve/CVE-2006-4144" source="CVE"/>
    <description>ImageMagick(TM) is an image display and manipulation tool for the X Window
System that can read and write multiple image formats.

Tavis Ormandy discovered several integer and buffer overflow flaws in the
way ImageMagick decodes XCF, SGI, and Sun bitmap graphic files. An attacker
could execute arbitrary code on a victim's machine if they were able to
trick the victim into opening a specially crafted image file.
(CVE-2006-3743, CVE-2006-3744, CVE-2006-4144)

Users of ImageMagick should upgrade to these updated packages, which
contain backported patches and are not vulnerable to these issues.</description>
    <advisory from="secalert@redhat.com">
     <severity>Moderate</severity>
     <rights>Copyright 2006 Red Hat, Inc.</rights>
     <issued date="2006-08-24"/>
     <updated date="2006-08-24"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-3743" public="20060822">CVE-2006-3743</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-3744" public="20060822">CVE-2006-3744</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-4144" public="20060814">CVE-2006-4144</cve>
     <bugzilla href="https://bugzilla.redhat.com/202193" id="202193">CVE-2006-3743 ImageMagick multiple security issues (CVE-2006-3744)</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/202771" id="202771">CVE-2006-4144 ImageMagick ReadSGIImage() integer overflow</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="ImageMagick is earlier than 0:5.5.6-20" test_ref="oval:com.redhat.rhsa:tst:20060633001"/>
       <criterion comment="ImageMagick is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060178004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="ImageMagick-perl is earlier than 0:5.5.6-20" test_ref="oval:com.redhat.rhsa:tst:20060633003"/>
       <criterion comment="ImageMagick-perl is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060178006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="ImageMagick-c++ is earlier than 0:5.5.6-20" test_ref="oval:com.redhat.rhsa:tst:20060633005"/>
       <criterion comment="ImageMagick-c++ is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060178008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="ImageMagick-c++-devel is earlier than 0:5.5.6-20" test_ref="oval:com.redhat.rhsa:tst:20060633007"/>
       <criterion comment="ImageMagick-c++-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060178010"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="ImageMagick-devel is earlier than 0:5.5.6-20" test_ref="oval:com.redhat.rhsa:tst:20060633009"/>
       <criterion comment="ImageMagick-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060178002"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="ImageMagick-devel is earlier than 0:6.0.7.1-16" test_ref="oval:com.redhat.rhsa:tst:20060633012"/>
       <criterion comment="ImageMagick-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060178002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="ImageMagick-perl is earlier than 0:6.0.7.1-16" test_ref="oval:com.redhat.rhsa:tst:20060633013"/>
       <criterion comment="ImageMagick-perl is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060178006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="ImageMagick is earlier than 0:6.0.7.1-16" test_ref="oval:com.redhat.rhsa:tst:20060633014"/>
       <criterion comment="ImageMagick is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060178004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="ImageMagick-c++ is earlier than 0:6.0.7.1-16" test_ref="oval:com.redhat.rhsa:tst:20060633015"/>
       <criterion comment="ImageMagick-c++ is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060178008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="ImageMagick-c++-devel is earlier than 0:6.0.7.1-16" test_ref="oval:com.redhat.rhsa:tst:20060633016"/>
       <criterion comment="ImageMagick-c++-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060178010"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20060635" version="632">
   <metadata>
    <title>RHSA-2006:0635: XFree86 security update (Important)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
    </affected>
    <reference ref_id="RHSA-2006:0635" ref_url="https://access.redhat.com/errata/RHSA-2006:0635" source="RHSA"/>
    <reference ref_id="CVE-2006-3467" ref_url="https://access.redhat.com/security/cve/CVE-2006-3467" source="CVE"/>
    <description>XFree86 is an implementation of the X Window System, which provides the
core functionality for the Linux graphical desktop.

An integer overflow flaw in the way the XFree86 server processes PCF files
was discovered. A malicious authorized client could exploit this issue to
cause a denial of service (crash) or potentially execute arbitrary code
with root privileges on the XFree86 server. (CVE-2006-3467)

Users of XFree86 should upgrade to these updated packages, which contain a
backported patch and is not vulnerable to this issue.</description>
    <advisory from="secalert@redhat.com">
     <severity>Important</severity>
     <rights>Copyright 2006 Red Hat, Inc.</rights>
     <issued date="2006-08-21"/>
     <updated date="2006-08-21"/>
     <cve cwe="CWE-190" href="https://access.redhat.com/security/cve/CVE-2006-3467" impact="moderate" public="20060718">CVE-2006-3467</cve>
     <bugzilla href="https://bugzilla.redhat.com/202472" id="202472">CVE-2006-3467 Xorg PCF handling Integer overflow</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="AND">
    <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
    <criteria operator="OR">
     <criteria operator="AND">
      <criterion comment="XFree86-Mesa-libGLU is earlier than 0:4.3.0-111.EL" test_ref="oval:com.redhat.rhsa:tst:20060635001"/>
      <criterion comment="XFree86-Mesa-libGLU is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635002"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-ISO8859-2-75dpi-fonts is earlier than 0:4.3.0-111.EL" test_ref="oval:com.redhat.rhsa:tst:20060635003"/>
      <criterion comment="XFree86-ISO8859-2-75dpi-fonts is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635004"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-font-utils is earlier than 0:4.3.0-111.EL" test_ref="oval:com.redhat.rhsa:tst:20060635005"/>
      <criterion comment="XFree86-font-utils is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635006"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-base-fonts is earlier than 0:4.3.0-111.EL" test_ref="oval:com.redhat.rhsa:tst:20060635007"/>
      <criterion comment="XFree86-base-fonts is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635008"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-ISO8859-14-100dpi-fonts is earlier than 0:4.3.0-111.EL" test_ref="oval:com.redhat.rhsa:tst:20060635009"/>
      <criterion comment="XFree86-ISO8859-14-100dpi-fonts is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635010"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-ISO8859-9-75dpi-fonts is earlier than 0:4.3.0-111.EL" test_ref="oval:com.redhat.rhsa:tst:20060635011"/>
      <criterion comment="XFree86-ISO8859-9-75dpi-fonts is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635012"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-cyrillic-fonts is earlier than 0:4.3.0-111.EL" test_ref="oval:com.redhat.rhsa:tst:20060635013"/>
      <criterion comment="XFree86-cyrillic-fonts is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635014"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-ISO8859-2-100dpi-fonts is earlier than 0:4.3.0-111.EL" test_ref="oval:com.redhat.rhsa:tst:20060635015"/>
      <criterion comment="XFree86-ISO8859-2-100dpi-fonts is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635016"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-xauth is earlier than 0:4.3.0-111.EL" test_ref="oval:com.redhat.rhsa:tst:20060635017"/>
      <criterion comment="XFree86-xauth is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635018"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-truetype-fonts is earlier than 0:4.3.0-111.EL" test_ref="oval:com.redhat.rhsa:tst:20060635019"/>
      <criterion comment="XFree86-truetype-fonts is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635020"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-xdm is earlier than 0:4.3.0-111.EL" test_ref="oval:com.redhat.rhsa:tst:20060635021"/>
      <criterion comment="XFree86-xdm is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635022"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-syriac-fonts is earlier than 0:4.3.0-111.EL" test_ref="oval:com.redhat.rhsa:tst:20060635023"/>
      <criterion comment="XFree86-syriac-fonts is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635024"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-75dpi-fonts is earlier than 0:4.3.0-111.EL" test_ref="oval:com.redhat.rhsa:tst:20060635025"/>
      <criterion comment="XFree86-75dpi-fonts is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635026"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-Xvfb is earlier than 0:4.3.0-111.EL" test_ref="oval:com.redhat.rhsa:tst:20060635027"/>
      <criterion comment="XFree86-Xvfb is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635028"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86 is earlier than 0:4.3.0-111.EL" test_ref="oval:com.redhat.rhsa:tst:20060635029"/>
      <criterion comment="XFree86 is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635030"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-tools is earlier than 0:4.3.0-111.EL" test_ref="oval:com.redhat.rhsa:tst:20060635031"/>
      <criterion comment="XFree86-tools is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635032"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-ISO8859-14-75dpi-fonts is earlier than 0:4.3.0-111.EL" test_ref="oval:com.redhat.rhsa:tst:20060635033"/>
      <criterion comment="XFree86-ISO8859-14-75dpi-fonts is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635034"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-doc is earlier than 0:4.3.0-111.EL" test_ref="oval:com.redhat.rhsa:tst:20060635035"/>
      <criterion comment="XFree86-doc is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635036"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-devel is earlier than 0:4.3.0-111.EL" test_ref="oval:com.redhat.rhsa:tst:20060635037"/>
      <criterion comment="XFree86-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635038"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-ISO8859-15-75dpi-fonts is earlier than 0:4.3.0-111.EL" test_ref="oval:com.redhat.rhsa:tst:20060635039"/>
      <criterion comment="XFree86-ISO8859-15-75dpi-fonts is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635040"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-libs is earlier than 0:4.3.0-111.EL" test_ref="oval:com.redhat.rhsa:tst:20060635041"/>
      <criterion comment="XFree86-libs is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635042"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-ISO8859-15-100dpi-fonts is earlier than 0:4.3.0-111.EL" test_ref="oval:com.redhat.rhsa:tst:20060635043"/>
      <criterion comment="XFree86-ISO8859-15-100dpi-fonts is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635044"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-Mesa-libGL is earlier than 0:4.3.0-111.EL" test_ref="oval:com.redhat.rhsa:tst:20060635045"/>
      <criterion comment="XFree86-Mesa-libGL is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635046"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-100dpi-fonts is earlier than 0:4.3.0-111.EL" test_ref="oval:com.redhat.rhsa:tst:20060635047"/>
      <criterion comment="XFree86-100dpi-fonts is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635048"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-sdk is earlier than 0:4.3.0-111.EL" test_ref="oval:com.redhat.rhsa:tst:20060635049"/>
      <criterion comment="XFree86-sdk is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635050"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-xfs is earlier than 0:4.3.0-111.EL" test_ref="oval:com.redhat.rhsa:tst:20060635051"/>
      <criterion comment="XFree86-xfs is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635052"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-libs-data is earlier than 0:4.3.0-111.EL" test_ref="oval:com.redhat.rhsa:tst:20060635053"/>
      <criterion comment="XFree86-libs-data is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635054"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-twm is earlier than 0:4.3.0-111.EL" test_ref="oval:com.redhat.rhsa:tst:20060635055"/>
      <criterion comment="XFree86-twm is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635056"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-Xnest is earlier than 0:4.3.0-111.EL" test_ref="oval:com.redhat.rhsa:tst:20060635057"/>
      <criterion comment="XFree86-Xnest is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635058"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-ISO8859-9-100dpi-fonts is earlier than 0:4.3.0-111.EL" test_ref="oval:com.redhat.rhsa:tst:20060635059"/>
      <criterion comment="XFree86-ISO8859-9-100dpi-fonts is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635060"/>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20060648" version="634">
   <metadata>
    <title>RHSA-2006:0648: kdegraphics security update (Moderate)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
    </affected>
    <reference ref_id="RHSA-2006:0648" ref_url="https://access.redhat.com/errata/RHSA-2006:0648" source="RHSA"/>
    <reference ref_id="CVE-2006-2024" ref_url="https://access.redhat.com/security/cve/CVE-2006-2024" source="CVE"/>
    <reference ref_id="CVE-2006-2025" ref_url="https://access.redhat.com/security/cve/CVE-2006-2025" source="CVE"/>
    <reference ref_id="CVE-2006-2026" ref_url="https://access.redhat.com/security/cve/CVE-2006-2026" source="CVE"/>
    <reference ref_id="CVE-2006-3459" ref_url="https://access.redhat.com/security/cve/CVE-2006-3459" source="CVE"/>
    <reference ref_id="CVE-2006-3460" ref_url="https://access.redhat.com/security/cve/CVE-2006-3460" source="CVE"/>
    <reference ref_id="CVE-2006-3461" ref_url="https://access.redhat.com/security/cve/CVE-2006-3461" source="CVE"/>
    <reference ref_id="CVE-2006-3462" ref_url="https://access.redhat.com/security/cve/CVE-2006-3462" source="CVE"/>
    <reference ref_id="CVE-2006-3463" ref_url="https://access.redhat.com/security/cve/CVE-2006-3463" source="CVE"/>
    <reference ref_id="CVE-2006-3464" ref_url="https://access.redhat.com/security/cve/CVE-2006-3464" source="CVE"/>
    <reference ref_id="CVE-2006-3465" ref_url="https://access.redhat.com/security/cve/CVE-2006-3465" source="CVE"/>
    <description>The kdegraphics package contains graphics applications for the K Desktop
Environment.

Tavis Ormandy of Google discovered a number of flaws in libtiff during a
security audit.  The kfax application contains a copy of the libtiff code
used for parsing TIFF files and is therefore affected by these flaws.  
An attacker who has the ability to trick a user into opening a malicious
TIFF file could cause kfax to crash or possibly execute arbitrary code.
(CVE-2006-3459, CVE-2006-3460, CVE-2006-3461, CVE-2006-3462, CVE-2006-3463,
CVE-2006-3464, CVE-2006-3465)

Red Hat Enterprise Linux 4 is not vulnerable to these issues as kfax uses
the shared libtiff library which has been fixed in a previous update.

Users of kfax should upgrade to these updated packages, which contain
backported patches and are not vulnerable to this issue.</description>
    <advisory from="secalert@redhat.com">
     <severity>Moderate</severity>
     <rights>Copyright 2008 Red Hat, Inc.</rights>
     <issued date="2006-08-28"/>
     <updated date="2008-03-20"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-2024" impact="important" public="20060303">CVE-2006-2024</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-2025" impact="important" public="20060303">CVE-2006-2025</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-2026" impact="important" public="20060303">CVE-2006-2026</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-3459" impact="important" public="20060801">CVE-2006-3459</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-3460" impact="important" public="20060801">CVE-2006-3460</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-3461" impact="important" public="20060801">CVE-2006-3461</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-3462" impact="important" public="20060801">CVE-2006-3462</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-3463" impact="important" public="20060801">CVE-2006-3463</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-3464" impact="important" public="20060801">CVE-2006-3464</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-3465" impact="important" public="20060801">CVE-2006-3465</cve>
     <bugzilla href="https://bugzilla.redhat.com/201313" id="201313">CVE-2006-3459 kfax affected by libtiff flaws (CVE-2006-3460 CVE-2006-3461 CVE-2006-3462 CVE-2006-3463 CVE-2006-3464 CVE-2006-3465)</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="AND">
    <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
    <criteria operator="OR">
     <criteria operator="AND">
      <criterion comment="kdegraphics is earlier than 7:3.1.3-3.10" test_ref="oval:com.redhat.rhsa:tst:20060648001"/>
      <criterion comment="kdegraphics is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060648002"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="kdegraphics-devel is earlier than 7:3.1.3-3.10" test_ref="oval:com.redhat.rhsa:tst:20060648003"/>
      <criterion comment="kdegraphics-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060648004"/>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20060658" version="644">
   <metadata>
    <title>RHSA-2006:0658: wireshark security update (Low)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
    </affected>
    <reference ref_id="RHSA-2006:0658" ref_url="https://access.redhat.com/errata/RHSA-2006:0658" source="RHSA"/>
    <reference ref_id="CVE-2006-4330" ref_url="https://access.redhat.com/security/cve/CVE-2006-4330" source="CVE"/>
    <reference ref_id="CVE-2006-4331" ref_url="https://access.redhat.com/security/cve/CVE-2006-4331" source="CVE"/>
    <reference ref_id="CVE-2006-4333" ref_url="https://access.redhat.com/security/cve/CVE-2006-4333" source="CVE"/>
    <description>Wireshark is a program for monitoring network traffic.

Bugs were found in Wireshark's SCSI and SSCOP protocol dissectors. Ethereal
could crash or stop responding if it read a malformed packet off the
network. (CVE-2006-4330, CVE-2006-4333)

An off-by-one bug was found in the IPsec ESP decryption preference parser.
Ethereal could crash or stop responding if it read a malformed packet off
the network. (CVE-2006-4331)

Users of Wireshark or Ethereal should upgrade to these updated packages
containing Wireshark version 0.99.3, which is not vulnerable to these
issues.   These packages also fix a bug in the PAM configuration of the
Wireshark packages which prevented non-root users starting a capture.</description>
    <advisory from="secalert@redhat.com">
     <severity>Low</severity>
     <rights>Copyright 2008 Red Hat, Inc.</rights>
     <issued date="2006-09-12"/>
     <updated date="2008-03-20"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-4330" public="20060823">CVE-2006-4330</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-4331" public="20060823">CVE-2006-4331</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-4333" public="20060823">CVE-2006-4333</cve>
     <bugzilla href="https://bugzilla.redhat.com/204045" id="204045">CVE-2006-4330 Wireshark security issues (CVE-2006-4331 CVE-2006-4333)</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/204066" id="204066">wireshark doesn't work as non root user</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="wireshark is earlier than 0:0.99.3-EL3.2" test_ref="oval:com.redhat.rhsa:tst:20060658001"/>
       <criterion comment="wireshark is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060602002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="wireshark-gnome is earlier than 0:0.99.3-EL3.2" test_ref="oval:com.redhat.rhsa:tst:20060658003"/>
       <criterion comment="wireshark-gnome is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060602004"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="wireshark is earlier than 0:0.99.3-EL4.2" test_ref="oval:com.redhat.rhsa:tst:20060658006"/>
       <criterion comment="wireshark is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060602002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="wireshark-gnome is earlier than 0:0.99.3-EL4.2" test_ref="oval:com.redhat.rhsa:tst:20060658007"/>
       <criterion comment="wireshark-gnome is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060602004"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20060661" version="638">
   <metadata>
    <title>RHSA-2006:0661: openssl security update (Important)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
    </affected>
    <reference ref_id="RHSA-2006:0661" ref_url="https://access.redhat.com/errata/RHSA-2006:0661" source="RHSA"/>
    <reference ref_id="CVE-2006-4339" ref_url="https://access.redhat.com/security/cve/CVE-2006-4339" source="CVE"/>
    <description>The OpenSSL toolkit provides support for secure communications between
machines. OpenSSL includes a certificate management tool and shared
libraries which provide various cryptographic algorithms and protocols.

Daniel Bleichenbacher recently described an attack on PKCS #1 v1.5
signatures.  Where an RSA key with exponent 3 is used it may be possible
for an attacker to forge a PKCS #1 v1.5 signature that would be incorrectly
verified by implementations that do not check for excess data in the RSA
exponentiation result of the signature.  

The Google Security Team discovered that OpenSSL is vulnerable to this
attack.  This issue affects applications that use OpenSSL to verify X.509
certificates as well as other uses of PKCS #1 v1.5.  (CVE-2006-4339)

This errata also resolves a problem where a customized ca-bundle.crt file
was overwritten when the openssl package was upgraded.

Users are advised to upgrade to these updated packages, which contain a
backported patch to correct this issue.

Note: After installing this update, users are advised to either restart all
services that use OpenSSL or restart their system.</description>
    <advisory from="secalert@redhat.com">
     <severity>Important</severity>
     <rights>Copyright 2006 Red Hat, Inc.</rights>
     <issued date="2006-09-06"/>
     <updated date="2006-09-06"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-4339" public="20060905">CVE-2006-4339</cve>
     <bugzilla href="https://bugzilla.redhat.com/170740" id="170740">Custom ca-bundle.crt overwritten on upgrade</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/175811" id="175811">Custom ca-bundle.crt overwritten on upgrade</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/205180" id="205180">CVE-2006-4339 RSA signature forgery</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="openssl096b is earlier than 0:0.9.6b-16.43" test_ref="oval:com.redhat.rhsa:tst:20060661001"/>
       <criterion comment="openssl096b is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060661002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openssl-perl is earlier than 0:0.9.7a-33.18" test_ref="oval:com.redhat.rhsa:tst:20060661003"/>
       <criterion comment="openssl-perl is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060661004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openssl is earlier than 0:0.9.7a-33.18" test_ref="oval:com.redhat.rhsa:tst:20060661005"/>
       <criterion comment="openssl is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060661006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openssl-devel is earlier than 0:0.9.7a-33.18" test_ref="oval:com.redhat.rhsa:tst:20060661007"/>
       <criterion comment="openssl-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060661008"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="openssl096b is earlier than 0:0.9.6b-22.43" test_ref="oval:com.redhat.rhsa:tst:20060661010"/>
       <criterion comment="openssl096b is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060661002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openssl is earlier than 0:0.9.7a-43.11" test_ref="oval:com.redhat.rhsa:tst:20060661011"/>
       <criterion comment="openssl is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060661006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openssl-devel is earlier than 0:0.9.7a-43.11" test_ref="oval:com.redhat.rhsa:tst:20060661012"/>
       <criterion comment="openssl-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060661008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openssl-perl is earlier than 0:0.9.7a-43.11" test_ref="oval:com.redhat.rhsa:tst:20060661013"/>
       <criterion comment="openssl-perl is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060661004"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20060663" version="643">
   <metadata>
    <title>RHSA-2006:0663: ncompress security update (Low)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
    </affected>
    <reference ref_id="RHSA-2006:0663" ref_url="https://access.redhat.com/errata/RHSA-2006:0663" source="RHSA"/>
    <reference ref_id="CVE-2006-1168" ref_url="https://access.redhat.com/security/cve/CVE-2006-1168" source="CVE"/>
    <description>The ncompress package contains file compression and decompression
utilities, which are compatible with the original UNIX compress utility (.Z
file extensions).

Tavis Ormandy of the Google Security Team discovered a lack of bounds
checking in ncompress. An attacker could create a carefully crafted file
that could execute arbitrary code if uncompressed by a victim. (CVE-2006-1168)

In addition, two bugs that affected Red Hat Enterprise Linux 4 ncompress
packages were fixed:

* The display statistics and compression results in verbose mode were not
shown when operating on zero length files.

* An attempt to compress zero length files resulted in an unexpected return
code.

Users of ncompress are advised to upgrade to these updated packages, which
contain backported patches to correct these issues.</description>
    <advisory from="secalert@redhat.com">
     <severity>Low</severity>
     <rights>Copyright 2008 Red Hat, Inc.</rights>
     <issued date="2006-09-12"/>
     <updated date="2008-03-20"/>
     <cve cvss2="5.1/AV:N/AC:H/Au:N/C:P/I:P/A:P" href="https://access.redhat.com/security/cve/CVE-2006-1168" impact="moderate" public="20060808">CVE-2006-1168</cve>
     <bugzilla href="https://bugzilla.redhat.com/189215" id="189215">ncompress does not display statistics when compressing 0 length files</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/189216" id="189216">Bad return code when compressing 0 length files</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/201335" id="201335">CVE-2006-1168 Possibility to underflow a .bss buffer with attacker controlled data</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criterion comment="ncompress is earlier than 0:4.2.4-39.rhel3" test_ref="oval:com.redhat.rhsa:tst:20060663001"/>
     <criterion comment="ncompress is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060663002"/>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criterion comment="ncompress is earlier than 0:4.2.4-43.rhel4" test_ref="oval:com.redhat.rhsa:tst:20060663004"/>
     <criterion comment="ncompress is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060663002"/>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20060666" version="634">
   <metadata>
    <title>RHSA-2006:0666: XFree86 security update (Important)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
    </affected>
    <reference ref_id="RHSA-2006:0666" ref_url="https://access.redhat.com/errata/RHSA-2006:0666" source="RHSA"/>
    <reference ref_id="CVE-2006-3739" ref_url="https://access.redhat.com/security/cve/CVE-2006-3739" source="CVE"/>
    <reference ref_id="CVE-2006-3740" ref_url="https://access.redhat.com/security/cve/CVE-2006-3740" source="CVE"/>
    <description>XFree86 is an implementation of the X Window System, which provides the
core functionality for the Linux graphical desktop.

iDefense reported two integer overflow flaws in the way the XFree86 server
processed CID font files. A malicious authorized client could exploit this
issue to cause a denial of service (crash) or potentially execute arbitrary
code with root privileges on the XFree86 server. (CVE-2006-3739,
CVE-2006-3740) 

Users of XFree86 should upgrade to these updated packages, which contain a
backported patch and is not vulnerable to this issue.</description>
    <advisory from="secalert@redhat.com">
     <severity>Important</severity>
     <rights>Copyright 2006 Red Hat, Inc.</rights>
     <issued date="2006-09-12"/>
     <updated date="2006-09-12"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-3739" public="20060912">CVE-2006-3739</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-3740" public="20060912">CVE-2006-3740</cve>
     <bugzilla href="https://bugzilla.redhat.com/204549" id="204549">CVE-2006-3739 X CID font parser multiple integer overflows (CVE-2006-3740)</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="AND">
    <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
    <criteria operator="OR">
     <criteria operator="AND">
      <criterion comment="XFree86-ISO8859-2-75dpi-fonts is earlier than 0:4.3.0-113.EL" test_ref="oval:com.redhat.rhsa:tst:20060666001"/>
      <criterion comment="XFree86-ISO8859-2-75dpi-fonts is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635004"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-Xnest is earlier than 0:4.3.0-113.EL" test_ref="oval:com.redhat.rhsa:tst:20060666003"/>
      <criterion comment="XFree86-Xnest is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635058"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-ISO8859-14-75dpi-fonts is earlier than 0:4.3.0-113.EL" test_ref="oval:com.redhat.rhsa:tst:20060666005"/>
      <criterion comment="XFree86-ISO8859-14-75dpi-fonts is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635034"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-ISO8859-9-100dpi-fonts is earlier than 0:4.3.0-113.EL" test_ref="oval:com.redhat.rhsa:tst:20060666007"/>
      <criterion comment="XFree86-ISO8859-9-100dpi-fonts is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635060"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-ISO8859-2-100dpi-fonts is earlier than 0:4.3.0-113.EL" test_ref="oval:com.redhat.rhsa:tst:20060666009"/>
      <criterion comment="XFree86-ISO8859-2-100dpi-fonts is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635016"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-ISO8859-15-75dpi-fonts is earlier than 0:4.3.0-113.EL" test_ref="oval:com.redhat.rhsa:tst:20060666011"/>
      <criterion comment="XFree86-ISO8859-15-75dpi-fonts is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635040"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-doc is earlier than 0:4.3.0-113.EL" test_ref="oval:com.redhat.rhsa:tst:20060666013"/>
      <criterion comment="XFree86-doc is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635036"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-Mesa-libGLU is earlier than 0:4.3.0-113.EL" test_ref="oval:com.redhat.rhsa:tst:20060666015"/>
      <criterion comment="XFree86-Mesa-libGLU is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635002"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-ISO8859-15-100dpi-fonts is earlier than 0:4.3.0-113.EL" test_ref="oval:com.redhat.rhsa:tst:20060666017"/>
      <criterion comment="XFree86-ISO8859-15-100dpi-fonts is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635044"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-font-utils is earlier than 0:4.3.0-113.EL" test_ref="oval:com.redhat.rhsa:tst:20060666019"/>
      <criterion comment="XFree86-font-utils is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635006"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-ISO8859-14-100dpi-fonts is earlier than 0:4.3.0-113.EL" test_ref="oval:com.redhat.rhsa:tst:20060666021"/>
      <criterion comment="XFree86-ISO8859-14-100dpi-fonts is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635010"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-base-fonts is earlier than 0:4.3.0-113.EL" test_ref="oval:com.redhat.rhsa:tst:20060666023"/>
      <criterion comment="XFree86-base-fonts is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635008"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-tools is earlier than 0:4.3.0-113.EL" test_ref="oval:com.redhat.rhsa:tst:20060666025"/>
      <criterion comment="XFree86-tools is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635032"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-Xvfb is earlier than 0:4.3.0-113.EL" test_ref="oval:com.redhat.rhsa:tst:20060666027"/>
      <criterion comment="XFree86-Xvfb is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635028"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-xauth is earlier than 0:4.3.0-113.EL" test_ref="oval:com.redhat.rhsa:tst:20060666029"/>
      <criterion comment="XFree86-xauth is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635018"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-truetype-fonts is earlier than 0:4.3.0-113.EL" test_ref="oval:com.redhat.rhsa:tst:20060666031"/>
      <criterion comment="XFree86-truetype-fonts is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635020"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-devel is earlier than 0:4.3.0-113.EL" test_ref="oval:com.redhat.rhsa:tst:20060666033"/>
      <criterion comment="XFree86-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635038"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-syriac-fonts is earlier than 0:4.3.0-113.EL" test_ref="oval:com.redhat.rhsa:tst:20060666035"/>
      <criterion comment="XFree86-syriac-fonts is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635024"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-xdm is earlier than 0:4.3.0-113.EL" test_ref="oval:com.redhat.rhsa:tst:20060666037"/>
      <criterion comment="XFree86-xdm is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635022"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-ISO8859-9-75dpi-fonts is earlier than 0:4.3.0-113.EL" test_ref="oval:com.redhat.rhsa:tst:20060666039"/>
      <criterion comment="XFree86-ISO8859-9-75dpi-fonts is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635012"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-libs-data is earlier than 0:4.3.0-113.EL" test_ref="oval:com.redhat.rhsa:tst:20060666041"/>
      <criterion comment="XFree86-libs-data is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635054"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-twm is earlier than 0:4.3.0-113.EL" test_ref="oval:com.redhat.rhsa:tst:20060666043"/>
      <criterion comment="XFree86-twm is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635056"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86 is earlier than 0:4.3.0-113.EL" test_ref="oval:com.redhat.rhsa:tst:20060666045"/>
      <criterion comment="XFree86 is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635030"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-cyrillic-fonts is earlier than 0:4.3.0-113.EL" test_ref="oval:com.redhat.rhsa:tst:20060666047"/>
      <criterion comment="XFree86-cyrillic-fonts is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635014"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-Mesa-libGL is earlier than 0:4.3.0-113.EL" test_ref="oval:com.redhat.rhsa:tst:20060666049"/>
      <criterion comment="XFree86-Mesa-libGL is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635046"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-libs is earlier than 0:4.3.0-113.EL" test_ref="oval:com.redhat.rhsa:tst:20060666051"/>
      <criterion comment="XFree86-libs is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635042"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-100dpi-fonts is earlier than 0:4.3.0-113.EL" test_ref="oval:com.redhat.rhsa:tst:20060666053"/>
      <criterion comment="XFree86-100dpi-fonts is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635048"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-sdk is earlier than 0:4.3.0-113.EL" test_ref="oval:com.redhat.rhsa:tst:20060666055"/>
      <criterion comment="XFree86-sdk is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635050"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-xfs is earlier than 0:4.3.0-113.EL" test_ref="oval:com.redhat.rhsa:tst:20060666057"/>
      <criterion comment="XFree86-xfs is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635052"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-75dpi-fonts is earlier than 0:4.3.0-113.EL" test_ref="oval:com.redhat.rhsa:tst:20060666059"/>
      <criterion comment="XFree86-75dpi-fonts is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635026"/>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20060667" version="633">
   <metadata>
    <title>RHSA-2006:0667: gzip security update (Moderate)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
    </affected>
    <reference ref_id="RHSA-2006:0667" ref_url="https://access.redhat.com/errata/RHSA-2006:0667" source="RHSA"/>
    <reference ref_id="CVE-2006-4334" ref_url="https://access.redhat.com/security/cve/CVE-2006-4334" source="CVE"/>
    <reference ref_id="CVE-2006-4335" ref_url="https://access.redhat.com/security/cve/CVE-2006-4335" source="CVE"/>
    <reference ref_id="CVE-2006-4336" ref_url="https://access.redhat.com/security/cve/CVE-2006-4336" source="CVE"/>
    <reference ref_id="CVE-2006-4337" ref_url="https://access.redhat.com/security/cve/CVE-2006-4337" source="CVE"/>
    <reference ref_id="CVE-2006-4338" ref_url="https://access.redhat.com/security/cve/CVE-2006-4338" source="CVE"/>
    <description>The gzip package contains the GNU gzip data compression program.

Tavis Ormandy of the Google Security Team discovered two denial of service
flaws in the way gzip expanded archive files. If a victim expanded a
specially crafted archive, it could cause the gzip executable to hang or
crash. (CVE-2006-4334, CVE-2006-4338)

Tavis Ormandy of the Google Security Team discovered several code execution
flaws in the way gzip expanded archive files. If a victim expanded a
specially crafted archive, it could cause the gzip executable to crash or
execute arbitrary code. (CVE-2006-4335, CVE-2006-4336, CVE-2006-4337)

Users of gzip should upgrade to these updated packages, which contain a
backported patch and is not vulnerable to these issues.</description>
    <advisory from="secalert@redhat.com">
     <severity>Moderate</severity>
     <rights>Copyright 2006 Red Hat, Inc.</rights>
     <issued date="2006-09-19"/>
     <updated date="2006-09-19"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-4334" impact="low" public="20060919">CVE-2006-4334</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-4335" impact="low" public="20061202">CVE-2006-4335</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-4336" impact="low" public="20061202">CVE-2006-4336</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-4337" impact="low" public="20061202">CVE-2006-4337</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-4338" impact="low" public="20060919">CVE-2006-4338</cve>
     <bugzilla href="https://bugzilla.redhat.com/204676" id="204676">CVE-2006-4334 gzip multiple issues (CVE-2006-4335, CVE-2006-4336, CVE-2006-4337, CVE-2006-4338)</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criterion comment="gzip is earlier than 0:1.3.3-13.rhel3" test_ref="oval:com.redhat.rhsa:tst:20060667001"/>
     <criterion comment="gzip is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060667002"/>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criterion comment="gzip is earlier than 0:1.3.3-16.rhel4" test_ref="oval:com.redhat.rhsa:tst:20060667004"/>
     <criterion comment="gzip is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060667002"/>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20060668" version="639">
   <metadata>
    <title>RHSA-2006:0668: squirrelmail security update (Moderate)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
    </affected>
    <reference ref_id="RHSA-2006:0668" ref_url="https://access.redhat.com/errata/RHSA-2006:0668" source="RHSA"/>
    <reference ref_id="CVE-2006-4019" ref_url="https://access.redhat.com/security/cve/CVE-2006-4019" source="CVE"/>
    <description>SquirrelMail is a standards-based webmail package written in PHP.

A dynamic variable evaluation flaw was found in SquirrelMail.  Users who
have an account on a SquirrelMail server and are logged in could use this
flaw to overwrite variables which may allow them to read or write other
users' preferences or attachments.  (CVE-2006-4019)

Users of SquirrelMail should upgrade to this erratum package, which
contains SquirrelMail 1.4.8 to correct this issue.  This package also
contains a number of additional patches to correct various bugs.

Note: After installing this update, users are advised to restart their httpd
service to ensure that the new version functions correctly.</description>
    <advisory from="secalert@redhat.com">
     <severity>Moderate</severity>
     <rights>Copyright 2006 Red Hat, Inc.</rights>
     <issued date="2006-09-26"/>
     <updated date="2006-09-26"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-4019" public="20060811">CVE-2006-4019</cve>
     <bugzilla href="https://bugzilla.redhat.com/192236" id="192236">[Squirrelmail] sqspell_config.php not listed as a config file</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/194457" id="194457">squirrelmail cannot handle handle multibyte characters in attachment.</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/194598" id="194598">&quot;Message Highlighting&quot; help not translated in ja_JP</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/194599" id="194599">ja_JP help pages are garbled</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/195452" id="195452">squirrelmail view_text.php cannot handle handle multibyte characters in attachment.</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/195639" id="195639">Squirrelmail file download issue on JP MS Windows XP.</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/196017" id="196017">squirrelmail cannot convert Subject to zen-kaku kata-kana.</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/196117" id="196117">Wrong ja_JP translation for &quot;refresh folder list&quot;</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/202195" id="202195">CVE-2006-4019 Squirrelmail authenticated user variable overwriting</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criterion comment="squirrelmail is earlier than 0:1.4.8-2.el3" test_ref="oval:com.redhat.rhsa:tst:20060668001"/>
     <criterion comment="squirrelmail is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060283002"/>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criterion comment="squirrelmail is earlier than 0:1.4.8-2.el4" test_ref="oval:com.redhat.rhsa:tst:20060668004"/>
     <criterion comment="squirrelmail is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060283002"/>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20060669" version="642">
   <metadata>
    <title>RHSA-2006:0669: php security update (Moderate)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
    </affected>
    <reference ref_id="RHSA-2006:0669" ref_url="https://access.redhat.com/errata/RHSA-2006:0669" source="RHSA"/>
    <reference ref_id="CVE-2006-3016" ref_url="https://access.redhat.com/security/cve/CVE-2006-3016" source="CVE"/>
    <reference ref_id="CVE-2006-4020" ref_url="https://access.redhat.com/security/cve/CVE-2006-4020" source="CVE"/>
    <reference ref_id="CVE-2006-4482" ref_url="https://access.redhat.com/security/cve/CVE-2006-4482" source="CVE"/>
    <reference ref_id="CVE-2006-4484" ref_url="https://access.redhat.com/security/cve/CVE-2006-4484" source="CVE"/>
    <reference ref_id="CVE-2006-4486" ref_url="https://access.redhat.com/security/cve/CVE-2006-4486" source="CVE"/>
    <description>PHP is an HTML-embedded scripting language commonly used with the Apache
HTTP Web server.

A response-splitting issue was discovered in the PHP session handling.  If
a remote attacker can force a carefully crafted session identifier to be
used, a cross-site-scripting or response-splitting attack could be
possible.  (CVE-2006-3016)

A buffer overflow was discovered in the PHP sscanf() function.  If a script
used the sscanf() function with positional arguments in the format string,
a remote attacker sending a carefully crafted request could execute
arbitrary code as the 'apache' user.  (CVE-2006-4020)

An integer overflow was discovered in the PHP wordwrap() and str_repeat()
functions.  If a script running on a 64-bit server used either of these
functions on untrusted user data, a remote attacker sending a carefully
crafted request might be able to cause a heap overflow.  (CVE-2006-4482)

A buffer overflow was discovered in the PHP gd extension.  If a script was
set up to process GIF images from untrusted sources using the gd extension,
a remote attacker could cause a heap overflow.  (CVE-2006-4484)

An integer overflow was discovered in the PHP memory allocation handling. 
On 64-bit platforms, the &quot;memory_limit&quot; setting was not enforced correctly,
which could allow a denial of service attack by a remote user.  (CVE-2006-4486)

Users of PHP should upgrade to these updated packages which contain
backported patches to correct these issues.  These packages also contain a
fix for a bug where certain input strings to the metaphone() function could
cause memory corruption.</description>
    <advisory from="secalert@redhat.com">
     <severity>Moderate</severity>
     <rights>Copyright 2006 Red Hat, Inc.</rights>
     <issued date="2006-09-21"/>
     <updated date="2006-09-21"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-3016" public="20060502">CVE-2006-3016</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-4020" impact="low" public="20060804">CVE-2006-4020</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-4482" public="20060817">CVE-2006-4482</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-4484" public="20060716">CVE-2006-4484</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-4486" public="20060818">CVE-2006-4486</cve>
     <bugzilla href="https://bugzilla.redhat.com/201766" id="201766">CVE-2006-4020 PHP buffer overread flaw</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/204993" id="204993">CVE-2006-4482 PHP heap overflow</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/205714" id="205714">metaphone() function causing Apache segfaults</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/206664" id="206664">CVE-2006-4486 PHP integer overflows in Zend</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/206956" id="206956">CVE-2006-4484 PHP heap overflow in LWZReadByte</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/206959" id="206959">CVE-2006-3016 PHP session ID validation</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="php-imap is earlier than 0:4.3.2-36.ent" test_ref="oval:com.redhat.rhsa:tst:20060669001"/>
       <criterion comment="php-imap is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276010"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php is earlier than 0:4.3.2-36.ent" test_ref="oval:com.redhat.rhsa:tst:20060669003"/>
       <criterion comment="php is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-mysql is earlier than 0:4.3.2-36.ent" test_ref="oval:com.redhat.rhsa:tst:20060669005"/>
       <criterion comment="php-mysql is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276014"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-odbc is earlier than 0:4.3.2-36.ent" test_ref="oval:com.redhat.rhsa:tst:20060669007"/>
       <criterion comment="php-odbc is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-pgsql is earlier than 0:4.3.2-36.ent" test_ref="oval:com.redhat.rhsa:tst:20060669009"/>
       <criterion comment="php-pgsql is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276012"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-ldap is earlier than 0:4.3.2-36.ent" test_ref="oval:com.redhat.rhsa:tst:20060669011"/>
       <criterion comment="php-ldap is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-devel is earlier than 0:4.3.2-36.ent" test_ref="oval:com.redhat.rhsa:tst:20060669013"/>
       <criterion comment="php-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276008"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="php-snmp is earlier than 0:4.3.9-3.18" test_ref="oval:com.redhat.rhsa:tst:20060669016"/>
       <criterion comment="php-snmp is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276024"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-ncurses is earlier than 0:4.3.9-3.18" test_ref="oval:com.redhat.rhsa:tst:20060669018"/>
       <criterion comment="php-ncurses is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276026"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-pear is earlier than 0:4.3.9-3.18" test_ref="oval:com.redhat.rhsa:tst:20060669020"/>
       <criterion comment="php-pear is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276028"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-mbstring is earlier than 0:4.3.9-3.18" test_ref="oval:com.redhat.rhsa:tst:20060669022"/>
       <criterion comment="php-mbstring is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276030"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-domxml is earlier than 0:4.3.9-3.18" test_ref="oval:com.redhat.rhsa:tst:20060669024"/>
       <criterion comment="php-domxml is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276032"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-ldap is earlier than 0:4.3.9-3.18" test_ref="oval:com.redhat.rhsa:tst:20060669026"/>
       <criterion comment="php-ldap is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-devel is earlier than 0:4.3.9-3.18" test_ref="oval:com.redhat.rhsa:tst:20060669027"/>
       <criterion comment="php-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-gd is earlier than 0:4.3.9-3.18" test_ref="oval:com.redhat.rhsa:tst:20060669028"/>
       <criterion comment="php-gd is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276035"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-imap is earlier than 0:4.3.9-3.18" test_ref="oval:com.redhat.rhsa:tst:20060669030"/>
       <criterion comment="php-imap is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276010"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-pgsql is earlier than 0:4.3.9-3.18" test_ref="oval:com.redhat.rhsa:tst:20060669031"/>
       <criterion comment="php-pgsql is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276012"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-xmlrpc is earlier than 0:4.3.9-3.18" test_ref="oval:com.redhat.rhsa:tst:20060669032"/>
       <criterion comment="php-xmlrpc is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276019"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-odbc is earlier than 0:4.3.9-3.18" test_ref="oval:com.redhat.rhsa:tst:20060669034"/>
       <criterion comment="php-odbc is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php is earlier than 0:4.3.9-3.18" test_ref="oval:com.redhat.rhsa:tst:20060669035"/>
       <criterion comment="php is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-mysql is earlier than 0:4.3.9-3.18" test_ref="oval:com.redhat.rhsa:tst:20060669036"/>
       <criterion comment="php-mysql is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276014"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20060676" version="640">
   <metadata>
    <title>RHSA-2006:0676: seamonkey security update (Critical)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
    </affected>
    <reference ref_id="RHSA-2006:0676" ref_url="https://access.redhat.com/errata/RHSA-2006:0676" source="RHSA"/>
    <reference ref_id="CVE-2006-4253" ref_url="https://access.redhat.com/security/cve/CVE-2006-4253" source="CVE"/>
    <reference ref_id="CVE-2006-4340" ref_url="https://access.redhat.com/security/cve/CVE-2006-4340" source="CVE"/>
    <reference ref_id="CVE-2006-4565" ref_url="https://access.redhat.com/security/cve/CVE-2006-4565" source="CVE"/>
    <reference ref_id="CVE-2006-4566" ref_url="https://access.redhat.com/security/cve/CVE-2006-4566" source="CVE"/>
    <reference ref_id="CVE-2006-4568" ref_url="https://access.redhat.com/security/cve/CVE-2006-4568" source="CVE"/>
    <reference ref_id="CVE-2006-4570" ref_url="https://access.redhat.com/security/cve/CVE-2006-4570" source="CVE"/>
    <reference ref_id="CVE-2006-4571" ref_url="https://access.redhat.com/security/cve/CVE-2006-4571" source="CVE"/>
    <description>SeaMonkey is an open source Web browser, advanced email and newsgroup
client, IRC chat client, and HTML editor.

Two flaws were found in the way SeaMonkey processed certain regular
expressions.  A malicious web page could crash the browser or possibly
execute arbitrary code as the user running SeaMonkey.  (CVE-2006-4565,
CVE-2006-4566)

A flaw was found in the handling of Javascript timed events. A malicious
web page could crash the browser or possibly execute arbitrary code as the
user running SeaMonkey. (CVE-2006-4253)

Daniel Bleichenbacher recently described an implementation error in RSA
signature verification.  For RSA keys with exponent 3 it is possible for an
attacker to forge a signature that would be incorrectly verified by the NSS
library. SeaMonkey as shipped trusts several root Certificate Authorities
that use exponent 3.  An attacker could have created a carefully crafted
SSL certificate which be incorrectly trusted when their site was visited by
a victim. (CVE-2006-4340)

SeaMonkey did not properly prevent a frame in one domain from injecting
content into a sub-frame that belongs to another domain, which facilitates
website spoofing and other attacks (CVE-2006-4568)

A flaw was found in SeaMonkey Messenger triggered when a HTML message
contained a remote image pointing to a XBL script.  An attacker could have
created a carefully crafted message which would execute Javascript if
certain actions were performed on the email by the recipient, even if
Javascript was disabled. (CVE-2006-4570)

A number of flaws were found in SeaMonkey.  A malicious web page could
crash the browser or possibly execute arbitrary code as the user running
SeaMonkey.  (CVE-2006-4571)

Users of SeaMonkey or Mozilla are advised to upgrade to this update, which
contains SeaMonkey version 1.0.5 that corrects these issues.

For users of Red Hat Enterprise Linux 2.1 this SeaMonkey update obsoletes
Galeon.  Galeon was a web browser based on the Mozilla Gecko layout engine.</description>
    <advisory from="secalert@redhat.com">
     <severity>Critical</severity>
     <rights>Copyright 2006 Red Hat, Inc.</rights>
     <issued date="2006-09-15"/>
     <updated date="2006-09-15"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-4253" impact="important" public="20060812">CVE-2006-4253</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-4340" impact="important" public="20060915:0001">CVE-2006-4340</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-4565" public="20060915:0001">CVE-2006-4565</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-4566" public="20060915:0001">CVE-2006-4566</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-4568" impact="moderate" public="20060915:0001">CVE-2006-4568</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-4570" impact="important" public="20060915:0001">CVE-2006-4570</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-4571" public="20060915:0001">CVE-2006-4571</cve>
     <bugzilla href="https://bugzilla.redhat.com/206429" id="206429">CVE-2006-4340 Various SeaMonkey security issues (CVE-2006-4253 CVE-2006-4565 CVE-2006-4566 CVE-2006-4568 CVE-2006-4570 CVE-2006-4571)</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="seamonkey-nss is earlier than 0:1.0.5-0.1.el3" test_ref="oval:com.redhat.rhsa:tst:20060676001"/>
       <criterion comment="seamonkey-nss is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578016"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-mail is earlier than 0:1.0.5-0.1.el3" test_ref="oval:com.redhat.rhsa:tst:20060676003"/>
       <criterion comment="seamonkey-mail is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578020"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey is earlier than 0:1.0.5-0.1.el3" test_ref="oval:com.redhat.rhsa:tst:20060676005"/>
       <criterion comment="seamonkey is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578018"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.5-0.1.el3" test_ref="oval:com.redhat.rhsa:tst:20060676007"/>
       <criterion comment="seamonkey-nspr-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-nspr is earlier than 0:1.0.5-0.1.el3" test_ref="oval:com.redhat.rhsa:tst:20060676009"/>
       <criterion comment="seamonkey-nspr is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578010"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.5-0.1.el3" test_ref="oval:com.redhat.rhsa:tst:20060676011"/>
       <criterion comment="seamonkey-dom-inspector is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.5-0.1.el3" test_ref="oval:com.redhat.rhsa:tst:20060676013"/>
       <criterion comment="seamonkey-nss-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578012"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-devel is earlier than 0:1.0.5-0.1.el3" test_ref="oval:com.redhat.rhsa:tst:20060676015"/>
       <criterion comment="seamonkey-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578014"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-chat is earlier than 0:1.0.5-0.1.el3" test_ref="oval:com.redhat.rhsa:tst:20060676017"/>
       <criterion comment="seamonkey-chat is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.5-0.1.el3" test_ref="oval:com.redhat.rhsa:tst:20060676019"/>
       <criterion comment="seamonkey-js-debugger is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578008"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="seamonkey-mail is earlier than 0:1.0.5-0.1.el4" test_ref="oval:com.redhat.rhsa:tst:20060676022"/>
       <criterion comment="seamonkey-mail is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578020"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey is earlier than 0:1.0.5-0.1.el4" test_ref="oval:com.redhat.rhsa:tst:20060676023"/>
       <criterion comment="seamonkey is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578018"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.5-0.1.el4" test_ref="oval:com.redhat.rhsa:tst:20060676024"/>
       <criterion comment="seamonkey-dom-inspector is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-devel is earlier than 0:1.0.5-0.1.el4" test_ref="oval:com.redhat.rhsa:tst:20060676025"/>
       <criterion comment="seamonkey-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578014"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-chat is earlier than 0:1.0.5-0.1.el4" test_ref="oval:com.redhat.rhsa:tst:20060676026"/>
       <criterion comment="seamonkey-chat is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.5-0.1.el4" test_ref="oval:com.redhat.rhsa:tst:20060676027"/>
       <criterion comment="seamonkey-js-debugger is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="devhelp is earlier than 0:0.10-0.4.el4" test_ref="oval:com.redhat.rhsa:tst:20060676028"/>
       <criterion comment="devhelp is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060329004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="devhelp-devel is earlier than 0:0.10-0.4.el4" test_ref="oval:com.redhat.rhsa:tst:20060676030"/>
       <criterion comment="devhelp-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060329002"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20060695" version="642">
   <metadata>
    <title>RHSA-2006:0695: openssl security update (Important)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
    </affected>
    <reference ref_id="RHSA-2006:0695" ref_url="https://access.redhat.com/errata/RHSA-2006:0695" source="RHSA"/>
    <reference ref_id="CVE-2006-2937" ref_url="https://access.redhat.com/security/cve/CVE-2006-2937" source="CVE"/>
    <reference ref_id="CVE-2006-2940" ref_url="https://access.redhat.com/security/cve/CVE-2006-2940" source="CVE"/>
    <reference ref_id="CVE-2006-3738" ref_url="https://access.redhat.com/security/cve/CVE-2006-3738" source="CVE"/>
    <reference ref_id="CVE-2006-4343" ref_url="https://access.redhat.com/security/cve/CVE-2006-4343" source="CVE"/>
    <description>The OpenSSL toolkit provides support for secure communications between
machines. OpenSSL includes a certificate management tool and shared
libraries which provide various cryptographic algorithms and protocols.

Tavis Ormandy and Will Drewry of the Google Security Team discovered a
buffer overflow in the SSL_get_shared_ciphers() utility function.  An
attacker could send a list of ciphers to an application that used this
function and overrun a buffer (CVE-2006-3738).  Few applications make use
of this vulnerable function and generally it is used only when applications
are compiled for debugging.

Tavis Ormandy and Will Drewry of the Google Security Team discovered a 
flaw in the SSLv2 client code.  When a client application used OpenSSL to
create an SSLv2 connection to a malicious server, that server could cause
the client to crash.  (CVE-2006-4343)

Dr S. N. Henson of the OpenSSL core team and Open Network Security recently
developed an ASN.1 test suite for NISCC (www.niscc.gov.uk) which uncovered
denial of service vulnerabilities: 

* Certain public key types can take disproportionate amounts of time to
process, leading to a denial of service.  (CVE-2006-2940)

* During parsing of certain invalid ASN.1 structures an error condition was
mishandled.  This can result in an infinite loop which consumed system
memory (CVE-2006-2937).  This issue does not affect the OpenSSL version
distributed in Red Hat Enterprise Linux 2.1.

These vulnerabilities can affect applications which use OpenSSL to parse
ASN.1 data from untrusted sources, including SSL servers which enable
client authentication and S/MIME applications.

Users are advised to upgrade to these updated packages, which contain
backported patches to correct these issues.

Note: After installing this update, users are advised to either restart all
services that use OpenSSL or restart their system.</description>
    <advisory from="secalert@redhat.com">
     <severity>Important</severity>
     <rights>Copyright 2008 Red Hat, Inc.</rights>
     <issued date="2006-09-28"/>
     <updated date="2008-03-20"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-2937" impact="low" public="20060928">CVE-2006-2937</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-2940" impact="moderate" public="20060928">CVE-2006-2940</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-3738" public="20060928">CVE-2006-3738</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-4343" impact="low" public="20060928">CVE-2006-4343</cve>
     <bugzilla href="https://bugzilla.redhat.com/206940" id="206940">CVE-2006-3738 OpenSSL issues (CVE-2006-4343)</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/207274" id="207274">CVE-2006-2940 OpenSSL Parasitic Public Keys</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/207276" id="207276">CVE-2006-2937 OpenSSL ASN1 DoS</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="openssl-perl is earlier than 0:0.9.7a-33.21" test_ref="oval:com.redhat.rhsa:tst:20060695001"/>
       <criterion comment="openssl-perl is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060661004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openssl is earlier than 0:0.9.7a-33.21" test_ref="oval:com.redhat.rhsa:tst:20060695003"/>
       <criterion comment="openssl is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060661006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openssl-devel is earlier than 0:0.9.7a-33.21" test_ref="oval:com.redhat.rhsa:tst:20060695005"/>
       <criterion comment="openssl-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060661008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openssl096b is earlier than 0:0.9.6b-16.46" test_ref="oval:com.redhat.rhsa:tst:20060695007"/>
       <criterion comment="openssl096b is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060661002"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="openssl-devel is earlier than 0:0.9.7a-43.14" test_ref="oval:com.redhat.rhsa:tst:20060695010"/>
       <criterion comment="openssl-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060661008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openssl-perl is earlier than 0:0.9.7a-43.14" test_ref="oval:com.redhat.rhsa:tst:20060695011"/>
       <criterion comment="openssl-perl is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060661004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openssl is earlier than 0:0.9.7a-43.14" test_ref="oval:com.redhat.rhsa:tst:20060695012"/>
       <criterion comment="openssl is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060661006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openssl096b is earlier than 0:0.9.6b-22.46" test_ref="oval:com.redhat.rhsa:tst:20060695013"/>
       <criterion comment="openssl096b is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060661002"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20060697" version="639">
   <metadata>
    <title>RHSA-2006:0697: openssh security update (Important)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
    </affected>
    <reference ref_id="RHSA-2006:0697" ref_url="https://access.redhat.com/errata/RHSA-2006:0697" source="RHSA"/>
    <reference ref_id="CVE-2006-4924" ref_url="https://access.redhat.com/security/cve/CVE-2006-4924" source="CVE"/>
    <reference ref_id="CVE-2006-5051" ref_url="https://access.redhat.com/security/cve/CVE-2006-5051" source="CVE"/>
    <description>OpenSSH is OpenBSD's SSH (Secure SHell) protocol implementation. This
package includes the core files necessary for both the OpenSSH client and
server.

Mark Dowd discovered a signal handler race condition in the OpenSSH sshd
server. A remote attacker could possibly leverage this flaw to cause a
denial of service (crash). (CVE-2006-5051) The OpenSSH project believes the
likelihood of successful exploitation leading to arbitrary code execution
appears remote. However, the Red Hat Security Response Team have not yet
been able to verify this claim due to lack of upstream vulnerability
information. We are therefore including a fix for this flaw and have rated
it important security severity in the event our continued investigation
finds this issue to be exploitable.

Tavis Ormandy of the Google Security Team discovered a denial of service
bug in the OpenSSH sshd server. A remote attacker can send a specially
crafted SSH-1 request to the server causing sshd to consume a large
quantity of CPU resources. (CVE-2006-4924)

All users of openssh should upgrade to these updated packages, which
contain backported patches that resolves these issues.</description>
    <advisory from="secalert@redhat.com">
     <severity>Important</severity>
     <rights>Copyright 2008 Red Hat, Inc.</rights>
     <issued date="2006-09-28"/>
     <updated date="2008-03-20"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-4924" impact="moderate" public="20060919">CVE-2006-4924</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-5051" public="20060928">CVE-2006-5051</cve>
     <bugzilla href="https://bugzilla.redhat.com/207955" id="207955">CVE-2006-4924 openssh DoS</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/208347" id="208347">CVE-2006-5051 unsafe GSSAPI signal handler</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="openssh-clients is earlier than 0:3.6.1p2-33.30.12" test_ref="oval:com.redhat.rhsa:tst:20060697001"/>
       <criterion comment="openssh-clients is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060298008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openssh-askpass-gnome is earlier than 0:3.6.1p2-33.30.12" test_ref="oval:com.redhat.rhsa:tst:20060697003"/>
       <criterion comment="openssh-askpass-gnome is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060298002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openssh-askpass is earlier than 0:3.6.1p2-33.30.12" test_ref="oval:com.redhat.rhsa:tst:20060697005"/>
       <criterion comment="openssh-askpass is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060298010"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openssh-server is earlier than 0:3.6.1p2-33.30.12" test_ref="oval:com.redhat.rhsa:tst:20060697007"/>
       <criterion comment="openssh-server is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060298004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openssh is earlier than 0:3.6.1p2-33.30.12" test_ref="oval:com.redhat.rhsa:tst:20060697009"/>
       <criterion comment="openssh is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060298006"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="openssh-server is earlier than 0:3.9p1-8.RHEL4.17" test_ref="oval:com.redhat.rhsa:tst:20060697012"/>
       <criterion comment="openssh-server is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060298004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openssh-askpass is earlier than 0:3.9p1-8.RHEL4.17" test_ref="oval:com.redhat.rhsa:tst:20060697013"/>
       <criterion comment="openssh-askpass is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060298010"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openssh is earlier than 0:3.9p1-8.RHEL4.17" test_ref="oval:com.redhat.rhsa:tst:20060697014"/>
       <criterion comment="openssh is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060298006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openssh-clients is earlier than 0:3.9p1-8.RHEL4.17" test_ref="oval:com.redhat.rhsa:tst:20060697015"/>
       <criterion comment="openssh-clients is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060298008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openssh-askpass-gnome is earlier than 0:3.9p1-8.RHEL4.17" test_ref="oval:com.redhat.rhsa:tst:20060697016"/>
       <criterion comment="openssh-askpass-gnome is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060298002"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20060710" version="637">
   <metadata>
    <title>RHSA-2006:0710: kernel security update (Important)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
    </affected>
    <reference ref_id="RHSA-2006:0710" ref_url="https://access.redhat.com/errata/RHSA-2006:0710" source="RHSA"/>
    <reference ref_id="CVE-2006-1864" ref_url="https://access.redhat.com/security/cve/CVE-2006-1864" source="CVE"/>
    <reference ref_id="CVE-2006-2071" ref_url="https://access.redhat.com/security/cve/CVE-2006-2071" source="CVE"/>
    <reference ref_id="CVE-2006-2935" ref_url="https://access.redhat.com/security/cve/CVE-2006-2935" source="CVE"/>
    <reference ref_id="CVE-2006-4342" ref_url="https://access.redhat.com/security/cve/CVE-2006-4342" source="CVE"/>
    <reference ref_id="CVE-2006-4997" ref_url="https://access.redhat.com/security/cve/CVE-2006-4997" source="CVE"/>
    <reference ref_id="CVE-2006-5174" ref_url="https://access.redhat.com/security/cve/CVE-2006-5174" source="CVE"/>
    <description>The Linux kernel handles the basic functions of the operating system.

These new kernel packages contain fixes for the security issues described
below:

* a flaw in the IPC shared-memory implementation that allowed a local user
to cause a denial of service (deadlock) that resulted in freezing the
system  (CVE-2006-4342, Important)

* an information leak in the copy_from_user() implementation on s390 and
s390x platforms that allowed a local user to read arbitrary kernel memory
(CVE-2006-5174, Important)

* a flaw in the ATM subsystem affecting systems with installed ATM
hardware and configured ATM support that allowed a remote user to cause
a denial of service (panic) by accessing socket buffer memory after it
has been freed  (CVE-2006-4997, Moderate)

* a directory traversal vulnerability in smbfs that allowed a local user
to escape chroot restrictions for an SMB-mounted filesystem via &quot;..\\&quot;
sequences  (CVE-2006-1864, Moderate)

* a flaw in the mprotect system call that allowed enabling write permission
for a read-only attachment of shared memory  (CVE-2006-2071, Moderate)

* a flaw in the DVD handling of the CDROM driver that could be used
together with a custom built USB device to gain root privileges
(CVE-2006-2935, Moderate)

In addition to the security issues described above, a bug fix for a clock
skew problem (which could lead to unintended keyboard repeat under X11)
was also included.  The problem only occurred when running the 32-bit x86
kernel on 64-bit dual-core x86_64 hardware.

Note: The kernel-unsupported package contains various drivers and modules
that are unsupported and therefore might contain security problems that
have not been addressed. 

All Red Hat Enterprise Linux 3 users are advised to upgrade their kernels
to the packages associated with their machine architecture and
configurations as listed in this erratum.</description>
    <advisory from="secalert@redhat.com">
     <severity>Important</severity>
     <rights>Copyright 2006 Red Hat, Inc.</rights>
     <issued date="2006-10-19"/>
     <updated date="2006-10-19"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-1864" impact="moderate" public="20060426">CVE-2006-1864</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-2071" impact="moderate" public="20060417">CVE-2006-2071</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-2935" impact="moderate" public="20060627">CVE-2006-2935</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-4342" public="20061013">CVE-2006-4342</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-4997" impact="moderate" public="20060912">CVE-2006-4997</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-5174" public="20060928">CVE-2006-5174</cve>
     <bugzilla href="https://bugzilla.redhat.com/169428" id="169428">repetitive keystroke issue on both RH3 U5 32bit and RH4 U1 32bit.</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/189436" id="189436">CVE-2006-1864 smbfs chroot issue</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/190074" id="190074">CVE-2006-2071 mprotect gives write permission to a readonly attachment</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/197672" id="197672">CVE-2006-2935 Possible buffer overflow in DVD handling</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/205618" id="205618">CVE-2006-4342 shmat hangs by simultaneous shmctl(IPC_RMID)</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/206270" id="206270">CVE-2006-4997 IP over ATM clip_mkip dereference freed pointer</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/209436" id="209436">CVE-2006-5174 copy_from_user information leak on s390</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="AND">
    <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
    <criteria operator="OR">
     <criteria operator="AND">
      <criterion comment="kernel-doc is earlier than 0:2.4.21-47.0.1.EL" test_ref="oval:com.redhat.rhsa:tst:20060710001"/>
      <criterion comment="kernel-doc is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060140006"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="kernel-unsupported is earlier than 0:2.4.21-47.0.1.EL" test_ref="oval:com.redhat.rhsa:tst:20060710003"/>
      <criterion comment="kernel-unsupported is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060140002"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="kernel is earlier than 0:2.4.21-47.0.1.EL" test_ref="oval:com.redhat.rhsa:tst:20060710005"/>
      <criterion comment="kernel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060140010"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="kernel-source is earlier than 0:2.4.21-47.0.1.EL" test_ref="oval:com.redhat.rhsa:tst:20060710007"/>
      <criterion comment="kernel-source is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060140012"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="kernel-smp is earlier than 0:2.4.21-47.0.1.EL" test_ref="oval:com.redhat.rhsa:tst:20060710009"/>
      <criterion comment="kernel-smp is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060140008"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-47.0.1.EL" test_ref="oval:com.redhat.rhsa:tst:20060710011"/>
      <criterion comment="kernel-smp-unsupported is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060140004"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="kernel-hugemem is earlier than 0:2.4.21-47.0.1.EL" test_ref="oval:com.redhat.rhsa:tst:20060710013"/>
      <criterion comment="kernel-hugemem is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060140018"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-47.0.1.EL" test_ref="oval:com.redhat.rhsa:tst:20060710015"/>
      <criterion comment="kernel-hugemem-unsupported is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060140014"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="kernel-BOOT is earlier than 0:2.4.21-47.0.1.EL" test_ref="oval:com.redhat.rhsa:tst:20060710017"/>
      <criterion comment="kernel-BOOT is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060140016"/>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20060713" version="636">
   <metadata>
    <title>RHSA-2006:0713: python security update (Important)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
    </affected>
    <reference ref_id="RHSA-2006:0713" ref_url="https://access.redhat.com/errata/RHSA-2006:0713" source="RHSA"/>
    <reference ref_id="CVE-2006-4980" ref_url="https://access.redhat.com/security/cve/CVE-2006-4980" source="CVE"/>
    <description>Python is an interpreted, interactive, object-oriented programming language.

A flaw was discovered in the way that the Python repr() function handled
UTF-32/UCS-4 strings.  If an application written in Python used the repr()
function on untrusted data, this could lead to a denial of service or
possibly allow the execution of arbitrary code with the privileges of the
Python application.  (CVE-2006-4980)

In addition, this errata fixes a regression in the SimpleXMLRPCServer
backport for Red Hat Enterprise Linux 3 that was introduced with RHSA-2005:109.

Users of Python should upgrade to these updated packages, which contain a
backported patch to correct this issue.</description>
    <advisory from="secalert@redhat.com">
     <severity>Important</severity>
     <rights>Copyright 2006 Red Hat, Inc.</rights>
     <issued date="2006-10-09"/>
     <updated date="2006-10-09"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-4980" public="20060816">CVE-2006-4980</cve>
     <bugzilla href="https://bugzilla.redhat.com/160418" id="160418">Error in RHEL3-U4-errata python python-2.2-xmlfix.patch</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/208162" id="208162">CVE-2006-4980 repr unicode buffer overflow</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="python-devel is earlier than 0:2.2.3-6.5" test_ref="oval:com.redhat.rhsa:tst:20060713001"/>
       <criterion comment="python-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060197004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="python is earlier than 0:2.2.3-6.5" test_ref="oval:com.redhat.rhsa:tst:20060713003"/>
       <criterion comment="python is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060197006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="tkinter is earlier than 0:2.2.3-6.5" test_ref="oval:com.redhat.rhsa:tst:20060713005"/>
       <criterion comment="tkinter is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060197008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="python-tools is earlier than 0:2.2.3-6.5" test_ref="oval:com.redhat.rhsa:tst:20060713007"/>
       <criterion comment="python-tools is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060197002"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="python is earlier than 0:2.3.4-14.3" test_ref="oval:com.redhat.rhsa:tst:20060713010"/>
       <criterion comment="python is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060197006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="python-docs is earlier than 0:2.3.4-14.3" test_ref="oval:com.redhat.rhsa:tst:20060713011"/>
       <criterion comment="python-docs is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060197012"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="python-tools is earlier than 0:2.3.4-14.3" test_ref="oval:com.redhat.rhsa:tst:20060713013"/>
       <criterion comment="python-tools is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060197002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="python-devel is earlier than 0:2.3.4-14.3" test_ref="oval:com.redhat.rhsa:tst:20060713014"/>
       <criterion comment="python-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060197004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="tkinter is earlier than 0:2.3.4-14.3" test_ref="oval:com.redhat.rhsa:tst:20060713015"/>
       <criterion comment="tkinter is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060197008"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20060720" version="635">
   <metadata>
    <title>RHSA-2006:0720: kdelibs security update (Critical)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
    </affected>
    <reference ref_id="RHSA-2006:0720" ref_url="https://access.redhat.com/errata/RHSA-2006:0720" source="RHSA"/>
    <reference ref_id="CVE-2006-4811" ref_url="https://access.redhat.com/security/cve/CVE-2006-4811" source="CVE"/>
    <description>The kdelibs package provides libraries for the K Desktop Environment (KDE).
 Qt is a GUI software toolkit for the X Window System.

An integer overflow flaw was found in the way Qt handled pixmap images. 
The KDE khtml library uses Qt in such a way that untrusted parameters could
be passed to Qt, triggering the overflow.  An attacker could for example
create a malicious web page that when viewed by a victim in the Konqueror
browser would cause Konqueror to crash or possibly execute arbitrary code
with the privileges of the victim.  (CVE-2006-4811)

Users of KDE should upgrade to these updated packages, which contain a
backported patch to correct this issue.</description>
    <advisory from="secalert@redhat.com">
     <severity>Critical</severity>
     <rights>Copyright 2006 Red Hat, Inc.</rights>
     <issued date="2006-10-18"/>
     <updated date="2006-10-18"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-4811" public="20061013:2306">CVE-2006-4811</cve>
     <bugzilla href="https://bugzilla.redhat.com/210742" id="210742">CVE-2006-4811 qt integer overflow</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="kdelibs is earlier than 6:3.1.3-6.12" test_ref="oval:com.redhat.rhsa:tst:20060720001"/>
       <criterion comment="kdelibs is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060720002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="kdelibs-devel is earlier than 6:3.1.3-6.12" test_ref="oval:com.redhat.rhsa:tst:20060720003"/>
       <criterion comment="kdelibs-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060720004"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="kdelibs-devel is earlier than 6:3.3.1-6.RHEL4" test_ref="oval:com.redhat.rhsa:tst:20060720006"/>
       <criterion comment="kdelibs-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060720004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="kdelibs is earlier than 6:3.3.1-6.RHEL4" test_ref="oval:com.redhat.rhsa:tst:20060720007"/>
       <criterion comment="kdelibs is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060720002"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20060725" version="633">
   <metadata>
    <title>RHSA-2006:0725: qt security update (Moderate)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
    </affected>
    <reference ref_id="RHSA-2006:0725" ref_url="https://access.redhat.com/errata/RHSA-2006:0725" source="RHSA"/>
    <reference ref_id="CVE-2006-4811" ref_url="https://access.redhat.com/security/cve/CVE-2006-4811" source="CVE"/>
    <description>Qt is a software toolkit that simplifies the task of writing and
maintaining GUI (Graphical User Interface) applications for the X Window
System.

An integer overflow flaw was found in the way Qt handled certain pixmap
images. If an application linked against Qt created a pixmap image in a
certain way, it could lead to a denial of service or possibly allow the
execution of arbitrary code. (CVE-2006-4811)

Users of Qt should upgrade to these updated packages, which contain a
backported patch to correct this issue.</description>
    <advisory from="secalert@redhat.com">
     <severity>Moderate</severity>
     <rights>Copyright 2006 Red Hat, Inc.</rights>
     <issued date="2006-11-01"/>
     <updated date="2006-11-01"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-4811" impact="critical" public="20061013:2306">CVE-2006-4811</cve>
     <bugzilla href="https://bugzilla.redhat.com/211829" id="211829">CVE-2006-4811 qt integer overflow</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="qt is earlier than 1:3.1.2-14.RHEL3" test_ref="oval:com.redhat.rhsa:tst:20060725001"/>
       <criterion comment="qt is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060725002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="qt-devel is earlier than 1:3.1.2-14.RHEL3" test_ref="oval:com.redhat.rhsa:tst:20060725003"/>
       <criterion comment="qt-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060725004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="qt-config is earlier than 1:3.1.2-14.RHEL3" test_ref="oval:com.redhat.rhsa:tst:20060725005"/>
       <criterion comment="qt-config is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060725006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="qt-MySQL is earlier than 1:3.1.2-14.RHEL3" test_ref="oval:com.redhat.rhsa:tst:20060725007"/>
       <criterion comment="qt-MySQL is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060725008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="qt-designer is earlier than 1:3.1.2-14.RHEL3" test_ref="oval:com.redhat.rhsa:tst:20060725009"/>
       <criterion comment="qt-designer is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060725010"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="qt-ODBC is earlier than 1:3.1.2-14.RHEL3" test_ref="oval:com.redhat.rhsa:tst:20060725011"/>
       <criterion comment="qt-ODBC is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060725012"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="qt-designer is earlier than 1:3.3.3-10.RHEL4" test_ref="oval:com.redhat.rhsa:tst:20060725014"/>
       <criterion comment="qt-designer is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060725010"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="qt-ODBC is earlier than 1:3.3.3-10.RHEL4" test_ref="oval:com.redhat.rhsa:tst:20060725015"/>
       <criterion comment="qt-ODBC is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060725012"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="qt-config is earlier than 1:3.3.3-10.RHEL4" test_ref="oval:com.redhat.rhsa:tst:20060725016"/>
       <criterion comment="qt-config is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060725006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="qt is earlier than 1:3.3.3-10.RHEL4" test_ref="oval:com.redhat.rhsa:tst:20060725017"/>
       <criterion comment="qt is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060725002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="qt-MySQL is earlier than 1:3.3.3-10.RHEL4" test_ref="oval:com.redhat.rhsa:tst:20060725018"/>
       <criterion comment="qt-MySQL is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060725008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="qt-devel is earlier than 1:3.3.3-10.RHEL4" test_ref="oval:com.redhat.rhsa:tst:20060725019"/>
       <criterion comment="qt-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060725004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="qt-PostgreSQL is earlier than 1:3.3.3-10.RHEL4" test_ref="oval:com.redhat.rhsa:tst:20060725020"/>
       <criterion comment="qt-PostgreSQL is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060725021"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20060726" version="636">
   <metadata>
    <title>RHSA-2006:0726: wireshark security update (Moderate)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
    </affected>
    <reference ref_id="RHSA-2006:0726" ref_url="https://access.redhat.com/errata/RHSA-2006:0726" source="RHSA"/>
    <reference ref_id="CVE-2006-4574" ref_url="https://access.redhat.com/security/cve/CVE-2006-4574" source="CVE"/>
    <reference ref_id="CVE-2006-4805" ref_url="https://access.redhat.com/security/cve/CVE-2006-4805" source="CVE"/>
    <reference ref_id="CVE-2006-5468" ref_url="https://access.redhat.com/security/cve/CVE-2006-5468" source="CVE"/>
    <reference ref_id="CVE-2006-5469" ref_url="https://access.redhat.com/security/cve/CVE-2006-5469" source="CVE"/>
    <reference ref_id="CVE-2006-5740" ref_url="https://access.redhat.com/security/cve/CVE-2006-5740" source="CVE"/>
    <description>Wireshark is a program for monitoring network traffic.

Several flaws were found in Wireshark's HTTP, WBXML, LDAP, and XOT protocol
dissectors. Wireshark could crash or stop responding if it read a malformed
packet off the network. (CVE-2006-4805, CVE-2006-5468, CVE-2006-5469,
CVE-2006-5740)

A single NULL byte heap based buffer overflow was found in Wireshark's MIME
Multipart dissector. Wireshark could crash or possibly execute arbitrary
arbitrary code as the user running Wireshark. (CVE-2006-4574)

Users of Wireshark should upgrade to these updated packages containing
Wireshark version 0.99.4, which is not vulnerable to these issues.</description>
    <advisory from="secalert@redhat.com">
     <severity>Moderate</severity>
     <rights>Copyright 2006 Red Hat, Inc.</rights>
     <issued date="2006-11-09"/>
     <updated date="2006-11-09"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-4574" public="20061030">CVE-2006-4574</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-4805" public="20061030">CVE-2006-4805</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-5468" public="20061030">CVE-2006-5468</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-5469" public="20061030">CVE-2006-5469</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-5740" public="20061030">CVE-2006-5740</cve>
     <bugzilla href="https://bugzilla.redhat.com/211993" id="211993">CVE-2006-4574 Multiple Wireshark issues (CVE-2006-4805, CVE-2006-5468, CVE-2006-5469, CVE-2006-5740)</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="wireshark is earlier than 0:0.99.4-EL3.1" test_ref="oval:com.redhat.rhsa:tst:20060726001"/>
       <criterion comment="wireshark is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060602002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="wireshark-gnome is earlier than 0:0.99.4-EL3.1" test_ref="oval:com.redhat.rhsa:tst:20060726003"/>
       <criterion comment="wireshark-gnome is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060602004"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="wireshark is earlier than 0:0.99.4-EL4.1" test_ref="oval:com.redhat.rhsa:tst:20060726006"/>
       <criterion comment="wireshark is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060602002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="wireshark-gnome is earlier than 0:0.99.4-EL4.1" test_ref="oval:com.redhat.rhsa:tst:20060726007"/>
       <criterion comment="wireshark-gnome is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060602004"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20060727" version="636">
   <metadata>
    <title>RHSA-2006:0727: texinfo security update (Moderate)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
    </affected>
    <reference ref_id="RHSA-2006:0727" ref_url="https://access.redhat.com/errata/RHSA-2006:0727" source="RHSA"/>
    <reference ref_id="CVE-2005-3011" ref_url="https://access.redhat.com/security/cve/CVE-2005-3011" source="CVE"/>
    <reference ref_id="CVE-2006-4810" ref_url="https://access.redhat.com/security/cve/CVE-2006-4810" source="CVE"/>
    <description>Texinfo is a documentation system that can produce both online information
and printed output from a single source file.

A buffer overflow flaw was found in Texinfo's texindex command. An attacker
could construct a carefully crafted Texinfo file that could cause texindex
to crash or possibly execute arbitrary code when opened. (CVE-2006-4810)

A flaw was found in the way Texinfo's texindex command creates temporary
files. A local user could leverage this flaw to overwrite files the user
executing texindex has write access to. (CVE-2005-3011)

Users of Texinfo should upgrade to these updated packages which contain
backported patches and are not vulnerable to these issues.</description>
    <advisory from="secalert@redhat.com">
     <severity>Moderate</severity>
     <rights>Copyright 2006 Red Hat, Inc.</rights>
     <issued date="2006-11-08"/>
     <updated date="2006-11-08"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2005-3011" impact="low" public="20000209">CVE-2005-3011</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-4810" public="20061108">CVE-2006-4810</cve>
     <bugzilla href="https://bugzilla.redhat.com/169583" id="169583">CVE-2005-3011 texindex insecure temporary file usage</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/170743" id="170743">CVE-2005-3011 texindex insecure temporary file usage</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/170744" id="170744">CVE-2005-3011 texindex insecure temporary file usage</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/211484" id="211484">CVE-2006-4810 texindex buffer overflow</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="texinfo is earlier than 0:4.5-3.el3.1" test_ref="oval:com.redhat.rhsa:tst:20060727001"/>
       <criterion comment="texinfo is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060727002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="info is earlier than 0:4.5-3.el3.1" test_ref="oval:com.redhat.rhsa:tst:20060727003"/>
       <criterion comment="info is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060727004"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="texinfo is earlier than 0:4.7-5.el4.2" test_ref="oval:com.redhat.rhsa:tst:20060727006"/>
       <criterion comment="texinfo is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060727002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="info is earlier than 0:4.7-5.el4.2" test_ref="oval:com.redhat.rhsa:tst:20060727007"/>
       <criterion comment="info is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060727004"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20060729" version="636">
   <metadata>
    <title>RHSA-2006:0729: ruby security update (Moderate)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
    </affected>
    <reference ref_id="RHSA-2006:0729" ref_url="https://access.redhat.com/errata/RHSA-2006:0729" source="RHSA"/>
    <reference ref_id="CVE-2006-5467" ref_url="https://access.redhat.com/security/cve/CVE-2006-5467" source="CVE"/>
    <description>Ruby is an interpreted scripting language for object-oriented programming.

A flaw was discovered in the way Ruby's CGI module handles certain
multipart/form-data MIME data. If a remote attacker sends a specially
crafted multipart-form-data request, it is possible to cause the ruby
CGI script to enter an infinite loop, causing a denial of service.
(CVE-2006-5467)

Users of Ruby should upgrade to these updated packages which contain
backported patches and are not vulnerable to these issues.</description>
    <advisory from="secalert@redhat.com">
     <severity>Moderate</severity>
     <rights>Copyright 2006 Red Hat, Inc.</rights>
     <issued date="2006-11-08"/>
     <updated date="2006-11-08"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-5467" public="20061025">CVE-2006-5467</cve>
     <bugzilla href="https://bugzilla.redhat.com/212237" id="212237">CVE-2006-5467 Ruby CGI multipart parsing DoS</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="ruby-devel is earlier than 0:1.6.8-9.EL3.8" test_ref="oval:com.redhat.rhsa:tst:20060729001"/>
       <criterion comment="ruby-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060604004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="ruby-docs is earlier than 0:1.6.8-9.EL3.8" test_ref="oval:com.redhat.rhsa:tst:20060729003"/>
       <criterion comment="ruby-docs is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060604006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="ruby-mode is earlier than 0:1.6.8-9.EL3.8" test_ref="oval:com.redhat.rhsa:tst:20060729005"/>
       <criterion comment="ruby-mode is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060604012"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="ruby is earlier than 0:1.6.8-9.EL3.8" test_ref="oval:com.redhat.rhsa:tst:20060729007"/>
       <criterion comment="ruby is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060604010"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="ruby-tcltk is earlier than 0:1.6.8-9.EL3.8" test_ref="oval:com.redhat.rhsa:tst:20060729009"/>
       <criterion comment="ruby-tcltk is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060604008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="irb is earlier than 0:1.6.8-9.EL3.8" test_ref="oval:com.redhat.rhsa:tst:20060729011"/>
       <criterion comment="irb is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060604014"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="ruby-libs is earlier than 0:1.6.8-9.EL3.8" test_ref="oval:com.redhat.rhsa:tst:20060729013"/>
       <criterion comment="ruby-libs is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060604002"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="ruby-libs is earlier than 0:1.8.1-7.EL4.8" test_ref="oval:com.redhat.rhsa:tst:20060729016"/>
       <criterion comment="ruby-libs is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060604002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="ruby-tcltk is earlier than 0:1.8.1-7.EL4.8" test_ref="oval:com.redhat.rhsa:tst:20060729017"/>
       <criterion comment="ruby-tcltk is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060604008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="ruby is earlier than 0:1.8.1-7.EL4.8" test_ref="oval:com.redhat.rhsa:tst:20060729018"/>
       <criterion comment="ruby is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060604010"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="ruby-docs is earlier than 0:1.8.1-7.EL4.8" test_ref="oval:com.redhat.rhsa:tst:20060729019"/>
       <criterion comment="ruby-docs is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060604006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="ruby-devel is earlier than 0:1.8.1-7.EL4.8" test_ref="oval:com.redhat.rhsa:tst:20060729020"/>
       <criterion comment="ruby-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060604004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="ruby-mode is earlier than 0:1.8.1-7.EL4.8" test_ref="oval:com.redhat.rhsa:tst:20060729021"/>
       <criterion comment="ruby-mode is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060604012"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="irb is earlier than 0:1.8.1-7.EL4.8" test_ref="oval:com.redhat.rhsa:tst:20060729022"/>
       <criterion comment="irb is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060604014"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20060730" version="636">
   <metadata>
    <title>RHSA-2006:0730: php security update (Important)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
    </affected>
    <reference ref_id="RHSA-2006:0730" ref_url="https://access.redhat.com/errata/RHSA-2006:0730" source="RHSA"/>
    <reference ref_id="CVE-2006-5465" ref_url="https://access.redhat.com/security/cve/CVE-2006-5465" source="CVE"/>
    <description>PHP is an HTML-embedded scripting language commonly used with the Apache
HTTP Web server. 

The Hardened-PHP Project discovered an overflow in the PHP htmlentities()
and htmlspecialchars() routines.  If a PHP script used the vulnerable
functions to parse UTF-8 data, a remote attacker sending a carefully
crafted request could trigger the overflow and potentially execute
arbitrary code as the 'apache' user. (CVE-2006-5465) 

Users of PHP should upgrade to these updated packages which contain a
backported patch to correct this issue.</description>
    <advisory from="secalert@redhat.com">
     <severity>Important</severity>
     <rights>Copyright 2006 Red Hat, Inc.</rights>
     <issued date="2006-11-06"/>
     <updated date="2006-11-06"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-5465" public="20061102">CVE-2006-5465</cve>
     <bugzilla href="https://bugzilla.redhat.com/213543" id="213543">CVE-2006-5465 PHP buffer overflow</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="php is earlier than 0:4.3.2-37.ent" test_ref="oval:com.redhat.rhsa:tst:20060730001"/>
       <criterion comment="php is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-pgsql is earlier than 0:4.3.2-37.ent" test_ref="oval:com.redhat.rhsa:tst:20060730003"/>
       <criterion comment="php-pgsql is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276012"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-mysql is earlier than 0:4.3.2-37.ent" test_ref="oval:com.redhat.rhsa:tst:20060730005"/>
       <criterion comment="php-mysql is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276014"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-devel is earlier than 0:4.3.2-37.ent" test_ref="oval:com.redhat.rhsa:tst:20060730007"/>
       <criterion comment="php-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-ldap is earlier than 0:4.3.2-37.ent" test_ref="oval:com.redhat.rhsa:tst:20060730009"/>
       <criterion comment="php-ldap is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-odbc is earlier than 0:4.3.2-37.ent" test_ref="oval:com.redhat.rhsa:tst:20060730011"/>
       <criterion comment="php-odbc is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-imap is earlier than 0:4.3.2-37.ent" test_ref="oval:com.redhat.rhsa:tst:20060730013"/>
       <criterion comment="php-imap is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276010"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="php-ldap is earlier than 0:4.3.9-3.22" test_ref="oval:com.redhat.rhsa:tst:20060730016"/>
       <criterion comment="php-ldap is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-devel is earlier than 0:4.3.9-3.22" test_ref="oval:com.redhat.rhsa:tst:20060730017"/>
       <criterion comment="php-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-imap is earlier than 0:4.3.9-3.22" test_ref="oval:com.redhat.rhsa:tst:20060730018"/>
       <criterion comment="php-imap is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276010"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-gd is earlier than 0:4.3.9-3.22" test_ref="oval:com.redhat.rhsa:tst:20060730019"/>
       <criterion comment="php-gd is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276035"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-pgsql is earlier than 0:4.3.9-3.22" test_ref="oval:com.redhat.rhsa:tst:20060730021"/>
       <criterion comment="php-pgsql is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276012"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-xmlrpc is earlier than 0:4.3.9-3.22" test_ref="oval:com.redhat.rhsa:tst:20060730022"/>
       <criterion comment="php-xmlrpc is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276019"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-odbc is earlier than 0:4.3.9-3.22" test_ref="oval:com.redhat.rhsa:tst:20060730024"/>
       <criterion comment="php-odbc is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-mysql is earlier than 0:4.3.9-3.22" test_ref="oval:com.redhat.rhsa:tst:20060730025"/>
       <criterion comment="php-mysql is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276014"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php is earlier than 0:4.3.9-3.22" test_ref="oval:com.redhat.rhsa:tst:20060730026"/>
       <criterion comment="php is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-snmp is earlier than 0:4.3.9-3.22" test_ref="oval:com.redhat.rhsa:tst:20060730027"/>
       <criterion comment="php-snmp is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276024"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-ncurses is earlier than 0:4.3.9-3.22" test_ref="oval:com.redhat.rhsa:tst:20060730029"/>
       <criterion comment="php-ncurses is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276026"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-domxml is earlier than 0:4.3.9-3.22" test_ref="oval:com.redhat.rhsa:tst:20060730031"/>
       <criterion comment="php-domxml is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276032"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-mbstring is earlier than 0:4.3.9-3.22" test_ref="oval:com.redhat.rhsa:tst:20060730033"/>
       <criterion comment="php-mbstring is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276030"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-pear is earlier than 0:4.3.9-3.22" test_ref="oval:com.redhat.rhsa:tst:20060730035"/>
       <criterion comment="php-pear is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276028"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20060734" version="635">
   <metadata>
    <title>RHSA-2006:0734: seamonkey security update (Critical)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
    </affected>
    <reference ref_id="RHSA-2006:0734" ref_url="https://access.redhat.com/errata/RHSA-2006:0734" source="RHSA"/>
    <reference ref_id="CVE-2006-5462" ref_url="https://access.redhat.com/security/cve/CVE-2006-5462" source="CVE"/>
    <reference ref_id="CVE-2006-5463" ref_url="https://access.redhat.com/security/cve/CVE-2006-5463" source="CVE"/>
    <reference ref_id="CVE-2006-5464" ref_url="https://access.redhat.com/security/cve/CVE-2006-5464" source="CVE"/>
    <reference ref_id="CVE-2006-5747" ref_url="https://access.redhat.com/security/cve/CVE-2006-5747" source="CVE"/>
    <reference ref_id="CVE-2006-5748" ref_url="https://access.redhat.com/security/cve/CVE-2006-5748" source="CVE"/>
    <description>SeaMonkey is an open source Web browser, advanced email and newsgroup
client, IRC chat client, and HTML editor.

Several flaws were found in the way SeaMonkey processes certain malformed
Javascript code. A malicious web page could cause the execution of
Javascript code in such a way that could cause SeaMonkey to crash or
execute arbitrary code as the user running SeaMonkey. (CVE-2006-5463,
CVE-2006-5747, CVE-2006-5748)

Several flaws were found in the way SeaMonkey renders web pages. A
malicious web page could cause the browser to crash or possibly execute
arbitrary code as the user running SeaMonkey. (CVE-2006-5464)

A flaw was found in the way SeaMonkey verifies RSA signatures. For RSA keys
with exponent 3 it is possible for an attacker to forge a signature that
would be incorrectly verified by the NSS library. SeaMonkey as shipped
trusts several root Certificate Authorities that use exponent 3. An
attacker could have created a carefully crafted SSL certificate which be
incorrectly trusted when their site was visited by a victim. This flaw was
previously thought to be fixed in SeaMonkey 1.0.5, however Ulrich Kuehn
discovered the fix was incomplete (CVE-2006-5462)

Users of SeaMonkey are advised to upgrade to these erratum packages, which
contains SeaMonkey version 1.0.6 that corrects these issues.</description>
    <advisory from="secalert@redhat.com">
     <severity>Critical</severity>
     <rights>Copyright 2006 Red Hat, Inc.</rights>
     <issued date="2006-11-08"/>
     <updated date="2006-11-08"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-5462" impact="important" public="20061108:0103">CVE-2006-5462</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-5463" public="20061108:0103">CVE-2006-5463</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-5464" public="20061108:0103">CVE-2006-5464</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-5747" public="20061108:0103">CVE-2006-5747</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-5748" public="20061108:0103">CVE-2006-5748</cve>
     <bugzilla href="https://bugzilla.redhat.com/214447" id="214447">CVE-2006-5462 Multiple seamonkey vulnerabilities (CVE-2006-5463, CVE-2006-5464, CVE-2006-5747, CVE-2006-5748)</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="seamonkey-mail is earlier than 0:1.0.6-0.1.el3" test_ref="oval:com.redhat.rhsa:tst:20060734001"/>
       <criterion comment="seamonkey-mail is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578020"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-nspr is earlier than 0:1.0.6-0.1.el3" test_ref="oval:com.redhat.rhsa:tst:20060734003"/>
       <criterion comment="seamonkey-nspr is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578010"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.6-0.1.el3" test_ref="oval:com.redhat.rhsa:tst:20060734005"/>
       <criterion comment="seamonkey-nss-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578012"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.6-0.1.el3" test_ref="oval:com.redhat.rhsa:tst:20060734007"/>
       <criterion comment="seamonkey-js-debugger is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-nss is earlier than 0:1.0.6-0.1.el3" test_ref="oval:com.redhat.rhsa:tst:20060734009"/>
       <criterion comment="seamonkey-nss is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578016"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-chat is earlier than 0:1.0.6-0.1.el3" test_ref="oval:com.redhat.rhsa:tst:20060734011"/>
       <criterion comment="seamonkey-chat is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-devel is earlier than 0:1.0.6-0.1.el3" test_ref="oval:com.redhat.rhsa:tst:20060734013"/>
       <criterion comment="seamonkey-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578014"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey is earlier than 0:1.0.6-0.1.el3" test_ref="oval:com.redhat.rhsa:tst:20060734015"/>
       <criterion comment="seamonkey is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578018"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.6-0.1.el3" test_ref="oval:com.redhat.rhsa:tst:20060734017"/>
       <criterion comment="seamonkey-nspr-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.6-0.1.el3" test_ref="oval:com.redhat.rhsa:tst:20060734019"/>
       <criterion comment="seamonkey-dom-inspector is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578002"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="seamonkey-mail is earlier than 0:1.0.6-0.1.el4" test_ref="oval:com.redhat.rhsa:tst:20060734022"/>
       <criterion comment="seamonkey-mail is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578020"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.6-0.1.el4" test_ref="oval:com.redhat.rhsa:tst:20060734023"/>
       <criterion comment="seamonkey-js-debugger is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-devel is earlier than 0:1.0.6-0.1.el4" test_ref="oval:com.redhat.rhsa:tst:20060734024"/>
       <criterion comment="seamonkey-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578014"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-chat is earlier than 0:1.0.6-0.1.el4" test_ref="oval:com.redhat.rhsa:tst:20060734025"/>
       <criterion comment="seamonkey-chat is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey is earlier than 0:1.0.6-0.1.el4" test_ref="oval:com.redhat.rhsa:tst:20060734026"/>
       <criterion comment="seamonkey is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578018"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.6-0.1.el4" test_ref="oval:com.redhat.rhsa:tst:20060734027"/>
       <criterion comment="seamonkey-dom-inspector is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="devhelp-devel is earlier than 0:0.10-0.5.el4" test_ref="oval:com.redhat.rhsa:tst:20060734028"/>
       <criterion comment="devhelp-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060329002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="devhelp is earlier than 0:0.10-0.5.el4" test_ref="oval:com.redhat.rhsa:tst:20060734030"/>
       <criterion comment="devhelp is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060329004"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20060738" version="634">
   <metadata>
    <title>RHSA-2006:0738: openssh security update (Low)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
    </affected>
    <reference ref_id="RHSA-2006:0738" ref_url="https://access.redhat.com/errata/RHSA-2006:0738" source="RHSA"/>
    <reference ref_id="CVE-2006-5794" ref_url="https://access.redhat.com/security/cve/CVE-2006-5794" source="CVE"/>
    <description>OpenSSH is OpenBSD's SSH (Secure SHell) protocol implementation. This
package includes the core files necessary for both the OpenSSH client and
server.

An authentication flaw was found in OpenSSH's privilege separation monitor.
If it ever becomes possible to alter the behavior of the unprivileged
process when OpenSSH is using privilege separation, an attacker may then be
able to login without possessing proper credentials. (CVE-2006-5794)

Please note that this flaw by itself poses no direct threat to OpenSSH
users. Without another security flaw that could allow an attacker to alter
the behavior of OpenSSH's unprivileged process, this flaw cannot be
exploited. There are currently no known flaws to exploit this behavior. 
However, we have decided to issue this erratum to fix this flaw to reduce
the security impact if an unprivileged process flaw is ever found.

Users of openssh should upgrade to these updated packages, which contain a
backported patch to resolve this issue.</description>
    <advisory from="secalert@redhat.com">
     <severity>Low</severity>
     <rights>Copyright 2006 Red Hat, Inc.</rights>
     <issued date="2006-11-15"/>
     <updated date="2006-11-15"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-5794" public="20061107">CVE-2006-5794</cve>
     <bugzilla href="https://bugzilla.redhat.com/214640" id="214640">CVE-2006-5794 OpenSSH privilege separation flaw</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="openssh-clients is earlier than 0:3.6.1p2-33.30.13" test_ref="oval:com.redhat.rhsa:tst:20060738001"/>
       <criterion comment="openssh-clients is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060298008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openssh-askpass-gnome is earlier than 0:3.6.1p2-33.30.13" test_ref="oval:com.redhat.rhsa:tst:20060738003"/>
       <criterion comment="openssh-askpass-gnome is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060298002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openssh-askpass is earlier than 0:3.6.1p2-33.30.13" test_ref="oval:com.redhat.rhsa:tst:20060738005"/>
       <criterion comment="openssh-askpass is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060298010"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openssh-server is earlier than 0:3.6.1p2-33.30.13" test_ref="oval:com.redhat.rhsa:tst:20060738007"/>
       <criterion comment="openssh-server is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060298004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openssh is earlier than 0:3.6.1p2-33.30.13" test_ref="oval:com.redhat.rhsa:tst:20060738009"/>
       <criterion comment="openssh is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060298006"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="openssh-server is earlier than 0:3.9p1-8.RHEL4.17.1" test_ref="oval:com.redhat.rhsa:tst:20060738012"/>
       <criterion comment="openssh-server is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060298004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openssh-askpass-gnome is earlier than 0:3.9p1-8.RHEL4.17.1" test_ref="oval:com.redhat.rhsa:tst:20060738013"/>
       <criterion comment="openssh-askpass-gnome is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060298002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openssh-clients is earlier than 0:3.9p1-8.RHEL4.17.1" test_ref="oval:com.redhat.rhsa:tst:20060738014"/>
       <criterion comment="openssh-clients is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060298008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openssh-askpass is earlier than 0:3.9p1-8.RHEL4.17.1" test_ref="oval:com.redhat.rhsa:tst:20060738015"/>
       <criterion comment="openssh-askpass is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060298010"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openssh is earlier than 0:3.9p1-8.RHEL4.17.1" test_ref="oval:com.redhat.rhsa:tst:20060738016"/>
       <criterion comment="openssh is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060298006"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20060749" version="632">
   <metadata>
    <title>RHSA-2006:0749: tar security update (Moderate)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
    </affected>
    <reference ref_id="RHSA-2006:0749" ref_url="https://access.redhat.com/errata/RHSA-2006:0749" source="RHSA"/>
    <reference ref_id="CVE-2006-6097" ref_url="https://access.redhat.com/security/cve/CVE-2006-6097" source="CVE"/>
    <description>The GNU tar program saves many files together in one archive and can
restore individual files (or all of the files) from that archive. 

Teemu Salmela discovered a path traversal flaw in the way GNU tar extracted
archives. A malicious user could create a tar archive that could write to
arbitrary files to which the user running GNU tar has write access.
(CVE-2006-6097)

Users of tar should upgrade to this updated package, which contains a
replacement backported patch to correct this issue.</description>
    <advisory from="secalert@redhat.com">
     <severity>Moderate</severity>
     <rights>Copyright 2006 Red Hat, Inc.</rights>
     <issued date="2006-12-19"/>
     <updated date="2006-12-19"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-6097" public="20061121">CVE-2006-6097</cve>
     <bugzilla href="https://bugzilla.redhat.com/216937" id="216937">CVE-2006-6097 GNU tar directory traversal</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criterion comment="tar is earlier than 0:1.13.25-15.RHEL3" test_ref="oval:com.redhat.rhsa:tst:20060749001"/>
     <criterion comment="tar is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060195002"/>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criterion comment="tar is earlier than 0:1.14-12.RHEL4" test_ref="oval:com.redhat.rhsa:tst:20060749004"/>
     <criterion comment="tar is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060195002"/>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20060754" version="632">
   <metadata>
    <title>RHSA-2006:0754: gnupg security update (Important)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
    </affected>
    <reference ref_id="RHSA-2006:0754" ref_url="https://access.redhat.com/errata/RHSA-2006:0754" source="RHSA"/>
    <reference ref_id="CVE-2006-6169" ref_url="https://access.redhat.com/security/cve/CVE-2006-6169" source="CVE"/>
    <reference ref_id="CVE-2006-6235" ref_url="https://access.redhat.com/security/cve/CVE-2006-6235" source="CVE"/>
    <description>GnuPG is a utility for encrypting data and creating digital signatures.

Tavis Ormandy discovered a stack overwrite flaw in the way GnuPG decrypts
messages. An attacker could create carefully crafted message that could cause
GnuPG to execute arbitrary code if a victim attempts to decrypt the message.
(CVE-2006-6235)

A heap based buffer overflow flaw was found in the way GnuPG constructs
messages to be written to the terminal during an interactive session. An
attacker could create a carefully crafted message which with user interaction
could cause GnuPG to execute arbitrary code with the permissions of the
user running GnuPG. (CVE-2006-6169)

All users of GnuPG are advised to upgrade to this updated package, which
contains a backported patch to correct these issues.</description>
    <advisory from="secalert@redhat.com">
     <severity>Important</severity>
     <rights>Copyright 2006 Red Hat, Inc.</rights>
     <issued date="2006-12-12"/>
     <updated date="2006-12-12"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-6169" impact="low" public="20061124">CVE-2006-6169</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-6235" public="20061206">CVE-2006-6235</cve>
     <bugzilla href="https://bugzilla.redhat.com/218480" id="218480">CVE-2006-6235 GnuPG references local variable after function returns</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/218505" id="218505">CVE-2006-6169 GnuPG heap overflow</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criterion comment="gnupg is earlier than 0:1.2.1-19" test_ref="oval:com.redhat.rhsa:tst:20060754001"/>
     <criterion comment="gnupg is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060266002"/>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criterion comment="gnupg is earlier than 0:1.2.6-8" test_ref="oval:com.redhat.rhsa:tst:20060754004"/>
     <criterion comment="gnupg is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060266002"/>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20060759" version="635">
   <metadata>
    <title>RHSA-2006:0759: seamonkey security update (Critical)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
    </affected>
    <reference ref_id="RHSA-2006:0759" ref_url="https://access.redhat.com/errata/RHSA-2006:0759" source="RHSA"/>
    <reference ref_id="CVE-2006-6497" ref_url="https://access.redhat.com/security/cve/CVE-2006-6497" source="CVE"/>
    <reference ref_id="CVE-2006-6498" ref_url="https://access.redhat.com/security/cve/CVE-2006-6498" source="CVE"/>
    <reference ref_id="CVE-2006-6501" ref_url="https://access.redhat.com/security/cve/CVE-2006-6501" source="CVE"/>
    <reference ref_id="CVE-2006-6502" ref_url="https://access.redhat.com/security/cve/CVE-2006-6502" source="CVE"/>
    <reference ref_id="CVE-2006-6503" ref_url="https://access.redhat.com/security/cve/CVE-2006-6503" source="CVE"/>
    <reference ref_id="CVE-2006-6504" ref_url="https://access.redhat.com/security/cve/CVE-2006-6504" source="CVE"/>
    <reference ref_id="CVE-2006-6505" ref_url="https://access.redhat.com/security/cve/CVE-2006-6505" source="CVE"/>
    <description>SeaMonkey is an open source Web browser, advanced email and newsgroup
client, IRC chat client, and HTML editor.

Several flaws were found in the way SeaMonkey processes certain malformed
Javascript code. A malicious web page could cause the execution of
Javascript code in such a way that could cause SeaMonkey to crash or
execute arbitrary code as the user running SeaMonkey. (CVE-2006-6498,
CVE-2006-6501, CVE-2006-6502, CVE-2006-6503, CVE-2006-6504)

Several flaws were found in the way SeaMonkey renders web pages. A
malicious web page could cause the browser to crash or possibly execute
arbitrary code as the user running SeaMonkey. (CVE-2006-6497)

A heap based buffer overflow flaw was found in the way SeaMonkey Mail
parses the Content-Type mail header. A malicious mail message could cause
the SeaMonkey Mail client to crash or possibly execute arbitrary code as
the user running SeaMonkey Mail. (CVE-2006-6505)

Users of SeaMonkey are advised to upgrade to these erratum packages, which
contain SeaMonkey version 1.0.7 that corrects these issues.</description>
    <advisory from="secalert@redhat.com">
     <severity>Critical</severity>
     <rights>Copyright 2006 Red Hat, Inc.</rights>
     <issued date="2006-12-19"/>
     <updated date="2006-12-19"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-6497" public="20061219:1900">CVE-2006-6497</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-6498" public="20061219:1900">CVE-2006-6498</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-6501" public="20061219:1900">CVE-2006-6501</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-6502" public="20061219:1900">CVE-2006-6502</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-6503" impact="moderate" public="20061219:1900">CVE-2006-6503</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-6504" public="20061219:1900">CVE-2006-6504</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-6505" public="20061219:1900">CVE-2006-6505</cve>
     <bugzilla href="https://bugzilla.redhat.com/219684" id="219684">CVE-2006-6497 Multiple Seamonkey issues (CVE-2006-6498, CVE-2006-6501, CVE-2006-6502, CVE-2006-6503, CVE-2006-6504, CVE-2006-6505)</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="seamonkey-mail is earlier than 0:1.0.7-0.1.el3" test_ref="oval:com.redhat.rhsa:tst:20060759001"/>
       <criterion comment="seamonkey-mail is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578020"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.7-0.1.el3" test_ref="oval:com.redhat.rhsa:tst:20060759003"/>
       <criterion comment="seamonkey-nss-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578012"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.7-0.1.el3" test_ref="oval:com.redhat.rhsa:tst:20060759005"/>
       <criterion comment="seamonkey-js-debugger is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-nspr is earlier than 0:1.0.7-0.1.el3" test_ref="oval:com.redhat.rhsa:tst:20060759007"/>
       <criterion comment="seamonkey-nspr is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578010"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-devel is earlier than 0:1.0.7-0.1.el3" test_ref="oval:com.redhat.rhsa:tst:20060759009"/>
       <criterion comment="seamonkey-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578014"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-chat is earlier than 0:1.0.7-0.1.el3" test_ref="oval:com.redhat.rhsa:tst:20060759011"/>
       <criterion comment="seamonkey-chat is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-nss is earlier than 0:1.0.7-0.1.el3" test_ref="oval:com.redhat.rhsa:tst:20060759013"/>
       <criterion comment="seamonkey-nss is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578016"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey is earlier than 0:1.0.7-0.1.el3" test_ref="oval:com.redhat.rhsa:tst:20060759015"/>
       <criterion comment="seamonkey is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578018"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.7-0.1.el3" test_ref="oval:com.redhat.rhsa:tst:20060759017"/>
       <criterion comment="seamonkey-dom-inspector is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.7-0.1.el3" test_ref="oval:com.redhat.rhsa:tst:20060759019"/>
       <criterion comment="seamonkey-nspr-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578004"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.7-0.1.el4" test_ref="oval:com.redhat.rhsa:tst:20060759022"/>
       <criterion comment="seamonkey-js-debugger is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-devel is earlier than 0:1.0.7-0.1.el4" test_ref="oval:com.redhat.rhsa:tst:20060759023"/>
       <criterion comment="seamonkey-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578014"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-chat is earlier than 0:1.0.7-0.1.el4" test_ref="oval:com.redhat.rhsa:tst:20060759024"/>
       <criterion comment="seamonkey-chat is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey is earlier than 0:1.0.7-0.1.el4" test_ref="oval:com.redhat.rhsa:tst:20060759025"/>
       <criterion comment="seamonkey is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578018"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.7-0.1.el4" test_ref="oval:com.redhat.rhsa:tst:20060759026"/>
       <criterion comment="seamonkey-dom-inspector is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-mail is earlier than 0:1.0.7-0.1.el4" test_ref="oval:com.redhat.rhsa:tst:20060759027"/>
       <criterion comment="seamonkey-mail is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578020"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="devhelp is earlier than 0:0.10-0.6.el4" test_ref="oval:com.redhat.rhsa:tst:20060759028"/>
       <criterion comment="devhelp is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060329004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="devhelp-devel is earlier than 0:0.10-0.6.el4" test_ref="oval:com.redhat.rhsa:tst:20060759030"/>
       <criterion comment="devhelp-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060329002"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20070001" version="633">
   <metadata>
    <title>RHSA-2007:0001: openoffice.org security update (Important)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
    </affected>
    <reference ref_id="RHSA-2007:0001" ref_url="https://access.redhat.com/errata/RHSA-2007:0001" source="RHSA"/>
    <reference ref_id="CVE-2006-5870" ref_url="https://access.redhat.com/security/cve/CVE-2006-5870" source="CVE"/>
    <description>OpenOffice.org is an office productivity suite that includes desktop
applications such as a word processor, spreadsheet, presentation manager,
formula editor, and drawing program.

Several integer overflow bugs were found in the OpenOffice.org WMF file
processor. An attacker could create a carefully crafted WMF file that could
cause OpenOffice.org to execute arbitrary code when the file was opened by
a victim. (CVE-2006-5870)

All users of OpenOffice.org are advised to upgrade to these updated
packages, which contain a backported fix for this issue.</description>
    <advisory from="secalert@redhat.com">
     <severity>Important</severity>
     <rights>Copyright 2007 Red Hat, Inc.</rights>
     <issued date="2007-01-03"/>
     <updated date="2007-01-03"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-5870" public="20070103">CVE-2006-5870</cve>
     <bugzilla href="https://bugzilla.redhat.com/217347" id="217347">CVE-2006-5870 WMF heap overflow</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="openoffice.org-i18n is earlier than 0:1.1.2-35.2.0.EL3" test_ref="oval:com.redhat.rhsa:tst:20070001001"/>
       <criterion comment="openoffice.org-i18n is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060573002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-libs is earlier than 0:1.1.2-35.2.0.EL3" test_ref="oval:com.redhat.rhsa:tst:20070001003"/>
       <criterion comment="openoffice.org-libs is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060573004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org is earlier than 0:1.1.2-35.2.0.EL3" test_ref="oval:com.redhat.rhsa:tst:20070001005"/>
       <criterion comment="openoffice.org is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060573006"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="openoffice.org is earlier than 0:1.1.5-6.6.0.EL4" test_ref="oval:com.redhat.rhsa:tst:20070001008"/>
       <criterion comment="openoffice.org is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060573006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-libs is earlier than 0:1.1.5-6.6.0.EL4" test_ref="oval:com.redhat.rhsa:tst:20070001009"/>
       <criterion comment="openoffice.org-libs is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060573004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-kde is earlier than 0:1.1.5-6.6.0.EL4" test_ref="oval:com.redhat.rhsa:tst:20070001010"/>
       <criterion comment="openoffice.org-kde is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060573011"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-i18n is earlier than 0:1.1.5-6.6.0.EL4" test_ref="oval:com.redhat.rhsa:tst:20070001012"/>
       <criterion comment="openoffice.org-i18n is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060573002"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20070002" version="634">
   <metadata>
    <title>RHSA-2007:0002: XFree86 security update (Important)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
    </affected>
    <reference ref_id="RHSA-2007:0002" ref_url="https://access.redhat.com/errata/RHSA-2007:0002" source="RHSA"/>
    <reference ref_id="CVE-2006-6101" ref_url="https://access.redhat.com/security/cve/CVE-2006-6101" source="CVE"/>
    <reference ref_id="CVE-2006-6102" ref_url="https://access.redhat.com/security/cve/CVE-2006-6102" source="CVE"/>
    <reference ref_id="CVE-2006-6103" ref_url="https://access.redhat.com/security/cve/CVE-2006-6103" source="CVE"/>
    <description>XFree86 is an implementation of the X Window System, which provides the
core functionality for the Linux graphical desktop.

iDefense reported three integer overflow flaws in the XFree86 Render and
DBE extensions. A malicious authorized client could exploit this issue to
cause a denial of service (crash) or potentially execute arbitrary code
with root privileges on the XFree86 server. (CVE-2006-6101, CVE-2006-6102,
CVE-2006-6103)

Users of XFree86 should upgrade to these updated packages, which contain a
backported patch and is not vulnerable to this issue.</description>
    <advisory from="secalert@redhat.com">
     <severity>Important</severity>
     <rights>Copyright 2007 Red Hat, Inc.</rights>
     <issued date="2007-01-10"/>
     <updated date="2007-01-10"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-6101" public="20060109">CVE-2006-6101</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-6102" public="20060109">CVE-2006-6102</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-6103" public="20060109">CVE-2006-6103</cve>
     <bugzilla href="https://bugzilla.redhat.com/218870" id="218870">CVE-2006-6101 Multiple XFree86 integer overflows (CVE-2006-6102, CVE-2006-6103)</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="AND">
    <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
    <criteria operator="OR">
     <criteria operator="AND">
      <criterion comment="XFree86-Mesa-libGL is earlier than 0:4.3.0-115.EL" test_ref="oval:com.redhat.rhsa:tst:20070002001"/>
      <criterion comment="XFree86-Mesa-libGL is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635046"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-100dpi-fonts is earlier than 0:4.3.0-115.EL" test_ref="oval:com.redhat.rhsa:tst:20070002003"/>
      <criterion comment="XFree86-100dpi-fonts is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635048"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-libs is earlier than 0:4.3.0-115.EL" test_ref="oval:com.redhat.rhsa:tst:20070002005"/>
      <criterion comment="XFree86-libs is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635042"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-Xvfb is earlier than 0:4.3.0-115.EL" test_ref="oval:com.redhat.rhsa:tst:20070002007"/>
      <criterion comment="XFree86-Xvfb is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635028"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-syriac-fonts is earlier than 0:4.3.0-115.EL" test_ref="oval:com.redhat.rhsa:tst:20070002009"/>
      <criterion comment="XFree86-syriac-fonts is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635024"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-tools is earlier than 0:4.3.0-115.EL" test_ref="oval:com.redhat.rhsa:tst:20070002011"/>
      <criterion comment="XFree86-tools is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635032"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86 is earlier than 0:4.3.0-115.EL" test_ref="oval:com.redhat.rhsa:tst:20070002013"/>
      <criterion comment="XFree86 is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635030"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-ISO8859-2-100dpi-fonts is earlier than 0:4.3.0-115.EL" test_ref="oval:com.redhat.rhsa:tst:20070002015"/>
      <criterion comment="XFree86-ISO8859-2-100dpi-fonts is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635016"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-ISO8859-9-75dpi-fonts is earlier than 0:4.3.0-115.EL" test_ref="oval:com.redhat.rhsa:tst:20070002017"/>
      <criterion comment="XFree86-ISO8859-9-75dpi-fonts is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635012"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-ISO8859-14-100dpi-fonts is earlier than 0:4.3.0-115.EL" test_ref="oval:com.redhat.rhsa:tst:20070002019"/>
      <criterion comment="XFree86-ISO8859-14-100dpi-fonts is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635010"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-xfs is earlier than 0:4.3.0-115.EL" test_ref="oval:com.redhat.rhsa:tst:20070002021"/>
      <criterion comment="XFree86-xfs is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635052"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-base-fonts is earlier than 0:4.3.0-115.EL" test_ref="oval:com.redhat.rhsa:tst:20070002023"/>
      <criterion comment="XFree86-base-fonts is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635008"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-libs-data is earlier than 0:4.3.0-115.EL" test_ref="oval:com.redhat.rhsa:tst:20070002025"/>
      <criterion comment="XFree86-libs-data is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635054"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-sdk is earlier than 0:4.3.0-115.EL" test_ref="oval:com.redhat.rhsa:tst:20070002027"/>
      <criterion comment="XFree86-sdk is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635050"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-Xnest is earlier than 0:4.3.0-115.EL" test_ref="oval:com.redhat.rhsa:tst:20070002029"/>
      <criterion comment="XFree86-Xnest is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635058"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-twm is earlier than 0:4.3.0-115.EL" test_ref="oval:com.redhat.rhsa:tst:20070002031"/>
      <criterion comment="XFree86-twm is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635056"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-ISO8859-14-75dpi-fonts is earlier than 0:4.3.0-115.EL" test_ref="oval:com.redhat.rhsa:tst:20070002033"/>
      <criterion comment="XFree86-ISO8859-14-75dpi-fonts is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635034"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-cyrillic-fonts is earlier than 0:4.3.0-115.EL" test_ref="oval:com.redhat.rhsa:tst:20070002035"/>
      <criterion comment="XFree86-cyrillic-fonts is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635014"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-ISO8859-15-75dpi-fonts is earlier than 0:4.3.0-115.EL" test_ref="oval:com.redhat.rhsa:tst:20070002037"/>
      <criterion comment="XFree86-ISO8859-15-75dpi-fonts is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635040"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-ISO8859-9-100dpi-fonts is earlier than 0:4.3.0-115.EL" test_ref="oval:com.redhat.rhsa:tst:20070002039"/>
      <criterion comment="XFree86-ISO8859-9-100dpi-fonts is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635060"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-devel is earlier than 0:4.3.0-115.EL" test_ref="oval:com.redhat.rhsa:tst:20070002041"/>
      <criterion comment="XFree86-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635038"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-ISO8859-15-100dpi-fonts is earlier than 0:4.3.0-115.EL" test_ref="oval:com.redhat.rhsa:tst:20070002043"/>
      <criterion comment="XFree86-ISO8859-15-100dpi-fonts is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635044"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-Mesa-libGLU is earlier than 0:4.3.0-115.EL" test_ref="oval:com.redhat.rhsa:tst:20070002045"/>
      <criterion comment="XFree86-Mesa-libGLU is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635002"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-75dpi-fonts is earlier than 0:4.3.0-115.EL" test_ref="oval:com.redhat.rhsa:tst:20070002047"/>
      <criterion comment="XFree86-75dpi-fonts is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635026"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-xdm is earlier than 0:4.3.0-115.EL" test_ref="oval:com.redhat.rhsa:tst:20070002049"/>
      <criterion comment="XFree86-xdm is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635022"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-ISO8859-2-75dpi-fonts is earlier than 0:4.3.0-115.EL" test_ref="oval:com.redhat.rhsa:tst:20070002051"/>
      <criterion comment="XFree86-ISO8859-2-75dpi-fonts is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635004"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-font-utils is earlier than 0:4.3.0-115.EL" test_ref="oval:com.redhat.rhsa:tst:20070002053"/>
      <criterion comment="XFree86-font-utils is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635006"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-doc is earlier than 0:4.3.0-115.EL" test_ref="oval:com.redhat.rhsa:tst:20070002055"/>
      <criterion comment="XFree86-doc is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635036"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-truetype-fonts is earlier than 0:4.3.0-115.EL" test_ref="oval:com.redhat.rhsa:tst:20070002057"/>
      <criterion comment="XFree86-truetype-fonts is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635020"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-xauth is earlier than 0:4.3.0-115.EL" test_ref="oval:com.redhat.rhsa:tst:20070002059"/>
      <criterion comment="XFree86-xauth is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635018"/>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20070011" version="633">
   <metadata>
    <title>RHSA-2007:0011: libgsf security update (Moderate)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
    </affected>
    <reference ref_id="RHSA-2007:0011" ref_url="https://access.redhat.com/errata/RHSA-2007:0011" source="RHSA"/>
    <reference ref_id="CVE-2006-4514" ref_url="https://access.redhat.com/security/cve/CVE-2006-4514" source="CVE"/>
    <description>The GNOME Structured File Library is a utility library for reading and
writing structured file formats.

A heap based buffer overflow flaw was found in the way GNOME Structured
File Library processes and certain OLE documents. If an person opened a
specially crafted OLE file, it could cause the client application to crash or
execute arbitrary code. (CVE-2006-4514)

Users of GNOME Structured File Library should upgrade to these updated
packages, which contain a backported patch that resolves this issue.</description>
    <advisory from="secalert@redhat.com">
     <severity>Moderate</severity>
     <rights>Copyright 2007 Red Hat, Inc.</rights>
     <issued date="2007-01-11"/>
     <updated date="2007-01-11"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-4514" public="20061130">CVE-2006-4514</cve>
     <bugzilla href="https://bugzilla.redhat.com/217949" id="217949">CVE-2006-4514 libgsf heap overflow</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="libgsf is earlier than 0:1.6.0-7" test_ref="oval:com.redhat.rhsa:tst:20070011001"/>
       <criterion comment="libgsf is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070011002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="libgsf-devel is earlier than 0:1.6.0-7" test_ref="oval:com.redhat.rhsa:tst:20070011003"/>
       <criterion comment="libgsf-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070011004"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="libgsf is earlier than 0:1.10.1-2" test_ref="oval:com.redhat.rhsa:tst:20070011006"/>
       <criterion comment="libgsf is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070011002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="libgsf-devel is earlier than 0:1.10.1-2" test_ref="oval:com.redhat.rhsa:tst:20070011007"/>
       <criterion comment="libgsf-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070011004"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20070015" version="635">
   <metadata>
    <title>RHSA-2007:0015: ImageMagick security update (Moderate)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
    </affected>
    <reference ref_id="RHSA-2007:0015" ref_url="https://access.redhat.com/errata/RHSA-2007:0015" source="RHSA"/>
    <reference ref_id="CVE-2006-2440" ref_url="https://access.redhat.com/security/cve/CVE-2006-2440" source="CVE"/>
    <reference ref_id="CVE-2006-5456" ref_url="https://access.redhat.com/security/cve/CVE-2006-5456" source="CVE"/>
    <reference ref_id="CVE-2006-5868" ref_url="https://access.redhat.com/security/cve/CVE-2006-5868" source="CVE"/>
    <description>ImageMagick is an image display and manipulation tool for the X Window
System that can read and write multiple image formats.

Several security flaws were discovered in the way ImageMagick decodes DCM,
PALM, and SGI graphic files.  An attacker may be able to execute arbitrary
code on a victim's machine if they were able to trick the victim into
opening a specially crafted image file (CVE-2006-5456, CVE-2006-5868).

A heap overflow flaw was found in ImageMagick.  An attacker may be able to
execute arbitrary code on a victim's machine if they were able to trick the
victim into opening a specially crafted file (CVE-2006-2440).  This issue
only affected the version of ImageMagick distributed with Red Hat
Enterprise Linux 4.

Users of ImageMagick should upgrade to these updated packages, which
contain backported patches to correct these issues.</description>
    <advisory from="secalert@redhat.com">
     <severity>Moderate</severity>
     <rights>Copyright 2007 Red Hat, Inc.</rights>
     <issued date="2007-02-15"/>
     <updated date="2007-02-15"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-2440" impact="low" public="20060102">CVE-2006-2440</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-5456" public="20060929">CVE-2006-5456</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-5868" public="20060929">CVE-2006-5868</cve>
     <bugzilla href="https://bugzilla.redhat.com/192278" id="192278">CVE-2006-2440 ImageMagick heap overflow</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/210921" id="210921">CVE-2006-5456 Overflows in GraphicsMagick and ImageMagick's DCM and PALM handling routines</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/217558" id="217558">CVE-2006-5868 Insufficient boundary check in ImageMagick's SGIDecode()</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="ImageMagick-perl is earlier than 0:5.5.6-24" test_ref="oval:com.redhat.rhsa:tst:20070015001"/>
       <criterion comment="ImageMagick-perl is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060178006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="ImageMagick-c++ is earlier than 0:5.5.6-24" test_ref="oval:com.redhat.rhsa:tst:20070015003"/>
       <criterion comment="ImageMagick-c++ is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060178008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="ImageMagick-c++-devel is earlier than 0:5.5.6-24" test_ref="oval:com.redhat.rhsa:tst:20070015005"/>
       <criterion comment="ImageMagick-c++-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060178010"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="ImageMagick-devel is earlier than 0:5.5.6-24" test_ref="oval:com.redhat.rhsa:tst:20070015007"/>
       <criterion comment="ImageMagick-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060178002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="ImageMagick is earlier than 0:5.5.6-24" test_ref="oval:com.redhat.rhsa:tst:20070015009"/>
       <criterion comment="ImageMagick is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060178004"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="ImageMagick is earlier than 0:6.0.7.1-16.0.3" test_ref="oval:com.redhat.rhsa:tst:20070015012"/>
       <criterion comment="ImageMagick is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060178004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="ImageMagick-c++ is earlier than 0:6.0.7.1-16.0.3" test_ref="oval:com.redhat.rhsa:tst:20070015013"/>
       <criterion comment="ImageMagick-c++ is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060178008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="ImageMagick-c++-devel is earlier than 0:6.0.7.1-16.0.3" test_ref="oval:com.redhat.rhsa:tst:20070015014"/>
       <criterion comment="ImageMagick-c++-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060178010"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="ImageMagick-devel is earlier than 0:6.0.7.1-16.0.3" test_ref="oval:com.redhat.rhsa:tst:20070015015"/>
       <criterion comment="ImageMagick-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060178002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="ImageMagick-perl is earlier than 0:6.0.7.1-16.0.3" test_ref="oval:com.redhat.rhsa:tst:20070015016"/>
       <criterion comment="ImageMagick-perl is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060178006"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20070018" version="640">
   <metadata>
    <title>RHSA-2007:0018: fetchmail security update (Moderate)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
    </affected>
    <reference ref_id="RHSA-2007:0018" ref_url="https://access.redhat.com/errata/RHSA-2007:0018" source="RHSA"/>
    <reference ref_id="CVE-2005-4348" ref_url="https://access.redhat.com/security/cve/CVE-2005-4348" source="CVE"/>
    <reference ref_id="CVE-2006-5867" ref_url="https://access.redhat.com/security/cve/CVE-2006-5867" source="CVE"/>
    <description>Fetchmail is a remote mail retrieval and forwarding utility.

A denial of service flaw was found when Fetchmail was run in multidrop
mode.  A malicious mail server could send a message without headers which
would cause Fetchmail to crash (CVE-2005-4348).  This issue did not affect
the version of Fetchmail shipped with Red Hat Enterprise Linux 2.1 or 3.

A flaw was found in the way Fetchmail used TLS encryption to connect to
remote hosts.  Fetchmail provided no way to enforce the use of TLS
encryption and would not authenticate POP3 protocol connections properly
(CVE-2006-5867).  This update corrects this issue by enforcing TLS
encryption when the &quot;sslproto&quot; configuration directive is set to &quot;tls1&quot;.  

Users of Fetchmail should update to these packages, which contain 
backported patches to correct these issues.

Note: This update may break configurations which assumed that Fetchmail
would use plain-text authentication if TLS encryption is not supported by
the POP3 server even if the &quot;sslproto&quot; directive is set to &quot;tls1&quot;.  If you
are using a custom configuration that depended on this behavior you will
need to modify your configuration appropriately after installing this update.</description>
    <advisory from="secalert@redhat.com">
     <severity>Moderate</severity>
     <rights>Copyright 2008 Red Hat, Inc.</rights>
     <issued date="2007-01-31"/>
     <updated date="2008-03-20"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2005-4348" impact="low" public="20051219">CVE-2005-4348</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-5867" public="20070104">CVE-2006-5867</cve>
     <bugzilla href="https://bugzilla.redhat.com/176266" id="176266">CVE-2005-4348 Fetchmail DOS by malicious server in multidrop mode</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/221981" id="221981">CVE-2006-5867 fetchmail not enforcing TLS for POP3 properly</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criterion comment="fetchmail is earlier than 0:6.2.0-3.el3.3" test_ref="oval:com.redhat.rhsa:tst:20070018001"/>
     <criterion comment="fetchmail is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070018002"/>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criterion comment="fetchmail is earlier than 0:6.2.5-6.el4.5" test_ref="oval:com.redhat.rhsa:tst:20070018004"/>
     <criterion comment="fetchmail is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070018002"/>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20070022" version="633">
   <metadata>
    <title>RHSA-2007:0022: squirrelmail security update (Moderate)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
    </affected>
    <reference ref_id="RHSA-2007:0022" ref_url="https://access.redhat.com/errata/RHSA-2007:0022" source="RHSA"/>
    <reference ref_id="CVE-2006-6142" ref_url="https://access.redhat.com/security/cve/CVE-2006-6142" source="CVE"/>
    <description>SquirrelMail is a standards-based webmail package written in PHP.

Several cross-site scripting bugs were discovered in SquirrelMail.  An
attacker could inject arbitrary Javascript or HTML content into
SquirrelMail pages by tricking a user into visiting a carefully crafted
URL.  (CVE-2006-6142) 

Users of SquirrelMail should upgrade to this erratum package, which
contains a backported patch to correct these issues. 

Notes:
- After installing this update, users are advised to restart their
httpd service to ensure that the updated version functions correctly.
- config.php should NOT be modified, please modify config_local.php instead.
- Known Bug: The configuration generator may potentially produce bad
options that interfere with the operation of this application.  Applying
specific config changes to config_local.php manually is recommended.</description>
    <advisory from="secalert@redhat.com">
     <severity>Moderate</severity>
     <rights>Copyright 2008 Red Hat, Inc.</rights>
     <issued date="2007-01-31"/>
     <updated date="2008-03-20"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-6142" public="20061202">CVE-2006-6142</cve>
     <bugzilla href="https://bugzilla.redhat.com/218294" id="218294">CVE-2006-6142 Three XSS issues in SquirrelMail</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criterion comment="squirrelmail is earlier than 0:1.4.8-4.el3" test_ref="oval:com.redhat.rhsa:tst:20070022001"/>
     <criterion comment="squirrelmail is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060283002"/>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criterion comment="squirrelmail is earlier than 0:1.4.8-4.el4" test_ref="oval:com.redhat.rhsa:tst:20070022004"/>
     <criterion comment="squirrelmail is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060283002"/>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20070033" version="634">
   <metadata>
    <title>RHSA-2007:0033: openoffice.org security update (Important)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
    </affected>
    <reference ref_id="RHSA-2007:0033" ref_url="https://access.redhat.com/errata/RHSA-2007:0033" source="RHSA"/>
    <reference ref_id="CVE-2007-0238" ref_url="https://access.redhat.com/security/cve/CVE-2007-0238" source="CVE"/>
    <reference ref_id="CVE-2007-0239" ref_url="https://access.redhat.com/security/cve/CVE-2007-0239" source="CVE"/>
    <reference ref_id="CVE-2007-1466" ref_url="https://access.redhat.com/security/cve/CVE-2007-1466" source="CVE"/>
    <description>OpenOffice.org is an office productivity suite that includes desktop
applications such as a word processor, spreadsheet, presentation manager,
formula editor, and drawing program.

iDefense reported an integer overflow flaw in libwpd, a library used
internally to OpenOffice.org for handling Word Perfect documents.  An
attacker could create a carefully crafted Word Perfect file that could
cause OpenOffice.org to crash or possibly execute arbitrary code if the
file was opened by a victim. (CVE-2007-1466)

John Heasman discovered a stack overflow in the StarCalc parser in
OpenOffice.org.  An attacker could create a carefully crafted StarCalc file
that could cause OpenOffice.org to crash or possibly execute arbitrary code
if the file was opened by a victim. (CVE-2007-0238)

Flaws were discovered in the way OpenOffice.org handled hyperlinks.  An
attacker could create an OpenOffice.org document which could run commands
if a victim opened the file and clicked on a malicious hyperlink. 
(CVE-2007-0239)

All users of OpenOffice.org are advised to upgrade to these updated
packages, which contain backported fixes for these issues.

Red Hat would like to thank Fridrich Štrba for alerting us to the issue
CVE-2007-1466 and providing a patch, and John Heasman for
CVE-2007-0238.</description>
    <advisory from="secalert@redhat.com">
     <severity>Important</severity>
     <rights>Copyright 2008 Red Hat, Inc.</rights>
     <issued date="2007-03-22"/>
     <updated date="2008-03-20"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-0238" public="20070320">CVE-2007-0238</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-0239" impact="moderate" public="20070320">CVE-2007-0239</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-1466" public="20070316">CVE-2007-1466</cve>
     <bugzilla href="https://bugzilla.redhat.com/223801" id="223801">CVE-2007-1466 integer overflow</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/226966" id="226966">CVE-2007-0238 StarCalc overflow</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/228008" id="228008">CVE-2007-0239 hyperlink escaping issue</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="openoffice.org-i18n is earlier than 0:1.1.2-38.2.0.EL3" test_ref="oval:com.redhat.rhsa:tst:20070033001"/>
       <criterion comment="openoffice.org-i18n is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060573002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org is earlier than 0:1.1.2-38.2.0.EL3" test_ref="oval:com.redhat.rhsa:tst:20070033003"/>
       <criterion comment="openoffice.org is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060573006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-libs is earlier than 0:1.1.2-38.2.0.EL3" test_ref="oval:com.redhat.rhsa:tst:20070033005"/>
       <criterion comment="openoffice.org-libs is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060573004"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="openoffice.org-i18n is earlier than 0:1.1.5-10.6.0.EL4" test_ref="oval:com.redhat.rhsa:tst:20070033008"/>
       <criterion comment="openoffice.org-i18n is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060573002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-kde is earlier than 0:1.1.5-10.6.0.EL4" test_ref="oval:com.redhat.rhsa:tst:20070033009"/>
       <criterion comment="openoffice.org-kde is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060573011"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-libs is earlier than 0:1.1.5-10.6.0.EL4" test_ref="oval:com.redhat.rhsa:tst:20070033011"/>
       <criterion comment="openoffice.org-libs is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060573004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org is earlier than 0:1.1.5-10.6.0.EL4" test_ref="oval:com.redhat.rhsa:tst:20070033012"/>
       <criterion comment="openoffice.org is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060573006"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20070044" version="633">
   <metadata>
    <title>RHSA-2007:0044: bind security update (Moderate)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
    </affected>
    <reference ref_id="RHSA-2007:0044" ref_url="https://access.redhat.com/errata/RHSA-2007:0044" source="RHSA"/>
    <reference ref_id="CVE-2007-0494" ref_url="https://access.redhat.com/security/cve/CVE-2007-0494" source="CVE"/>
    <description>ISC BIND (Berkeley Internet Name Domain) is an implementation of the DNS
(Domain Name System) protocols.  

A flaw was found in the way BIND processed certain DNS query responses.  On
servers that had enabled DNSSEC validation, this could allow an remote
attacker to cause a denial of service.  (CVE-2007-0494)

For users of Red Hat Enterprise Linux 3, the previous BIND update caused an
incompatible change to the default configuration that resulted in rndc not
sharing the key with the named daemon. This update corrects this bug and
restores the behavior prior to that update.

Updating the bind package in Red Hat Enterprise Linux 3 could result in
nonfunctional configuration in case the bind-libs package was not updated.
This update corrects this bug by adding the correct dependency on bind-libs.

Users of BIND are advised to upgrade to these updated packages, which
contain backported patches to correct these issues.</description>
    <advisory from="secalert@redhat.com">
     <severity>Moderate</severity>
     <rights>Copyright 2007 Red Hat, Inc.</rights>
     <issued date="2007-02-06"/>
     <updated date="2007-02-06"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-0494" public="20070125">CVE-2007-0494</cve>
     <bugzilla href="https://bugzilla.redhat.com/202012" id="202012">rndc.conf change breaks working bind config</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/225222" id="225222">CVE-2007-0494 BIND dnssec denial of service</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="bind-libs is earlier than 20:9.2.4-20.EL3" test_ref="oval:com.redhat.rhsa:tst:20070044001"/>
       <criterion comment="bind-libs is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070044002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="bind-utils is earlier than 20:9.2.4-20.EL3" test_ref="oval:com.redhat.rhsa:tst:20070044003"/>
       <criterion comment="bind-utils is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070044004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="bind-chroot is earlier than 20:9.2.4-20.EL3" test_ref="oval:com.redhat.rhsa:tst:20070044005"/>
       <criterion comment="bind-chroot is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070044006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="bind-devel is earlier than 20:9.2.4-20.EL3" test_ref="oval:com.redhat.rhsa:tst:20070044007"/>
       <criterion comment="bind-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070044008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="bind is earlier than 20:9.2.4-20.EL3" test_ref="oval:com.redhat.rhsa:tst:20070044009"/>
       <criterion comment="bind is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070044010"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="bind is earlier than 20:9.2.4-24.EL4" test_ref="oval:com.redhat.rhsa:tst:20070044012"/>
       <criterion comment="bind is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070044010"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="bind-devel is earlier than 20:9.2.4-24.EL4" test_ref="oval:com.redhat.rhsa:tst:20070044013"/>
       <criterion comment="bind-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070044008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="bind-libs is earlier than 20:9.2.4-24.EL4" test_ref="oval:com.redhat.rhsa:tst:20070044014"/>
       <criterion comment="bind-libs is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070044002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="bind-chroot is earlier than 20:9.2.4-24.EL4" test_ref="oval:com.redhat.rhsa:tst:20070044015"/>
       <criterion comment="bind-chroot is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070044006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="bind-utils is earlier than 20:9.2.4-24.EL4" test_ref="oval:com.redhat.rhsa:tst:20070044016"/>
       <criterion comment="bind-utils is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070044004"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20070060" version="633">
   <metadata>
    <title>RHSA-2007:0060: samba security update (Moderate)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
    </affected>
    <reference ref_id="RHSA-2007:0060" ref_url="https://access.redhat.com/errata/RHSA-2007:0060" source="RHSA"/>
    <reference ref_id="CVE-2007-0452" ref_url="https://access.redhat.com/security/cve/CVE-2007-0452" source="CVE"/>
    <description>Samba provides file and printer sharing services to SMB/CIFS clients.

A denial of service flaw was found in Samba's smbd daemon process. An
authenticated user could send a specially crafted request which would cause
a smbd child process to enter an infinite loop condition. By opening
multiple CIFS sessions, an attacker could exhaust system resources.
(CVE-2007-0452)

Users of Samba should update to these packages, which contain a
backported patch to correct this issue.</description>
    <advisory from="secalert@redhat.com">
     <severity>Moderate</severity>
     <rights>Copyright 2007 Red Hat, Inc.</rights>
     <issued date="2007-02-15"/>
     <updated date="2007-02-15"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-0452" public="20070205">CVE-2007-0452</cve>
     <bugzilla href="https://bugzilla.redhat.com/225513" id="225513">CVE-2007-0452 Samba smbd denial of service</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="samba is earlier than 0:3.0.9-1.3E.12" test_ref="oval:com.redhat.rhsa:tst:20070060001"/>
       <criterion comment="samba is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060591004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="samba-swat is earlier than 0:3.0.9-1.3E.12" test_ref="oval:com.redhat.rhsa:tst:20070060003"/>
       <criterion comment="samba-swat is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060591006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="samba-client is earlier than 0:3.0.9-1.3E.12" test_ref="oval:com.redhat.rhsa:tst:20070060005"/>
       <criterion comment="samba-client is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060591008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="samba-common is earlier than 0:3.0.9-1.3E.12" test_ref="oval:com.redhat.rhsa:tst:20070060007"/>
       <criterion comment="samba-common is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060591002"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="samba-client is earlier than 0:3.0.10-1.4E.11" test_ref="oval:com.redhat.rhsa:tst:20070060010"/>
       <criterion comment="samba-client is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060591008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="samba is earlier than 0:3.0.10-1.4E.11" test_ref="oval:com.redhat.rhsa:tst:20070060011"/>
       <criterion comment="samba is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060591004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="samba-swat is earlier than 0:3.0.10-1.4E.11" test_ref="oval:com.redhat.rhsa:tst:20070060012"/>
       <criterion comment="samba-swat is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060591006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="samba-common is earlier than 0:3.0.10-1.4E.11" test_ref="oval:com.redhat.rhsa:tst:20070060013"/>
       <criterion comment="samba-common is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060591002"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20070064" version="632">
   <metadata>
    <title>RHSA-2007:0064: postgresql security update (Moderate)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
    </affected>
    <reference ref_id="RHSA-2007:0064" ref_url="https://access.redhat.com/errata/RHSA-2007:0064" source="RHSA"/>
    <reference ref_id="CVE-2006-5540" ref_url="https://access.redhat.com/security/cve/CVE-2006-5540" source="CVE"/>
    <reference ref_id="CVE-2007-0555" ref_url="https://access.redhat.com/security/cve/CVE-2007-0555" source="CVE"/>
    <description>PostgreSQL is an advanced Object-Relational database management system
(DBMS).

A flaw was found in the way the PostgreSQL server handles certain
SQL-language functions. An authenticated user could execute a sequence of
commands which could crash the PostgreSQL server or possibly read from
arbitrary memory locations. A user would need to have permissions to drop
and add database tables to be able to exploit this issue (CVE-2007-0555).

A denial of service flaw was found affecting the PostgreSQL server running
on Red Hat Enterprise Linux 4 systems. An authenticated user could execute
an SQL command which could crash the PostgreSQL server. (CVE-2006-5540)

Users of PostgreSQL should upgrade to these updated packages containing
PostgreSQL version 7.4.16 or 7.3.18, which correct these issues.</description>
    <advisory from="secalert@redhat.com">
     <severity>Moderate</severity>
     <rights>Copyright 2007 Red Hat, Inc.</rights>
     <issued date="2007-02-07"/>
     <updated date="2007-02-07"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-5540" impact="low" public="20061016">CVE-2006-5540</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-0555" public="20070205">CVE-2007-0555</cve>
     <bugzilla href="https://bugzilla.redhat.com/212358" id="212358">CVE-2006-5540 New version fixes three different crash vulnerabilities</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/225493" id="225493">CVE-2007-0555 PostgreSQL arbitrary memory read flaw</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="rh-postgresql-server is earlier than 0:7.3.18-1" test_ref="oval:com.redhat.rhsa:tst:20070064001"/>
       <criterion comment="rh-postgresql-server is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060526006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="rh-postgresql-devel is earlier than 0:7.3.18-1" test_ref="oval:com.redhat.rhsa:tst:20070064003"/>
       <criterion comment="rh-postgresql-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060526018"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="rh-postgresql-libs is earlier than 0:7.3.18-1" test_ref="oval:com.redhat.rhsa:tst:20070064005"/>
       <criterion comment="rh-postgresql-libs is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060526008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="rh-postgresql-jdbc is earlier than 0:7.3.18-1" test_ref="oval:com.redhat.rhsa:tst:20070064007"/>
       <criterion comment="rh-postgresql-jdbc is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060526012"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="rh-postgresql-docs is earlier than 0:7.3.18-1" test_ref="oval:com.redhat.rhsa:tst:20070064009"/>
       <criterion comment="rh-postgresql-docs is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060526010"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="rh-postgresql-pl is earlier than 0:7.3.18-1" test_ref="oval:com.redhat.rhsa:tst:20070064011"/>
       <criterion comment="rh-postgresql-pl is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060526016"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="rh-postgresql-tcl is earlier than 0:7.3.18-1" test_ref="oval:com.redhat.rhsa:tst:20070064013"/>
       <criterion comment="rh-postgresql-tcl is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060526020"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="rh-postgresql is earlier than 0:7.3.18-1" test_ref="oval:com.redhat.rhsa:tst:20070064015"/>
       <criterion comment="rh-postgresql is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060526022"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="rh-postgresql-python is earlier than 0:7.3.18-1" test_ref="oval:com.redhat.rhsa:tst:20070064017"/>
       <criterion comment="rh-postgresql-python is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060526014"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="rh-postgresql-contrib is earlier than 0:7.3.18-1" test_ref="oval:com.redhat.rhsa:tst:20070064019"/>
       <criterion comment="rh-postgresql-contrib is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060526002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="rh-postgresql-test is earlier than 0:7.3.18-1" test_ref="oval:com.redhat.rhsa:tst:20070064021"/>
       <criterion comment="rh-postgresql-test is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060526004"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="postgresql is earlier than 0:7.4.16-1.RHEL4.1" test_ref="oval:com.redhat.rhsa:tst:20070064024"/>
       <criterion comment="postgresql is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060526045"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="postgresql-docs is earlier than 0:7.4.16-1.RHEL4.1" test_ref="oval:com.redhat.rhsa:tst:20070064026"/>
       <criterion comment="postgresql-docs is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060526043"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="postgresql-jdbc is earlier than 0:7.4.16-1.RHEL4.1" test_ref="oval:com.redhat.rhsa:tst:20070064028"/>
       <criterion comment="postgresql-jdbc is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060526041"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="postgresql-devel is earlier than 0:7.4.16-1.RHEL4.1" test_ref="oval:com.redhat.rhsa:tst:20070064030"/>
       <criterion comment="postgresql-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060526033"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="postgresql-tcl is earlier than 0:7.4.16-1.RHEL4.1" test_ref="oval:com.redhat.rhsa:tst:20070064032"/>
       <criterion comment="postgresql-tcl is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060526039"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="postgresql-test is earlier than 0:7.4.16-1.RHEL4.1" test_ref="oval:com.redhat.rhsa:tst:20070064034"/>
       <criterion comment="postgresql-test is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060526027"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="postgresql-python is earlier than 0:7.4.16-1.RHEL4.1" test_ref="oval:com.redhat.rhsa:tst:20070064036"/>
       <criterion comment="postgresql-python is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060526029"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="postgresql-pl is earlier than 0:7.4.16-1.RHEL4.1" test_ref="oval:com.redhat.rhsa:tst:20070064038"/>
       <criterion comment="postgresql-pl is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060526025"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="postgresql-server is earlier than 0:7.4.16-1.RHEL4.1" test_ref="oval:com.redhat.rhsa:tst:20070064040"/>
       <criterion comment="postgresql-server is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060526031"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="postgresql-libs is earlier than 0:7.4.16-1.RHEL4.1" test_ref="oval:com.redhat.rhsa:tst:20070064042"/>
       <criterion comment="postgresql-libs is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060526037"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="postgresql-contrib is earlier than 0:7.4.16-1.RHEL4.1" test_ref="oval:com.redhat.rhsa:tst:20070064044"/>
       <criterion comment="postgresql-contrib is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060526035"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20070066" version="635">
   <metadata>
    <title>RHSA-2007:0066: wireshark security update (Low)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
     <platform>Red Hat Enterprise Linux 5</platform>
    </affected>
    <reference ref_id="RHSA-2007:0066" ref_url="https://access.redhat.com/errata/RHSA-2007:0066" source="RHSA"/>
    <reference ref_id="CVE-2007-0456" ref_url="https://access.redhat.com/security/cve/CVE-2007-0456" source="CVE"/>
    <reference ref_id="CVE-2007-0457" ref_url="https://access.redhat.com/security/cve/CVE-2007-0457" source="CVE"/>
    <reference ref_id="CVE-2007-0458" ref_url="https://access.redhat.com/security/cve/CVE-2007-0458" source="CVE"/>
    <reference ref_id="CVE-2007-0459" ref_url="https://access.redhat.com/security/cve/CVE-2007-0459" source="CVE"/>
    <description>Wireshark is a program for monitoring network traffic.

Several denial of service bugs were found in Wireshark's LLT, IEEE 802.11,
http, and tcp protocol dissectors. It was possible for Wireshark to crash
or stop responding if it read a malformed packet off the network.
(CVE-2007-0456, CVE-2007-0457, CVE-2007-0458, CVE-2007-0459)

Users of Wireshark should upgrade to these updated packages containing
Wireshark version 0.99.5, which is not vulnerable to these issues.</description>
    <advisory from="secalert@redhat.com">
     <severity>Low</severity>
     <rights>Copyright 2008 Red Hat, Inc.</rights>
     <issued date="2007-03-14"/>
     <updated date="2008-03-20"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-0456" public="20070201">CVE-2007-0456</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-0457" public="20070201">CVE-2007-0457</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-0458" public="20070201">CVE-2007-0458</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-0459" public="20070201">CVE-2007-0459</cve>
     <bugzilla href="https://bugzilla.redhat.com/225689" id="225689">CVE-2007-0456 Multiple Wireshark issues (CVE-2007-0457, CVE-2007-0458, CVE-2007-0459)</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/225781" id="225781">CVE-2007-0456 Multiple Wireshark issues (CVE-2007-0457, CVE-2007-0458, CVE-2007-0459)</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:5</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="wireshark is earlier than 0:0.99.5-EL3.1" test_ref="oval:com.redhat.rhsa:tst:20070066001"/>
       <criterion comment="wireshark is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060602002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="wireshark-gnome is earlier than 0:0.99.5-EL3.1" test_ref="oval:com.redhat.rhsa:tst:20070066003"/>
       <criterion comment="wireshark-gnome is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060602004"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="wireshark is earlier than 0:0.99.5-EL4.1" test_ref="oval:com.redhat.rhsa:tst:20070066006"/>
       <criterion comment="wireshark is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060602002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="wireshark-gnome is earlier than 0:0.99.5-EL4.1" test_ref="oval:com.redhat.rhsa:tst:20070066007"/>
       <criterion comment="wireshark-gnome is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060602004"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 5 is installed" test_ref="oval:com.redhat.rhsa:tst:20070066013"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="wireshark-gnome is earlier than 0:0.99.5-1.el5" test_ref="oval:com.redhat.rhsa:tst:20070066009"/>
       <criterion comment="wireshark-gnome is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070066010"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="wireshark is earlier than 0:0.99.5-1.el5" test_ref="oval:com.redhat.rhsa:tst:20070066011"/>
       <criterion comment="wireshark is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070066012"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20070076" version="633">
   <metadata>
    <title>RHSA-2007:0076: php security update (Important)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
    </affected>
    <reference ref_id="RHSA-2007:0076" ref_url="https://access.redhat.com/errata/RHSA-2007:0076" source="RHSA"/>
    <reference ref_id="CVE-2007-0906" ref_url="https://access.redhat.com/security/cve/CVE-2007-0906" source="CVE"/>
    <reference ref_id="CVE-2007-0907" ref_url="https://access.redhat.com/security/cve/CVE-2007-0907" source="CVE"/>
    <reference ref_id="CVE-2007-0908" ref_url="https://access.redhat.com/security/cve/CVE-2007-0908" source="CVE"/>
    <reference ref_id="CVE-2007-0909" ref_url="https://access.redhat.com/security/cve/CVE-2007-0909" source="CVE"/>
    <reference ref_id="CVE-2007-0910" ref_url="https://access.redhat.com/security/cve/CVE-2007-0910" source="CVE"/>
    <reference ref_id="CVE-2007-0988" ref_url="https://access.redhat.com/security/cve/CVE-2007-0988" source="CVE"/>
    <reference ref_id="CVE-2007-1380" ref_url="https://access.redhat.com/security/cve/CVE-2007-1380" source="CVE"/>
    <reference ref_id="CVE-2007-1701" ref_url="https://access.redhat.com/security/cve/CVE-2007-1701" source="CVE"/>
    <reference ref_id="CVE-2007-1825" ref_url="https://access.redhat.com/security/cve/CVE-2007-1825" source="CVE"/>
    <description>PHP is an HTML-embedded scripting language commonly used with the Apache
HTTP Web server. 

A number of buffer overflow flaws were found in the PHP session extension,
the str_replace() function, and the imap_mail_compose() function.
If very long strings under the control of an attacker are passed to the
str_replace() function then an integer overflow could occur in memory
allocation.  If a script uses the imap_mail_compose() function to create a
new MIME message based on an input body from an untrusted source, it could
result in a heap overflow.  An attacker who is able to access a PHP
application affected by any these issues could trigger these flaws and
possibly execute arbitrary code as the 'apache' user. (CVE-2007-0906)

If unserializing untrusted data on 64-bit platforms, the zend_hash_init()
function can be forced to enter an infinite loop, consuming CPU resources
for a limited length of time, until the script timeout alarm aborts
execution of the script. (CVE-2007-0988)

If the wddx extension is used to import WDDX data from an untrusted source,
certain WDDX input packets may allow a random portion of heap memory to be
exposed. (CVE-2007-0908)

If the odbc_result_all() function is used to display data from a database,
and the contents of the database table are under the control of an
attacker, a format string vulnerability is possible which could lead to the
execution of arbitrary code.  (CVE-2007-0909)

A one byte memory read will always occur before the beginning of a buffer,
which could be triggered for example by any use of the header() function in
a script.  However it is unlikely that this would have any effect.
(CVE-2007-0907)

Several flaws in PHP could allows attackers to &quot;clobber&quot; certain
super-global variables via unspecified vectors. (CVE-2007-0910)

Users of PHP should upgrade to these updated packages which contain
backported patches to correct these issues.

Red Hat would like to thank Stefan Esser for his help diagnosing these issues.</description>
    <advisory from="secalert@redhat.com">
     <severity>Important</severity>
     <rights>Copyright 2008 Red Hat, Inc.</rights>
     <issued date="2007-02-19"/>
     <updated date="2008-03-20"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-0906" public="20070214">CVE-2007-0906</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-0907" impact="low" public="20070214">CVE-2007-0907</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-0908" impact="moderate" public="20070214">CVE-2007-0908</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-0909" impact="low" public="20070214">CVE-2007-0909</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-0910" public="20070214">CVE-2007-0910</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-0988" impact="moderate" public="20070214">CVE-2007-0988</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-1380" public="20070214">CVE-2007-1380</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-1701" public="20070214">CVE-2007-1701</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-1825" public="20070214">CVE-2007-1825</cve>
     <bugzilla href="https://bugzilla.redhat.com/228858" id="228858">CVE-2007-0906 PHP security issues (CVE-2007-0907, CVE-2007-0908, CVE-2007-0909,  CVE-2007-0910, CVE-2007-0988)</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="php-odbc is earlier than 0:4.3.2-39.ent" test_ref="oval:com.redhat.rhsa:tst:20070076001"/>
       <criterion comment="php-odbc is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-ldap is earlier than 0:4.3.2-39.ent" test_ref="oval:com.redhat.rhsa:tst:20070076003"/>
       <criterion comment="php-ldap is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-imap is earlier than 0:4.3.2-39.ent" test_ref="oval:com.redhat.rhsa:tst:20070076005"/>
       <criterion comment="php-imap is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276010"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-devel is earlier than 0:4.3.2-39.ent" test_ref="oval:com.redhat.rhsa:tst:20070076007"/>
       <criterion comment="php-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-mysql is earlier than 0:4.3.2-39.ent" test_ref="oval:com.redhat.rhsa:tst:20070076009"/>
       <criterion comment="php-mysql is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276014"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-pgsql is earlier than 0:4.3.2-39.ent" test_ref="oval:com.redhat.rhsa:tst:20070076011"/>
       <criterion comment="php-pgsql is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276012"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php is earlier than 0:4.3.2-39.ent" test_ref="oval:com.redhat.rhsa:tst:20070076013"/>
       <criterion comment="php is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276002"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="php-ncurses is earlier than 0:4.3.9-3.22.3" test_ref="oval:com.redhat.rhsa:tst:20070076016"/>
       <criterion comment="php-ncurses is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276026"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-mbstring is earlier than 0:4.3.9-3.22.3" test_ref="oval:com.redhat.rhsa:tst:20070076018"/>
       <criterion comment="php-mbstring is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276030"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-pear is earlier than 0:4.3.9-3.22.3" test_ref="oval:com.redhat.rhsa:tst:20070076020"/>
       <criterion comment="php-pear is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276028"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-pgsql is earlier than 0:4.3.9-3.22.3" test_ref="oval:com.redhat.rhsa:tst:20070076022"/>
       <criterion comment="php-pgsql is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276012"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-ldap is earlier than 0:4.3.9-3.22.3" test_ref="oval:com.redhat.rhsa:tst:20070076023"/>
       <criterion comment="php-ldap is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-devel is earlier than 0:4.3.9-3.22.3" test_ref="oval:com.redhat.rhsa:tst:20070076024"/>
       <criterion comment="php-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-gd is earlier than 0:4.3.9-3.22.3" test_ref="oval:com.redhat.rhsa:tst:20070076025"/>
       <criterion comment="php-gd is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276035"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-snmp is earlier than 0:4.3.9-3.22.3" test_ref="oval:com.redhat.rhsa:tst:20070076027"/>
       <criterion comment="php-snmp is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276024"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-imap is earlier than 0:4.3.9-3.22.3" test_ref="oval:com.redhat.rhsa:tst:20070076029"/>
       <criterion comment="php-imap is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276010"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-mysql is earlier than 0:4.3.9-3.22.3" test_ref="oval:com.redhat.rhsa:tst:20070076030"/>
       <criterion comment="php-mysql is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276014"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-domxml is earlier than 0:4.3.9-3.22.3" test_ref="oval:com.redhat.rhsa:tst:20070076031"/>
       <criterion comment="php-domxml is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276032"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php is earlier than 0:4.3.9-3.22.3" test_ref="oval:com.redhat.rhsa:tst:20070076033"/>
       <criterion comment="php is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-xmlrpc is earlier than 0:4.3.9-3.22.3" test_ref="oval:com.redhat.rhsa:tst:20070076034"/>
       <criterion comment="php-xmlrpc is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276019"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-odbc is earlier than 0:4.3.9-3.22.3" test_ref="oval:com.redhat.rhsa:tst:20070076036"/>
       <criterion comment="php-odbc is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276004"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20070077" version="636">
   <metadata>
    <title>RHSA-2007:0077: seamonkey security update (Critical)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
    </affected>
    <reference ref_id="RHSA-2007:0077" ref_url="https://access.redhat.com/errata/RHSA-2007:0077" source="RHSA"/>
    <reference ref_id="CVE-2006-6077" ref_url="https://access.redhat.com/security/cve/CVE-2006-6077" source="CVE"/>
    <reference ref_id="CVE-2007-0008" ref_url="https://access.redhat.com/security/cve/CVE-2007-0008" source="CVE"/>
    <reference ref_id="CVE-2007-0009" ref_url="https://access.redhat.com/security/cve/CVE-2007-0009" source="CVE"/>
    <reference ref_id="CVE-2007-0775" ref_url="https://access.redhat.com/security/cve/CVE-2007-0775" source="CVE"/>
    <reference ref_id="CVE-2007-0777" ref_url="https://access.redhat.com/security/cve/CVE-2007-0777" source="CVE"/>
    <reference ref_id="CVE-2007-0778" ref_url="https://access.redhat.com/security/cve/CVE-2007-0778" source="CVE"/>
    <reference ref_id="CVE-2007-0779" ref_url="https://access.redhat.com/security/cve/CVE-2007-0779" source="CVE"/>
    <reference ref_id="CVE-2007-0780" ref_url="https://access.redhat.com/security/cve/CVE-2007-0780" source="CVE"/>
    <reference ref_id="CVE-2007-0800" ref_url="https://access.redhat.com/security/cve/CVE-2007-0800" source="CVE"/>
    <reference ref_id="CVE-2007-0981" ref_url="https://access.redhat.com/security/cve/CVE-2007-0981" source="CVE"/>
    <reference ref_id="CVE-2007-0994" ref_url="https://access.redhat.com/security/cve/CVE-2007-0994" source="CVE"/>
    <reference ref_id="CVE-2007-0995" ref_url="https://access.redhat.com/security/cve/CVE-2007-0995" source="CVE"/>
    <reference ref_id="CVE-2007-0996" ref_url="https://access.redhat.com/security/cve/CVE-2007-0996" source="CVE"/>
    <reference ref_id="CVE-2007-1092" ref_url="https://access.redhat.com/security/cve/CVE-2007-1092" source="CVE"/>
    <reference ref_id="CVE-2007-1282" ref_url="https://access.redhat.com/security/cve/CVE-2007-1282" source="CVE"/>
    <description>SeaMonkey is an open source Web browser, advanced email and newsgroup
client, IRC chat client, and HTML editor.

Several flaws were found in the way SeaMonkey processed certain malformed
JavaScript code. A malicious web page could execute JavaScript code in such
a way that may result in SeaMonkey crashing or executing arbitrary code as
the user running SeaMonkey. (CVE-2007-0775, CVE-2007-0777)

Several cross-site scripting (XSS) flaws were found in the way SeaMonkey
processed certain malformed web pages. A malicious web page could display
misleading information which may result in a user unknowingly divulging
sensitive information such as a password. (CVE-2006-6077, CVE-2007-0995,
CVE-2007-0996)

A flaw was found in the way SeaMonkey cached web pages on the local disk. A
malicious web page may be able to inject arbitrary HTML into a browsing
session if the user reloads a targeted site. (CVE-2007-0778)

A flaw was found in the way SeaMonkey displayed certain web content. A
malicious web page could generate content which could overlay user
interface elements such as the hostname and security indicators, tricking a
user into thinking they are visiting a different site. (CVE-2007-0779)

Two flaws were found in the way SeaMonkey displayed blocked popup windows.
If a user can be convinced to open a blocked popup, it is possible to read
arbitrary local files, or conduct an XSS attack against the user.
(CVE-2007-0780, CVE-2007-0800)

Two buffer overflow flaws were found in the Network Security Services (NSS)
code for processing the SSLv2 protocol. Connecting to a malicious secure
web server could cause the execution of arbitrary code as the user running
SeaMonkey. (CVE-2007-0008, CVE-2007-0009)

A flaw was found in the way SeaMonkey handled the &quot;location.hostname&quot; value
during certain browser domain checks. This flaw could allow a malicious web
site to set domain cookies for an arbitrary site, or possibly perform an
XSS attack. (CVE-2007-0981)

Users of SeaMonkey are advised to upgrade to these erratum packages, which
contain SeaMonkey version 1.0.8 that corrects these issues.</description>
    <advisory from="secalert@redhat.com">
     <severity>Critical</severity>
     <rights>Copyright 2008 Red Hat, Inc.</rights>
     <issued date="2007-03-13"/>
     <updated date="2008-03-20"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-6077" impact="moderate" public="20070223">CVE-2006-6077</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-0008" impact="moderate" public="20070201">CVE-2007-0008</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-0009" impact="moderate" public="20070201">CVE-2007-0009</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-0775" public="20070223">CVE-2007-0775</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-0777" public="20070223">CVE-2007-0777</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-0778" impact="moderate" public="20070223">CVE-2007-0778</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-0779" impact="moderate" public="20070223">CVE-2007-0779</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-0780" impact="moderate" public="20070223">CVE-2007-0780</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-0800" impact="moderate" public="20070223">CVE-2007-0800</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-0981" impact="moderate" public="20070223">CVE-2007-0981</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-0994" public="20070305">CVE-2007-0994</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-0995" impact="moderate" public="20070223">CVE-2007-0995</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-0996" impact="moderate" public="20070223">CVE-2007-0996</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-1092" public="20070223">CVE-2007-1092</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-1282" public="20070305">CVE-2007-1282</cve>
     <bugzilla href="https://bugzilla.redhat.com/204589" id="204589">mozilla-config points to the wrong places</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/229805" id="229805">CVE-2007-0775 Multiple Seamonkey flaws (CVE-2007-0777, CVE-2007-0995, CVE-2007-0996, CVE-2006-6077, CVE-2007-0778, CVE-2007-0779, CVE-2007-0780, CVE-2007-0800, CVE-2007-0008, CVE-2007-0009, CVE-2007-0981)</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/229987" id="229987">seamonkey-1.0.8-x (critical) update prevents evolution from starting</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/230158" id="230158">seamonkey-1.0.8-x (critical) update prevents evolution from starting</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.8-0.2.el3" test_ref="oval:com.redhat.rhsa:tst:20070077001"/>
       <criterion comment="seamonkey-js-debugger is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-nspr is earlier than 0:1.0.8-0.2.el3" test_ref="oval:com.redhat.rhsa:tst:20070077003"/>
       <criterion comment="seamonkey-nspr is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578010"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-devel is earlier than 0:1.0.8-0.2.el3" test_ref="oval:com.redhat.rhsa:tst:20070077005"/>
       <criterion comment="seamonkey-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578014"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-chat is earlier than 0:1.0.8-0.2.el3" test_ref="oval:com.redhat.rhsa:tst:20070077007"/>
       <criterion comment="seamonkey-chat is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-nss is earlier than 0:1.0.8-0.2.el3" test_ref="oval:com.redhat.rhsa:tst:20070077009"/>
       <criterion comment="seamonkey-nss is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578016"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey is earlier than 0:1.0.8-0.2.el3" test_ref="oval:com.redhat.rhsa:tst:20070077011"/>
       <criterion comment="seamonkey is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578018"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.8-0.2.el3" test_ref="oval:com.redhat.rhsa:tst:20070077013"/>
       <criterion comment="seamonkey-nspr-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.8-0.2.el3" test_ref="oval:com.redhat.rhsa:tst:20070077015"/>
       <criterion comment="seamonkey-dom-inspector is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-mail is earlier than 0:1.0.8-0.2.el3" test_ref="oval:com.redhat.rhsa:tst:20070077017"/>
       <criterion comment="seamonkey-mail is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578020"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.8-0.2.el3" test_ref="oval:com.redhat.rhsa:tst:20070077019"/>
       <criterion comment="seamonkey-nss-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578012"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="devhelp-devel is earlier than 0:0.10-0.7.el4" test_ref="oval:com.redhat.rhsa:tst:20070077022"/>
       <criterion comment="devhelp-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060329002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="devhelp is earlier than 0:0.10-0.7.el4" test_ref="oval:com.redhat.rhsa:tst:20070077024"/>
       <criterion comment="devhelp is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060329004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.8-0.2.el4" test_ref="oval:com.redhat.rhsa:tst:20070077026"/>
       <criterion comment="seamonkey-js-debugger is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-devel is earlier than 0:1.0.8-0.2.el4" test_ref="oval:com.redhat.rhsa:tst:20070077027"/>
       <criterion comment="seamonkey-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578014"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-chat is earlier than 0:1.0.8-0.2.el4" test_ref="oval:com.redhat.rhsa:tst:20070077028"/>
       <criterion comment="seamonkey-chat is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey is earlier than 0:1.0.8-0.2.el4" test_ref="oval:com.redhat.rhsa:tst:20070077029"/>
       <criterion comment="seamonkey is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578018"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.8-0.2.el4" test_ref="oval:com.redhat.rhsa:tst:20070077030"/>
       <criterion comment="seamonkey-dom-inspector is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-mail is earlier than 0:1.0.8-0.2.el4" test_ref="oval:com.redhat.rhsa:tst:20070077031"/>
       <criterion comment="seamonkey-mail is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578020"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20070086" version="633">
   <metadata>
    <title>RHSA-2007:0086: gnomemeeting security update (Critical)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
    </affected>
    <reference ref_id="RHSA-2007:0086" ref_url="https://access.redhat.com/errata/RHSA-2007:0086" source="RHSA"/>
    <reference ref_id="CVE-2007-1007" ref_url="https://access.redhat.com/security/cve/CVE-2007-1007" source="CVE"/>
    <description>GnomeMeeting is a tool to communicate with video and audio over the Internet.

A format string flaw was found in the way GnomeMeeting processes certain
messages. If a user is running GnomeMeeting, a remote attacker who can
connect to GnomeMeeting could trigger this flaw and potentially execute
arbitrary code with the privileges of the user. (CVE-2007-1007)

Users of GnomeMeeting should upgrade to these updated packages which
contain a backported patch to correct this issue.</description>
    <advisory from="secalert@redhat.com">
     <severity>Critical</severity>
     <rights>Copyright 2007 Red Hat, Inc.</rights>
     <issued date="2007-02-20"/>
     <updated date="2007-02-20"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-1007" public="20070213">CVE-2007-1007</cve>
     <bugzilla href="https://bugzilla.redhat.com/229266" id="229266">CVE-2007-1007 gnomemeeting format string flaw</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criterion comment="gnomemeeting is earlier than 0:0.96.0-5" test_ref="oval:com.redhat.rhsa:tst:20070086001"/>
     <criterion comment="gnomemeeting is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070086002"/>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criterion comment="gnomemeeting is earlier than 0:1.0.2-9" test_ref="oval:com.redhat.rhsa:tst:20070086004"/>
     <criterion comment="gnomemeeting is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070086002"/>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20070095" version="634">
   <metadata>
    <title>RHSA-2007:0095: krb5 security update (Critical)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
     <platform>Red Hat Enterprise Linux 5</platform>
    </affected>
    <reference ref_id="RHSA-2007:0095" ref_url="https://access.redhat.com/errata/RHSA-2007:0095" source="RHSA"/>
    <reference ref_id="CVE-2007-0956" ref_url="https://access.redhat.com/security/cve/CVE-2007-0956" source="CVE"/>
    <reference ref_id="CVE-2007-0957" ref_url="https://access.redhat.com/security/cve/CVE-2007-0957" source="CVE"/>
    <reference ref_id="CVE-2007-1216" ref_url="https://access.redhat.com/security/cve/CVE-2007-1216" source="CVE"/>
    <description>Kerberos is a network authentication system which allows clients and
servers to authenticate to each other through use of symmetric encryption
and a trusted third party, the KDC.

A flaw was found in the username handling of the MIT krb5 telnet daemon
(telnetd).  A remote attacker who can access the telnet port of a target
machine could log in as root without requiring a password.  (CVE-2007-0956)

Note that the krb5 telnet daemon is not enabled by default in any version
of Red Hat Enterprise Linux.  In addition, the default firewall rules block
remote access to the telnet port.  This flaw does not affect the telnet
daemon distributed in the telnet-server package.

For users who have enabled the krb5 telnet daemon and have it accessible
remotely, this update should be applied immediately.  

Whilst we are not aware at this time that the flaw is being actively
exploited, we have confirmed that the flaw is very easily exploitable.

This update also fixes two additional security issues:

Buffer overflows were found which affect the Kerberos KDC and the kadmin
server daemon.  A remote attacker who can access the KDC could exploit this
bug to run arbitrary code with the privileges of the KDC or kadmin server
processes.  (CVE-2007-0957)

A double-free flaw was found in the GSSAPI library used by the kadmin
server daemon.  Red Hat Enterprise Linux 4 and 5 contain checks within
glibc that detect double-free flaws. Therefore, on Red Hat Enterprise Linux
4 and 5 successful exploitation of this issue can only lead to a denial of
service.  Applications which use this library in earlier releases of Red
Hat Enterprise Linux may also be affected.  (CVE-2007-1216)

All users are advised to update to these erratum packages which contain a
backported fix to correct these issues.

Red Hat would like to thank MIT and iDefense for reporting these
vulnerabilities.</description>
    <advisory from="secalert@redhat.com">
     <severity>Critical</severity>
     <rights>Copyright 2008 Red Hat, Inc.</rights>
     <issued date="2007-04-03"/>
     <updated date="2008-03-20"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-0956" public="20070403">CVE-2007-0956</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-0957" impact="important" public="20070403">CVE-2007-0957</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-1216" impact="important" public="20070403">CVE-2007-1216</cve>
     <bugzilla href="https://bugzilla.redhat.com/229782" id="229782">CVE-2007-0956 Unauthorized access via krb5-telnet daemon</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/231528" id="231528">CVE-2007-0957 krb5_klog_syslog() stack buffer overflow</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/231537" id="231537">CVE-2007-1216 krb5 double free flaw</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:5</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="krb5-server is earlier than 0:1.2.7-61" test_ref="oval:com.redhat.rhsa:tst:20070095001"/>
       <criterion comment="krb5-server is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070095002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="krb5-devel is earlier than 0:1.2.7-61" test_ref="oval:com.redhat.rhsa:tst:20070095003"/>
       <criterion comment="krb5-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070095004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="krb5-libs is earlier than 0:1.2.7-61" test_ref="oval:com.redhat.rhsa:tst:20070095005"/>
       <criterion comment="krb5-libs is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070095006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="krb5-workstation is earlier than 0:1.2.7-61" test_ref="oval:com.redhat.rhsa:tst:20070095007"/>
       <criterion comment="krb5-workstation is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070095008"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="krb5-server is earlier than 0:1.3.4-46" test_ref="oval:com.redhat.rhsa:tst:20070095010"/>
       <criterion comment="krb5-server is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070095002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="krb5-devel is earlier than 0:1.3.4-46" test_ref="oval:com.redhat.rhsa:tst:20070095011"/>
       <criterion comment="krb5-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070095004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="krb5-workstation is earlier than 0:1.3.4-46" test_ref="oval:com.redhat.rhsa:tst:20070095012"/>
       <criterion comment="krb5-workstation is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070095008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="krb5-libs is earlier than 0:1.3.4-46" test_ref="oval:com.redhat.rhsa:tst:20070095013"/>
       <criterion comment="krb5-libs is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070095006"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 5 is installed" test_ref="oval:com.redhat.rhsa:tst:20070066013"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="krb5-workstation is earlier than 0:1.5-23" test_ref="oval:com.redhat.rhsa:tst:20070095015"/>
       <criterion comment="krb5-workstation is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070095016"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="krb5-libs is earlier than 0:1.5-23" test_ref="oval:com.redhat.rhsa:tst:20070095017"/>
       <criterion comment="krb5-libs is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070095018"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="krb5-devel is earlier than 0:1.5-23" test_ref="oval:com.redhat.rhsa:tst:20070095019"/>
       <criterion comment="krb5-devel is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070095020"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="krb5-server is earlier than 0:1.5-23" test_ref="oval:com.redhat.rhsa:tst:20070095021"/>
       <criterion comment="krb5-server is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070095022"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20070106" version="632">
   <metadata>
    <title>RHSA-2007:0106: gnupg security update (Important)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
    </affected>
    <reference ref_id="RHSA-2007:0106" ref_url="https://access.redhat.com/errata/RHSA-2007:0106" source="RHSA"/>
    <reference ref_id="CVE-2007-1263" ref_url="https://access.redhat.com/security/cve/CVE-2007-1263" source="CVE"/>
    <description>GnuPG is a utility for encrypting data and creating digital signatures.

Gerardo Richarte discovered that a number of applications that make use of
GnuPG are prone to a vulnerability involving incorrect verification of
signatures and encryption.  An attacker could add arbitrary content to a
signed message in such a way that a receiver of the message would not be
able to distinguish between the properly signed parts of a message and the
forged, unsigned, parts.  (CVE-2007-1263)

Whilst this is not a vulnerability in GnuPG itself, the GnuPG team have
produced a patch to protect against messages with multiple plaintext
packets.  Users should update to these erratum packages which contain the
backported patch for this issue.

Red Hat would like to thank Core Security Technologies for reporting this
issue.</description>
    <advisory from="secalert@redhat.com">
     <severity>Important</severity>
     <rights>Copyright 2007 Red Hat, Inc.</rights>
     <issued date="2007-03-06"/>
     <updated date="2007-03-06"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-1263" public="20070305">CVE-2007-1263</cve>
     <bugzilla href="https://bugzilla.redhat.com/230456" id="230456">CVE-2007-1263 gnupg signed message spoofing</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criterion comment="gnupg is earlier than 0:1.2.1-20" test_ref="oval:com.redhat.rhsa:tst:20070106001"/>
     <criterion comment="gnupg is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060266002"/>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criterion comment="gnupg is earlier than 0:1.2.6-9" test_ref="oval:com.redhat.rhsa:tst:20070106004"/>
     <criterion comment="gnupg is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060266002"/>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20070123" version="638">
   <metadata>
    <title>RHSA-2007:0123: cups security update (Moderate)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
     <platform>Red Hat Enterprise Linux 5</platform>
    </affected>
    <reference ref_id="RHSA-2007:0123" ref_url="https://access.redhat.com/errata/RHSA-2007:0123" source="RHSA"/>
    <reference ref_id="CVE-2007-0720" ref_url="https://access.redhat.com/security/cve/CVE-2007-0720" source="CVE"/>
    <description>The Common UNIX Printing System (CUPS) provides a portable printing layer
for UNIX(R) operating systems.

A bug was found in the way CUPS handled SSL negotiation.  A remote user
capable of connecting to the CUPS daemon could cause a denial of service to
other CUPS users.  (CVE-2007-0720)

All users of CUPS should upgrade to these updated packages, which contain
a backported patch introducing a timeout, which prevents connections being
kept open for an arbitrarily long time.</description>
    <advisory from="secalert@redhat.com">
     <severity>Moderate</severity>
     <rights>Copyright 2008 Red Hat, Inc.</rights>
     <issued date="2007-04-16"/>
     <updated date="2008-03-20"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-0720" public="20061113">CVE-2007-0720</cve>
     <bugzilla href="https://bugzilla.redhat.com/232241" id="232241">CVE-2007-0720 Incomplete SSL negotiation prevents other clients from connecting to CUPS server</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:5</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="cups-libs is earlier than 1:1.1.17-13.3.42" test_ref="oval:com.redhat.rhsa:tst:20070123001"/>
       <criterion comment="cups-libs is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060163004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="cups is earlier than 1:1.1.17-13.3.42" test_ref="oval:com.redhat.rhsa:tst:20070123003"/>
       <criterion comment="cups is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060163006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="cups-devel is earlier than 1:1.1.17-13.3.42" test_ref="oval:com.redhat.rhsa:tst:20070123005"/>
       <criterion comment="cups-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060163002"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="cups-devel is earlier than 1:1.1.22-0.rc1.9.18" test_ref="oval:com.redhat.rhsa:tst:20070123008"/>
       <criterion comment="cups-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060163002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="cups is earlier than 1:1.1.22-0.rc1.9.18" test_ref="oval:com.redhat.rhsa:tst:20070123009"/>
       <criterion comment="cups is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060163006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="cups-libs is earlier than 1:1.1.22-0.rc1.9.18" test_ref="oval:com.redhat.rhsa:tst:20070123010"/>
       <criterion comment="cups-libs is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060163004"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 5 is installed" test_ref="oval:com.redhat.rhsa:tst:20070066013"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="cups is earlier than 1:1.2.4-11.5.1.el5" test_ref="oval:com.redhat.rhsa:tst:20070123012"/>
       <criterion comment="cups is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070123013"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="cups-devel is earlier than 1:1.2.4-11.5.1.el5" test_ref="oval:com.redhat.rhsa:tst:20070123014"/>
       <criterion comment="cups-devel is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070123015"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="cups-libs is earlier than 1:1.2.4-11.5.1.el5" test_ref="oval:com.redhat.rhsa:tst:20070123016"/>
       <criterion comment="cups-libs is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070123017"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="cups-lpd is earlier than 1:1.2.4-11.5.1.el5" test_ref="oval:com.redhat.rhsa:tst:20070123018"/>
       <criterion comment="cups-lpd is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070123019"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20070125" version="633">
   <metadata>
    <title>RHSA-2007:0125: XFree86 security update (Important)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
    </affected>
    <reference ref_id="RHSA-2007:0125" ref_url="https://access.redhat.com/errata/RHSA-2007:0125" source="RHSA"/>
    <reference ref_id="CVE-2007-1003" ref_url="https://access.redhat.com/security/cve/CVE-2007-1003" source="CVE"/>
    <reference ref_id="CVE-2007-1351" ref_url="https://access.redhat.com/security/cve/CVE-2007-1351" source="CVE"/>
    <reference ref_id="CVE-2007-1352" ref_url="https://access.redhat.com/security/cve/CVE-2007-1352" source="CVE"/>
    <reference ref_id="CVE-2007-1667" ref_url="https://access.redhat.com/security/cve/CVE-2007-1667" source="CVE"/>
    <description>XFree86 is an implementation of the X Window System, which provides the
core functionality for the Linux graphical desktop.

iDefense reported an integer overflow flaw in the XFree86 XC-MISC
extension. A malicious authorized client could exploit this issue to cause
a denial of service (crash) or potentially execute arbitrary code with root
privileges on the XFree86 server. (CVE-2007-1003)

iDefense reported two integer overflows in the way X.org handled various
font files. A malicious local user could exploit these issues to
potentially execute arbitrary code with the privileges of the X.org server.
(CVE-2007-1351, CVE-2007-1352)

An integer overflow flaw was found in the XFree86 XGetPixel() function.
Improper use of this function could cause an application calling it to
function improperly, possibly leading to a crash or arbitrary code
execution. (CVE-2007-1667)

Users of XFree86 should upgrade to these updated packages, which contain a
backported patch and is not vulnerable to this issue.</description>
    <advisory from="secalert@redhat.com">
     <severity>Important</severity>
     <rights>Copyright 2008 Red Hat, Inc.</rights>
     <issued date="2007-04-03"/>
     <updated date="2008-03-20"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-1003" public="20070403">CVE-2007-1003</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-1351" public="20070403">CVE-2007-1351</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-1352" public="20070403">CVE-2007-1352</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-1667" impact="moderate" public="20070309">CVE-2007-1667</cve>
     <bugzilla href="https://bugzilla.redhat.com/231684" id="231684">CVE-2007-1667 XGetPixel() integer overflow</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/232996" id="232996">CVE-2007-1003 xserver XC-MISC integer overflow</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/234055" id="234055">CVE-2007-1351 Multiple font integer overflows (CVE-2007-1352)</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="AND">
    <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
    <criteria operator="OR">
     <criteria operator="AND">
      <criterion comment="XFree86-tools is earlier than 0:4.3.0-120.EL" test_ref="oval:com.redhat.rhsa:tst:20070125001"/>
      <criterion comment="XFree86-tools is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635032"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-xauth is earlier than 0:4.3.0-120.EL" test_ref="oval:com.redhat.rhsa:tst:20070125003"/>
      <criterion comment="XFree86-xauth is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635018"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-ISO8859-9-100dpi-fonts is earlier than 0:4.3.0-120.EL" test_ref="oval:com.redhat.rhsa:tst:20070125005"/>
      <criterion comment="XFree86-ISO8859-9-100dpi-fonts is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635060"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-syriac-fonts is earlier than 0:4.3.0-120.EL" test_ref="oval:com.redhat.rhsa:tst:20070125007"/>
      <criterion comment="XFree86-syriac-fonts is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635024"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-base-fonts is earlier than 0:4.3.0-120.EL" test_ref="oval:com.redhat.rhsa:tst:20070125009"/>
      <criterion comment="XFree86-base-fonts is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635008"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-ISO8859-2-75dpi-fonts is earlier than 0:4.3.0-120.EL" test_ref="oval:com.redhat.rhsa:tst:20070125011"/>
      <criterion comment="XFree86-ISO8859-2-75dpi-fonts is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635004"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86 is earlier than 0:4.3.0-120.EL" test_ref="oval:com.redhat.rhsa:tst:20070125013"/>
      <criterion comment="XFree86 is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635030"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-ISO8859-9-75dpi-fonts is earlier than 0:4.3.0-120.EL" test_ref="oval:com.redhat.rhsa:tst:20070125015"/>
      <criterion comment="XFree86-ISO8859-9-75dpi-fonts is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635012"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-ISO8859-14-100dpi-fonts is earlier than 0:4.3.0-120.EL" test_ref="oval:com.redhat.rhsa:tst:20070125017"/>
      <criterion comment="XFree86-ISO8859-14-100dpi-fonts is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635010"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-twm is earlier than 0:4.3.0-120.EL" test_ref="oval:com.redhat.rhsa:tst:20070125019"/>
      <criterion comment="XFree86-twm is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635056"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-cyrillic-fonts is earlier than 0:4.3.0-120.EL" test_ref="oval:com.redhat.rhsa:tst:20070125021"/>
      <criterion comment="XFree86-cyrillic-fonts is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635014"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-ISO8859-2-100dpi-fonts is earlier than 0:4.3.0-120.EL" test_ref="oval:com.redhat.rhsa:tst:20070125023"/>
      <criterion comment="XFree86-ISO8859-2-100dpi-fonts is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635016"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-truetype-fonts is earlier than 0:4.3.0-120.EL" test_ref="oval:com.redhat.rhsa:tst:20070125025"/>
      <criterion comment="XFree86-truetype-fonts is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635020"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-75dpi-fonts is earlier than 0:4.3.0-120.EL" test_ref="oval:com.redhat.rhsa:tst:20070125027"/>
      <criterion comment="XFree86-75dpi-fonts is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635026"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-sdk is earlier than 0:4.3.0-120.EL" test_ref="oval:com.redhat.rhsa:tst:20070125029"/>
      <criterion comment="XFree86-sdk is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635050"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-xfs is earlier than 0:4.3.0-120.EL" test_ref="oval:com.redhat.rhsa:tst:20070125031"/>
      <criterion comment="XFree86-xfs is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635052"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-Xvfb is earlier than 0:4.3.0-120.EL" test_ref="oval:com.redhat.rhsa:tst:20070125033"/>
      <criterion comment="XFree86-Xvfb is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635028"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-xdm is earlier than 0:4.3.0-120.EL" test_ref="oval:com.redhat.rhsa:tst:20070125035"/>
      <criterion comment="XFree86-xdm is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635022"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-ISO8859-14-75dpi-fonts is earlier than 0:4.3.0-120.EL" test_ref="oval:com.redhat.rhsa:tst:20070125037"/>
      <criterion comment="XFree86-ISO8859-14-75dpi-fonts is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635034"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-devel is earlier than 0:4.3.0-120.EL" test_ref="oval:com.redhat.rhsa:tst:20070125039"/>
      <criterion comment="XFree86-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635038"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-doc is earlier than 0:4.3.0-120.EL" test_ref="oval:com.redhat.rhsa:tst:20070125041"/>
      <criterion comment="XFree86-doc is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635036"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-ISO8859-15-75dpi-fonts is earlier than 0:4.3.0-120.EL" test_ref="oval:com.redhat.rhsa:tst:20070125043"/>
      <criterion comment="XFree86-ISO8859-15-75dpi-fonts is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635040"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-100dpi-fonts is earlier than 0:4.3.0-120.EL" test_ref="oval:com.redhat.rhsa:tst:20070125045"/>
      <criterion comment="XFree86-100dpi-fonts is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635048"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-ISO8859-15-100dpi-fonts is earlier than 0:4.3.0-120.EL" test_ref="oval:com.redhat.rhsa:tst:20070125047"/>
      <criterion comment="XFree86-ISO8859-15-100dpi-fonts is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635044"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-Mesa-libGLU is earlier than 0:4.3.0-120.EL" test_ref="oval:com.redhat.rhsa:tst:20070125049"/>
      <criterion comment="XFree86-Mesa-libGLU is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635002"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-libs is earlier than 0:4.3.0-120.EL" test_ref="oval:com.redhat.rhsa:tst:20070125051"/>
      <criterion comment="XFree86-libs is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635042"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-Mesa-libGL is earlier than 0:4.3.0-120.EL" test_ref="oval:com.redhat.rhsa:tst:20070125053"/>
      <criterion comment="XFree86-Mesa-libGL is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635046"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-Xnest is earlier than 0:4.3.0-120.EL" test_ref="oval:com.redhat.rhsa:tst:20070125055"/>
      <criterion comment="XFree86-Xnest is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635058"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-libs-data is earlier than 0:4.3.0-120.EL" test_ref="oval:com.redhat.rhsa:tst:20070125057"/>
      <criterion comment="XFree86-libs-data is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635054"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-font-utils is earlier than 0:4.3.0-120.EL" test_ref="oval:com.redhat.rhsa:tst:20070125059"/>
      <criterion comment="XFree86-font-utils is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635006"/>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20070150" version="632">
   <metadata>
    <title>RHSA-2007:0150: freetype security update (Moderate)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
     <platform>Red Hat Enterprise Linux 5</platform>
    </affected>
    <reference ref_id="RHSA-2007:0150" ref_url="https://access.redhat.com/errata/RHSA-2007:0150" source="RHSA"/>
    <reference ref_id="CVE-2007-1351" ref_url="https://access.redhat.com/security/cve/CVE-2007-1351" source="CVE"/>
    <description>FreeType is a free, high-quality,  portable font engine.

An integer overflow flaw was found in the way the FreeType font engine
processed BDF font files. If a user loaded a carefully crafted font file
with a program linked against FreeType, it could cause the application to
crash or execute arbitrary code. While it is uncommon for a user to
explicitly load a font file, there are several application file formats
which contain embedded fonts that are parsed by FreeType. (CVE-2007-1351)

This flaw did not affect the version of FreeType shipped in Red Hat
Enterprise Linux 2.1.

Users of FreeType should upgrade to these updated packages, which contain
a backported patch to correct this issue.

Red Hat would like to thank iDefense for reporting this issue.</description>
    <advisory from="secalert@redhat.com">
     <severity>Moderate</severity>
     <rights>Copyright 2007 Red Hat, Inc.</rights>
     <issued date="2007-04-16"/>
     <updated date="2007-04-16"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-1351" impact="important" public="20070403">CVE-2007-1351</cve>
     <bugzilla href="https://bugzilla.redhat.com/234228" id="234228">CVE-2007-1351 BDF font integer overflow</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:5</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="freetype is earlier than 0:2.1.4-6.el3" test_ref="oval:com.redhat.rhsa:tst:20070150001"/>
       <criterion comment="freetype is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060500002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="freetype-devel is earlier than 0:2.1.4-6.el3" test_ref="oval:com.redhat.rhsa:tst:20070150003"/>
       <criterion comment="freetype-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060500004"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="freetype-utils is earlier than 0:2.1.9-5.el4" test_ref="oval:com.redhat.rhsa:tst:20070150006"/>
       <criterion comment="freetype-utils is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060500010"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="freetype-devel is earlier than 0:2.1.9-5.el4" test_ref="oval:com.redhat.rhsa:tst:20070150008"/>
       <criterion comment="freetype-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060500004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="freetype-demos is earlier than 0:2.1.9-5.el4" test_ref="oval:com.redhat.rhsa:tst:20070150009"/>
       <criterion comment="freetype-demos is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060500008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="freetype is earlier than 0:2.1.9-5.el4" test_ref="oval:com.redhat.rhsa:tst:20070150011"/>
       <criterion comment="freetype is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060500002"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 5 is installed" test_ref="oval:com.redhat.rhsa:tst:20070066013"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="freetype-demos is earlier than 0:2.2.1-17.el5" test_ref="oval:com.redhat.rhsa:tst:20070150013"/>
       <criterion comment="freetype-demos is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070150014"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="freetype is earlier than 0:2.2.1-17.el5" test_ref="oval:com.redhat.rhsa:tst:20070150015"/>
       <criterion comment="freetype is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070150016"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="freetype-devel is earlier than 0:2.2.1-17.el5" test_ref="oval:com.redhat.rhsa:tst:20070150017"/>
       <criterion comment="freetype-devel is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070150018"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20070155" version="632">
   <metadata>
    <title>RHSA-2007:0155: php security update (Important)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
    </affected>
    <reference ref_id="RHSA-2007:0155" ref_url="https://access.redhat.com/errata/RHSA-2007:0155" source="RHSA"/>
    <reference ref_id="CVE-2007-0455" ref_url="https://access.redhat.com/security/cve/CVE-2007-0455" source="CVE"/>
    <reference ref_id="CVE-2007-1001" ref_url="https://access.redhat.com/security/cve/CVE-2007-1001" source="CVE"/>
    <reference ref_id="CVE-2007-1285" ref_url="https://access.redhat.com/security/cve/CVE-2007-1285" source="CVE"/>
    <reference ref_id="CVE-2007-1286" ref_url="https://access.redhat.com/security/cve/CVE-2007-1286" source="CVE"/>
    <reference ref_id="CVE-2007-1583" ref_url="https://access.redhat.com/security/cve/CVE-2007-1583" source="CVE"/>
    <reference ref_id="CVE-2007-1711" ref_url="https://access.redhat.com/security/cve/CVE-2007-1711" source="CVE"/>
    <reference ref_id="CVE-2007-1718" ref_url="https://access.redhat.com/security/cve/CVE-2007-1718" source="CVE"/>
    <description>PHP is an HTML-embedded scripting language commonly used with the Apache
HTTP Web server.

A denial of service flaw was found in the way PHP processed a deeply nested
array. A remote attacker could cause the PHP interpreter to crash by
submitting an input variable with a deeply nested array. (CVE-2007-1285) 

A flaw was found in the way PHP's unserialize() function processed data. If
a remote attacker was able to pass arbitrary data to PHP's unserialize()
function, they could possibly execute arbitrary code as the apache user.
(CVE-2007-1286)

A flaw was found in the way the mbstring extension set global variables. A
script which used the mb_parse_str() function to set global variables could
be forced to enable the register_globals configuration option, possibly
resulting in global variable injection. (CVE-2007-1583)

A double free flaw was found in PHP's session_decode() function. If a
remote attacker was able to pass arbitrary data to PHP's session_decode()
function, they could possibly execute arbitrary code as the apache user.
(CVE-2007-1711)

A flaw was discovered in the way PHP's mail() function processed header
data. If a script sent mail using a Subject header containing a string from
an untrusted source, a remote attacker could send bulk e-mail to unintended
recipients. (CVE-2007-1718)

A heap based buffer overflow flaw was discovered in PHP's gd extension. A
script that could be forced to process WBMP images from an untrusted source
could result in arbitrary code execution. (CVE-2007-1001)

A buffer over-read flaw was discovered in PHP's gd extension. A script that
could be forced to write arbitrary string using a JIS font from an
untrusted source could cause the PHP interpreter to crash. (CVE-2007-0455)

Users of PHP should upgrade to these updated packages which contain
backported patches to correct these issues.</description>
    <advisory from="secalert@redhat.com">
     <severity>Important</severity>
     <rights>Copyright 2007 Red Hat, Inc.</rights>
     <issued date="2007-04-16"/>
     <updated date="2007-04-16"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-0455" impact="low" public="20070126">CVE-2007-0455</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-1001" impact="moderate" public="20070310">CVE-2007-1001</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-1285" impact="moderate" public="20070301">CVE-2007-1285</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-1286" public="20070302">CVE-2007-1286</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-1583" impact="low" public="20070320">CVE-2007-1583</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-1711" public="20070325">CVE-2007-1711</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-1718" impact="low" public="20070326">CVE-2007-1718</cve>
     <bugzilla href="https://bugzilla.redhat.com/230556" id="230556">CVE-2007-1285 &quot;Month of PHP Bugs&quot; security issues (CVE-2007-1286 CVE-2007-1583 CVE-2007-1711 CVE-2007-1718)</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/235028" id="235028">CVE-2007-1001 gd php flaws (CVE-2007-0455)</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="php-pgsql is earlier than 0:4.3.2-40.ent" test_ref="oval:com.redhat.rhsa:tst:20070155001"/>
       <criterion comment="php-pgsql is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276012"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-mysql is earlier than 0:4.3.2-40.ent" test_ref="oval:com.redhat.rhsa:tst:20070155003"/>
       <criterion comment="php-mysql is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276014"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php is earlier than 0:4.3.2-40.ent" test_ref="oval:com.redhat.rhsa:tst:20070155005"/>
       <criterion comment="php is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-imap is earlier than 0:4.3.2-40.ent" test_ref="oval:com.redhat.rhsa:tst:20070155007"/>
       <criterion comment="php-imap is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276010"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-devel is earlier than 0:4.3.2-40.ent" test_ref="oval:com.redhat.rhsa:tst:20070155009"/>
       <criterion comment="php-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-odbc is earlier than 0:4.3.2-40.ent" test_ref="oval:com.redhat.rhsa:tst:20070155011"/>
       <criterion comment="php-odbc is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-ldap is earlier than 0:4.3.2-40.ent" test_ref="oval:com.redhat.rhsa:tst:20070155013"/>
       <criterion comment="php-ldap is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276006"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="php-mbstring is earlier than 0:4.3.9-3.22.4" test_ref="oval:com.redhat.rhsa:tst:20070155016"/>
       <criterion comment="php-mbstring is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276030"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-pgsql is earlier than 0:4.3.9-3.22.4" test_ref="oval:com.redhat.rhsa:tst:20070155018"/>
       <criterion comment="php-pgsql is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276012"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-pear is earlier than 0:4.3.9-3.22.4" test_ref="oval:com.redhat.rhsa:tst:20070155019"/>
       <criterion comment="php-pear is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276028"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-ldap is earlier than 0:4.3.9-3.22.4" test_ref="oval:com.redhat.rhsa:tst:20070155021"/>
       <criterion comment="php-ldap is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-devel is earlier than 0:4.3.9-3.22.4" test_ref="oval:com.redhat.rhsa:tst:20070155022"/>
       <criterion comment="php-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-gd is earlier than 0:4.3.9-3.22.4" test_ref="oval:com.redhat.rhsa:tst:20070155023"/>
       <criterion comment="php-gd is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276035"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-snmp is earlier than 0:4.3.9-3.22.4" test_ref="oval:com.redhat.rhsa:tst:20070155025"/>
       <criterion comment="php-snmp is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276024"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-imap is earlier than 0:4.3.9-3.22.4" test_ref="oval:com.redhat.rhsa:tst:20070155027"/>
       <criterion comment="php-imap is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276010"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-mysql is earlier than 0:4.3.9-3.22.4" test_ref="oval:com.redhat.rhsa:tst:20070155028"/>
       <criterion comment="php-mysql is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276014"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php is earlier than 0:4.3.9-3.22.4" test_ref="oval:com.redhat.rhsa:tst:20070155029"/>
       <criterion comment="php is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-domxml is earlier than 0:4.3.9-3.22.4" test_ref="oval:com.redhat.rhsa:tst:20070155030"/>
       <criterion comment="php-domxml is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276032"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-xmlrpc is earlier than 0:4.3.9-3.22.4" test_ref="oval:com.redhat.rhsa:tst:20070155032"/>
       <criterion comment="php-xmlrpc is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276019"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-odbc is earlier than 0:4.3.9-3.22.4" test_ref="oval:com.redhat.rhsa:tst:20070155034"/>
       <criterion comment="php-odbc is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-ncurses is earlier than 0:4.3.9-3.22.4" test_ref="oval:com.redhat.rhsa:tst:20070155035"/>
       <criterion comment="php-ncurses is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276026"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20070322" version="634">
   <metadata>
    <title>RHSA-2007:0322: xscreensaver security update (Moderate)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
    </affected>
    <reference ref_id="RHSA-2007:0322" ref_url="https://access.redhat.com/errata/RHSA-2007:0322" source="RHSA"/>
    <reference ref_id="CVE-2007-1859" ref_url="https://access.redhat.com/security/cve/CVE-2007-1859" source="CVE"/>
    <description>XScreenSaver is a collection of screensavers.

Alex Yamauchi discovered a flaw in the way XScreenSaver verifies user
passwords. When a system is using a remote directory service for login
credentials, a local attacker may be able to cause a network outage causing
XScreenSaver to crash, unlocking the screen. (CVE-2007-1859)

Users of XScreenSaver should upgrade to this updated package, which
contains a backported patch to correct this issue.</description>
    <advisory from="secalert@redhat.com">
     <severity>Moderate</severity>
     <rights>Copyright 2007 Red Hat, Inc.</rights>
     <issued date="2008-01-07"/>
     <updated date="2007-05-02"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-1859" impact="important" public="20070503">CVE-2007-1859</cve>
     <bugzilla href="https://bugzilla.redhat.com/237003" id="237003">CVE-2007-1859 xscreensaver authentication bypass</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criterion comment="xscreensaver is earlier than 1:4.10-21.el3" test_ref="oval:com.redhat.rhsa:tst:20070322001"/>
     <criterion comment="xscreensaver is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060498002"/>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criterion comment="xscreensaver is earlier than 1:4.18-5.rhel4.14" test_ref="oval:com.redhat.rhsa:tst:20070322004"/>
     <criterion comment="xscreensaver is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060498002"/>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20070336" version="632">
   <metadata>
    <title>RHSA-2007:0336: postgresql security update (Moderate)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
     <platform>Red Hat Enterprise Linux 5</platform>
    </affected>
    <reference ref_id="RHSA-2007:0336" ref_url="https://access.redhat.com/errata/RHSA-2007:0336" source="RHSA"/>
    <reference ref_id="CVE-2007-2138" ref_url="https://access.redhat.com/security/cve/CVE-2007-2138" source="CVE"/>
    <description>PostgreSQL is an advanced Object-Relational database management system
(DBMS).

A flaw was found in the way PostgreSQL allows authenticated users to
execute security-definer functions.  It was possible for an unprivileged
user to execute arbitrary code with the privileges of the security-definer
function. (CVE-2007-2138)

Users of PostgreSQL should upgrade to these updated packages containing
PostgreSQL version 8.1.9, 7.4.17, and 7.3.19 which corrects this issue.</description>
    <advisory from="secalert@redhat.com">
     <severity>Moderate</severity>
     <rights>Copyright 2007 Red Hat, Inc.</rights>
     <issued date="2008-01-07"/>
     <updated date="2007-05-08"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-2138" public="20070423">CVE-2007-2138</cve>
     <bugzilla href="https://bugzilla.redhat.com/237680" id="237680">CVE-2007-2138 PostgreSQL security-definer function privilege escalation</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:5</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="rh-postgresql-server is earlier than 0:7.3.19-1" test_ref="oval:com.redhat.rhsa:tst:20070336001"/>
       <criterion comment="rh-postgresql-server is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060526006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="rh-postgresql-devel is earlier than 0:7.3.19-1" test_ref="oval:com.redhat.rhsa:tst:20070336003"/>
       <criterion comment="rh-postgresql-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060526018"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="rh-postgresql-libs is earlier than 0:7.3.19-1" test_ref="oval:com.redhat.rhsa:tst:20070336005"/>
       <criterion comment="rh-postgresql-libs is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060526008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="rh-postgresql-docs is earlier than 0:7.3.19-1" test_ref="oval:com.redhat.rhsa:tst:20070336007"/>
       <criterion comment="rh-postgresql-docs is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060526010"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="rh-postgresql-jdbc is earlier than 0:7.3.19-1" test_ref="oval:com.redhat.rhsa:tst:20070336009"/>
       <criterion comment="rh-postgresql-jdbc is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060526012"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="rh-postgresql-pl is earlier than 0:7.3.19-1" test_ref="oval:com.redhat.rhsa:tst:20070336011"/>
       <criterion comment="rh-postgresql-pl is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060526016"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="rh-postgresql-tcl is earlier than 0:7.3.19-1" test_ref="oval:com.redhat.rhsa:tst:20070336013"/>
       <criterion comment="rh-postgresql-tcl is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060526020"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="rh-postgresql is earlier than 0:7.3.19-1" test_ref="oval:com.redhat.rhsa:tst:20070336015"/>
       <criterion comment="rh-postgresql is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060526022"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="rh-postgresql-python is earlier than 0:7.3.19-1" test_ref="oval:com.redhat.rhsa:tst:20070336017"/>
       <criterion comment="rh-postgresql-python is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060526014"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="rh-postgresql-contrib is earlier than 0:7.3.19-1" test_ref="oval:com.redhat.rhsa:tst:20070336019"/>
       <criterion comment="rh-postgresql-contrib is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060526002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="rh-postgresql-test is earlier than 0:7.3.19-1" test_ref="oval:com.redhat.rhsa:tst:20070336021"/>
       <criterion comment="rh-postgresql-test is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060526004"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="postgresql-contrib is earlier than 0:7.4.17-1.RHEL4.1" test_ref="oval:com.redhat.rhsa:tst:20070336024"/>
       <criterion comment="postgresql-contrib is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060526035"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="postgresql-tcl is earlier than 0:7.4.17-1.RHEL4.1" test_ref="oval:com.redhat.rhsa:tst:20070336026"/>
       <criterion comment="postgresql-tcl is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060526039"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="postgresql-devel is earlier than 0:7.4.17-1.RHEL4.1" test_ref="oval:com.redhat.rhsa:tst:20070336028"/>
       <criterion comment="postgresql-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060526033"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="postgresql-server is earlier than 0:7.4.17-1.RHEL4.1" test_ref="oval:com.redhat.rhsa:tst:20070336030"/>
       <criterion comment="postgresql-server is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060526031"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="postgresql is earlier than 0:7.4.17-1.RHEL4.1" test_ref="oval:com.redhat.rhsa:tst:20070336032"/>
       <criterion comment="postgresql is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060526045"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="postgresql-pl is earlier than 0:7.4.17-1.RHEL4.1" test_ref="oval:com.redhat.rhsa:tst:20070336034"/>
       <criterion comment="postgresql-pl is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060526025"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="postgresql-test is earlier than 0:7.4.17-1.RHEL4.1" test_ref="oval:com.redhat.rhsa:tst:20070336036"/>
       <criterion comment="postgresql-test is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060526027"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="postgresql-libs is earlier than 0:7.4.17-1.RHEL4.1" test_ref="oval:com.redhat.rhsa:tst:20070336038"/>
       <criterion comment="postgresql-libs is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060526037"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="postgresql-python is earlier than 0:7.4.17-1.RHEL4.1" test_ref="oval:com.redhat.rhsa:tst:20070336040"/>
       <criterion comment="postgresql-python is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060526029"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="postgresql-docs is earlier than 0:7.4.17-1.RHEL4.1" test_ref="oval:com.redhat.rhsa:tst:20070336042"/>
       <criterion comment="postgresql-docs is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060526043"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="postgresql-jdbc is earlier than 0:7.4.17-1.RHEL4.1" test_ref="oval:com.redhat.rhsa:tst:20070336044"/>
       <criterion comment="postgresql-jdbc is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060526041"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 5 is installed" test_ref="oval:com.redhat.rhsa:tst:20070066013"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="postgresql-python is earlier than 0:8.1.9-1.el5" test_ref="oval:com.redhat.rhsa:tst:20070336047"/>
       <criterion comment="postgresql-python is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070336048"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="postgresql-pl is earlier than 0:8.1.9-1.el5" test_ref="oval:com.redhat.rhsa:tst:20070336049"/>
       <criterion comment="postgresql-pl is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070336050"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="postgresql-contrib is earlier than 0:8.1.9-1.el5" test_ref="oval:com.redhat.rhsa:tst:20070336051"/>
       <criterion comment="postgresql-contrib is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070336052"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="postgresql-docs is earlier than 0:8.1.9-1.el5" test_ref="oval:com.redhat.rhsa:tst:20070336053"/>
       <criterion comment="postgresql-docs is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070336054"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="postgresql is earlier than 0:8.1.9-1.el5" test_ref="oval:com.redhat.rhsa:tst:20070336055"/>
       <criterion comment="postgresql is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070336056"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="postgresql-tcl is earlier than 0:8.1.9-1.el5" test_ref="oval:com.redhat.rhsa:tst:20070336057"/>
       <criterion comment="postgresql-tcl is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070336058"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="postgresql-libs is earlier than 0:8.1.9-1.el5" test_ref="oval:com.redhat.rhsa:tst:20070336059"/>
       <criterion comment="postgresql-libs is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070336060"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="postgresql-devel is earlier than 0:8.1.9-1.el5" test_ref="oval:com.redhat.rhsa:tst:20070336061"/>
       <criterion comment="postgresql-devel is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070336062"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="postgresql-server is earlier than 0:8.1.9-1.el5" test_ref="oval:com.redhat.rhsa:tst:20070336063"/>
       <criterion comment="postgresql-server is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070336064"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="postgresql-test is earlier than 0:8.1.9-1.el5" test_ref="oval:com.redhat.rhsa:tst:20070336065"/>
       <criterion comment="postgresql-test is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070336066"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20070338" version="632">
   <metadata>
    <title>RHSA-2007:0338: freeradius security update (Moderate)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
     <platform>Red Hat Enterprise Linux 5</platform>
    </affected>
    <reference ref_id="RHSA-2007:0338" ref_url="https://access.redhat.com/errata/RHSA-2007:0338" source="RHSA"/>
    <reference ref_id="CVE-2007-2028" ref_url="https://access.redhat.com/security/cve/CVE-2007-2028" source="CVE"/>
    <description>FreeRADIUS is a high-performance and highly configurable free RADIUS server
designed to allow centralized authentication and authorization for a network.

A memory leak flaw was found in the way FreeRADIUS parses certain
authentication requests. A remote attacker could send a specially crafted
authentication request which could cause FreeRADIUS to leak a small amount
of memory. If enough of these requests are sent, the FreeRADIUS daemon
would consume a vast quantity of system memory leading to a possible denial
of service.   (CVE-2007-2028)

Users of FreeRADIUS should update to these erratum packages, which contain a
backported patch to correct this issue.</description>
    <advisory from="secalert@redhat.com">
     <severity>Moderate</severity>
     <rights>Copyright 2007 Red Hat, Inc.</rights>
     <issued date="2008-01-07"/>
     <updated date="2007-05-10"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-2028" public="20070412">CVE-2007-2028</cve>
     <bugzilla href="https://bugzilla.redhat.com/236247" id="236247">CVE-2007-2028 Freeradius EAP-TTLS denial of service</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:5</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criterion comment="freeradius is earlier than 0:1.0.1-2.RHEL3.4" test_ref="oval:com.redhat.rhsa:tst:20070338001"/>
     <criterion comment="freeradius is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060271002"/>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="freeradius is earlier than 0:1.0.1-3.RHEL4.5" test_ref="oval:com.redhat.rhsa:tst:20070338004"/>
       <criterion comment="freeradius is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060271002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="freeradius-mysql is earlier than 0:1.0.1-3.RHEL4.5" test_ref="oval:com.redhat.rhsa:tst:20070338005"/>
       <criterion comment="freeradius-mysql is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060271005"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="freeradius-unixODBC is earlier than 0:1.0.1-3.RHEL4.5" test_ref="oval:com.redhat.rhsa:tst:20070338007"/>
       <criterion comment="freeradius-unixODBC is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060271008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="freeradius-postgresql is earlier than 0:1.0.1-3.RHEL4.5" test_ref="oval:com.redhat.rhsa:tst:20070338009"/>
       <criterion comment="freeradius-postgresql is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060271010"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 5 is installed" test_ref="oval:com.redhat.rhsa:tst:20070066013"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="freeradius-mysql is earlier than 0:1.1.3-1.2.el5" test_ref="oval:com.redhat.rhsa:tst:20070338012"/>
       <criterion comment="freeradius-mysql is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070338013"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="freeradius-postgresql is earlier than 0:1.1.3-1.2.el5" test_ref="oval:com.redhat.rhsa:tst:20070338014"/>
       <criterion comment="freeradius-postgresql is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070338015"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="freeradius-unixODBC is earlier than 0:1.1.3-1.2.el5" test_ref="oval:com.redhat.rhsa:tst:20070338016"/>
       <criterion comment="freeradius-unixODBC is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070338017"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="freeradius is earlier than 0:1.1.3-1.2.el5" test_ref="oval:com.redhat.rhsa:tst:20070338018"/>
       <criterion comment="freeradius is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070338019"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20070343" version="633">
   <metadata>
    <title>RHSA-2007:0343: gimp security update (Moderate)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
     <platform>Red Hat Enterprise Linux 5</platform>
    </affected>
    <reference ref_id="RHSA-2007:0343" ref_url="https://access.redhat.com/errata/RHSA-2007:0343" source="RHSA"/>
    <reference ref_id="CVE-2007-2356" ref_url="https://access.redhat.com/security/cve/CVE-2007-2356" source="CVE"/>
    <description>The GIMP (GNU Image Manipulation Program) is an image composition and
editing program.

Marsu discovered a stack overflow bug in The GIMP RAS file loader.  An
attacker could create a carefully crafted file that could cause The GIMP to
crash or possibly execute arbitrary code if the file was opened by a
victim.  (CVE-2007-2356)

For users of Red Hat Enterprise Linux 5, the previous GIMP packages had a
bug that concerned the execution order in which the symbolic links to
externally packaged GIMP plugins are installed and removed, causing the
symbolic links to vanish when the package is updated.

Users of The GIMP should update to these erratum packages which contain a
backported fix to correct these issues.</description>
    <advisory from="secalert@redhat.com">
     <severity>Moderate</severity>
     <rights>Copyright 2007 Red Hat, Inc.</rights>
     <issued date="2008-01-07"/>
     <updated date="2007-05-21"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-2356" public="20070427">CVE-2007-2356</cve>
     <bugzilla href="https://bugzilla.redhat.com/238420" id="238420">CVE-2007-2356 Stack overflow in gimp's sunras plugin</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/238993" id="238993">gimp removes symlinks to plugins of other packages when updated</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:5</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="gimp is earlier than 1:1.2.3-20.3.el3" test_ref="oval:com.redhat.rhsa:tst:20070343001"/>
       <criterion comment="gimp is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070343002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="gimp-devel is earlier than 1:1.2.3-20.3.el3" test_ref="oval:com.redhat.rhsa:tst:20070343003"/>
       <criterion comment="gimp-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070343004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="gimp-perl is earlier than 1:1.2.3-20.3.el3" test_ref="oval:com.redhat.rhsa:tst:20070343005"/>
       <criterion comment="gimp-perl is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070343006"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="gimp-devel is earlier than 1:2.0.5-6.2.el4" test_ref="oval:com.redhat.rhsa:tst:20070343008"/>
       <criterion comment="gimp-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070343004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="gimp is earlier than 1:2.0.5-6.2.el4" test_ref="oval:com.redhat.rhsa:tst:20070343009"/>
       <criterion comment="gimp is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070343002"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 5 is installed" test_ref="oval:com.redhat.rhsa:tst:20070066013"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="gimp-devel is earlier than 2:2.2.13-2.el5" test_ref="oval:com.redhat.rhsa:tst:20070343011"/>
       <criterion comment="gimp-devel is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070343012"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="gimp-libs is earlier than 2:2.2.13-2.el5" test_ref="oval:com.redhat.rhsa:tst:20070343013"/>
       <criterion comment="gimp-libs is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070343014"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="gimp is earlier than 2:2.2.13-2.el5" test_ref="oval:com.redhat.rhsa:tst:20070343015"/>
       <criterion comment="gimp is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070343016"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20070345" version="633">
   <metadata>
    <title>RHSA-2007:0345: vixie-cron security update (Moderate)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
     <platform>Red Hat Enterprise Linux 5</platform>
    </affected>
    <reference ref_id="RHSA-2007:0345" ref_url="https://access.redhat.com/errata/RHSA-2007:0345" source="RHSA"/>
    <reference ref_id="CVE-2007-1856" ref_url="https://access.redhat.com/security/cve/CVE-2007-1856" source="CVE"/>
    <description>The vixie-cron package contains the Vixie version of cron. Cron is a
standard UNIX daemon that runs specified programs at scheduled times.

Raphael Marichez discovered a denial of service bug in the way vixie-cron
verifies crontab file integrity. A local user with the ability to create a
hardlink to /etc/crontab can prevent vixie-cron from executing certain
system  cron jobs. (CVE-2007-1856)

All users of vixie-cron should upgrade to these updated packages, which
contain a backported patch to correct this issue.</description>
    <advisory from="secalert@redhat.com">
     <severity>Moderate</severity>
     <rights>Copyright 2008 Red Hat, Inc.</rights>
     <issued date="2008-01-07"/>
     <updated date="2008-03-20"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-1856" public="20070410">CVE-2007-1856</cve>
     <bugzilla href="https://bugzilla.redhat.com/223662" id="223662">crond failed &quot;Days of week&quot; after a few hours on 1st/Jan</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/235880" id="235880">CVE-2007-1856 crontab denial of service</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:5</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criterion comment="vixie-cron is earlier than 0:4.1-19.EL3" test_ref="oval:com.redhat.rhsa:tst:20070345001"/>
     <criterion comment="vixie-cron is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060117002"/>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criterion comment="vixie-cron is earlier than 4:4.1-47.EL4" test_ref="oval:com.redhat.rhsa:tst:20070345004"/>
     <criterion comment="vixie-cron is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060117002"/>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 5 is installed" test_ref="oval:com.redhat.rhsa:tst:20070066013"/>
     <criterion comment="vixie-cron is earlier than 4:4.1-70.el5" test_ref="oval:com.redhat.rhsa:tst:20070345006"/>
     <criterion comment="vixie-cron is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070345007"/>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20070353" version="633">
   <metadata>
    <title>RHSA-2007:0353: evolution security update (Moderate)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
    </affected>
    <reference ref_id="RHSA-2007:0353" ref_url="https://access.redhat.com/errata/RHSA-2007:0353" source="RHSA"/>
    <reference ref_id="CVE-2007-1558" ref_url="https://access.redhat.com/security/cve/CVE-2007-1558" source="CVE"/>
    <description>Evolution is the GNOME collection of personal information management (PIM)
tools.

A flaw was found in the way Evolution processed certain APOP authentication
requests. A remote attacker could potentially acquire certain portions of a
user's authentication credentials by sending certain responses when
evolution-data-server attempted to authenticate against an APOP server.
(CVE-2007-1558)

All users of Evolution should upgrade to these updated packages, which
contain a backported patch which resolves this issue.</description>
    <advisory from="secalert@redhat.com">
     <severity>Moderate</severity>
     <rights>Copyright 2007 Red Hat, Inc.</rights>
     <issued date="2008-01-07"/>
     <updated date="2007-05-17"/>
     <cve cvss2="2.6/AV:N/AC:H/Au:N/C:P/I:N/A:N" href="https://access.redhat.com/security/cve/CVE-2007-1558" public="20070402">CVE-2007-1558</cve>
     <bugzilla href="https://bugzilla.redhat.com/238565" id="238565">CVE-2007-1558 Evolution APOP information disclosure</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="evolution-devel is earlier than 0:1.4.5-20.el3" test_ref="oval:com.redhat.rhsa:tst:20070353001"/>
       <criterion comment="evolution-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070353002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="evolution is earlier than 0:1.4.5-20.el3" test_ref="oval:com.redhat.rhsa:tst:20070353003"/>
       <criterion comment="evolution is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070353004"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="evolution-devel is earlier than 0:2.0.2-35.0.2.el4" test_ref="oval:com.redhat.rhsa:tst:20070353006"/>
       <criterion comment="evolution-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070353002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="evolution is earlier than 0:2.0.2-35.0.2.el4" test_ref="oval:com.redhat.rhsa:tst:20070353007"/>
       <criterion comment="evolution is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070353004"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20070354" version="634">
   <metadata>
    <title>RHSA-2007:0354: samba security update (Critical)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
     <platform>Red Hat Enterprise Linux 5</platform>
    </affected>
    <reference ref_id="RHSA-2007:0354" ref_url="https://access.redhat.com/errata/RHSA-2007:0354" source="RHSA"/>
    <reference ref_id="CVE-2007-2446" ref_url="https://access.redhat.com/security/cve/CVE-2007-2446" source="CVE"/>
    <reference ref_id="CVE-2007-2447" ref_url="https://access.redhat.com/security/cve/CVE-2007-2447" source="CVE"/>
    <description>Samba provides file and printer sharing services to SMB/CIFS clients.

Various bugs were found in NDR parsing, used to decode MS-RPC requests in
Samba.  A remote attacker could have sent carefully crafted requests
causing a heap overflow, which may have led to the ability to execute
arbitrary code on the server.  (CVE-2007-2446)

Unescaped user input parameters were being passed as arguments to /bin/sh.
A remote, authenticated, user could have triggered this flaw and executed
arbitrary code on the server.  Additionally, on Red Hat Enterprise Linux 5
only, this flaw could be triggered by a remote unauthenticated user if
Samba was configured to use the non-default &quot;username map script&quot; option. 
(CVE-2007-2447)

Users of Samba should upgrade to these packages, which contain backported
patches to correct these issues.  After upgrading, Samba should be
restarted using &quot;service smb restart&quot;

On Red Hat Enterprise Linux 5 the impact of these issues is reduced as
Samba is constrained by the default SELinux &quot;targeted&quot; policy.

Red Hat would like to thank the Samba developers, TippingPoint, and
iDefense for reporting these issues.</description>
    <advisory from="secalert@redhat.com">
     <severity>Critical</severity>
     <rights>Copyright 2008 Red Hat, Inc.</rights>
     <issued date="2008-01-09"/>
     <updated date="2008-03-20"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-2446" public="20070514">CVE-2007-2446</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-2447" impact="important" public="20070514">CVE-2007-2447</cve>
     <bugzilla href="https://bugzilla.redhat.com/239429" id="239429">CVE-2007-2446 samba heap overflows</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/239774" id="239774">CVE-2007-2447 samba code injection</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:5</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="samba is earlier than 0:3.0.9-1.3E.13.2" test_ref="oval:com.redhat.rhsa:tst:20070354001"/>
       <criterion comment="samba is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060591004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="samba-common is earlier than 0:3.0.9-1.3E.13.2" test_ref="oval:com.redhat.rhsa:tst:20070354003"/>
       <criterion comment="samba-common is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060591002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="samba-client is earlier than 0:3.0.9-1.3E.13.2" test_ref="oval:com.redhat.rhsa:tst:20070354005"/>
       <criterion comment="samba-client is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060591008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="samba-swat is earlier than 0:3.0.9-1.3E.13.2" test_ref="oval:com.redhat.rhsa:tst:20070354007"/>
       <criterion comment="samba-swat is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060591006"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="samba is earlier than 0:3.0.10-1.4E.12.2" test_ref="oval:com.redhat.rhsa:tst:20070354010"/>
       <criterion comment="samba is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060591004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="samba-swat is earlier than 0:3.0.10-1.4E.12.2" test_ref="oval:com.redhat.rhsa:tst:20070354011"/>
       <criterion comment="samba-swat is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060591006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="samba-common is earlier than 0:3.0.10-1.4E.12.2" test_ref="oval:com.redhat.rhsa:tst:20070354012"/>
       <criterion comment="samba-common is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060591002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="samba-client is earlier than 0:3.0.10-1.4E.12.2" test_ref="oval:com.redhat.rhsa:tst:20070354013"/>
       <criterion comment="samba-client is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060591008"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 5 is installed" test_ref="oval:com.redhat.rhsa:tst:20070066013"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="samba-common is earlier than 0:3.0.23c-2.el5.2.0.2" test_ref="oval:com.redhat.rhsa:tst:20070354015"/>
       <criterion comment="samba-common is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070354016"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="samba-client is earlier than 0:3.0.23c-2.el5.2.0.2" test_ref="oval:com.redhat.rhsa:tst:20070354017"/>
       <criterion comment="samba-client is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070354018"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="samba-swat is earlier than 0:3.0.23c-2.el5.2.0.2" test_ref="oval:com.redhat.rhsa:tst:20070354019"/>
       <criterion comment="samba-swat is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070354020"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="samba is earlier than 0:3.0.23c-2.el5.2.0.2" test_ref="oval:com.redhat.rhsa:tst:20070354021"/>
       <criterion comment="samba is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070354022"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20070356" version="632">
   <metadata>
    <title>RHSA-2007:0356: libpng security update (Moderate)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
     <platform>Red Hat Enterprise Linux 5</platform>
    </affected>
    <reference ref_id="RHSA-2007:0356" ref_url="https://access.redhat.com/errata/RHSA-2007:0356" source="RHSA"/>
    <reference ref_id="CVE-2006-5793" ref_url="https://access.redhat.com/security/cve/CVE-2006-5793" source="CVE"/>
    <reference ref_id="CVE-2007-2445" ref_url="https://access.redhat.com/security/cve/CVE-2007-2445" source="CVE"/>
    <description>The libpng package contains a library of functions for creating and
manipulating PNG (Portable Network Graphics) image format files.

A flaw was found in the handling of malformed images in libpng. An attacker
could create a carefully crafted PNG image file in such a way that it could
cause an application linked with libpng to crash when the file was
manipulated.  (CVE-2007-2445)

A flaw was found in the sPLT chunk handling code in libpng. An attacker
could create a carefully crafted PNG image file in such a way that it could
cause an application linked with libpng to crash when the file was opened. 
(CVE-2006-5793)

Users of libpng should update to these updated packages which contain
backported patches to correct these issues.

Red Hat would like to thank Glenn Randers-Pehrson, Mats Palmgren, and Tavis
Ormandy for supplying details and patches for these issues.</description>
    <advisory from="secalert@redhat.com">
     <severity>Moderate</severity>
     <rights>Copyright 2007 Red Hat, Inc.</rights>
     <issued date="2008-01-07"/>
     <updated date="2007-05-17"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-5793" impact="low" public="20061114">CVE-2006-5793</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-2445" public="20070515">CVE-2007-2445</cve>
     <bugzilla href="https://bugzilla.redhat.com/215405" id="215405">CVE-2006-5793 libpng DoS</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/239425" id="239425">CVE-2007-2445 libpng png_handle_tRNS flaw</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:5</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="libpng-devel is earlier than 2:1.2.2-27" test_ref="oval:com.redhat.rhsa:tst:20070356001"/>
       <criterion comment="libpng-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070356002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="libpng is earlier than 2:1.2.2-27" test_ref="oval:com.redhat.rhsa:tst:20070356003"/>
       <criterion comment="libpng is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070356004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="libpng10-devel is earlier than 0:1.0.13-17" test_ref="oval:com.redhat.rhsa:tst:20070356005"/>
       <criterion comment="libpng10-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070356006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="libpng10 is earlier than 0:1.0.13-17" test_ref="oval:com.redhat.rhsa:tst:20070356007"/>
       <criterion comment="libpng10 is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070356008"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="libpng is earlier than 2:1.2.7-3.el4" test_ref="oval:com.redhat.rhsa:tst:20070356010"/>
       <criterion comment="libpng is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070356004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="libpng-devel is earlier than 2:1.2.7-3.el4" test_ref="oval:com.redhat.rhsa:tst:20070356011"/>
       <criterion comment="libpng-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070356002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="libpng10 is earlier than 0:1.0.16-3" test_ref="oval:com.redhat.rhsa:tst:20070356012"/>
       <criterion comment="libpng10 is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070356008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="libpng10-devel is earlier than 0:1.0.16-3" test_ref="oval:com.redhat.rhsa:tst:20070356013"/>
       <criterion comment="libpng10-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070356006"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 5 is installed" test_ref="oval:com.redhat.rhsa:tst:20070066013"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="libpng is earlier than 2:1.2.10-7.0.2" test_ref="oval:com.redhat.rhsa:tst:20070356015"/>
       <criterion comment="libpng is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070356016"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="libpng-devel is earlier than 2:1.2.10-7.0.2" test_ref="oval:com.redhat.rhsa:tst:20070356017"/>
       <criterion comment="libpng-devel is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070356018"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20070358" version="632">
   <metadata>
    <title>RHSA-2007:0358: squirrelmail security update (Moderate)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
     <platform>Red Hat Enterprise Linux 5</platform>
    </affected>
    <reference ref_id="RHSA-2007:0358" ref_url="https://access.redhat.com/errata/RHSA-2007:0358" source="RHSA"/>
    <reference ref_id="CVE-2007-1262" ref_url="https://access.redhat.com/security/cve/CVE-2007-1262" source="CVE"/>
    <reference ref_id="CVE-2007-2589" ref_url="https://access.redhat.com/security/cve/CVE-2007-2589" source="CVE"/>
    <description>SquirrelMail is a standards-based webmail package written in PHP4. 

Several HTML filtering bugs were discovered in SquirrelMail.  An attacker
could inject arbitrary JavaScript leading to cross-site scripting attacks
by sending an e-mail viewed by a user within SquirrelMail. 
(CVE-2007-1262)

Squirrelmail did not sufficiently check arguments to IMG tags in HTML
e-mail messages. This could be exploited by an attacker by sending
arbitrary e-mail messages on behalf of a squirrelmail user tricked into opening
a maliciously crafted HTML e-mail message.  (CVE-2007-2589)

Users of SquirrelMail should upgrade to this erratum package, which
contains a backported patch to correct these issues.</description>
    <advisory from="secalert@redhat.com">
     <severity>Moderate</severity>
     <rights>Copyright 2007 Red Hat, Inc.</rights>
     <issued date="2008-01-07"/>
     <updated date="2007-05-17"/>
     <cve cwe="CWE-79" href="https://access.redhat.com/security/cve/CVE-2007-1262" public="20070509">CVE-2007-1262</cve>
     <cve cwe="CWE-352" href="https://access.redhat.com/security/cve/CVE-2007-2589" public="20070509">CVE-2007-2589</cve>
     <bugzilla href="https://bugzilla.redhat.com/239647" id="239647">CVE-2007-1262 XSS through HTML message in squirrelmail</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/239828" id="239828">CVE-2007-2589 CSRF through HTML message in squirrelmail</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:5</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criterion comment="squirrelmail is earlier than 0:1.4.8-6.el3" test_ref="oval:com.redhat.rhsa:tst:20070358001"/>
     <criterion comment="squirrelmail is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060283002"/>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criterion comment="squirrelmail is earlier than 0:1.4.8-4.0.1.el4" test_ref="oval:com.redhat.rhsa:tst:20070358004"/>
     <criterion comment="squirrelmail is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060283002"/>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 5 is installed" test_ref="oval:com.redhat.rhsa:tst:20070066013"/>
     <criterion comment="squirrelmail is earlier than 0:1.4.8-4.0.1.el5" test_ref="oval:com.redhat.rhsa:tst:20070358006"/>
     <criterion comment="squirrelmail is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070358007"/>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20070384" version="634">
   <metadata>
    <title>RHSA-2007:0384: krb5 security update (Critical)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
    </affected>
    <reference ref_id="RHSA-2007:0384" ref_url="https://access.redhat.com/errata/RHSA-2007:0384" source="RHSA"/>
    <reference ref_id="CVE-2007-2442" ref_url="https://access.redhat.com/security/cve/CVE-2007-2442" source="CVE"/>
    <reference ref_id="CVE-2007-2443" ref_url="https://access.redhat.com/security/cve/CVE-2007-2443" source="CVE"/>
    <reference ref_id="CVE-2007-2798" ref_url="https://access.redhat.com/security/cve/CVE-2007-2798" source="CVE"/>
    <description>Kerberos is a network authentication system which allows clients and
servers to authenticate to each other through use of symmetric encryption
and a trusted third party, the KDC. kadmind is the KADM5 administration
server.

David Coffey discovered an uninitialized pointer free flaw in the RPC
library used by kadmind. A remote unauthenticated attacker who can access
kadmind could trigger this flaw and cause kadmind to crash or potentially
execute arbitrary code as root. (CVE-2007-2442)

David Coffey also discovered an overflow flaw in the RPC library used by
kadmind. On Red Hat Enterprise Linux, exploitation of this flaw is limited
to a denial of service. A remote unauthenticated attacker who can access
kadmind could trigger this flaw and cause kadmind to crash. (CVE-2007-2443)

A stack buffer overflow flaw was found in kadmind. An authenticated
attacker who can access kadmind could trigger this flaw and potentially
execute arbitrary code on the Kerberos server. (CVE-2007-2798)

For Red Hat Enterprise Linux 2.1, several portability bugs which would lead
to unexpected crashes on the ia64 platform have also been fixed.

Users of krb5-server are advised to update to these erratum packages which
contain backported fixes to correct these issues.</description>
    <advisory from="secalert@redhat.com">
     <severity>Critical</severity>
     <rights>Copyright 2008 Red Hat, Inc.</rights>
     <issued date="2007-06-26"/>
     <updated date="2008-03-20"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-2442" impact="important" public="20070626">CVE-2007-2442</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-2443" impact="important" public="20070626">CVE-2007-2443</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-2798" impact="important" public="20070626">CVE-2007-2798</cve>
     <bugzilla href="https://bugzilla.redhat.com/241590" id="241590">kadmin core dumps on ia64</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/245547" id="245547">CVE-2007-2442 krb5 RPC library unitialized pointer free</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/245548" id="245548">CVE-2007-2443 krb5 RPC library stack overflow</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/245549" id="245549">CVE-2007-2798 krb5 kadmind buffer overflow</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="AND">
    <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
    <criteria operator="OR">
     <criteria operator="AND">
      <criterion comment="krb5-server is earlier than 0:1.2.7-66" test_ref="oval:com.redhat.rhsa:tst:20070384001"/>
      <criterion comment="krb5-server is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070095002"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="krb5-devel is earlier than 0:1.2.7-66" test_ref="oval:com.redhat.rhsa:tst:20070384003"/>
      <criterion comment="krb5-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070095004"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="krb5-libs is earlier than 0:1.2.7-66" test_ref="oval:com.redhat.rhsa:tst:20070384005"/>
      <criterion comment="krb5-libs is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070095006"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="krb5-workstation is earlier than 0:1.2.7-66" test_ref="oval:com.redhat.rhsa:tst:20070384007"/>
      <criterion comment="krb5-workstation is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070095008"/>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20070385" version="634">
   <metadata>
    <title>RHSA-2007:0385: fetchmail security update (Moderate)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
     <platform>Red Hat Enterprise Linux 5</platform>
    </affected>
    <reference ref_id="RHSA-2007:0385" ref_url="https://access.redhat.com/errata/RHSA-2007:0385" source="RHSA"/>
    <reference ref_id="CVE-2007-1558" ref_url="https://access.redhat.com/security/cve/CVE-2007-1558" source="CVE"/>
    <description>Fetchmail is a remote mail retrieval and forwarding utility intended
for use over on-demand TCP/IP links, like SLIP or PPP connections.

A flaw was found in the way fetchmail processed certain APOP authentication
requests. By sending certain responses when fetchmail attempted to
authenticate against an APOP server, a remote attacker could potentially
acquire certain portions of a user's authentication credentials.
(CVE-2007-1558)

All users of fetchmail should upgrade to this updated package, which
contains a backported patch to correct this issue.</description>
    <advisory from="secalert@redhat.com">
     <severity>Moderate</severity>
     <rights>Copyright 2007 Red Hat, Inc.</rights>
     <issued date="2008-01-07"/>
     <updated date="2007-06-07"/>
     <cve cvss2="2.6/AV:N/AC:H/Au:N/C:P/I:N/A:N" href="https://access.redhat.com/security/cve/CVE-2007-1558" public="20070402">CVE-2007-1558</cve>
     <bugzilla href="https://bugzilla.redhat.com/241191" id="241191">CVE-2007-1558 fetchmail/mutt/evolution/...: APOP password disclosure vulnerability</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:5</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criterion comment="fetchmail is earlier than 0:6.2.0-3.el3.4" test_ref="oval:com.redhat.rhsa:tst:20070385001"/>
     <criterion comment="fetchmail is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070018002"/>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criterion comment="fetchmail is earlier than 0:6.2.5-6.0.1.el4" test_ref="oval:com.redhat.rhsa:tst:20070385004"/>
     <criterion comment="fetchmail is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070018002"/>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 5 is installed" test_ref="oval:com.redhat.rhsa:tst:20070066013"/>
     <criterion comment="fetchmail is earlier than 0:6.3.6-1.0.1.el5" test_ref="oval:com.redhat.rhsa:tst:20070385006"/>
     <criterion comment="fetchmail is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070385007"/>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20070386" version="634">
   <metadata>
    <title>RHSA-2007:0386: mutt security update (Moderate)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
     <platform>Red Hat Enterprise Linux 5</platform>
    </affected>
    <reference ref_id="RHSA-2007:0386" ref_url="https://access.redhat.com/errata/RHSA-2007:0386" source="RHSA"/>
    <reference ref_id="CVE-2006-5297" ref_url="https://access.redhat.com/security/cve/CVE-2006-5297" source="CVE"/>
    <reference ref_id="CVE-2007-1558" ref_url="https://access.redhat.com/security/cve/CVE-2007-1558" source="CVE"/>
    <reference ref_id="CVE-2007-2683" ref_url="https://access.redhat.com/security/cve/CVE-2007-2683" source="CVE"/>
    <description>Mutt is a text-mode mail user agent.

A flaw was found in the way Mutt used temporary files on NFS file systems.
Due to an implementation issue in the NFS protocol, Mutt was not able to
exclusively open a new file.  A local attacker could conduct a
time-dependent attack and possibly gain access to e-mail attachments opened
by a victim. (CVE-2006-5297)

A flaw was found in the way Mutt processed certain APOP authentication
requests. By sending certain responses when mutt attempted to authenticate
against an APOP server, a remote attacker could potentially acquire certain
portions of a user's authentication credentials. (CVE-2007-1558)

A flaw was found in the way Mutt handled certain characters in gecos fields
which could lead to a buffer overflow.  The gecos field is an entry in the
password database typically used to record general information about the
user.  A local attacker could give themselves a carefully crafted &quot;Real
Name&quot; which could execute arbitrary code if a victim uses Mutt and expands
the attackers alias.  (CVE-2007-2683)

All users of mutt should upgrade to this updated package, which
contains a backported patches to correct these issues.</description>
    <advisory from="secalert@redhat.com">
     <severity>Moderate</severity>
     <rights>Copyright 2008 Red Hat, Inc.</rights>
     <issued date="2008-01-07"/>
     <updated date="2008-03-20"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-5297" impact="low" public="20061004">CVE-2006-5297</cve>
     <cve cvss2="2.6/AV:N/AC:H/Au:N/C:P/I:N/A:N" href="https://access.redhat.com/security/cve/CVE-2007-1558" public="20070402">CVE-2007-1558</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-2683" impact="low" public="20070511">CVE-2007-2683</cve>
     <bugzilla href="https://bugzilla.redhat.com/211085" id="211085">CVE-2006-5297 Multiple mutt tempfile race conditions</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/239890" id="239890">CVE-2007-2683 Buffer overflow in mutt's gecos structure handling</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/241191" id="241191">CVE-2007-1558 fetchmail/mutt/evolution/...: APOP password disclosure vulnerability</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:5</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criterion comment="mutt is earlier than 5:1.4.1-5.el3" test_ref="oval:com.redhat.rhsa:tst:20070386001"/>
     <criterion comment="mutt is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060577002"/>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criterion comment="mutt is earlier than 5:1.4.1-12.0.3.el4" test_ref="oval:com.redhat.rhsa:tst:20070386004"/>
     <criterion comment="mutt is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060577002"/>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 5 is installed" test_ref="oval:com.redhat.rhsa:tst:20070066013"/>
     <criterion comment="mutt is earlier than 5:1.4.2.2-3.0.2.el5" test_ref="oval:com.redhat.rhsa:tst:20070386006"/>
     <criterion comment="mutt is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070386007"/>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20070389" version="633">
   <metadata>
    <title>RHSA-2007:0389: quagga security update (Moderate)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
     <platform>Red Hat Enterprise Linux 5</platform>
    </affected>
    <reference ref_id="RHSA-2007:0389" ref_url="https://access.redhat.com/errata/RHSA-2007:0389" source="RHSA"/>
    <reference ref_id="CVE-2007-1995" ref_url="https://access.redhat.com/security/cve/CVE-2007-1995" source="CVE"/>
    <description>Quagga is a TCP/IP based routing software suite.

An out of bounds memory read flaw was discovered in Quagga's bgpd.  A
configured peer of bgpd could cause Quagga to crash, leading to a denial of
service (CVE-2007-1995).

All users of Quagga should upgrade to this updated package, which
contains a backported patch to correct these issues.</description>
    <advisory from="secalert@redhat.com">
     <severity>Moderate</severity>
     <rights>Copyright 2007 Red Hat, Inc.</rights>
     <issued date="2008-01-07"/>
     <updated date="2007-05-30"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-1995" public="20070408">CVE-2007-1995</cve>
     <bugzilla href="https://bugzilla.redhat.com/240478" id="240478">CVE-2007-1995 Quagga bgpd DoS</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:5</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criterion comment="quagga is earlier than 0:0.96.2-12.3E" test_ref="oval:com.redhat.rhsa:tst:20070389001"/>
     <criterion comment="quagga is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060525002"/>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="quagga is earlier than 0:0.98.3-2.4.0.1.el4" test_ref="oval:com.redhat.rhsa:tst:20070389004"/>
       <criterion comment="quagga is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060525002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="quagga-contrib is earlier than 0:0.98.3-2.4.0.1.el4" test_ref="oval:com.redhat.rhsa:tst:20070389005"/>
       <criterion comment="quagga-contrib is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060525008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="quagga-devel is earlier than 0:0.98.3-2.4.0.1.el4" test_ref="oval:com.redhat.rhsa:tst:20070389007"/>
       <criterion comment="quagga-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060525006"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 5 is installed" test_ref="oval:com.redhat.rhsa:tst:20070066013"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="quagga is earlier than 0:0.98.6-2.1.0.1.el5" test_ref="oval:com.redhat.rhsa:tst:20070389010"/>
       <criterion comment="quagga is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070389011"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="quagga-contrib is earlier than 0:0.98.6-2.1.0.1.el5" test_ref="oval:com.redhat.rhsa:tst:20070389012"/>
       <criterion comment="quagga-contrib is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070389013"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="quagga-devel is earlier than 0:0.98.6-2.1.0.1.el5" test_ref="oval:com.redhat.rhsa:tst:20070389014"/>
       <criterion comment="quagga-devel is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070389015"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20070395" version="638">
   <metadata>
    <title>RHSA-2007:0395: mod_perl security update (Low)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
     <platform>Red Hat Enterprise Linux 5</platform>
    </affected>
    <reference ref_id="RHSA-2007:0395" ref_url="https://access.redhat.com/errata/RHSA-2007:0395" source="RHSA"/>
    <reference ref_id="CVE-2007-1349" ref_url="https://access.redhat.com/security/cve/CVE-2007-1349" source="CVE"/>
    <description>Mod_perl incorporates a Perl interpreter into the Apache web server,
so that the Apache web server can directly execute Perl code.

An issue was found in the &quot;namespace_from_uri&quot; method of the
ModPerl::RegistryCooker class.  If a server implemented a mod_perl registry
module using this method, a remote attacker requesting a carefully crafted
URI can cause resource consumption, which could lead to a denial of service
(CVE-2007-1349).

Users of mod_perl should update to these erratum packages which contain a
backported fix to correct this issue.</description>
    <advisory from="secalert@redhat.com">
     <severity>Low</severity>
     <rights>Copyright 2007 Red Hat, Inc.</rights>
     <issued date="2008-01-07"/>
     <updated date="2007-06-14"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-1349" impact="moderate" public="20070322">CVE-2007-1349</cve>
     <bugzilla href="https://bugzilla.redhat.com/240423" id="240423">CVE-2007-1349 mod_perl PerlRun denial of service</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:5</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="mod_perl-devel is earlier than 0:1.99_09-12.ent" test_ref="oval:com.redhat.rhsa:tst:20070395001"/>
       <criterion comment="mod_perl-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070395002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="mod_perl is earlier than 0:1.99_09-12.ent" test_ref="oval:com.redhat.rhsa:tst:20070395003"/>
       <criterion comment="mod_perl is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070395004"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="mod_perl-devel is earlier than 0:1.99_16-4.5" test_ref="oval:com.redhat.rhsa:tst:20070395006"/>
       <criterion comment="mod_perl-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070395002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="mod_perl is earlier than 0:1.99_16-4.5" test_ref="oval:com.redhat.rhsa:tst:20070395007"/>
       <criterion comment="mod_perl is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070395004"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 5 is installed" test_ref="oval:com.redhat.rhsa:tst:20070066013"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="mod_perl-devel is earlier than 0:2.0.2-6.3.el5" test_ref="oval:com.redhat.rhsa:tst:20070395009"/>
       <criterion comment="mod_perl-devel is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070395010"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="mod_perl is earlier than 0:2.0.2-6.3.el5" test_ref="oval:com.redhat.rhsa:tst:20070395011"/>
       <criterion comment="mod_perl is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070395012"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20070402" version="634">
   <metadata>
    <title>RHSA-2007:0402: seamonkey security update (Critical)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
    </affected>
    <reference ref_id="RHSA-2007:0402" ref_url="https://access.redhat.com/errata/RHSA-2007:0402" source="RHSA"/>
    <reference ref_id="CVE-2007-1362" ref_url="https://access.redhat.com/security/cve/CVE-2007-1362" source="CVE"/>
    <reference ref_id="CVE-2007-1558" ref_url="https://access.redhat.com/security/cve/CVE-2007-1558" source="CVE"/>
    <reference ref_id="CVE-2007-1562" ref_url="https://access.redhat.com/security/cve/CVE-2007-1562" source="CVE"/>
    <reference ref_id="CVE-2007-2867" ref_url="https://access.redhat.com/security/cve/CVE-2007-2867" source="CVE"/>
    <reference ref_id="CVE-2007-2868" ref_url="https://access.redhat.com/security/cve/CVE-2007-2868" source="CVE"/>
    <reference ref_id="CVE-2007-2869" ref_url="https://access.redhat.com/security/cve/CVE-2007-2869" source="CVE"/>
    <reference ref_id="CVE-2007-2870" ref_url="https://access.redhat.com/security/cve/CVE-2007-2870" source="CVE"/>
    <reference ref_id="CVE-2007-2871" ref_url="https://access.redhat.com/security/cve/CVE-2007-2871" source="CVE"/>
    <description>SeaMonkey is an open source Web browser, advanced email and newsgroup
client, IRC chat client, and HTML editor.

Several flaws were found in the way SeaMonkey processed certain malformed
JavaScript code. A web page containing malicious JavaScript code could
cause SeaMonkey to crash or potentially execute arbitrary code as
the user running SeaMonkey. (CVE-2007-2867, CVE-2007-2868)

A flaw was found in the way SeaMonkey handled certain FTP PASV commands. A
malicious FTP server could use this flaw to perform a rudimentary port-scan
of machines behind a user's firewall. (CVE-2007-1562)

Several denial of service flaws were found in the way SeaMonkey handled
certain form and cookie data. A malicious web site that is able to set
arbitrary form and cookie data could prevent SeaMonkey from
functioning properly. (CVE-2007-1362, CVE-2007-2869)

A flaw was found in the way SeaMonkey processed certain APOP authentication
requests. By sending certain responses when SeaMonkey attempted to
authenticate against an APOP server, a remote attacker could potentially
acquire certain portions of a user's authentication credentials.
(CVE-2007-1558)

A flaw was found in the way SeaMonkey handled the addEventListener
JavaScript method. A malicious web site could use this method to access or
modify sensitive data from another web site. (CVE-2007-2870)

A flaw was found in the way SeaMonkey displayed certain web content. A
malicious web page could generate content that would overlay user
interface elements such as the hostname and security indicators, tricking 
users into thinking they are visiting a different site. (CVE-2007-2871) 

Users of SeaMonkey are advised to upgrade to these erratum packages, which
contain SeaMonkey version 1.0.9 that corrects these issues.</description>
    <advisory from="secalert@redhat.com">
     <severity>Critical</severity>
     <rights>Copyright 2007 Red Hat, Inc.</rights>
     <issued date="2008-01-09"/>
     <updated date="2007-05-30"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-1362" impact="low" public="20070531">CVE-2007-1362</cve>
     <cve cvss2="2.6/AV:N/AC:H/Au:N/C:P/I:N/A:N" href="https://access.redhat.com/security/cve/CVE-2007-1558" impact="moderate" public="20070402">CVE-2007-1558</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-1562" impact="low" public="20070322">CVE-2007-1562</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-2867" impact="low" public="20070531">CVE-2007-2867</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-2868" public="20070531:0010">CVE-2007-2868</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-2869" impact="low" public="20070531">CVE-2007-2869</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-2870" impact="important" public="20070531">CVE-2007-2870</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-2871" impact="low" public="20070531">CVE-2007-2871</cve>
     <bugzilla href="https://bugzilla.redhat.com/241672" id="241672">CVE-2007-1362 Miltiple Seamonkey flaws (CVE-2007-1562, CVE-2007-1558, CVE-2007-2867, CVE-2007-2868, CVE-2007-2869, CVE-2007-2870, CVE-2007-2871)</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.1.el3" test_ref="oval:com.redhat.rhsa:tst:20070402001"/>
       <criterion comment="seamonkey-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578014"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.1.el3" test_ref="oval:com.redhat.rhsa:tst:20070402003"/>
       <criterion comment="seamonkey-nss-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578012"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.1.el3" test_ref="oval:com.redhat.rhsa:tst:20070402005"/>
       <criterion comment="seamonkey-nspr is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578010"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.1.el3" test_ref="oval:com.redhat.rhsa:tst:20070402007"/>
       <criterion comment="seamonkey-mail is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578020"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.1.el3" test_ref="oval:com.redhat.rhsa:tst:20070402009"/>
       <criterion comment="seamonkey-js-debugger is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.1.el3" test_ref="oval:com.redhat.rhsa:tst:20070402011"/>
       <criterion comment="seamonkey-nss is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578016"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.1.el3" test_ref="oval:com.redhat.rhsa:tst:20070402013"/>
       <criterion comment="seamonkey-chat is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey is earlier than 0:1.0.9-0.1.el3" test_ref="oval:com.redhat.rhsa:tst:20070402015"/>
       <criterion comment="seamonkey is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578018"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.1.el3" test_ref="oval:com.redhat.rhsa:tst:20070402017"/>
       <criterion comment="seamonkey-dom-inspector is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.1.el3" test_ref="oval:com.redhat.rhsa:tst:20070402019"/>
       <criterion comment="seamonkey-nspr-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578004"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="seamonkey-devel is earlier than 0:1.0.9-2.el4" test_ref="oval:com.redhat.rhsa:tst:20070402022"/>
       <criterion comment="seamonkey-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578014"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-2.el4" test_ref="oval:com.redhat.rhsa:tst:20070402023"/>
       <criterion comment="seamonkey-js-debugger is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey is earlier than 0:1.0.9-2.el4" test_ref="oval:com.redhat.rhsa:tst:20070402024"/>
       <criterion comment="seamonkey is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578018"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-mail is earlier than 0:1.0.9-2.el4" test_ref="oval:com.redhat.rhsa:tst:20070402025"/>
       <criterion comment="seamonkey-mail is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578020"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-2.el4" test_ref="oval:com.redhat.rhsa:tst:20070402026"/>
       <criterion comment="seamonkey-dom-inspector is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-chat is earlier than 0:1.0.9-2.el4" test_ref="oval:com.redhat.rhsa:tst:20070402027"/>
       <criterion comment="seamonkey-chat is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="devhelp-devel is earlier than 0:0.10-0.8.el4" test_ref="oval:com.redhat.rhsa:tst:20070402028"/>
       <criterion comment="devhelp-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060329002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="devhelp is earlier than 0:0.10-0.8.el4" test_ref="oval:com.redhat.rhsa:tst:20070402030"/>
       <criterion comment="devhelp is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060329004"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20070403" version="634">
   <metadata>
    <title>RHSA-2007:0403: freetype security update (Moderate)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
     <platform>Red Hat Enterprise Linux 5</platform>
    </affected>
    <reference ref_id="RHSA-2007:0403" ref_url="https://access.redhat.com/errata/RHSA-2007:0403" source="RHSA"/>
    <reference ref_id="CVE-2007-2754" ref_url="https://access.redhat.com/security/cve/CVE-2007-2754" source="CVE"/>
    <description>FreeType is a free, high-quality,  portable font engine.

An integer overflow flaw was found in the way the FreeType font engine
processed TTF font files. If a user loaded a carefully crafted font file
with a program linked against FreeType, it could cause the application to
crash or execute arbitrary code. While it is uncommon for a user to
explicitly load a font file, there are several application file formats
which contain embedded fonts that are parsed by FreeType. (CVE-2007-2754)

Users of FreeType should upgrade to these updated packages, which contain
a backported patch to correct this issue.</description>
    <advisory from="secalert@redhat.com">
     <severity>Moderate</severity>
     <rights>Copyright 2007 Red Hat, Inc.</rights>
     <issued date="2008-01-09"/>
     <updated date="2007-06-11"/>
     <cve cwe="CWE-190" href="https://access.redhat.com/security/cve/CVE-2007-2754" public="20070427">CVE-2007-2754</cve>
     <bugzilla href="https://bugzilla.redhat.com/240200" id="240200">CVE-2007-2754 freetype integer overflow</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:5</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="freetype is earlier than 0:2.1.4-7.el3" test_ref="oval:com.redhat.rhsa:tst:20070403001"/>
       <criterion comment="freetype is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060500002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="freetype-devel is earlier than 0:2.1.4-7.el3" test_ref="oval:com.redhat.rhsa:tst:20070403003"/>
       <criterion comment="freetype-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060500004"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="freetype-devel is earlier than 0:2.1.9-6.el4" test_ref="oval:com.redhat.rhsa:tst:20070403006"/>
       <criterion comment="freetype-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060500004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="freetype-utils is earlier than 0:2.1.9-6.el4" test_ref="oval:com.redhat.rhsa:tst:20070403007"/>
       <criterion comment="freetype-utils is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060500010"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="freetype-demos is earlier than 0:2.1.9-6.el4" test_ref="oval:com.redhat.rhsa:tst:20070403009"/>
       <criterion comment="freetype-demos is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060500008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="freetype is earlier than 0:2.1.9-6.el4" test_ref="oval:com.redhat.rhsa:tst:20070403011"/>
       <criterion comment="freetype is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060500002"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 5 is installed" test_ref="oval:com.redhat.rhsa:tst:20070066013"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="freetype-devel is earlier than 0:2.2.1-19.el5" test_ref="oval:com.redhat.rhsa:tst:20070403013"/>
       <criterion comment="freetype-devel is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070150018"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="freetype is earlier than 0:2.2.1-19.el5" test_ref="oval:com.redhat.rhsa:tst:20070403015"/>
       <criterion comment="freetype is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070150016"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="freetype-demos is earlier than 0:2.2.1-19.el5" test_ref="oval:com.redhat.rhsa:tst:20070403017"/>
       <criterion comment="freetype-demos is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070150014"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20070406" version="635">
   <metadata>
    <title>RHSA-2007:0406: openoffice.org security update (Important)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
     <platform>Red Hat Enterprise Linux 5</platform>
    </affected>
    <reference ref_id="RHSA-2007:0406" ref_url="https://access.redhat.com/errata/RHSA-2007:0406" source="RHSA"/>
    <reference ref_id="CVE-2007-0245" ref_url="https://access.redhat.com/security/cve/CVE-2007-0245" source="CVE"/>
    <description>OpenOffice.org is an office productivity suite that includes desktop
applications such as a word processor, spreadsheet, presentation manager,
formula editor, and drawing program.

A heap overflow flaw was found in the RTF import filer.  An attacker could
create a carefully crafted RTF file that could cause OpenOffice.org to
crash or possibly execute arbitrary code if the file was opened by a
victim. (CVE-2007-0245)

All users of OpenOffice.org are advised to upgrade to these updated
packages, which contain a backported fix to correct this issue.</description>
    <advisory from="secalert@redhat.com">
     <severity>Important</severity>
     <rights>Copyright 2007 Red Hat, Inc.</rights>
     <issued date="2007-06-13"/>
     <updated date="2007-06-13"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-0245" public="20070612">CVE-2007-0245</cve>
     <bugzilla href="https://bugzilla.redhat.com/242004" id="242004">CVE-2007-0245 openoffice.org rtf filter buffer overflow</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
      <cpe>cpe:/a:redhat:rhel_productivity:5</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:5</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="openoffice.org is earlier than 0:1.1.2-39.2.0.EL3" test_ref="oval:com.redhat.rhsa:tst:20070406001"/>
       <criterion comment="openoffice.org is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060573006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-libs is earlier than 0:1.1.2-39.2.0.EL3" test_ref="oval:com.redhat.rhsa:tst:20070406003"/>
       <criterion comment="openoffice.org-libs is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060573004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-i18n is earlier than 0:1.1.2-39.2.0.EL3" test_ref="oval:com.redhat.rhsa:tst:20070406005"/>
       <criterion comment="openoffice.org-i18n is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060573002"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="openoffice.org-i18n is earlier than 0:1.1.5-10.6.0.1.EL4" test_ref="oval:com.redhat.rhsa:tst:20070406008"/>
       <criterion comment="openoffice.org-i18n is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060573002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-kde is earlier than 0:1.1.5-10.6.0.1.EL4" test_ref="oval:com.redhat.rhsa:tst:20070406009"/>
       <criterion comment="openoffice.org-kde is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060573011"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-libs is earlier than 0:1.1.5-10.6.0.1.EL4" test_ref="oval:com.redhat.rhsa:tst:20070406011"/>
       <criterion comment="openoffice.org-libs is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060573004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org is earlier than 0:1.1.5-10.6.0.1.EL4" test_ref="oval:com.redhat.rhsa:tst:20070406012"/>
       <criterion comment="openoffice.org is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060573006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-bg_BG is earlier than 1:2.0.4-5.7.0.1.0" test_ref="oval:com.redhat.rhsa:tst:20070406013"/>
       <criterion comment="openoffice.org2-langpack-bg_BG is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406014"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-de is earlier than 1:2.0.4-5.7.0.1.0" test_ref="oval:com.redhat.rhsa:tst:20070406015"/>
       <criterion comment="openoffice.org2-langpack-de is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406016"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-et_EE is earlier than 1:2.0.4-5.7.0.1.0" test_ref="oval:com.redhat.rhsa:tst:20070406017"/>
       <criterion comment="openoffice.org2-langpack-et_EE is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406018"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-pt_PT is earlier than 1:2.0.4-5.7.0.1.0" test_ref="oval:com.redhat.rhsa:tst:20070406019"/>
       <criterion comment="openoffice.org2-langpack-pt_PT is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406020"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-tr_TR is earlier than 1:2.0.4-5.7.0.1.0" test_ref="oval:com.redhat.rhsa:tst:20070406021"/>
       <criterion comment="openoffice.org2-langpack-tr_TR is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406022"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-fi_FI is earlier than 1:2.0.4-5.7.0.1.0" test_ref="oval:com.redhat.rhsa:tst:20070406023"/>
       <criterion comment="openoffice.org2-langpack-fi_FI is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406024"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-hu_HU is earlier than 1:2.0.4-5.7.0.1.0" test_ref="oval:com.redhat.rhsa:tst:20070406025"/>
       <criterion comment="openoffice.org2-langpack-hu_HU is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406026"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-th_TH is earlier than 1:2.0.4-5.7.0.1.0" test_ref="oval:com.redhat.rhsa:tst:20070406027"/>
       <criterion comment="openoffice.org2-langpack-th_TH is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406028"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-ca_ES is earlier than 1:2.0.4-5.7.0.1.0" test_ref="oval:com.redhat.rhsa:tst:20070406029"/>
       <criterion comment="openoffice.org2-langpack-ca_ES is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406030"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-pyuno is earlier than 1:2.0.4-5.7.0.1.0" test_ref="oval:com.redhat.rhsa:tst:20070406031"/>
       <criterion comment="openoffice.org2-pyuno is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406032"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-core is earlier than 1:2.0.4-5.7.0.1.0" test_ref="oval:com.redhat.rhsa:tst:20070406033"/>
       <criterion comment="openoffice.org2-core is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406034"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-eu_ES is earlier than 1:2.0.4-5.7.0.1.0" test_ref="oval:com.redhat.rhsa:tst:20070406035"/>
       <criterion comment="openoffice.org2-langpack-eu_ES is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406036"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-hi_IN is earlier than 1:2.0.4-5.7.0.1.0" test_ref="oval:com.redhat.rhsa:tst:20070406037"/>
       <criterion comment="openoffice.org2-langpack-hi_IN is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406038"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-graphicfilter is earlier than 1:2.0.4-5.7.0.1.0" test_ref="oval:com.redhat.rhsa:tst:20070406039"/>
       <criterion comment="openoffice.org2-graphicfilter is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406040"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-zh_CN is earlier than 1:2.0.4-5.7.0.1.0" test_ref="oval:com.redhat.rhsa:tst:20070406041"/>
       <criterion comment="openoffice.org2-langpack-zh_CN is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406042"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-nl is earlier than 1:2.0.4-5.7.0.1.0" test_ref="oval:com.redhat.rhsa:tst:20070406043"/>
       <criterion comment="openoffice.org2-langpack-nl is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406044"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-sl_SI is earlier than 1:2.0.4-5.7.0.1.0" test_ref="oval:com.redhat.rhsa:tst:20070406045"/>
       <criterion comment="openoffice.org2-langpack-sl_SI is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406046"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-el_GR is earlier than 1:2.0.4-5.7.0.1.0" test_ref="oval:com.redhat.rhsa:tst:20070406047"/>
       <criterion comment="openoffice.org2-langpack-el_GR is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406048"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-calc is earlier than 1:2.0.4-5.7.0.1.0" test_ref="oval:com.redhat.rhsa:tst:20070406049"/>
       <criterion comment="openoffice.org2-calc is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406050"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-sr_CS is earlier than 1:2.0.4-5.7.0.1.0" test_ref="oval:com.redhat.rhsa:tst:20070406051"/>
       <criterion comment="openoffice.org2-langpack-sr_CS is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406052"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-cs_CZ is earlier than 1:2.0.4-5.7.0.1.0" test_ref="oval:com.redhat.rhsa:tst:20070406053"/>
       <criterion comment="openoffice.org2-langpack-cs_CZ is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406054"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-ms_MY is earlier than 1:2.0.4-5.7.0.1.0" test_ref="oval:com.redhat.rhsa:tst:20070406055"/>
       <criterion comment="openoffice.org2-langpack-ms_MY is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406056"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-ar is earlier than 1:2.0.4-5.7.0.1.0" test_ref="oval:com.redhat.rhsa:tst:20070406057"/>
       <criterion comment="openoffice.org2-langpack-ar is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406058"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-ru is earlier than 1:2.0.4-5.7.0.1.0" test_ref="oval:com.redhat.rhsa:tst:20070406059"/>
       <criterion comment="openoffice.org2-langpack-ru is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406060"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-xsltfilter is earlier than 1:2.0.4-5.7.0.1.0" test_ref="oval:com.redhat.rhsa:tst:20070406061"/>
       <criterion comment="openoffice.org2-xsltfilter is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406062"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-gu_IN is earlier than 1:2.0.4-5.7.0.1.0" test_ref="oval:com.redhat.rhsa:tst:20070406063"/>
       <criterion comment="openoffice.org2-langpack-gu_IN is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406064"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-he_IL is earlier than 1:2.0.4-5.7.0.1.0" test_ref="oval:com.redhat.rhsa:tst:20070406065"/>
       <criterion comment="openoffice.org2-langpack-he_IL is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406066"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-bn is earlier than 1:2.0.4-5.7.0.1.0" test_ref="oval:com.redhat.rhsa:tst:20070406067"/>
       <criterion comment="openoffice.org2-langpack-bn is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406068"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-math is earlier than 1:2.0.4-5.7.0.1.0" test_ref="oval:com.redhat.rhsa:tst:20070406069"/>
       <criterion comment="openoffice.org2-math is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406070"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-cy_GB is earlier than 1:2.0.4-5.7.0.1.0" test_ref="oval:com.redhat.rhsa:tst:20070406071"/>
       <criterion comment="openoffice.org2-langpack-cy_GB is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406072"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-writer is earlier than 1:2.0.4-5.7.0.1.0" test_ref="oval:com.redhat.rhsa:tst:20070406073"/>
       <criterion comment="openoffice.org2-writer is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406074"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-ja_JP is earlier than 1:2.0.4-5.7.0.1.0" test_ref="oval:com.redhat.rhsa:tst:20070406075"/>
       <criterion comment="openoffice.org2-langpack-ja_JP is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406076"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-sk_SK is earlier than 1:2.0.4-5.7.0.1.0" test_ref="oval:com.redhat.rhsa:tst:20070406077"/>
       <criterion comment="openoffice.org2-langpack-sk_SK is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406078"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-hr_HR is earlier than 1:2.0.4-5.7.0.1.0" test_ref="oval:com.redhat.rhsa:tst:20070406079"/>
       <criterion comment="openoffice.org2-langpack-hr_HR is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406080"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-pl_PL is earlier than 1:2.0.4-5.7.0.1.0" test_ref="oval:com.redhat.rhsa:tst:20070406081"/>
       <criterion comment="openoffice.org2-langpack-pl_PL is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406082"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-zh_TW is earlier than 1:2.0.4-5.7.0.1.0" test_ref="oval:com.redhat.rhsa:tst:20070406083"/>
       <criterion comment="openoffice.org2-langpack-zh_TW is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406084"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-lt_LT is earlier than 1:2.0.4-5.7.0.1.0" test_ref="oval:com.redhat.rhsa:tst:20070406085"/>
       <criterion comment="openoffice.org2-langpack-lt_LT is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406086"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-impress is earlier than 1:2.0.4-5.7.0.1.0" test_ref="oval:com.redhat.rhsa:tst:20070406087"/>
       <criterion comment="openoffice.org2-impress is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406088"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-ko_KR is earlier than 1:2.0.4-5.7.0.1.0" test_ref="oval:com.redhat.rhsa:tst:20070406089"/>
       <criterion comment="openoffice.org2-langpack-ko_KR is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406090"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-nb_NO is earlier than 1:2.0.4-5.7.0.1.0" test_ref="oval:com.redhat.rhsa:tst:20070406091"/>
       <criterion comment="openoffice.org2-langpack-nb_NO is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406092"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-it is earlier than 1:2.0.4-5.7.0.1.0" test_ref="oval:com.redhat.rhsa:tst:20070406093"/>
       <criterion comment="openoffice.org2-langpack-it is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406094"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-pa_IN is earlier than 1:2.0.4-5.7.0.1.0" test_ref="oval:com.redhat.rhsa:tst:20070406095"/>
       <criterion comment="openoffice.org2-langpack-pa_IN is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406096"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-ta_IN is earlier than 1:2.0.4-5.7.0.1.0" test_ref="oval:com.redhat.rhsa:tst:20070406097"/>
       <criterion comment="openoffice.org2-langpack-ta_IN is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406098"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-da_DK is earlier than 1:2.0.4-5.7.0.1.0" test_ref="oval:com.redhat.rhsa:tst:20070406099"/>
       <criterion comment="openoffice.org2-langpack-da_DK is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406100"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-base is earlier than 1:2.0.4-5.7.0.1.0" test_ref="oval:com.redhat.rhsa:tst:20070406101"/>
       <criterion comment="openoffice.org2-base is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406102"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-es is earlier than 1:2.0.4-5.7.0.1.0" test_ref="oval:com.redhat.rhsa:tst:20070406103"/>
       <criterion comment="openoffice.org2-langpack-es is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406104"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-emailmerge is earlier than 1:2.0.4-5.7.0.1.0" test_ref="oval:com.redhat.rhsa:tst:20070406105"/>
       <criterion comment="openoffice.org2-emailmerge is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406106"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-pt_BR is earlier than 1:2.0.4-5.7.0.1.0" test_ref="oval:com.redhat.rhsa:tst:20070406107"/>
       <criterion comment="openoffice.org2-langpack-pt_BR is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406108"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-af_ZA is earlier than 1:2.0.4-5.7.0.1.0" test_ref="oval:com.redhat.rhsa:tst:20070406109"/>
       <criterion comment="openoffice.org2-langpack-af_ZA is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406110"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-zu_ZA is earlier than 1:2.0.4-5.7.0.1.0" test_ref="oval:com.redhat.rhsa:tst:20070406111"/>
       <criterion comment="openoffice.org2-langpack-zu_ZA is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406112"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-ga_IE is earlier than 1:2.0.4-5.7.0.1.0" test_ref="oval:com.redhat.rhsa:tst:20070406113"/>
       <criterion comment="openoffice.org2-langpack-ga_IE is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406114"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-testtools is earlier than 1:2.0.4-5.7.0.1.0" test_ref="oval:com.redhat.rhsa:tst:20070406115"/>
       <criterion comment="openoffice.org2-testtools is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406116"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-gl_ES is earlier than 1:2.0.4-5.7.0.1.0" test_ref="oval:com.redhat.rhsa:tst:20070406117"/>
       <criterion comment="openoffice.org2-langpack-gl_ES is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406118"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-sv is earlier than 1:2.0.4-5.7.0.1.0" test_ref="oval:com.redhat.rhsa:tst:20070406119"/>
       <criterion comment="openoffice.org2-langpack-sv is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406120"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-draw is earlier than 1:2.0.4-5.7.0.1.0" test_ref="oval:com.redhat.rhsa:tst:20070406121"/>
       <criterion comment="openoffice.org2-draw is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406122"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-fr is earlier than 1:2.0.4-5.7.0.1.0" test_ref="oval:com.redhat.rhsa:tst:20070406123"/>
       <criterion comment="openoffice.org2-langpack-fr is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406124"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-nn_NO is earlier than 1:2.0.4-5.7.0.1.0" test_ref="oval:com.redhat.rhsa:tst:20070406125"/>
       <criterion comment="openoffice.org2-langpack-nn_NO is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406126"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-javafilter is earlier than 1:2.0.4-5.7.0.1.0" test_ref="oval:com.redhat.rhsa:tst:20070406127"/>
       <criterion comment="openoffice.org2-javafilter is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406128"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 5 is installed" test_ref="oval:com.redhat.rhsa:tst:20070066013"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-sk_SK is earlier than 1:2.0.4-5.4.17.2" test_ref="oval:com.redhat.rhsa:tst:20070406130"/>
       <criterion comment="openoffice.org-langpack-sk_SK is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406131"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-pt_BR is earlier than 1:2.0.4-5.4.17.2" test_ref="oval:com.redhat.rhsa:tst:20070406132"/>
       <criterion comment="openoffice.org-langpack-pt_BR is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406133"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-hi_IN is earlier than 1:2.0.4-5.4.17.2" test_ref="oval:com.redhat.rhsa:tst:20070406134"/>
       <criterion comment="openoffice.org-langpack-hi_IN is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406135"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-cs_CZ is earlier than 1:2.0.4-5.4.17.2" test_ref="oval:com.redhat.rhsa:tst:20070406136"/>
       <criterion comment="openoffice.org-langpack-cs_CZ is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406137"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-nr_ZA is earlier than 1:2.0.4-5.4.17.2" test_ref="oval:com.redhat.rhsa:tst:20070406138"/>
       <criterion comment="openoffice.org-langpack-nr_ZA is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406139"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-ve_ZA is earlier than 1:2.0.4-5.4.17.2" test_ref="oval:com.redhat.rhsa:tst:20070406140"/>
       <criterion comment="openoffice.org-langpack-ve_ZA is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406141"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-graphicfilter is earlier than 1:2.0.4-5.4.17.2" test_ref="oval:com.redhat.rhsa:tst:20070406142"/>
       <criterion comment="openoffice.org-graphicfilter is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406143"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-tr_TR is earlier than 1:2.0.4-5.4.17.2" test_ref="oval:com.redhat.rhsa:tst:20070406144"/>
       <criterion comment="openoffice.org-langpack-tr_TR is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406145"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-writer is earlier than 1:2.0.4-5.4.17.2" test_ref="oval:com.redhat.rhsa:tst:20070406146"/>
       <criterion comment="openoffice.org-writer is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406147"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-nb_NO is earlier than 1:2.0.4-5.4.17.2" test_ref="oval:com.redhat.rhsa:tst:20070406148"/>
       <criterion comment="openoffice.org-langpack-nb_NO is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406149"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-ss_ZA is earlier than 1:2.0.4-5.4.17.2" test_ref="oval:com.redhat.rhsa:tst:20070406150"/>
       <criterion comment="openoffice.org-langpack-ss_ZA is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406151"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-gl_ES is earlier than 1:2.0.4-5.4.17.2" test_ref="oval:com.redhat.rhsa:tst:20070406152"/>
       <criterion comment="openoffice.org-langpack-gl_ES is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406153"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-zh_CN is earlier than 1:2.0.4-5.4.17.2" test_ref="oval:com.redhat.rhsa:tst:20070406154"/>
       <criterion comment="openoffice.org-langpack-zh_CN is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406155"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-ga_IE is earlier than 1:2.0.4-5.4.17.2" test_ref="oval:com.redhat.rhsa:tst:20070406156"/>
       <criterion comment="openoffice.org-langpack-ga_IE is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406157"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-testtools is earlier than 1:2.0.4-5.4.17.2" test_ref="oval:com.redhat.rhsa:tst:20070406158"/>
       <criterion comment="openoffice.org-testtools is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406159"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-hu_HU is earlier than 1:2.0.4-5.4.17.2" test_ref="oval:com.redhat.rhsa:tst:20070406160"/>
       <criterion comment="openoffice.org-langpack-hu_HU is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406161"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-hr_HR is earlier than 1:2.0.4-5.4.17.2" test_ref="oval:com.redhat.rhsa:tst:20070406162"/>
       <criterion comment="openoffice.org-langpack-hr_HR is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406163"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-ca_ES is earlier than 1:2.0.4-5.4.17.2" test_ref="oval:com.redhat.rhsa:tst:20070406164"/>
       <criterion comment="openoffice.org-langpack-ca_ES is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406165"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-math is earlier than 1:2.0.4-5.4.17.2" test_ref="oval:com.redhat.rhsa:tst:20070406166"/>
       <criterion comment="openoffice.org-math is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406167"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-gu_IN is earlier than 1:2.0.4-5.4.17.2" test_ref="oval:com.redhat.rhsa:tst:20070406168"/>
       <criterion comment="openoffice.org-langpack-gu_IN is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406169"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-ms_MY is earlier than 1:2.0.4-5.4.17.2" test_ref="oval:com.redhat.rhsa:tst:20070406170"/>
       <criterion comment="openoffice.org-langpack-ms_MY is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406171"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-ko_KR is earlier than 1:2.0.4-5.4.17.2" test_ref="oval:com.redhat.rhsa:tst:20070406172"/>
       <criterion comment="openoffice.org-langpack-ko_KR is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406173"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-fr is earlier than 1:2.0.4-5.4.17.2" test_ref="oval:com.redhat.rhsa:tst:20070406174"/>
       <criterion comment="openoffice.org-langpack-fr is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406175"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-cy_GB is earlier than 1:2.0.4-5.4.17.2" test_ref="oval:com.redhat.rhsa:tst:20070406176"/>
       <criterion comment="openoffice.org-langpack-cy_GB is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406177"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-xsltfilter is earlier than 1:2.0.4-5.4.17.2" test_ref="oval:com.redhat.rhsa:tst:20070406178"/>
       <criterion comment="openoffice.org-xsltfilter is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406179"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-base is earlier than 1:2.0.4-5.4.17.2" test_ref="oval:com.redhat.rhsa:tst:20070406180"/>
       <criterion comment="openoffice.org-base is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406181"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-xh_ZA is earlier than 1:2.0.4-5.4.17.2" test_ref="oval:com.redhat.rhsa:tst:20070406182"/>
       <criterion comment="openoffice.org-langpack-xh_ZA is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406183"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-lt_LT is earlier than 1:2.0.4-5.4.17.2" test_ref="oval:com.redhat.rhsa:tst:20070406184"/>
       <criterion comment="openoffice.org-langpack-lt_LT is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406185"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-nso_ZA is earlier than 1:2.0.4-5.4.17.2" test_ref="oval:com.redhat.rhsa:tst:20070406186"/>
       <criterion comment="openoffice.org-langpack-nso_ZA is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406187"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-ja_JP is earlier than 1:2.0.4-5.4.17.2" test_ref="oval:com.redhat.rhsa:tst:20070406188"/>
       <criterion comment="openoffice.org-langpack-ja_JP is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406189"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-tn_ZA is earlier than 1:2.0.4-5.4.17.2" test_ref="oval:com.redhat.rhsa:tst:20070406190"/>
       <criterion comment="openoffice.org-langpack-tn_ZA is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406191"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-mr_IN is earlier than 1:2.0.4-5.4.17.2" test_ref="oval:com.redhat.rhsa:tst:20070406192"/>
       <criterion comment="openoffice.org-langpack-mr_IN is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406193"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-te_IN is earlier than 1:2.0.4-5.4.17.2" test_ref="oval:com.redhat.rhsa:tst:20070406194"/>
       <criterion comment="openoffice.org-langpack-te_IN is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406195"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-it is earlier than 1:2.0.4-5.4.17.2" test_ref="oval:com.redhat.rhsa:tst:20070406196"/>
       <criterion comment="openoffice.org-langpack-it is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406197"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-et_EE is earlier than 1:2.0.4-5.4.17.2" test_ref="oval:com.redhat.rhsa:tst:20070406198"/>
       <criterion comment="openoffice.org-langpack-et_EE is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406199"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-emailmerge is earlier than 1:2.0.4-5.4.17.2" test_ref="oval:com.redhat.rhsa:tst:20070406200"/>
       <criterion comment="openoffice.org-emailmerge is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406201"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-pt_PT is earlier than 1:2.0.4-5.4.17.2" test_ref="oval:com.redhat.rhsa:tst:20070406202"/>
       <criterion comment="openoffice.org-langpack-pt_PT is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406203"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-draw is earlier than 1:2.0.4-5.4.17.2" test_ref="oval:com.redhat.rhsa:tst:20070406204"/>
       <criterion comment="openoffice.org-draw is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406205"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-nl is earlier than 1:2.0.4-5.4.17.2" test_ref="oval:com.redhat.rhsa:tst:20070406206"/>
       <criterion comment="openoffice.org-langpack-nl is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406207"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-zu_ZA is earlier than 1:2.0.4-5.4.17.2" test_ref="oval:com.redhat.rhsa:tst:20070406208"/>
       <criterion comment="openoffice.org-langpack-zu_ZA is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406209"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-bn is earlier than 1:2.0.4-5.4.17.2" test_ref="oval:com.redhat.rhsa:tst:20070406210"/>
       <criterion comment="openoffice.org-langpack-bn is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406211"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-as_IN is earlier than 1:2.0.4-5.4.17.2" test_ref="oval:com.redhat.rhsa:tst:20070406212"/>
       <criterion comment="openoffice.org-langpack-as_IN is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406213"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-pa_IN is earlier than 1:2.0.4-5.4.17.2" test_ref="oval:com.redhat.rhsa:tst:20070406214"/>
       <criterion comment="openoffice.org-langpack-pa_IN is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406215"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-ar is earlier than 1:2.0.4-5.4.17.2" test_ref="oval:com.redhat.rhsa:tst:20070406216"/>
       <criterion comment="openoffice.org-langpack-ar is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406217"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-zh_TW is earlier than 1:2.0.4-5.4.17.2" test_ref="oval:com.redhat.rhsa:tst:20070406218"/>
       <criterion comment="openoffice.org-langpack-zh_TW is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406219"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-de is earlier than 1:2.0.4-5.4.17.2" test_ref="oval:com.redhat.rhsa:tst:20070406220"/>
       <criterion comment="openoffice.org-langpack-de is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406221"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-pl_PL is earlier than 1:2.0.4-5.4.17.2" test_ref="oval:com.redhat.rhsa:tst:20070406222"/>
       <criterion comment="openoffice.org-langpack-pl_PL is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406223"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-nn_NO is earlier than 1:2.0.4-5.4.17.2" test_ref="oval:com.redhat.rhsa:tst:20070406224"/>
       <criterion comment="openoffice.org-langpack-nn_NO is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406225"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-ta_IN is earlier than 1:2.0.4-5.4.17.2" test_ref="oval:com.redhat.rhsa:tst:20070406226"/>
       <criterion comment="openoffice.org-langpack-ta_IN is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406227"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-da_DK is earlier than 1:2.0.4-5.4.17.2" test_ref="oval:com.redhat.rhsa:tst:20070406228"/>
       <criterion comment="openoffice.org-langpack-da_DK is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406229"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-ml_IN is earlier than 1:2.0.4-5.4.17.2" test_ref="oval:com.redhat.rhsa:tst:20070406230"/>
       <criterion comment="openoffice.org-langpack-ml_IN is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406231"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-sr_CS is earlier than 1:2.0.4-5.4.17.2" test_ref="oval:com.redhat.rhsa:tst:20070406232"/>
       <criterion comment="openoffice.org-langpack-sr_CS is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406233"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-th_TH is earlier than 1:2.0.4-5.4.17.2" test_ref="oval:com.redhat.rhsa:tst:20070406234"/>
       <criterion comment="openoffice.org-langpack-th_TH is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406235"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-ur is earlier than 1:2.0.4-5.4.17.2" test_ref="oval:com.redhat.rhsa:tst:20070406236"/>
       <criterion comment="openoffice.org-langpack-ur is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406237"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-pyuno is earlier than 1:2.0.4-5.4.17.2" test_ref="oval:com.redhat.rhsa:tst:20070406238"/>
       <criterion comment="openoffice.org-pyuno is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406239"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-bg_BG is earlier than 1:2.0.4-5.4.17.2" test_ref="oval:com.redhat.rhsa:tst:20070406240"/>
       <criterion comment="openoffice.org-langpack-bg_BG is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406241"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-he_IL is earlier than 1:2.0.4-5.4.17.2" test_ref="oval:com.redhat.rhsa:tst:20070406242"/>
       <criterion comment="openoffice.org-langpack-he_IL is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406243"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-el_GR is earlier than 1:2.0.4-5.4.17.2" test_ref="oval:com.redhat.rhsa:tst:20070406244"/>
       <criterion comment="openoffice.org-langpack-el_GR is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406245"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-af_ZA is earlier than 1:2.0.4-5.4.17.2" test_ref="oval:com.redhat.rhsa:tst:20070406246"/>
       <criterion comment="openoffice.org-langpack-af_ZA is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406247"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-core is earlier than 1:2.0.4-5.4.17.2" test_ref="oval:com.redhat.rhsa:tst:20070406248"/>
       <criterion comment="openoffice.org-core is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406249"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-or_IN is earlier than 1:2.0.4-5.4.17.2" test_ref="oval:com.redhat.rhsa:tst:20070406250"/>
       <criterion comment="openoffice.org-langpack-or_IN is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406251"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-ts_ZA is earlier than 1:2.0.4-5.4.17.2" test_ref="oval:com.redhat.rhsa:tst:20070406252"/>
       <criterion comment="openoffice.org-langpack-ts_ZA is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406253"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-fi_FI is earlier than 1:2.0.4-5.4.17.2" test_ref="oval:com.redhat.rhsa:tst:20070406254"/>
       <criterion comment="openoffice.org-langpack-fi_FI is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406255"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-eu_ES is earlier than 1:2.0.4-5.4.17.2" test_ref="oval:com.redhat.rhsa:tst:20070406256"/>
       <criterion comment="openoffice.org-langpack-eu_ES is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406257"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-es is earlier than 1:2.0.4-5.4.17.2" test_ref="oval:com.redhat.rhsa:tst:20070406258"/>
       <criterion comment="openoffice.org-langpack-es is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406259"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-impress is earlier than 1:2.0.4-5.4.17.2" test_ref="oval:com.redhat.rhsa:tst:20070406260"/>
       <criterion comment="openoffice.org-impress is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406261"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-sv is earlier than 1:2.0.4-5.4.17.2" test_ref="oval:com.redhat.rhsa:tst:20070406262"/>
       <criterion comment="openoffice.org-langpack-sv is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406263"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-calc is earlier than 1:2.0.4-5.4.17.2" test_ref="oval:com.redhat.rhsa:tst:20070406264"/>
       <criterion comment="openoffice.org-calc is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406265"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-sl_SI is earlier than 1:2.0.4-5.4.17.2" test_ref="oval:com.redhat.rhsa:tst:20070406266"/>
       <criterion comment="openoffice.org-langpack-sl_SI is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406267"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-javafilter is earlier than 1:2.0.4-5.4.17.2" test_ref="oval:com.redhat.rhsa:tst:20070406268"/>
       <criterion comment="openoffice.org-javafilter is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406269"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-kn_IN is earlier than 1:2.0.4-5.4.17.2" test_ref="oval:com.redhat.rhsa:tst:20070406270"/>
       <criterion comment="openoffice.org-langpack-kn_IN is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406271"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-st_ZA is earlier than 1:2.0.4-5.4.17.2" test_ref="oval:com.redhat.rhsa:tst:20070406272"/>
       <criterion comment="openoffice.org-langpack-st_ZA is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406273"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-ru is earlier than 1:2.0.4-5.4.17.2" test_ref="oval:com.redhat.rhsa:tst:20070406274"/>
       <criterion comment="openoffice.org-langpack-ru is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406275"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20070430" version="632">
   <metadata>
    <title>RHSA-2007:0430: openldap security and bug-fix update (Low)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
    </affected>
    <reference ref_id="RHSA-2007:0430" ref_url="https://access.redhat.com/errata/RHSA-2007:0430" source="RHSA"/>
    <reference ref_id="CVE-2006-4600" ref_url="https://access.redhat.com/security/cve/CVE-2006-4600" source="CVE"/>
    <description>OpenLDAP is an open source suite of LDAP (Lightweight Directory Access 
Protocol) applications, libraries and development tools.

A flaw was found in the way OpenLDAP handled selfwrite access. Users with
selfwrite access were able to modify the distinguished name of any user.
Users with selfwrite access should only be able to modify their own
distinguished name. (CVE-2006-4600)

A memory leak bug was found in OpenLDAP's ldap_start_tls_s() function. An
application using this function could result in an Out Of Memory (OOM)
condition, crashing the application.

All users are advised to upgrade to this updated openldap package, 
which contains a backported fix and is not vulnerable to these issues.</description>
    <advisory from="secalert@redhat.com">
     <severity>Low</severity>
     <rights>Copyright 2007 Red Hat, Inc.</rights>
     <issued date="2007-06-07"/>
     <updated date="2007-06-11"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-4600" public="20060904">CVE-2006-4600</cve>
     <bugzilla href="https://bugzilla.redhat.com/174830" id="174830">ldap_start_tls_s() leaks</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/234222" id="234222">CVE-2006-4600 openldap improper selfwrite access</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="AND">
    <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
    <criteria operator="OR">
     <criteria operator="AND">
      <criterion comment="openldap is earlier than 0:2.0.27-23" test_ref="oval:com.redhat.rhsa:tst:20070430001"/>
      <criterion comment="openldap is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070430002"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="openldap-clients is earlier than 0:2.0.27-23" test_ref="oval:com.redhat.rhsa:tst:20070430003"/>
      <criterion comment="openldap-clients is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070430004"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="openldap-devel is earlier than 0:2.0.27-23" test_ref="oval:com.redhat.rhsa:tst:20070430005"/>
      <criterion comment="openldap-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070430006"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="openldap-servers is earlier than 0:2.0.27-23" test_ref="oval:com.redhat.rhsa:tst:20070430007"/>
      <criterion comment="openldap-servers is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070430008"/>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20070431" version="634">
   <metadata>
    <title>RHSA-2007:0431: shadow-utils security and bug fix update (Low)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
    </affected>
    <reference ref_id="RHSA-2007:0431" ref_url="https://access.redhat.com/errata/RHSA-2007:0431" source="RHSA"/>
    <reference ref_id="CVE-2006-1174" ref_url="https://access.redhat.com/security/cve/CVE-2006-1174" source="CVE"/>
    <description>The shadow-utils package includes the necessary programs for converting
UNIX password files to the shadow password format, as well as programs 
for managing user and group accounts. 

A flaw was found in the useradd tool in shadow-utils. A new user's
mailbox, when created, could have random permissions for a short period.
This could allow a local attacker to read or modify the mailbox.
(CVE-2006-1174)

This update also fixes the following bugs:

* shadow-utils debuginfo package was empty.

* chage.1 and chage -l gave incorrect information about sp_inact.

All users of shadow-utils are advised to upgrade to this updated 
package, which contains backported patches to resolve these issues.</description>
    <advisory from="secalert@redhat.com">
     <severity>Low</severity>
     <rights>Copyright 2008 Red Hat, Inc.</rights>
     <issued date="2007-06-07"/>
     <updated date="2008-03-20"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-1174" public="20050223">CVE-2006-1174</cve>
     <bugzilla href="https://bugzilla.redhat.com/176949" id="176949">shadow-utils-debuginfo is empty</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/216635" id="216635">chage does not show the Account Expires if its shadow field is 0.</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/229194" id="229194">CVE-2006-1174 shadow-utils mailbox creation race condition</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="AND">
    <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
    <criterion comment="shadow-utils is earlier than 2:4.0.3-29.RHEL3" test_ref="oval:com.redhat.rhsa:tst:20070431001"/>
    <criterion comment="shadow-utils is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070431002"/>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20070436" version="634">
   <metadata>
    <title>RHSA-2007:0436: Updated kernel packages for Red Hat Enterprise Linux 3 Update 9 (Important)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
    </affected>
    <reference ref_id="RHSA-2007:0436" ref_url="https://access.redhat.com/errata/RHSA-2007:0436" source="RHSA"/>
    <reference ref_id="CVE-2006-5823" ref_url="https://access.redhat.com/security/cve/CVE-2006-5823" source="CVE"/>
    <reference ref_id="CVE-2006-6054" ref_url="https://access.redhat.com/security/cve/CVE-2006-6054" source="CVE"/>
    <reference ref_id="CVE-2007-1592" ref_url="https://access.redhat.com/security/cve/CVE-2007-1592" source="CVE"/>
    <description>The Linux kernel handles the basic functions of the operating system.

This is the ninth regular kernel update to Red Hat Enterprise Linux 3.

There were no new features introduced by this update.  The only changes
that have been included address critical customer needs or security
issues (elaborated below).

Key areas affected by fixes in this update include the networking
subsystem, dcache handling, the ext2 and ext3 file systems, the USB
subsystem, ACPI handling, and the audit subsystem.  There were also
several isolated fixes in the tg3, e1000, megaraid_sas, and aacraid
device drivers.

The following security bugs were fixed in this update:

  * a flaw in the cramfs file system that allowed invalid compressed
     data to cause memory corruption (CVE-2006-5823, low)

  * a flaw in the ext2 file system that allowed an invalid inode size
     to cause a denial of service (system hang)  (CVE-2006-6054, low)

  * a flaw in IPV6 flow label handling that allowed a local user to
     cause a denial of service (crash)  (CVE-2007-1592, important)

Note: The kernel-unsupported package contains various drivers and modules
that are unsupported and therefore might contain security problems that
have not been addressed.

All Red Hat Enterprise Linux 3 users are advised to upgrade their
kernels to the packages associated with their machine architectures
and configurations as listed in this erratum.</description>
    <advisory from="secalert@redhat.com">
     <severity>Important</severity>
     <rights>Copyright 2008 Red Hat, Inc.</rights>
     <issued date="2007-06-07"/>
     <updated date="2008-03-20"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-5823" impact="low" public="20061107">CVE-2006-5823</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-6054" impact="low" public="20061112">CVE-2006-6054</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-1592" public="20070316">CVE-2007-1592</cve>
     <bugzilla href="https://bugzilla.redhat.com/128616" id="128616">acl permissions over nfs</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/137374" id="137374">Need fix for: [NETFILTER]: Fix checksum bug for multicast/broadcast packets on postrouting hook.</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/144794" id="144794">tg3 driver on BCM5703X won't load. Says tg3: Could not obtain valid ethernet address, aborting.</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/164855" id="164855">u5 patch that turned on Dprintk's in arch/x86_64/kernel/smpboot.c</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/171007" id="171007">powermate module does not recognize Griffin Powermate device</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/173350" id="173350">jbd I/O errors after ext3 orphan processing on readonly device</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/177300" id="177300">hugetlb_get_unmapped_area may overflow in X86_64 compat mode</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/189052" id="189052">Kernel panic on shutdown or poweroff on SMP</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/192796" id="192796">cut/paste bug in kscand</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/199542" id="199542">Data corruption after IO error on swap (RHEL3)</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/209154" id="209154">High speed USB HID devices not working in RHEL3</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/213635" id="213635">32-bit fstat on 64-bit kernel returns EOVERFLOW when st_ino gets too large</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/216960" id="216960">CVE-2006-5823 zlib_inflate memory corruption</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/217022" id="217022">CVE-2006-6054 ext2_check_page denial of service</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/217930" id="217930">[RHEL3] Netdump for 8139cp driver</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/224600" id="224600">running 32-bit executables on x86_64/ia64/s390x causes negative &quot;vm_committed_space&quot; value</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/226895" id="226895">Kernel oops when loading ipmi_si module</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/231912" id="231912">Laus doesn't audit detach event</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/232221" id="232221">Laus dev.audit.attach-all doesn't attach to init</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/232336" id="232336">Enable use of PAL_HALT_LIGHT for idle loop as non-default option</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/233262" id="233262">ipv6 OOPS triggerable by any user</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="AND">
    <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
    <criteria operator="OR">
     <criteria operator="AND">
      <criterion comment="kernel-source is earlier than 0:2.4.21-50.EL" test_ref="oval:com.redhat.rhsa:tst:20070436001"/>
      <criterion comment="kernel-source is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060140012"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="kernel-doc is earlier than 0:2.4.21-50.EL" test_ref="oval:com.redhat.rhsa:tst:20070436003"/>
      <criterion comment="kernel-doc is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060140006"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="kernel is earlier than 0:2.4.21-50.EL" test_ref="oval:com.redhat.rhsa:tst:20070436005"/>
      <criterion comment="kernel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060140010"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="kernel-unsupported is earlier than 0:2.4.21-50.EL" test_ref="oval:com.redhat.rhsa:tst:20070436007"/>
      <criterion comment="kernel-unsupported is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060140002"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="kernel-smp is earlier than 0:2.4.21-50.EL" test_ref="oval:com.redhat.rhsa:tst:20070436009"/>
      <criterion comment="kernel-smp is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060140008"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-50.EL" test_ref="oval:com.redhat.rhsa:tst:20070436011"/>
      <criterion comment="kernel-smp-unsupported is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060140004"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="kernel-hugemem is earlier than 0:2.4.21-50.EL" test_ref="oval:com.redhat.rhsa:tst:20070436013"/>
      <criterion comment="kernel-hugemem is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060140018"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-50.EL" test_ref="oval:com.redhat.rhsa:tst:20070436015"/>
      <criterion comment="kernel-hugemem-unsupported is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060140014"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="kernel-BOOT is earlier than 0:2.4.21-50.EL" test_ref="oval:com.redhat.rhsa:tst:20070436017"/>
      <criterion comment="kernel-BOOT is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060140016"/>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20070465" version="635">
   <metadata>
    <title>RHSA-2007:0465: pam security and bug fix update (Moderate)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
    </affected>
    <reference ref_id="RHSA-2007:0465" ref_url="https://access.redhat.com/errata/RHSA-2007:0465" source="RHSA"/>
    <reference ref_id="CVE-2004-0813" ref_url="https://access.redhat.com/security/cve/CVE-2004-0813" source="CVE"/>
    <reference ref_id="CVE-2007-1716" ref_url="https://access.redhat.com/security/cve/CVE-2007-1716" source="CVE"/>
    <description>Pluggable Authentication Modules (PAM) provide a system whereby
administrators can set up authentication policies without having to
recompile programs that handle authentication.

A flaw was found in the way the Linux kernel handled certain SG_IO
commands. Console users with access to certain device files had the ability
to damage recordable CD drives. The way pam_console handled permissions of
these files has been modified to disallow access. This change also required
modifications to the cdrecord application. (CVE-2004-0813)

A flaw was found in the way pam_console set console device permissions. It
was possible for various console devices to retain ownership of the console
user after logging out, possibly leaking information to an unauthorized
user. (CVE-2007-1716)

The pam_unix module provides authentication against standard /etc/passwd
and /etc/shadow files. The pam_stack module provides support for stacking
PAM configuration files. Both of these modules contained small memory leaks
which caused problems in applications calling PAM authentication repeatedly
in the same process.

All users of PAM should upgrade to these updated packages, which resolve
these issues.</description>
    <advisory from="secalert@redhat.com">
     <severity>Moderate</severity>
     <rights>Copyright 2008 Red Hat, Inc.</rights>
     <issued date="2007-06-07"/>
     <updated date="2008-03-20"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2004-0813" public="20040730">CVE-2004-0813</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-1716" impact="low" public="20070303">CVE-2007-1716</cve>
     <bugzilla href="https://bugzilla.redhat.com/133098" id="133098">CVE-2004-0813 SG_IO unsafe user command execution</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/204055" id="204055">Possibly memory leak in pam modules.</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/230625" id="230625">4byte leak in pam_unix.so</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/232096" id="232096">CVE-2004-0813 SG_IO unsafe user command execution</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/234142" id="234142">CVE-2007-1716 Ownership of devices not returned to root after logout from console</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="AND">
    <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
    <criteria operator="OR">
     <criteria operator="AND">
      <criterion comment="pam-devel is earlier than 0:0.75-72" test_ref="oval:com.redhat.rhsa:tst:20070465001"/>
      <criterion comment="pam-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070465002"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="pam is earlier than 0:0.75-72" test_ref="oval:com.redhat.rhsa:tst:20070465003"/>
      <criterion comment="pam is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070465004"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="cdrecord is earlier than 8:2.01.0.a32-0.EL3.6" test_ref="oval:com.redhat.rhsa:tst:20070465005"/>
      <criterion comment="cdrecord is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070465006"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="cdrecord-devel is earlier than 8:2.01.0.a32-0.EL3.6" test_ref="oval:com.redhat.rhsa:tst:20070465007"/>
      <criterion comment="cdrecord-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070465008"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="mkisofs is earlier than 8:2.01.0.a32-0.EL3.6" test_ref="oval:com.redhat.rhsa:tst:20070465009"/>
      <criterion comment="mkisofs is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070465010"/>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20070469" version="632">
   <metadata>
    <title>RHSA-2007:0469: gdb security and bug fix update (Low)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
    </affected>
    <reference ref_id="RHSA-2007:0469" ref_url="https://access.redhat.com/errata/RHSA-2007:0469" source="RHSA"/>
    <reference ref_id="CVE-2006-4146" ref_url="https://access.redhat.com/security/cve/CVE-2006-4146" source="CVE"/>
    <description>GDB, the GNU debugger, allows debugging of programs written in C, C++, and
other languages by executing them in a controlled fashion and then printing
their data.

Various buffer overflows and underflows were found in the DWARF expression
computation stack in GDB.  If an attacker could trick a user into loading
an executable containing malicious debugging information into GDB, they may
be able to execute arbitrary code with the privileges of the user.
(CVE-2006-4146)

This updated package also addresses the following issues:

* Support on 64-bit hosts shared libraries debuginfo larger than 2GB.

* Fix a race occasionally leaving the detached processes stopped.

* Fix segmentation fault on the source display by ^X 1.

* Fix a crash on an opaque type dereference.

All users of gdb should upgrade to this updated package, which contains
backported patches to resolve these issues.</description>
    <advisory from="secalert@redhat.com">
     <severity>Low</severity>
     <rights>Copyright 2007 Red Hat, Inc.</rights>
     <issued date="2007-06-07"/>
     <updated date="2007-06-11"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-4146" public="20060831">CVE-2006-4146</cve>
     <bugzilla href="https://bugzilla.redhat.com/135488" id="135488">gdb internal error with incomplete type</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/189607" id="189607">pstack can cause process to suspend</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/203875" id="203875">CVE-2006-4146 GDB buffer overflow</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="AND">
    <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
    <criterion comment="gdb is earlier than 0:6.3.0.0-1.138.el3" test_ref="oval:com.redhat.rhsa:tst:20070469001"/>
    <criterion comment="gdb is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070469002"/>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20070473" version="632">
   <metadata>
    <title>RHSA-2007:0473: gcc security and bug fix update (Moderate)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
    </affected>
    <reference ref_id="RHSA-2007:0473" ref_url="https://access.redhat.com/errata/RHSA-2007:0473" source="RHSA"/>
    <reference ref_id="CVE-2006-3619" ref_url="https://access.redhat.com/security/cve/CVE-2006-3619" source="CVE"/>
    <description>The gcc packages include C, C++, Java, Fortran 77, Objective C, and Ada 95
GNU compilers and related support libraries.

Jürgen Weigert discovered a directory traversal flaw in fastjar. An
attacker could create a malicious JAR file which, if unpacked using
fastjar, could write to any files the victim had write access to.
(CVE-2006-3619)

These updated packages also fix a reload internal compiler error with
-fnon-call-exceptions option.

All users of gcc should upgrade to these updated packages, which resolve
these issues.</description>
    <advisory from="secalert@redhat.com">
     <severity>Moderate</severity>
     <rights>Copyright 2007 Red Hat, Inc.</rights>
     <issued date="2007-06-08"/>
     <updated date="2007-06-11"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-3619" public="20060713">CVE-2006-3619</cve>
     <bugzilla href="https://bugzilla.redhat.com/225552" id="225552">CVE-2006-3619 Directory traversal issue in jar</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/226706" id="226706">Attached code crashes the compiler, error at: reload1.c:9508</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="AND">
    <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
    <criteria operator="OR">
     <criteria operator="AND">
      <criterion comment="gcc-objc is earlier than 0:3.2.3-59" test_ref="oval:com.redhat.rhsa:tst:20070473001"/>
      <criterion comment="gcc-objc is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070473002"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="gcc-c++ is earlier than 0:3.2.3-59" test_ref="oval:com.redhat.rhsa:tst:20070473003"/>
      <criterion comment="gcc-c++ is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070473004"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="libgcj is earlier than 0:3.2.3-59" test_ref="oval:com.redhat.rhsa:tst:20070473005"/>
      <criterion comment="libgcj is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070473006"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="libgnat is earlier than 0:3.2.3-59" test_ref="oval:com.redhat.rhsa:tst:20070473007"/>
      <criterion comment="libgnat is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070473008"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="libobjc is earlier than 0:3.2.3-59" test_ref="oval:com.redhat.rhsa:tst:20070473009"/>
      <criterion comment="libobjc is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070473010"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="libf2c is earlier than 0:3.2.3-59" test_ref="oval:com.redhat.rhsa:tst:20070473011"/>
      <criterion comment="libf2c is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070473012"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="gcc is earlier than 0:3.2.3-59" test_ref="oval:com.redhat.rhsa:tst:20070473013"/>
      <criterion comment="gcc is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070473014"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="gcc-g77 is earlier than 0:3.2.3-59" test_ref="oval:com.redhat.rhsa:tst:20070473015"/>
      <criterion comment="gcc-g77 is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070473016"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="libgcc is earlier than 0:3.2.3-59" test_ref="oval:com.redhat.rhsa:tst:20070473017"/>
      <criterion comment="libgcc is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070473018"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="gcc-java is earlier than 0:3.2.3-59" test_ref="oval:com.redhat.rhsa:tst:20070473019"/>
      <criterion comment="gcc-java is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070473020"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="libstdc++-devel is earlier than 0:3.2.3-59" test_ref="oval:com.redhat.rhsa:tst:20070473021"/>
      <criterion comment="libstdc++-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070473022"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="libgcj-devel is earlier than 0:3.2.3-59" test_ref="oval:com.redhat.rhsa:tst:20070473023"/>
      <criterion comment="libgcj-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070473024"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="gcc-gnat is earlier than 0:3.2.3-59" test_ref="oval:com.redhat.rhsa:tst:20070473025"/>
      <criterion comment="gcc-gnat is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070473026"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="cpp is earlier than 0:3.2.3-59" test_ref="oval:com.redhat.rhsa:tst:20070473027"/>
      <criterion comment="cpp is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070473028"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="libstdc++ is earlier than 0:3.2.3-59" test_ref="oval:com.redhat.rhsa:tst:20070473029"/>
      <criterion comment="libstdc++ is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070473030"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="gcc-c++-ppc32 is earlier than 0:3.2.3-59" test_ref="oval:com.redhat.rhsa:tst:20070473031"/>
      <criterion comment="gcc-c++-ppc32 is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070473032"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="gcc-ppc32 is earlier than 0:3.2.3-59" test_ref="oval:com.redhat.rhsa:tst:20070473033"/>
      <criterion comment="gcc-ppc32 is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070473034"/>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20070494" version="632">
   <metadata>
    <title>RHSA-2007:0494: kdebase security update (Important)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
     <platform>Red Hat Enterprise Linux 5</platform>
    </affected>
    <reference ref_id="RHSA-2007:0494" ref_url="https://access.redhat.com/errata/RHSA-2007:0494" source="RHSA"/>
    <reference ref_id="CVE-2007-2022" ref_url="https://access.redhat.com/security/cve/CVE-2007-2022" source="CVE"/>
    <description>The kdebase packages provide the core applications for KDE, the K Desktop
Environment. These core packages include Konqueror, the web browser and
file manager. 

A problem with the interaction between the Flash Player and the Konqueror
web browser was found. The problem could lead to key presses leaking to the
Flash Player applet instead of the browser (CVE-2007-2022).

Users of Konqueror who have installed the Adobe Flash Player plugin should
upgrade to these updated packages, which contain a patch provided by Dirk
Müller that protects against this issue.</description>
    <advisory from="secalert@redhat.com">
     <severity>Important</severity>
     <rights>Copyright 2007 Red Hat, Inc.</rights>
     <issued date="2008-01-09"/>
     <updated date="2007-06-13"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-2022" public="20070525">CVE-2007-2022</cve>
     <bugzilla href="https://bugzilla.redhat.com/243617" id="243617">CVE-2007-2022 kdebase3 flash-player interaction problem</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:5</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="kdebase-devel is earlier than 6:3.1.3-5.16" test_ref="oval:com.redhat.rhsa:tst:20070494001"/>
       <criterion comment="kdebase-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060576004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="kdebase is earlier than 6:3.1.3-5.16" test_ref="oval:com.redhat.rhsa:tst:20070494003"/>
       <criterion comment="kdebase is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060576002"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="kdebase-devel is earlier than 6:3.3.1-5.19.rhel4" test_ref="oval:com.redhat.rhsa:tst:20070494006"/>
       <criterion comment="kdebase-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060576004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="kdebase is earlier than 6:3.3.1-5.19.rhel4" test_ref="oval:com.redhat.rhsa:tst:20070494007"/>
       <criterion comment="kdebase is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060576002"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 5 is installed" test_ref="oval:com.redhat.rhsa:tst:20070066013"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="kdebase is earlier than 6:3.5.4-13.6.el5" test_ref="oval:com.redhat.rhsa:tst:20070494009"/>
       <criterion comment="kdebase is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070494010"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="kdebase-devel is earlier than 6:3.5.4-13.6.el5" test_ref="oval:com.redhat.rhsa:tst:20070494011"/>
       <criterion comment="kdebase-devel is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070494012"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20070509" version="633">
   <metadata>
    <title>RHSA-2007:0509: evolution security update (Important)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
    </affected>
    <reference ref_id="RHSA-2007:0509" ref_url="https://access.redhat.com/errata/RHSA-2007:0509" source="RHSA"/>
    <reference ref_id="CVE-2007-3257" ref_url="https://access.redhat.com/security/cve/CVE-2007-3257" source="CVE"/>
    <description>Evolution is the GNOME collection of personal information management (PIM)
tools.

A flaw was found in the way Evolution processes certain IMAP server
messages. If a user can be tricked into connecting to a malicious IMAP
server it may be possible to execute arbitrary code as the user running
evolution. (CVE-2007-3257)

All users of Evolution should upgrade to these updated packages, which
contain a backported patch which resolves this issue.</description>
    <advisory from="secalert@redhat.com">
     <severity>Important</severity>
     <rights>Copyright 2008 Red Hat, Inc.</rights>
     <issued date="2008-01-07"/>
     <updated date="2008-03-20"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-3257" public="20070614">CVE-2007-3257</cve>
     <bugzilla href="https://bugzilla.redhat.com/244277" id="244277">CVE-2007-3257 evolution malicious server arbitrary code execution</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="evolution-devel is earlier than 0:1.4.5-21.el3" test_ref="oval:com.redhat.rhsa:tst:20070509001"/>
       <criterion comment="evolution-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070353002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="evolution is earlier than 0:1.4.5-21.el3" test_ref="oval:com.redhat.rhsa:tst:20070509003"/>
       <criterion comment="evolution is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070353004"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="evolution is earlier than 0:2.0.2-35.0.4.el4" test_ref="oval:com.redhat.rhsa:tst:20070509006"/>
       <criterion comment="evolution is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070353004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="evolution-devel is earlier than 0:2.0.2-35.0.4.el4" test_ref="oval:com.redhat.rhsa:tst:20070509007"/>
       <criterion comment="evolution-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070353002"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20070513" version="638">
   <metadata>
    <title>RHSA-2007:0513: gimp security update (Moderate)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
     <platform>Red Hat Enterprise Linux 5</platform>
    </affected>
    <reference ref_id="RHSA-2007:0513" ref_url="https://access.redhat.com/errata/RHSA-2007:0513" source="RHSA"/>
    <reference ref_id="CVE-2006-4519" ref_url="https://access.redhat.com/security/cve/CVE-2006-4519" source="CVE"/>
    <reference ref_id="CVE-2007-2949" ref_url="https://access.redhat.com/security/cve/CVE-2007-2949" source="CVE"/>
    <reference ref_id="CVE-2007-3741" ref_url="https://access.redhat.com/security/cve/CVE-2007-3741" source="CVE"/>
    <description>The GIMP (GNU Image Manipulation Program) is an image composition and
editing program.

Multiple integer overflow and input validation flaws were found in The
GIMP's image loaders.  An attacker could create a carefully crafted image
file that could cause The GIMP to crash or possibly execute arbitrary code
if the file was opened by a victim. (CVE-2006-4519, CVE-2007-2949,
CVE-2007-3741)

Users of The GIMP should update to these erratum packages, which contain a
backported fix to correct these issues.</description>
    <advisory from="secalert@redhat.com">
     <severity>Moderate</severity>
     <rights>Copyright 2008 Red Hat, Inc.</rights>
     <issued date="2008-01-07"/>
     <updated date="2008-03-20"/>
     <cve cwe="CWE-190" href="https://access.redhat.com/security/cve/CVE-2006-4519" public="20070709">CVE-2006-4519</cve>
     <cve cwe="CWE-190" href="https://access.redhat.com/security/cve/CVE-2007-2949" public="20070627">CVE-2007-2949</cve>
     <cve cwe="CWE-20" href="https://access.redhat.com/security/cve/CVE-2007-3741" public="20070709">CVE-2007-3741</cve>
     <bugzilla href="https://bugzilla.redhat.com/244400" id="244400">CVE-2007-2949 Gimp PSD integer overflow</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/247565" id="247565">CVE-2006-4519 GIMP multiple image loader integer overflows</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/248053" id="248053">CVE-2007-3741 Gimp image loader multiple input validation flaws</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:5</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="gimp-perl is earlier than 1:1.2.3-20.9.el3" test_ref="oval:com.redhat.rhsa:tst:20070513001"/>
       <criterion comment="gimp-perl is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070343006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="gimp is earlier than 1:1.2.3-20.9.el3" test_ref="oval:com.redhat.rhsa:tst:20070513003"/>
       <criterion comment="gimp is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070343002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="gimp-devel is earlier than 1:1.2.3-20.9.el3" test_ref="oval:com.redhat.rhsa:tst:20070513005"/>
       <criterion comment="gimp-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070343004"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="gimp-devel is earlier than 1:2.0.5-7.0.7.el4" test_ref="oval:com.redhat.rhsa:tst:20070513008"/>
       <criterion comment="gimp-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070343004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="gimp is earlier than 1:2.0.5-7.0.7.el4" test_ref="oval:com.redhat.rhsa:tst:20070513009"/>
       <criterion comment="gimp is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070343002"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 5 is installed" test_ref="oval:com.redhat.rhsa:tst:20070066013"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="gimp-devel is earlier than 2:2.2.13-2.0.7.el5" test_ref="oval:com.redhat.rhsa:tst:20070513011"/>
       <criterion comment="gimp-devel is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070343012"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="gimp-libs is earlier than 2:2.2.13-2.0.7.el5" test_ref="oval:com.redhat.rhsa:tst:20070513013"/>
       <criterion comment="gimp-libs is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070343014"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="gimp is earlier than 2:2.2.13-2.0.7.el5" test_ref="oval:com.redhat.rhsa:tst:20070513015"/>
       <criterion comment="gimp is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070343016"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20070533" version="633">
   <metadata>
    <title>RHSA-2007:0533: httpd security update (Moderate)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
    </affected>
    <reference ref_id="RHSA-2007:0533" ref_url="https://access.redhat.com/errata/RHSA-2007:0533" source="RHSA"/>
    <reference ref_id="CVE-2006-5752" ref_url="https://access.redhat.com/security/cve/CVE-2006-5752" source="CVE"/>
    <reference ref_id="CVE-2007-1863" ref_url="https://access.redhat.com/security/cve/CVE-2007-1863" source="CVE"/>
    <description>The Apache HTTP Server is a popular Web server.

A flaw was found in the Apache HTTP Server mod_status module. On sites
where the server-status page is publicly accessible and ExtendedStatus is
enabled this could lead to a cross-site scripting attack. On Red Hat
Enterprise Linux the server-status page is not enabled by default and it is
best practice to not make this publicly available. (CVE-2006-5752)

A flaw was found in the Apache HTTP Server mod_cache module. On sites where
caching is enabled, a remote attacker could send a carefully crafted
request that would cause the Apache child process handling that request to
crash. This could lead to a denial of service if using a threaded
Multi-Processing Module. (CVE-2007-1863)

In addition, two bugs were fixed:

* when the ProxyErrorOverride directive was enabled, responses with 3xx
status-codes would be overriden at the proxy. This has been changed so that
only 4xx and 5xx responses are overriden.

* the &quot;ProxyTimeout&quot; directive was not inherited across virtual host
definitions.

Users of httpd should upgrade to these updated packages, which contain
backported patches to correct these issues. Users should restart Apache
after installing this update.</description>
    <advisory from="secalert@redhat.com">
     <severity>Moderate</severity>
     <rights>Copyright 2007 Red Hat, Inc.</rights>
     <issued date="2007-06-27"/>
     <updated date="2007-06-27"/>
     <cve cwe="CWE-79" href="https://access.redhat.com/security/cve/CVE-2006-5752" public="20070620">CVE-2006-5752</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-1863" public="20070502">CVE-2007-1863</cve>
     <bugzilla href="https://bugzilla.redhat.com/244638" id="244638">Reverse Proxy Unexpected Timeout</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/244639" id="244639">Mod_proxy_http ProxyErrorOverride eating cookies</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/244658" id="244658">CVE-2007-1863 httpd mod_cache segfault</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/245112" id="245112">CVE-2006-5752 httpd mod_status XSS</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="AND">
    <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
    <criteria operator="OR">
     <criteria operator="AND">
      <criterion comment="httpd is earlier than 0:2.0.46-67.ent" test_ref="oval:com.redhat.rhsa:tst:20070533001"/>
      <criterion comment="httpd is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060159006"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="mod_ssl is earlier than 1:2.0.46-67.ent" test_ref="oval:com.redhat.rhsa:tst:20070533003"/>
      <criterion comment="mod_ssl is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060159002"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="httpd-devel is earlier than 0:2.0.46-67.ent" test_ref="oval:com.redhat.rhsa:tst:20070533005"/>
      <criterion comment="httpd-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060159004"/>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20070662" version="632">
   <metadata>
    <title>RHSA-2007:0662: httpd security update (Moderate)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
    </affected>
    <reference ref_id="RHSA-2007:0662" ref_url="https://access.redhat.com/errata/RHSA-2007:0662" source="RHSA"/>
    <reference ref_id="CVE-2007-3304" ref_url="https://access.redhat.com/security/cve/CVE-2007-3304" source="CVE"/>
    <description>The Apache HTTP Server is a popular Web server. 

The Apache HTTP Server did not verify that a process was an Apache child
process before sending it signals. A local attacker with the ability to run
scripts on the Apache HTTP Server could manipulate the scoreboard and cause
arbitrary processes to be terminated which could lead to a denial of
service.  (CVE-2007-3304).

Users of httpd should upgrade to these updated packages, which contain
backported patches to correct this issue. Users should restart Apache
after installing this update.</description>
    <advisory from="secalert@redhat.com">
     <severity>Moderate</severity>
     <rights>Copyright 2007 Red Hat, Inc.</rights>
     <issued date="2008-01-07"/>
     <updated date="2007-07-13"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-3304" public="20070619">CVE-2007-3304</cve>
     <bugzilla href="https://bugzilla.redhat.com/245111" id="245111">CVE-2007-3304 httpd scoreboard lack of PID protection</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="httpd-devel is earlier than 0:2.0.46-68.ent" test_ref="oval:com.redhat.rhsa:tst:20070662001"/>
       <criterion comment="httpd-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060159004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="mod_ssl is earlier than 1:2.0.46-68.ent" test_ref="oval:com.redhat.rhsa:tst:20070662003"/>
       <criterion comment="mod_ssl is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060159002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="httpd is earlier than 0:2.0.46-68.ent" test_ref="oval:com.redhat.rhsa:tst:20070662005"/>
       <criterion comment="httpd is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060159006"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="httpd is earlier than 0:2.0.52-32.3.ent" test_ref="oval:com.redhat.rhsa:tst:20070662008"/>
       <criterion comment="httpd is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060159006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="httpd-devel is earlier than 0:2.0.52-32.3.ent" test_ref="oval:com.redhat.rhsa:tst:20070662009"/>
       <criterion comment="httpd-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060159004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="httpd-suexec is earlier than 0:2.0.52-32.3.ent" test_ref="oval:com.redhat.rhsa:tst:20070662010"/>
       <criterion comment="httpd-suexec is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060159009"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="mod_ssl is earlier than 1:2.0.52-32.3.ent" test_ref="oval:com.redhat.rhsa:tst:20070662012"/>
       <criterion comment="mod_ssl is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060159002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="httpd-manual is earlier than 0:2.0.52-32.3.ent" test_ref="oval:com.redhat.rhsa:tst:20070662013"/>
       <criterion comment="httpd-manual is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060159011"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20070671" version="632">
   <metadata>
    <title>RHSA-2007:0671: kernel security and bugfix update (Moderate)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
    </affected>
    <reference ref_id="RHSA-2007:0671" ref_url="https://access.redhat.com/errata/RHSA-2007:0671" source="RHSA"/>
    <reference ref_id="CVE-2007-1217" ref_url="https://access.redhat.com/security/cve/CVE-2007-1217" source="CVE"/>
    <reference ref_id="CVE-2007-1353" ref_url="https://access.redhat.com/security/cve/CVE-2007-1353" source="CVE"/>
    <description>The Linux kernel handles the basic functions of the operating system.

These new kernel packages contain fixes for the security issues described
below:

* a flaw in the ISDN CAPI subsystem that allowed a remote user to cause a
denial of service or potential privilege escalation. (CVE-2007-1217, Moderate)

* a flaw in the Bluetooth subsystem that allowed a local user to trigger an
information leak. (CVE-2007-1353, Low) 

In addition to the security issues described above, fixes for the following
have been included:

* a race condition in the e1000 network driver that could cause ESB2
systems to be started without the RX unit being turned on. 

* a related e1000 bug on ESB2 systems that could cause rlogin to fail.

Red Hat would like to thank Ilja van Sprundel for reporting an issue fixed
in this erratum. 

Note: The kernel-unsupported package contains various drivers and modules
that are unsupported and therefore might contain security problems that
have not been addressed.

All Red Hat Enterprise Linux 3 users are advised to upgrade their kernels
to the packages associated with their machine architecture and
configurations as listed in this erratum.</description>
    <advisory from="secalert@redhat.com">
     <severity>Moderate</severity>
     <rights>Copyright 2007 Red Hat, Inc.</rights>
     <issued date="2007-08-16"/>
     <updated date="2007-08-16"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-1217" public="20070314">CVE-2007-1217</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-1353" impact="low" public="20070418">CVE-2007-1353</cve>
     <bugzilla href="https://bugzilla.redhat.com/231069" id="231069">CVE-2007-1217 Overflow in CAPI subsystem</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/234294" id="234294">CVE-2007-1353 Bluetooth setsockopt() information leaks</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="AND">
    <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
    <criteria operator="OR">
     <criteria operator="AND">
      <criterion comment="kernel is earlier than 0:2.4.21-51.EL" test_ref="oval:com.redhat.rhsa:tst:20070671001"/>
      <criterion comment="kernel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060140010"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="kernel-unsupported is earlier than 0:2.4.21-51.EL" test_ref="oval:com.redhat.rhsa:tst:20070671003"/>
      <criterion comment="kernel-unsupported is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060140002"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="kernel-doc is earlier than 0:2.4.21-51.EL" test_ref="oval:com.redhat.rhsa:tst:20070671005"/>
      <criterion comment="kernel-doc is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060140006"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="kernel-source is earlier than 0:2.4.21-51.EL" test_ref="oval:com.redhat.rhsa:tst:20070671007"/>
      <criterion comment="kernel-source is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060140012"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="kernel-smp is earlier than 0:2.4.21-51.EL" test_ref="oval:com.redhat.rhsa:tst:20070671009"/>
      <criterion comment="kernel-smp is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060140008"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-51.EL" test_ref="oval:com.redhat.rhsa:tst:20070671011"/>
      <criterion comment="kernel-smp-unsupported is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060140004"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="kernel-hugemem is earlier than 0:2.4.21-51.EL" test_ref="oval:com.redhat.rhsa:tst:20070671013"/>
      <criterion comment="kernel-hugemem is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060140018"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="kernel-BOOT is earlier than 0:2.4.21-51.EL" test_ref="oval:com.redhat.rhsa:tst:20070671015"/>
      <criterion comment="kernel-BOOT is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060140016"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-51.EL" test_ref="oval:com.redhat.rhsa:tst:20070671017"/>
      <criterion comment="kernel-hugemem-unsupported is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060140014"/>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20070674" version="633">
   <metadata>
    <title>RHSA-2007:0674: perl-Net-DNS security update (Moderate)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 5</platform>
    </affected>
    <reference ref_id="RHSA-2007:0674" ref_url="https://access.redhat.com/errata/RHSA-2007:0674" source="RHSA"/>
    <reference ref_id="CVE-2007-3377" ref_url="https://access.redhat.com/security/cve/CVE-2007-3377" source="CVE"/>
    <reference ref_id="CVE-2007-3409" ref_url="https://access.redhat.com/security/cve/CVE-2007-3409" source="CVE"/>
    <description>Net::DNS is a collection of Perl modules that act as a Domain Name System
(DNS) resolver.

A flaw was found in the way Net::DNS generated the ID field in a DNS query.
This predictable ID field could be used by a remote attacker to return
invalid DNS data. (CVE-2007-3377)

A denial of service flaw was found in the way Net::DNS parsed certain DNS
requests. A malformed response to a DNS request could cause the application
using Net::DNS to crash or stop responding. (CVE-2007-3409)

Users of Net::DNS should upgrade to these updated packages, which contain
backported patches to correct these issues.</description>
    <advisory from="secalert@redhat.com">
     <severity>Moderate</severity>
     <rights>Copyright 2008 Red Hat, Inc.</rights>
     <issued date="2007-07-12"/>
     <updated date="2008-03-20"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-3377" public="20061222">CVE-2007-3377</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-3409" public="20061222">CVE-2007-3409</cve>
     <bugzilla href="https://bugzilla.redhat.com/245466" id="245466">CVE-2007-3377 perl-Net-DNS security issue</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/245804" id="245804">CVE-2007-3409 Perl Net::DNS denial of service</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:5</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criterion comment="perl-Net-DNS is earlier than 0:0.31-4.el3" test_ref="oval:com.redhat.rhsa:tst:20070674001"/>
     <criterion comment="perl-Net-DNS is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070674002"/>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 5 is installed" test_ref="oval:com.redhat.rhsa:tst:20070066013"/>
     <criterion comment="perl-Net-DNS is earlier than 0:0.59-3.el5" test_ref="oval:com.redhat.rhsa:tst:20070674004"/>
     <criterion comment="perl-Net-DNS is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070674005"/>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20070720" version="633">
   <metadata>
    <title>RHSA-2007:0720: cups security update (Important)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
     <platform>Red Hat Enterprise Linux 5</platform>
    </affected>
    <reference ref_id="RHSA-2007:0720" ref_url="https://access.redhat.com/errata/RHSA-2007:0720" source="RHSA"/>
    <reference ref_id="CVE-2007-3387" ref_url="https://access.redhat.com/security/cve/CVE-2007-3387" source="CVE"/>
    <description>The Common UNIX Printing System (CUPS) provides a portable printing layer
for UNIX(R) operating systems.

Maurycy Prodeus discovered an integer overflow flaw in the way CUPS processes
PDF files.  An attacker could create a malicious PDF file that could
potentially execute arbitrary code when printed.  (CVE-2007-3387)

All users of CUPS should upgrade to these updated packages, which contain a
backported patch to resolve this issue.</description>
    <advisory from="secalert@redhat.com">
     <severity>Important</severity>
     <rights>Copyright 2008 Red Hat, Inc.</rights>
     <issued date="2008-01-07"/>
     <updated date="2008-03-20"/>
     <cve cwe="CWE-190" href="https://access.redhat.com/security/cve/CVE-2007-3387" public="20070728">CVE-2007-3387</cve>
     <bugzilla href="https://bugzilla.redhat.com/248194" id="248194">CVE-2007-3387 xpdf integer overflow</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:5</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="cups-devel is earlier than 1:1.1.17-13.3.45" test_ref="oval:com.redhat.rhsa:tst:20070720001"/>
       <criterion comment="cups-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060163002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="cups-libs is earlier than 1:1.1.17-13.3.45" test_ref="oval:com.redhat.rhsa:tst:20070720003"/>
       <criterion comment="cups-libs is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060163004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="cups is earlier than 1:1.1.17-13.3.45" test_ref="oval:com.redhat.rhsa:tst:20070720005"/>
       <criterion comment="cups is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060163006"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="cups is earlier than 1:1.1.22-0.rc1.9.20.2" test_ref="oval:com.redhat.rhsa:tst:20070720008"/>
       <criterion comment="cups is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060163006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="cups-libs is earlier than 1:1.1.22-0.rc1.9.20.2" test_ref="oval:com.redhat.rhsa:tst:20070720009"/>
       <criterion comment="cups-libs is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060163004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="cups-devel is earlier than 1:1.1.22-0.rc1.9.20.2" test_ref="oval:com.redhat.rhsa:tst:20070720010"/>
       <criterion comment="cups-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060163002"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 5 is installed" test_ref="oval:com.redhat.rhsa:tst:20070066013"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="cups-libs is earlier than 1:1.2.4-11.5.3.el5" test_ref="oval:com.redhat.rhsa:tst:20070720012"/>
       <criterion comment="cups-libs is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070123017"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="cups-lpd is earlier than 1:1.2.4-11.5.3.el5" test_ref="oval:com.redhat.rhsa:tst:20070720014"/>
       <criterion comment="cups-lpd is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070123019"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="cups is earlier than 1:1.2.4-11.5.3.el5" test_ref="oval:com.redhat.rhsa:tst:20070720016"/>
       <criterion comment="cups is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070123013"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="cups-devel is earlier than 1:1.2.4-11.5.3.el5" test_ref="oval:com.redhat.rhsa:tst:20070720018"/>
       <criterion comment="cups-devel is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070123015"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20070721" version="632">
   <metadata>
    <title>RHSA-2007:0721: qt security update (Moderate)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
     <platform>Red Hat Enterprise Linux 5</platform>
    </affected>
    <reference ref_id="RHSA-2007:0721" ref_url="https://access.redhat.com/errata/RHSA-2007:0721" source="RHSA"/>
    <reference ref_id="CVE-2007-3388" ref_url="https://access.redhat.com/security/cve/CVE-2007-3388" source="CVE"/>
    <description>Qt is a software toolkit that simplifies the task of writing and
maintaining GUI (Graphical User Interface) applications for the X Window
System.

Several format string flaws were found in Qt error message handling.  If an
application linked against Qt created an error message from user supplied
data in a certain way, it could lead to a denial of service or possibly
allow the execution of arbitrary code. (CVE-2007-3388)

Users of Qt should upgrade to these updated packages, which contain a
backported patch to correct these issues.

Red Hat would like to acknowledge Tim Brown of Portcullis Computer
Security and Dirk Mueller for these issues.</description>
    <advisory from="secalert@redhat.com">
     <severity>Moderate</severity>
     <rights>Copyright 2007 Red Hat, Inc.</rights>
     <issued date="2008-01-07"/>
     <updated date="2007-08-02"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-3388" impact="important" public="20070727">CVE-2007-3388</cve>
     <bugzilla href="https://bugzilla.redhat.com/248417" id="248417">CVE-2007-3388 qt3 format string flaw</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:5</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="qt-MySQL is earlier than 1:3.1.2-16.RHEL3" test_ref="oval:com.redhat.rhsa:tst:20070721001"/>
       <criterion comment="qt-MySQL is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060725008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="qt-devel is earlier than 1:3.1.2-16.RHEL3" test_ref="oval:com.redhat.rhsa:tst:20070721003"/>
       <criterion comment="qt-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060725004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="qt-designer is earlier than 1:3.1.2-16.RHEL3" test_ref="oval:com.redhat.rhsa:tst:20070721005"/>
       <criterion comment="qt-designer is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060725010"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="qt is earlier than 1:3.1.2-16.RHEL3" test_ref="oval:com.redhat.rhsa:tst:20070721007"/>
       <criterion comment="qt is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060725002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="qt-ODBC is earlier than 1:3.1.2-16.RHEL3" test_ref="oval:com.redhat.rhsa:tst:20070721009"/>
       <criterion comment="qt-ODBC is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060725012"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="qt-config is earlier than 1:3.1.2-16.RHEL3" test_ref="oval:com.redhat.rhsa:tst:20070721011"/>
       <criterion comment="qt-config is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060725006"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="qt-ODBC is earlier than 1:3.3.3-11.RHEL4" test_ref="oval:com.redhat.rhsa:tst:20070721014"/>
       <criterion comment="qt-ODBC is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060725012"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="qt-devel is earlier than 1:3.3.3-11.RHEL4" test_ref="oval:com.redhat.rhsa:tst:20070721015"/>
       <criterion comment="qt-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060725004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="qt-config is earlier than 1:3.3.3-11.RHEL4" test_ref="oval:com.redhat.rhsa:tst:20070721016"/>
       <criterion comment="qt-config is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060725006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="qt is earlier than 1:3.3.3-11.RHEL4" test_ref="oval:com.redhat.rhsa:tst:20070721017"/>
       <criterion comment="qt is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060725002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="qt-designer is earlier than 1:3.3.3-11.RHEL4" test_ref="oval:com.redhat.rhsa:tst:20070721018"/>
       <criterion comment="qt-designer is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060725010"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="qt-MySQL is earlier than 1:3.3.3-11.RHEL4" test_ref="oval:com.redhat.rhsa:tst:20070721019"/>
       <criterion comment="qt-MySQL is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060725008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="qt-PostgreSQL is earlier than 1:3.3.3-11.RHEL4" test_ref="oval:com.redhat.rhsa:tst:20070721020"/>
       <criterion comment="qt-PostgreSQL is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060725021"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 5 is installed" test_ref="oval:com.redhat.rhsa:tst:20070066013"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="qt-PostgreSQL is earlier than 1:3.3.6-21.el5" test_ref="oval:com.redhat.rhsa:tst:20070721023"/>
       <criterion comment="qt-PostgreSQL is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070721024"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="qt-devel is earlier than 1:3.3.6-21.el5" test_ref="oval:com.redhat.rhsa:tst:20070721025"/>
       <criterion comment="qt-devel is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070721026"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="qt-devel-docs is earlier than 1:3.3.6-21.el5" test_ref="oval:com.redhat.rhsa:tst:20070721027"/>
       <criterion comment="qt-devel-docs is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070721028"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="qt-config is earlier than 1:3.3.6-21.el5" test_ref="oval:com.redhat.rhsa:tst:20070721029"/>
       <criterion comment="qt-config is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070721030"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="qt-designer is earlier than 1:3.3.6-21.el5" test_ref="oval:com.redhat.rhsa:tst:20070721031"/>
       <criterion comment="qt-designer is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070721032"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="qt is earlier than 1:3.3.6-21.el5" test_ref="oval:com.redhat.rhsa:tst:20070721033"/>
       <criterion comment="qt is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070721034"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="qt-ODBC is earlier than 1:3.3.6-21.el5" test_ref="oval:com.redhat.rhsa:tst:20070721035"/>
       <criterion comment="qt-ODBC is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070721036"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="qt-MySQL is earlier than 1:3.3.6-21.el5" test_ref="oval:com.redhat.rhsa:tst:20070721037"/>
       <criterion comment="qt-MySQL is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070721038"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20070722" version="633">
   <metadata>
    <title>RHSA-2007:0722: seamonkey security update (Critical)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
    </affected>
    <reference ref_id="RHSA-2007:0722" ref_url="https://access.redhat.com/errata/RHSA-2007:0722" source="RHSA"/>
    <reference ref_id="CVE-2007-3089" ref_url="https://access.redhat.com/security/cve/CVE-2007-3089" source="CVE"/>
    <reference ref_id="CVE-2007-3656" ref_url="https://access.redhat.com/security/cve/CVE-2007-3656" source="CVE"/>
    <reference ref_id="CVE-2007-3734" ref_url="https://access.redhat.com/security/cve/CVE-2007-3734" source="CVE"/>
    <reference ref_id="CVE-2007-3735" ref_url="https://access.redhat.com/security/cve/CVE-2007-3735" source="CVE"/>
    <reference ref_id="CVE-2007-3736" ref_url="https://access.redhat.com/security/cve/CVE-2007-3736" source="CVE"/>
    <reference ref_id="CVE-2007-3737" ref_url="https://access.redhat.com/security/cve/CVE-2007-3737" source="CVE"/>
    <reference ref_id="CVE-2007-3738" ref_url="https://access.redhat.com/security/cve/CVE-2007-3738" source="CVE"/>
    <description>SeaMonkey is an open source Web browser, advanced email and newsgroup
client, IRC chat client, and HTML editor.

Several flaws were found in the way SeaMonkey processed certain malformed
JavaScript code. A web page containing malicious JavaScript code could
cause SeaMonkey to crash or potentially execute arbitrary code as the user
running SeaMonkey. (CVE-2007-3734, CVE-2007-3735, CVE-2007-3737, CVE-2007-3738)

Several content injection flaws were found in the way SeaMonkey handled
certain JavaScript code. A web page containing malicious JavaScript code
could inject arbitrary content into other web pages. (CVE-2007-3736,
CVE-2007-3089)

A flaw was found in the way SeaMonkey cached web pages on the local disk. A
malicious web page may be able to inject arbitrary HTML into a browsing
session if the user reloads a targeted site. (CVE-2007-3656)

Users of SeaMonkey are advised to upgrade to these erratum packages, which
contain backported patches that correct these issues.</description>
    <advisory from="secalert@redhat.com">
     <severity>Critical</severity>
     <rights>Copyright 2007 Red Hat, Inc.</rights>
     <issued date="2008-01-07"/>
     <updated date="2007-07-18"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-3089" impact="moderate" public="20070604">CVE-2007-3089</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-3656" impact="moderate" public="20070709">CVE-2007-3656</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-3734" public="20070718:0900">CVE-2007-3734</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-3735" public="20070718:0900">CVE-2007-3735</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-3736" impact="moderate" public="20070718:0900">CVE-2007-3736</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-3737" public="20070718:0900">CVE-2007-3737</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-3738" public="20070718:0900">CVE-2007-3738</cve>
     <bugzilla href="https://bugzilla.redhat.com/248518" id="248518">CVE-2007-3089 various flaws in mozilla products (CVE-2007-3734 CVE-2007-3735 CVE-2007-3736 CVE-2007-3737 CVE-2007-3656 CVE-2007-3738)</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.3.el3" test_ref="oval:com.redhat.rhsa:tst:20070722001"/>
       <criterion comment="seamonkey-js-debugger is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.3.el3" test_ref="oval:com.redhat.rhsa:tst:20070722003"/>
       <criterion comment="seamonkey-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578014"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.3.el3" test_ref="oval:com.redhat.rhsa:tst:20070722005"/>
       <criterion comment="seamonkey-chat is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.3.el3" test_ref="oval:com.redhat.rhsa:tst:20070722007"/>
       <criterion comment="seamonkey-nss is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578016"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey is earlier than 0:1.0.9-0.3.el3" test_ref="oval:com.redhat.rhsa:tst:20070722009"/>
       <criterion comment="seamonkey is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578018"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.3.el3" test_ref="oval:com.redhat.rhsa:tst:20070722011"/>
       <criterion comment="seamonkey-dom-inspector is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.3.el3" test_ref="oval:com.redhat.rhsa:tst:20070722013"/>
       <criterion comment="seamonkey-nspr-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.3.el3" test_ref="oval:com.redhat.rhsa:tst:20070722015"/>
       <criterion comment="seamonkey-mail is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578020"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.3.el3" test_ref="oval:com.redhat.rhsa:tst:20070722017"/>
       <criterion comment="seamonkey-nss-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578012"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.3.el3" test_ref="oval:com.redhat.rhsa:tst:20070722019"/>
       <criterion comment="seamonkey-nspr is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578010"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="seamonkey-chat is earlier than 0:1.0.9-4.el4" test_ref="oval:com.redhat.rhsa:tst:20070722022"/>
       <criterion comment="seamonkey-chat is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-devel is earlier than 0:1.0.9-4.el4" test_ref="oval:com.redhat.rhsa:tst:20070722023"/>
       <criterion comment="seamonkey-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578014"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-4.el4" test_ref="oval:com.redhat.rhsa:tst:20070722024"/>
       <criterion comment="seamonkey-js-debugger is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey is earlier than 0:1.0.9-4.el4" test_ref="oval:com.redhat.rhsa:tst:20070722025"/>
       <criterion comment="seamonkey is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578018"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-mail is earlier than 0:1.0.9-4.el4" test_ref="oval:com.redhat.rhsa:tst:20070722026"/>
       <criterion comment="seamonkey-mail is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578020"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-4.el4" test_ref="oval:com.redhat.rhsa:tst:20070722027"/>
       <criterion comment="seamonkey-dom-inspector is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578002"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20070731" version="633">
   <metadata>
    <title>RHSA-2007:0731: tetex security update (Important)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
     <platform>Red Hat Enterprise Linux 5</platform>
    </affected>
    <reference ref_id="RHSA-2007:0731" ref_url="https://access.redhat.com/errata/RHSA-2007:0731" source="RHSA"/>
    <reference ref_id="CVE-2007-3387" ref_url="https://access.redhat.com/security/cve/CVE-2007-3387" source="CVE"/>
    <description>TeTeX is an implementation of TeX. TeX takes a text file and a set of
formatting commands as input and creates a typesetter-independent .dvi
(DeVice Independent) file as output.

Maurycy Prodeus discovered an integer overflow flaw in the processing
of PDF files.  An attacker could create a malicious PDF file that would
cause TeTeX to crash or potentially execute arbitrary code when opened. 
(CVE-2007-3387)

All users of TeTeX should upgrade to these updated packages, which
contain a backported patch to resolve this issue.</description>
    <advisory from="secalert@redhat.com">
     <severity>Important</severity>
     <rights>Copyright 2007 Red Hat, Inc.</rights>
     <issued date="2007-08-01"/>
     <updated date="2007-08-01"/>
     <cve cwe="CWE-190" href="https://access.redhat.com/security/cve/CVE-2007-3387" public="20070728">CVE-2007-3387</cve>
     <bugzilla href="https://bugzilla.redhat.com/248194" id="248194">CVE-2007-3387 xpdf integer overflow</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:5</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="tetex-xdvi is earlier than 0:1.0.7-67.10" test_ref="oval:com.redhat.rhsa:tst:20070731001"/>
       <criterion comment="tetex-xdvi is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060160004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="tetex-dvips is earlier than 0:1.0.7-67.10" test_ref="oval:com.redhat.rhsa:tst:20070731003"/>
       <criterion comment="tetex-dvips is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060160008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="tetex-fonts is earlier than 0:1.0.7-67.10" test_ref="oval:com.redhat.rhsa:tst:20070731005"/>
       <criterion comment="tetex-fonts is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060160012"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="tetex is earlier than 0:1.0.7-67.10" test_ref="oval:com.redhat.rhsa:tst:20070731007"/>
       <criterion comment="tetex is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060160002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="tetex-afm is earlier than 0:1.0.7-67.10" test_ref="oval:com.redhat.rhsa:tst:20070731009"/>
       <criterion comment="tetex-afm is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060160010"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="tetex-latex is earlier than 0:1.0.7-67.10" test_ref="oval:com.redhat.rhsa:tst:20070731011"/>
       <criterion comment="tetex-latex is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060160006"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="tetex-afm is earlier than 0:2.0.2-22.0.1.EL4.8" test_ref="oval:com.redhat.rhsa:tst:20070731014"/>
       <criterion comment="tetex-afm is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060160010"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="tetex-xdvi is earlier than 0:2.0.2-22.0.1.EL4.8" test_ref="oval:com.redhat.rhsa:tst:20070731015"/>
       <criterion comment="tetex-xdvi is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060160004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="tetex-doc is earlier than 0:2.0.2-22.0.1.EL4.8" test_ref="oval:com.redhat.rhsa:tst:20070731016"/>
       <criterion comment="tetex-doc is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060160016"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="tetex is earlier than 0:2.0.2-22.0.1.EL4.8" test_ref="oval:com.redhat.rhsa:tst:20070731018"/>
       <criterion comment="tetex is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060160002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="tetex-fonts is earlier than 0:2.0.2-22.0.1.EL4.8" test_ref="oval:com.redhat.rhsa:tst:20070731019"/>
       <criterion comment="tetex-fonts is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060160012"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="tetex-latex is earlier than 0:2.0.2-22.0.1.EL4.8" test_ref="oval:com.redhat.rhsa:tst:20070731020"/>
       <criterion comment="tetex-latex is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060160006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="tetex-dvips is earlier than 0:2.0.2-22.0.1.EL4.8" test_ref="oval:com.redhat.rhsa:tst:20070731021"/>
       <criterion comment="tetex-dvips is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060160008"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 5 is installed" test_ref="oval:com.redhat.rhsa:tst:20070066013"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="tetex-dvips is earlier than 0:3.0-33.1.el5" test_ref="oval:com.redhat.rhsa:tst:20070731023"/>
       <criterion comment="tetex-dvips is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070731024"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="tetex-latex is earlier than 0:3.0-33.1.el5" test_ref="oval:com.redhat.rhsa:tst:20070731025"/>
       <criterion comment="tetex-latex is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070731026"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="tetex-afm is earlier than 0:3.0-33.1.el5" test_ref="oval:com.redhat.rhsa:tst:20070731027"/>
       <criterion comment="tetex-afm is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070731028"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="tetex-fonts is earlier than 0:3.0-33.1.el5" test_ref="oval:com.redhat.rhsa:tst:20070731029"/>
       <criterion comment="tetex-fonts is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070731030"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="tetex is earlier than 0:3.0-33.1.el5" test_ref="oval:com.redhat.rhsa:tst:20070731031"/>
       <criterion comment="tetex is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070731032"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="tetex-doc is earlier than 0:3.0-33.1.el5" test_ref="oval:com.redhat.rhsa:tst:20070731033"/>
       <criterion comment="tetex-doc is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070731034"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="tetex-xdvi is earlier than 0:3.0-33.1.el5" test_ref="oval:com.redhat.rhsa:tst:20070731035"/>
       <criterion comment="tetex-xdvi is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070731036"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20070735" version="632">
   <metadata>
    <title>RHSA-2007:0735: xpdf security update (Important)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
    </affected>
    <reference ref_id="RHSA-2007:0735" ref_url="https://access.redhat.com/errata/RHSA-2007:0735" source="RHSA"/>
    <reference ref_id="CVE-2007-3387" ref_url="https://access.redhat.com/security/cve/CVE-2007-3387" source="CVE"/>
    <description>Xpdf is an X Window System-based viewer for Portable Document Format (PDF)
files. 

Maurycy Prodeus discovered an integer overflow flaw in the processing
of PDF files.  An attacker could create a malicious PDF file that would
cause Xpdf to crash or potentially execute arbitrary code when opened. 
(CVE-2007-3387)

All users of Xpdf should upgrade to these updated packages, which
contain a backported patch to resolve this issue.</description>
    <advisory from="secalert@redhat.com">
     <severity>Important</severity>
     <rights>Copyright 2007 Red Hat, Inc.</rights>
     <issued date="2008-01-07"/>
     <updated date="2007-07-30"/>
     <cve cwe="CWE-190" href="https://access.redhat.com/security/cve/CVE-2007-3387" public="20070728">CVE-2007-3387</cve>
     <bugzilla href="https://bugzilla.redhat.com/248194" id="248194">CVE-2007-3387 xpdf integer overflow</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criterion comment="xpdf is earlier than 1:2.02-10.RHEL3" test_ref="oval:com.redhat.rhsa:tst:20070735001"/>
     <criterion comment="xpdf is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070735002"/>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criterion comment="xpdf is earlier than 1:3.00-12.RHEL4" test_ref="oval:com.redhat.rhsa:tst:20070735004"/>
     <criterion comment="xpdf is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070735002"/>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20070740" version="632">
   <metadata>
    <title>RHSA-2007:0740: bind security update (Moderate)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
     <platform>Red Hat Enterprise Linux 5</platform>
    </affected>
    <reference ref_id="RHSA-2007:0740" ref_url="https://access.redhat.com/errata/RHSA-2007:0740" source="RHSA"/>
    <reference ref_id="CVE-2007-2926" ref_url="https://access.redhat.com/security/cve/CVE-2007-2926" source="CVE"/>
    <description>ISC BIND (Berkeley Internet Name Domain) is an implementation of the DNS
(Domain Name System) protocols. 

A flaw was found in the way BIND generates outbound DNS query ids. If an
attacker is able to acquire a finite set of query IDs, it becomes possible
to accurately predict future query IDs. Future query ID prediction may
allow an attacker to conduct a DNS cache poisoning attack, which can result
in the DNS server returning incorrect client query data. (CVE-2007-2926)

Users of BIND are advised to upgrade to these updated packages, which
contain backported patches to correct this issue.</description>
    <advisory from="secalert@redhat.com">
     <severity>Moderate</severity>
     <rights>Copyright 2007 Red Hat, Inc.</rights>
     <issued date="2008-01-09"/>
     <updated date="2007-12-04"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-2926" public="20070723">CVE-2007-2926</cve>
     <bugzilla href="https://bugzilla.redhat.com/248851" id="248851">CVE-2007-2926 bind cryptographically weak query ids</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:5</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="bind-utils is earlier than 20:9.2.4-21.el3" test_ref="oval:com.redhat.rhsa:tst:20070740001"/>
       <criterion comment="bind-utils is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070044004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="bind-devel is earlier than 20:9.2.4-21.el3" test_ref="oval:com.redhat.rhsa:tst:20070740003"/>
       <criterion comment="bind-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070044008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="bind-chroot is earlier than 20:9.2.4-21.el3" test_ref="oval:com.redhat.rhsa:tst:20070740005"/>
       <criterion comment="bind-chroot is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070044006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="bind-libs is earlier than 20:9.2.4-21.el3" test_ref="oval:com.redhat.rhsa:tst:20070740007"/>
       <criterion comment="bind-libs is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070044002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="bind is earlier than 20:9.2.4-21.el3" test_ref="oval:com.redhat.rhsa:tst:20070740009"/>
       <criterion comment="bind is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070044010"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="bind-devel is earlier than 20:9.2.4-27.0.1.el4" test_ref="oval:com.redhat.rhsa:tst:20070740012"/>
       <criterion comment="bind-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070044008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="bind is earlier than 20:9.2.4-27.0.1.el4" test_ref="oval:com.redhat.rhsa:tst:20070740013"/>
       <criterion comment="bind is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070044010"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="bind-chroot is earlier than 20:9.2.4-27.0.1.el4" test_ref="oval:com.redhat.rhsa:tst:20070740014"/>
       <criterion comment="bind-chroot is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070044006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="bind-libs is earlier than 20:9.2.4-27.0.1.el4" test_ref="oval:com.redhat.rhsa:tst:20070740015"/>
       <criterion comment="bind-libs is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070044002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="bind-utils is earlier than 20:9.2.4-27.0.1.el4" test_ref="oval:com.redhat.rhsa:tst:20070740016"/>
       <criterion comment="bind-utils is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070044004"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 5 is installed" test_ref="oval:com.redhat.rhsa:tst:20070066013"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="bind-utils is earlier than 30:9.3.3-9.0.1.el5" test_ref="oval:com.redhat.rhsa:tst:20070740018"/>
       <criterion comment="bind-utils is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070740019"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="bind-libbind-devel is earlier than 30:9.3.3-9.0.1.el5" test_ref="oval:com.redhat.rhsa:tst:20070740020"/>
       <criterion comment="bind-libbind-devel is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070740021"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="bind is earlier than 30:9.3.3-9.0.1.el5" test_ref="oval:com.redhat.rhsa:tst:20070740022"/>
       <criterion comment="bind is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070740023"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="bind-sdb is earlier than 30:9.3.3-9.0.1.el5" test_ref="oval:com.redhat.rhsa:tst:20070740024"/>
       <criterion comment="bind-sdb is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070740025"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="caching-nameserver is earlier than 30:9.3.3-9.0.1.el5" test_ref="oval:com.redhat.rhsa:tst:20070740026"/>
       <criterion comment="caching-nameserver is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070740027"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="bind-libs is earlier than 30:9.3.3-9.0.1.el5" test_ref="oval:com.redhat.rhsa:tst:20070740028"/>
       <criterion comment="bind-libs is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070740029"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="bind-devel is earlier than 30:9.3.3-9.0.1.el5" test_ref="oval:com.redhat.rhsa:tst:20070740030"/>
       <criterion comment="bind-devel is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070740031"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="bind-chroot is earlier than 30:9.3.3-9.0.1.el5" test_ref="oval:com.redhat.rhsa:tst:20070740032"/>
       <criterion comment="bind-chroot is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070740033"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20070813" version="632">
   <metadata>
    <title>RHSA-2007:0813: openssl security update (Moderate)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
    </affected>
    <reference ref_id="RHSA-2007:0813" ref_url="https://access.redhat.com/errata/RHSA-2007:0813" source="RHSA"/>
    <reference ref_id="CVE-2007-3108" ref_url="https://access.redhat.com/security/cve/CVE-2007-3108" source="CVE"/>
    <reference ref_id="CVE-2007-5135" ref_url="https://access.redhat.com/security/cve/CVE-2007-5135" source="CVE"/>
    <description>OpenSSL is a toolkit that implements Secure Sockets Layer (SSL v2/v3) and
Transport Layer Security (TLS v1) protocols as well as a full-strength
general purpose cryptography library.

A flaw was found in the SSL_get_shared_ciphers() utility function. An
attacker could send a list of ciphers to an application that used this
function and overrun a buffer with a single byte (CVE-2007-5135). Few
applications make use of this vulnerable function and generally it is used
only when applications are compiled for debugging. 

A number of possible side-channel attacks were discovered affecting
OpenSSL. A local attacker could possibly obtain RSA private keys being
used on a system. In practice these attacks would be difficult to perform
outside of a lab environment. This update contains backported patches
designed to mitigate these issues.  (CVE-2007-3108).

Users of OpenSSL should upgrade to these updated packages, which contain
backported patches to resolve these issues.  

Note: After installing this update, users are advised to either restart all
services that use OpenSSL or restart their system.</description>
    <advisory from="secalert@redhat.com">
     <severity>Moderate</severity>
     <rights>Copyright 2007 Red Hat, Inc.</rights>
     <issued date="2007-10-22"/>
     <updated date="2007-10-22"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-3108" public="20070801">CVE-2007-3108</cve>
     <cve cwe="CWE-193" href="https://access.redhat.com/security/cve/CVE-2007-5135" public="20070927">CVE-2007-5135</cve>
     <bugzilla href="https://bugzilla.redhat.com/245732" id="245732">CVE-2007-3108 openssl: RSA side-channel attack</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/250573" id="250573">CVE-NONE openssl branch prediction attacks</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/309801" id="309801">CVE-2007-5135 openssl: SSL_get_shared_ciphers() off-by-one</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="AND">
    <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
    <criteria operator="OR">
     <criteria operator="AND">
      <criterion comment="openssl-devel is earlier than 0:0.9.7a-33.24" test_ref="oval:com.redhat.rhsa:tst:20070813001"/>
      <criterion comment="openssl-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060661008"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="openssl-perl is earlier than 0:0.9.7a-33.24" test_ref="oval:com.redhat.rhsa:tst:20070813003"/>
      <criterion comment="openssl-perl is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060661004"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="openssl is earlier than 0:0.9.7a-33.24" test_ref="oval:com.redhat.rhsa:tst:20070813005"/>
      <criterion comment="openssl is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060661006"/>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20070845" version="634">
   <metadata>
    <title>RHSA-2007:0845: libvorbis security update (Important)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
     <platform>Red Hat Enterprise Linux 5</platform>
    </affected>
    <reference ref_id="RHSA-2007:0845" ref_url="https://access.redhat.com/errata/RHSA-2007:0845" source="RHSA"/>
    <reference ref_id="CVE-2007-3106" ref_url="https://access.redhat.com/security/cve/CVE-2007-3106" source="CVE"/>
    <reference ref_id="CVE-2007-4029" ref_url="https://access.redhat.com/security/cve/CVE-2007-4029" source="CVE"/>
    <reference ref_id="CVE-2007-4065" ref_url="https://access.redhat.com/security/cve/CVE-2007-4065" source="CVE"/>
    <reference ref_id="CVE-2007-4066" ref_url="https://access.redhat.com/security/cve/CVE-2007-4066" source="CVE"/>
    <description>The libvorbis package contains runtime libraries for use in programs that
support Ogg Voribs. Ogg Vorbis is a fully open, non-proprietary, patent-and
royalty-free, general-purpose compressed audio format.

Several flaws were found in the way libvorbis processed audio data. An
attacker could create a carefully crafted OGG audio file in such a way that
it could cause an application linked with libvorbis to crash or execute
arbitrary code when it was opened. (CVE-2007-3106, CVE-2007-4029,
CVE-2007-4065, CVE-2007-4066)

Users of libvorbis are advised to upgrade to this updated package, which
contains backported patches that resolve these issues.</description>
    <advisory from="secalert@redhat.com">
     <severity>Important</severity>
     <rights>Copyright 2008 Red Hat, Inc.</rights>
     <issued date="2008-01-07"/>
     <updated date="2008-03-20"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-3106" public="20070726">CVE-2007-3106</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-4029" public="20070726">CVE-2007-4029</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-4065" public="20070726">CVE-2007-4065</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-4066" public="20070726">CVE-2007-4066</cve>
     <bugzilla href="https://bugzilla.redhat.com/245991" id="245991">CVE-2007-3106 libvorbis array boundary condition</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/249780" id="249780">CVE-2007-4065 Multiple libvorbis flaws (CVE-2007-4066, CVE-2007-4029)</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:5</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="libvorbis is earlier than 1:1.0-8.el3" test_ref="oval:com.redhat.rhsa:tst:20070845001"/>
       <criterion comment="libvorbis is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070845002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="libvorbis-devel is earlier than 1:1.0-8.el3" test_ref="oval:com.redhat.rhsa:tst:20070845003"/>
       <criterion comment="libvorbis-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070845004"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="libvorbis-devel is earlier than 1:1.1.0-2.el4.5" test_ref="oval:com.redhat.rhsa:tst:20070845006"/>
       <criterion comment="libvorbis-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070845004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="libvorbis is earlier than 1:1.1.0-2.el4.5" test_ref="oval:com.redhat.rhsa:tst:20070845007"/>
       <criterion comment="libvorbis is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070845002"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 5 is installed" test_ref="oval:com.redhat.rhsa:tst:20070066013"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="libvorbis is earlier than 1:1.1.2-3.el5.0" test_ref="oval:com.redhat.rhsa:tst:20070845009"/>
       <criterion comment="libvorbis is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070845010"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="libvorbis-devel is earlier than 1:1.1.2-3.el5.0" test_ref="oval:com.redhat.rhsa:tst:20070845011"/>
       <criterion comment="libvorbis-devel is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070845012"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20070848" version="638">
   <metadata>
    <title>RHSA-2007:0848: openoffice.org security update (Important)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
     <platform>Red Hat Enterprise Linux 5</platform>
    </affected>
    <reference ref_id="RHSA-2007:0848" ref_url="https://access.redhat.com/errata/RHSA-2007:0848" source="RHSA"/>
    <reference ref_id="CVE-2007-2834" ref_url="https://access.redhat.com/security/cve/CVE-2007-2834" source="CVE"/>
    <description>OpenOffice.org is an office productivity suite that includes desktop
applications such as a word processor, spreadsheet, presentation manager,
formula editor, and drawing program.

A heap overflow flaw was found in the TIFF parser.  An attacker could
create a carefully crafted document containing a malicious TIFF file that
could cause OpenOffice.org to crash or possibly execute arbitrary code if
opened by a victim. (CVE-2007-2834)

All users of OpenOffice.org are advised to upgrade to these updated
packages, which contain a backported fix to correct this issue.</description>
    <advisory from="secalert@redhat.com">
     <severity>Important</severity>
     <rights>Copyright 2007 Red Hat, Inc.</rights>
     <issued date="2007-09-18"/>
     <updated date="2007-10-01"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-2834" public="20070917">CVE-2007-2834</cve>
     <bugzilla href="https://bugzilla.redhat.com/251967" id="251967">CVE-2007-2834 openoffice.org TIFF parsing heap overflow</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
      <cpe>cpe:/a:redhat:rhel_productivity:5</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:5</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="openoffice.org is earlier than 0:1.1.2-40.2.0.EL3" test_ref="oval:com.redhat.rhsa:tst:20070848001"/>
       <criterion comment="openoffice.org is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060573006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-i18n is earlier than 0:1.1.2-40.2.0.EL3" test_ref="oval:com.redhat.rhsa:tst:20070848003"/>
       <criterion comment="openoffice.org-i18n is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060573002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-libs is earlier than 0:1.1.2-40.2.0.EL3" test_ref="oval:com.redhat.rhsa:tst:20070848005"/>
       <criterion comment="openoffice.org-libs is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060573004"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="openoffice.org-i18n is earlier than 0:1.1.5-10.6.0.2.EL4" test_ref="oval:com.redhat.rhsa:tst:20070848008"/>
       <criterion comment="openoffice.org-i18n is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060573002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org is earlier than 0:1.1.5-10.6.0.2.EL4" test_ref="oval:com.redhat.rhsa:tst:20070848009"/>
       <criterion comment="openoffice.org is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060573006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-libs is earlier than 0:1.1.5-10.6.0.2.EL4" test_ref="oval:com.redhat.rhsa:tst:20070848010"/>
       <criterion comment="openoffice.org-libs is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060573004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-kde is earlier than 0:1.1.5-10.6.0.2.EL4" test_ref="oval:com.redhat.rhsa:tst:20070848011"/>
       <criterion comment="openoffice.org-kde is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060573011"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-pyuno is earlier than 1:2.0.4-5.7.0.2.0" test_ref="oval:com.redhat.rhsa:tst:20070848013"/>
       <criterion comment="openoffice.org2-pyuno is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406032"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-ca_ES is earlier than 1:2.0.4-5.7.0.2.0" test_ref="oval:com.redhat.rhsa:tst:20070848015"/>
       <criterion comment="openoffice.org2-langpack-ca_ES is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406030"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-core is earlier than 1:2.0.4-5.7.0.2.0" test_ref="oval:com.redhat.rhsa:tst:20070848017"/>
       <criterion comment="openoffice.org2-core is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406034"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-eu_ES is earlier than 1:2.0.4-5.7.0.2.0" test_ref="oval:com.redhat.rhsa:tst:20070848019"/>
       <criterion comment="openoffice.org2-langpack-eu_ES is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406036"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-zh_CN is earlier than 1:2.0.4-5.7.0.2.0" test_ref="oval:com.redhat.rhsa:tst:20070848021"/>
       <criterion comment="openoffice.org2-langpack-zh_CN is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406042"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-sl_SI is earlier than 1:2.0.4-5.7.0.2.0" test_ref="oval:com.redhat.rhsa:tst:20070848023"/>
       <criterion comment="openoffice.org2-langpack-sl_SI is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406046"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-el_GR is earlier than 1:2.0.4-5.7.0.2.0" test_ref="oval:com.redhat.rhsa:tst:20070848025"/>
       <criterion comment="openoffice.org2-langpack-el_GR is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406048"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-graphicfilter is earlier than 1:2.0.4-5.7.0.2.0" test_ref="oval:com.redhat.rhsa:tst:20070848027"/>
       <criterion comment="openoffice.org2-graphicfilter is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406040"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-hi_IN is earlier than 1:2.0.4-5.7.0.2.0" test_ref="oval:com.redhat.rhsa:tst:20070848029"/>
       <criterion comment="openoffice.org2-langpack-hi_IN is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406038"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-nl is earlier than 1:2.0.4-5.7.0.2.0" test_ref="oval:com.redhat.rhsa:tst:20070848031"/>
       <criterion comment="openoffice.org2-langpack-nl is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406044"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-calc is earlier than 1:2.0.4-5.7.0.2.0" test_ref="oval:com.redhat.rhsa:tst:20070848033"/>
       <criterion comment="openoffice.org2-calc is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406050"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-cs_CZ is earlier than 1:2.0.4-5.7.0.2.0" test_ref="oval:com.redhat.rhsa:tst:20070848035"/>
       <criterion comment="openoffice.org2-langpack-cs_CZ is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406054"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-sr_CS is earlier than 1:2.0.4-5.7.0.2.0" test_ref="oval:com.redhat.rhsa:tst:20070848037"/>
       <criterion comment="openoffice.org2-langpack-sr_CS is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406052"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-ar is earlier than 1:2.0.4-5.7.0.2.0" test_ref="oval:com.redhat.rhsa:tst:20070848039"/>
       <criterion comment="openoffice.org2-langpack-ar is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406058"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-ru is earlier than 1:2.0.4-5.7.0.2.0" test_ref="oval:com.redhat.rhsa:tst:20070848041"/>
       <criterion comment="openoffice.org2-langpack-ru is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406060"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-ms_MY is earlier than 1:2.0.4-5.7.0.2.0" test_ref="oval:com.redhat.rhsa:tst:20070848043"/>
       <criterion comment="openoffice.org2-langpack-ms_MY is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406056"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-gu_IN is earlier than 1:2.0.4-5.7.0.2.0" test_ref="oval:com.redhat.rhsa:tst:20070848045"/>
       <criterion comment="openoffice.org2-langpack-gu_IN is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406064"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-xsltfilter is earlier than 1:2.0.4-5.7.0.2.0" test_ref="oval:com.redhat.rhsa:tst:20070848047"/>
       <criterion comment="openoffice.org2-xsltfilter is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406062"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-he_IL is earlier than 1:2.0.4-5.7.0.2.0" test_ref="oval:com.redhat.rhsa:tst:20070848049"/>
       <criterion comment="openoffice.org2-langpack-he_IL is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406066"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-math is earlier than 1:2.0.4-5.7.0.2.0" test_ref="oval:com.redhat.rhsa:tst:20070848051"/>
       <criterion comment="openoffice.org2-math is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406070"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-writer is earlier than 1:2.0.4-5.7.0.2.0" test_ref="oval:com.redhat.rhsa:tst:20070848053"/>
       <criterion comment="openoffice.org2-writer is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406074"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-ja_JP is earlier than 1:2.0.4-5.7.0.2.0" test_ref="oval:com.redhat.rhsa:tst:20070848055"/>
       <criterion comment="openoffice.org2-langpack-ja_JP is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406076"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-cy_GB is earlier than 1:2.0.4-5.7.0.2.0" test_ref="oval:com.redhat.rhsa:tst:20070848057"/>
       <criterion comment="openoffice.org2-langpack-cy_GB is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406072"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-bn is earlier than 1:2.0.4-5.7.0.2.0" test_ref="oval:com.redhat.rhsa:tst:20070848059"/>
       <criterion comment="openoffice.org2-langpack-bn is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406068"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-da_DK is earlier than 1:2.0.4-5.7.0.2.0" test_ref="oval:com.redhat.rhsa:tst:20070848061"/>
       <criterion comment="openoffice.org2-langpack-da_DK is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406100"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-zh_TW is earlier than 1:2.0.4-5.7.0.2.0" test_ref="oval:com.redhat.rhsa:tst:20070848063"/>
       <criterion comment="openoffice.org2-langpack-zh_TW is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406084"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-lt_LT is earlier than 1:2.0.4-5.7.0.2.0" test_ref="oval:com.redhat.rhsa:tst:20070848065"/>
       <criterion comment="openoffice.org2-langpack-lt_LT is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406086"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-hr_HR is earlier than 1:2.0.4-5.7.0.2.0" test_ref="oval:com.redhat.rhsa:tst:20070848067"/>
       <criterion comment="openoffice.org2-langpack-hr_HR is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406080"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-sk_SK is earlier than 1:2.0.4-5.7.0.2.0" test_ref="oval:com.redhat.rhsa:tst:20070848069"/>
       <criterion comment="openoffice.org2-langpack-sk_SK is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406078"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-pl_PL is earlier than 1:2.0.4-5.7.0.2.0" test_ref="oval:com.redhat.rhsa:tst:20070848071"/>
       <criterion comment="openoffice.org2-langpack-pl_PL is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406082"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-it is earlier than 1:2.0.4-5.7.0.2.0" test_ref="oval:com.redhat.rhsa:tst:20070848073"/>
       <criterion comment="openoffice.org2-langpack-it is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406094"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-base is earlier than 1:2.0.4-5.7.0.2.0" test_ref="oval:com.redhat.rhsa:tst:20070848075"/>
       <criterion comment="openoffice.org2-base is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406102"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-impress is earlier than 1:2.0.4-5.7.0.2.0" test_ref="oval:com.redhat.rhsa:tst:20070848077"/>
       <criterion comment="openoffice.org2-impress is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406088"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-es is earlier than 1:2.0.4-5.7.0.2.0" test_ref="oval:com.redhat.rhsa:tst:20070848079"/>
       <criterion comment="openoffice.org2-langpack-es is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406104"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-ta_IN is earlier than 1:2.0.4-5.7.0.2.0" test_ref="oval:com.redhat.rhsa:tst:20070848081"/>
       <criterion comment="openoffice.org2-langpack-ta_IN is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406098"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-pa_IN is earlier than 1:2.0.4-5.7.0.2.0" test_ref="oval:com.redhat.rhsa:tst:20070848083"/>
       <criterion comment="openoffice.org2-langpack-pa_IN is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406096"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-ko_KR is earlier than 1:2.0.4-5.7.0.2.0" test_ref="oval:com.redhat.rhsa:tst:20070848085"/>
       <criterion comment="openoffice.org2-langpack-ko_KR is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406090"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-emailmerge is earlier than 1:2.0.4-5.7.0.2.0" test_ref="oval:com.redhat.rhsa:tst:20070848087"/>
       <criterion comment="openoffice.org2-emailmerge is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406106"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-nb_NO is earlier than 1:2.0.4-5.7.0.2.0" test_ref="oval:com.redhat.rhsa:tst:20070848089"/>
       <criterion comment="openoffice.org2-langpack-nb_NO is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406092"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-af_ZA is earlier than 1:2.0.4-5.7.0.2.0" test_ref="oval:com.redhat.rhsa:tst:20070848091"/>
       <criterion comment="openoffice.org2-langpack-af_ZA is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406110"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-ga_IE is earlier than 1:2.0.4-5.7.0.2.0" test_ref="oval:com.redhat.rhsa:tst:20070848093"/>
       <criterion comment="openoffice.org2-langpack-ga_IE is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406114"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-gl_ES is earlier than 1:2.0.4-5.7.0.2.0" test_ref="oval:com.redhat.rhsa:tst:20070848095"/>
       <criterion comment="openoffice.org2-langpack-gl_ES is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406118"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-zu_ZA is earlier than 1:2.0.4-5.7.0.2.0" test_ref="oval:com.redhat.rhsa:tst:20070848097"/>
       <criterion comment="openoffice.org2-langpack-zu_ZA is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406112"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-sv is earlier than 1:2.0.4-5.7.0.2.0" test_ref="oval:com.redhat.rhsa:tst:20070848099"/>
       <criterion comment="openoffice.org2-langpack-sv is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406120"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-pt_BR is earlier than 1:2.0.4-5.7.0.2.0" test_ref="oval:com.redhat.rhsa:tst:20070848101"/>
       <criterion comment="openoffice.org2-langpack-pt_BR is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406108"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-testtools is earlier than 1:2.0.4-5.7.0.2.0" test_ref="oval:com.redhat.rhsa:tst:20070848103"/>
       <criterion comment="openoffice.org2-testtools is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406116"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-javafilter is earlier than 1:2.0.4-5.7.0.2.0" test_ref="oval:com.redhat.rhsa:tst:20070848105"/>
       <criterion comment="openoffice.org2-javafilter is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406128"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-draw is earlier than 1:2.0.4-5.7.0.2.0" test_ref="oval:com.redhat.rhsa:tst:20070848107"/>
       <criterion comment="openoffice.org2-draw is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406122"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-fr is earlier than 1:2.0.4-5.7.0.2.0" test_ref="oval:com.redhat.rhsa:tst:20070848109"/>
       <criterion comment="openoffice.org2-langpack-fr is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406124"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-nn_NO is earlier than 1:2.0.4-5.7.0.2.0" test_ref="oval:com.redhat.rhsa:tst:20070848111"/>
       <criterion comment="openoffice.org2-langpack-nn_NO is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406126"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-et_EE is earlier than 1:2.0.4-5.7.0.2.0" test_ref="oval:com.redhat.rhsa:tst:20070848113"/>
       <criterion comment="openoffice.org2-langpack-et_EE is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406018"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-de is earlier than 1:2.0.4-5.7.0.2.0" test_ref="oval:com.redhat.rhsa:tst:20070848115"/>
       <criterion comment="openoffice.org2-langpack-de is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406016"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-fi_FI is earlier than 1:2.0.4-5.7.0.2.0" test_ref="oval:com.redhat.rhsa:tst:20070848117"/>
       <criterion comment="openoffice.org2-langpack-fi_FI is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406024"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-bg_BG is earlier than 1:2.0.4-5.7.0.2.0" test_ref="oval:com.redhat.rhsa:tst:20070848119"/>
       <criterion comment="openoffice.org2-langpack-bg_BG is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406014"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-tr_TR is earlier than 1:2.0.4-5.7.0.2.0" test_ref="oval:com.redhat.rhsa:tst:20070848121"/>
       <criterion comment="openoffice.org2-langpack-tr_TR is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406022"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-th_TH is earlier than 1:2.0.4-5.7.0.2.0" test_ref="oval:com.redhat.rhsa:tst:20070848123"/>
       <criterion comment="openoffice.org2-langpack-th_TH is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406028"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-pt_PT is earlier than 1:2.0.4-5.7.0.2.0" test_ref="oval:com.redhat.rhsa:tst:20070848125"/>
       <criterion comment="openoffice.org2-langpack-pt_PT is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406020"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-hu_HU is earlier than 1:2.0.4-5.7.0.2.0" test_ref="oval:com.redhat.rhsa:tst:20070848127"/>
       <criterion comment="openoffice.org2-langpack-hu_HU is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406026"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 5 is installed" test_ref="oval:com.redhat.rhsa:tst:20070066013"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-fr is earlier than 1:2.0.4-5.4.17.3" test_ref="oval:com.redhat.rhsa:tst:20070848130"/>
       <criterion comment="openoffice.org-langpack-fr is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406175"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-hu_HU is earlier than 1:2.0.4-5.4.17.3" test_ref="oval:com.redhat.rhsa:tst:20070848132"/>
       <criterion comment="openoffice.org-langpack-hu_HU is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406161"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-hr_HR is earlier than 1:2.0.4-5.4.17.3" test_ref="oval:com.redhat.rhsa:tst:20070848134"/>
       <criterion comment="openoffice.org-langpack-hr_HR is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406163"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-ca_ES is earlier than 1:2.0.4-5.4.17.3" test_ref="oval:com.redhat.rhsa:tst:20070848136"/>
       <criterion comment="openoffice.org-langpack-ca_ES is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406165"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-math is earlier than 1:2.0.4-5.4.17.3" test_ref="oval:com.redhat.rhsa:tst:20070848138"/>
       <criterion comment="openoffice.org-math is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406167"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-ms_MY is earlier than 1:2.0.4-5.4.17.3" test_ref="oval:com.redhat.rhsa:tst:20070848140"/>
       <criterion comment="openoffice.org-langpack-ms_MY is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406171"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-gu_IN is earlier than 1:2.0.4-5.4.17.3" test_ref="oval:com.redhat.rhsa:tst:20070848142"/>
       <criterion comment="openoffice.org-langpack-gu_IN is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406169"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-ko_KR is earlier than 1:2.0.4-5.4.17.3" test_ref="oval:com.redhat.rhsa:tst:20070848144"/>
       <criterion comment="openoffice.org-langpack-ko_KR is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406173"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-xsltfilter is earlier than 1:2.0.4-5.4.17.3" test_ref="oval:com.redhat.rhsa:tst:20070848146"/>
       <criterion comment="openoffice.org-xsltfilter is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406179"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-cy_GB is earlier than 1:2.0.4-5.4.17.3" test_ref="oval:com.redhat.rhsa:tst:20070848148"/>
       <criterion comment="openoffice.org-langpack-cy_GB is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406177"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-te_IN is earlier than 1:2.0.4-5.4.17.3" test_ref="oval:com.redhat.rhsa:tst:20070848150"/>
       <criterion comment="openoffice.org-langpack-te_IN is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406195"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-base is earlier than 1:2.0.4-5.4.17.3" test_ref="oval:com.redhat.rhsa:tst:20070848152"/>
       <criterion comment="openoffice.org-base is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406181"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-lt_LT is earlier than 1:2.0.4-5.4.17.3" test_ref="oval:com.redhat.rhsa:tst:20070848154"/>
       <criterion comment="openoffice.org-langpack-lt_LT is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406185"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-nso_ZA is earlier than 1:2.0.4-5.4.17.3" test_ref="oval:com.redhat.rhsa:tst:20070848156"/>
       <criterion comment="openoffice.org-langpack-nso_ZA is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406187"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-xh_ZA is earlier than 1:2.0.4-5.4.17.3" test_ref="oval:com.redhat.rhsa:tst:20070848158"/>
       <criterion comment="openoffice.org-langpack-xh_ZA is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406183"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-ja_JP is earlier than 1:2.0.4-5.4.17.3" test_ref="oval:com.redhat.rhsa:tst:20070848160"/>
       <criterion comment="openoffice.org-langpack-ja_JP is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406189"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-tn_ZA is earlier than 1:2.0.4-5.4.17.3" test_ref="oval:com.redhat.rhsa:tst:20070848162"/>
       <criterion comment="openoffice.org-langpack-tn_ZA is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406191"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-mr_IN is earlier than 1:2.0.4-5.4.17.3" test_ref="oval:com.redhat.rhsa:tst:20070848164"/>
       <criterion comment="openoffice.org-langpack-mr_IN is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406193"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-et_EE is earlier than 1:2.0.4-5.4.17.3" test_ref="oval:com.redhat.rhsa:tst:20070848166"/>
       <criterion comment="openoffice.org-langpack-et_EE is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406199"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-emailmerge is earlier than 1:2.0.4-5.4.17.3" test_ref="oval:com.redhat.rhsa:tst:20070848168"/>
       <criterion comment="openoffice.org-emailmerge is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406201"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-it is earlier than 1:2.0.4-5.4.17.3" test_ref="oval:com.redhat.rhsa:tst:20070848170"/>
       <criterion comment="openoffice.org-langpack-it is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406197"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-pa_IN is earlier than 1:2.0.4-5.4.17.3" test_ref="oval:com.redhat.rhsa:tst:20070848172"/>
       <criterion comment="openoffice.org-langpack-pa_IN is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406215"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-pt_PT is earlier than 1:2.0.4-5.4.17.3" test_ref="oval:com.redhat.rhsa:tst:20070848174"/>
       <criterion comment="openoffice.org-langpack-pt_PT is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406203"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-draw is earlier than 1:2.0.4-5.4.17.3" test_ref="oval:com.redhat.rhsa:tst:20070848176"/>
       <criterion comment="openoffice.org-draw is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406205"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-nl is earlier than 1:2.0.4-5.4.17.3" test_ref="oval:com.redhat.rhsa:tst:20070848178"/>
       <criterion comment="openoffice.org-langpack-nl is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406207"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-zu_ZA is earlier than 1:2.0.4-5.4.17.3" test_ref="oval:com.redhat.rhsa:tst:20070848180"/>
       <criterion comment="openoffice.org-langpack-zu_ZA is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406209"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-bn is earlier than 1:2.0.4-5.4.17.3" test_ref="oval:com.redhat.rhsa:tst:20070848182"/>
       <criterion comment="openoffice.org-langpack-bn is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406211"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-as_IN is earlier than 1:2.0.4-5.4.17.3" test_ref="oval:com.redhat.rhsa:tst:20070848184"/>
       <criterion comment="openoffice.org-langpack-as_IN is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406213"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-ar is earlier than 1:2.0.4-5.4.17.3" test_ref="oval:com.redhat.rhsa:tst:20070848186"/>
       <criterion comment="openoffice.org-langpack-ar is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406217"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-zh_TW is earlier than 1:2.0.4-5.4.17.3" test_ref="oval:com.redhat.rhsa:tst:20070848188"/>
       <criterion comment="openoffice.org-langpack-zh_TW is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406219"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-de is earlier than 1:2.0.4-5.4.17.3" test_ref="oval:com.redhat.rhsa:tst:20070848190"/>
       <criterion comment="openoffice.org-langpack-de is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406221"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-pl_PL is earlier than 1:2.0.4-5.4.17.3" test_ref="oval:com.redhat.rhsa:tst:20070848192"/>
       <criterion comment="openoffice.org-langpack-pl_PL is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406223"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-nn_NO is earlier than 1:2.0.4-5.4.17.3" test_ref="oval:com.redhat.rhsa:tst:20070848194"/>
       <criterion comment="openoffice.org-langpack-nn_NO is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406225"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-ta_IN is earlier than 1:2.0.4-5.4.17.3" test_ref="oval:com.redhat.rhsa:tst:20070848196"/>
       <criterion comment="openoffice.org-langpack-ta_IN is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406227"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-da_DK is earlier than 1:2.0.4-5.4.17.3" test_ref="oval:com.redhat.rhsa:tst:20070848198"/>
       <criterion comment="openoffice.org-langpack-da_DK is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406229"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-ml_IN is earlier than 1:2.0.4-5.4.17.3" test_ref="oval:com.redhat.rhsa:tst:20070848200"/>
       <criterion comment="openoffice.org-langpack-ml_IN is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406231"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-sr_CS is earlier than 1:2.0.4-5.4.17.3" test_ref="oval:com.redhat.rhsa:tst:20070848202"/>
       <criterion comment="openoffice.org-langpack-sr_CS is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406233"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-th_TH is earlier than 1:2.0.4-5.4.17.3" test_ref="oval:com.redhat.rhsa:tst:20070848204"/>
       <criterion comment="openoffice.org-langpack-th_TH is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406235"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-or_IN is earlier than 1:2.0.4-5.4.17.3" test_ref="oval:com.redhat.rhsa:tst:20070848206"/>
       <criterion comment="openoffice.org-langpack-or_IN is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406251"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-bg_BG is earlier than 1:2.0.4-5.4.17.3" test_ref="oval:com.redhat.rhsa:tst:20070848208"/>
       <criterion comment="openoffice.org-langpack-bg_BG is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406241"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-pyuno is earlier than 1:2.0.4-5.4.17.3" test_ref="oval:com.redhat.rhsa:tst:20070848210"/>
       <criterion comment="openoffice.org-pyuno is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406239"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-he_IL is earlier than 1:2.0.4-5.4.17.3" test_ref="oval:com.redhat.rhsa:tst:20070848212"/>
       <criterion comment="openoffice.org-langpack-he_IL is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406243"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-el_GR is earlier than 1:2.0.4-5.4.17.3" test_ref="oval:com.redhat.rhsa:tst:20070848214"/>
       <criterion comment="openoffice.org-langpack-el_GR is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406245"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-af_ZA is earlier than 1:2.0.4-5.4.17.3" test_ref="oval:com.redhat.rhsa:tst:20070848216"/>
       <criterion comment="openoffice.org-langpack-af_ZA is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406247"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-core is earlier than 1:2.0.4-5.4.17.3" test_ref="oval:com.redhat.rhsa:tst:20070848218"/>
       <criterion comment="openoffice.org-core is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406249"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-ur is earlier than 1:2.0.4-5.4.17.3" test_ref="oval:com.redhat.rhsa:tst:20070848220"/>
       <criterion comment="openoffice.org-langpack-ur is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406237"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-eu_ES is earlier than 1:2.0.4-5.4.17.3" test_ref="oval:com.redhat.rhsa:tst:20070848222"/>
       <criterion comment="openoffice.org-langpack-eu_ES is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406257"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-ts_ZA is earlier than 1:2.0.4-5.4.17.3" test_ref="oval:com.redhat.rhsa:tst:20070848224"/>
       <criterion comment="openoffice.org-langpack-ts_ZA is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406253"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-fi_FI is earlier than 1:2.0.4-5.4.17.3" test_ref="oval:com.redhat.rhsa:tst:20070848226"/>
       <criterion comment="openoffice.org-langpack-fi_FI is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406255"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-es is earlier than 1:2.0.4-5.4.17.3" test_ref="oval:com.redhat.rhsa:tst:20070848228"/>
       <criterion comment="openoffice.org-langpack-es is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406259"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-impress is earlier than 1:2.0.4-5.4.17.3" test_ref="oval:com.redhat.rhsa:tst:20070848230"/>
       <criterion comment="openoffice.org-impress is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406261"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-sv is earlier than 1:2.0.4-5.4.17.3" test_ref="oval:com.redhat.rhsa:tst:20070848232"/>
       <criterion comment="openoffice.org-langpack-sv is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406263"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-kn_IN is earlier than 1:2.0.4-5.4.17.3" test_ref="oval:com.redhat.rhsa:tst:20070848234"/>
       <criterion comment="openoffice.org-langpack-kn_IN is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406271"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-calc is earlier than 1:2.0.4-5.4.17.3" test_ref="oval:com.redhat.rhsa:tst:20070848236"/>
       <criterion comment="openoffice.org-calc is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406265"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-st_ZA is earlier than 1:2.0.4-5.4.17.3" test_ref="oval:com.redhat.rhsa:tst:20070848238"/>
       <criterion comment="openoffice.org-langpack-st_ZA is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406273"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-sl_SI is earlier than 1:2.0.4-5.4.17.3" test_ref="oval:com.redhat.rhsa:tst:20070848240"/>
       <criterion comment="openoffice.org-langpack-sl_SI is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406267"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-javafilter is earlier than 1:2.0.4-5.4.17.3" test_ref="oval:com.redhat.rhsa:tst:20070848242"/>
       <criterion comment="openoffice.org-javafilter is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406269"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-ru is earlier than 1:2.0.4-5.4.17.3" test_ref="oval:com.redhat.rhsa:tst:20070848244"/>
       <criterion comment="openoffice.org-langpack-ru is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406275"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-sk_SK is earlier than 1:2.0.4-5.4.17.3" test_ref="oval:com.redhat.rhsa:tst:20070848246"/>
       <criterion comment="openoffice.org-langpack-sk_SK is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406131"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-pt_BR is earlier than 1:2.0.4-5.4.17.3" test_ref="oval:com.redhat.rhsa:tst:20070848248"/>
       <criterion comment="openoffice.org-langpack-pt_BR is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406133"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-hi_IN is earlier than 1:2.0.4-5.4.17.3" test_ref="oval:com.redhat.rhsa:tst:20070848250"/>
       <criterion comment="openoffice.org-langpack-hi_IN is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406135"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-cs_CZ is earlier than 1:2.0.4-5.4.17.3" test_ref="oval:com.redhat.rhsa:tst:20070848252"/>
       <criterion comment="openoffice.org-langpack-cs_CZ is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406137"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-nr_ZA is earlier than 1:2.0.4-5.4.17.3" test_ref="oval:com.redhat.rhsa:tst:20070848254"/>
       <criterion comment="openoffice.org-langpack-nr_ZA is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406139"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-ve_ZA is earlier than 1:2.0.4-5.4.17.3" test_ref="oval:com.redhat.rhsa:tst:20070848256"/>
       <criterion comment="openoffice.org-langpack-ve_ZA is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406141"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-graphicfilter is earlier than 1:2.0.4-5.4.17.3" test_ref="oval:com.redhat.rhsa:tst:20070848258"/>
       <criterion comment="openoffice.org-graphicfilter is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406143"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-tr_TR is earlier than 1:2.0.4-5.4.17.3" test_ref="oval:com.redhat.rhsa:tst:20070848260"/>
       <criterion comment="openoffice.org-langpack-tr_TR is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406145"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-writer is earlier than 1:2.0.4-5.4.17.3" test_ref="oval:com.redhat.rhsa:tst:20070848262"/>
       <criterion comment="openoffice.org-writer is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406147"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-nb_NO is earlier than 1:2.0.4-5.4.17.3" test_ref="oval:com.redhat.rhsa:tst:20070848264"/>
       <criterion comment="openoffice.org-langpack-nb_NO is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406149"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-ss_ZA is earlier than 1:2.0.4-5.4.17.3" test_ref="oval:com.redhat.rhsa:tst:20070848266"/>
       <criterion comment="openoffice.org-langpack-ss_ZA is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406151"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-gl_ES is earlier than 1:2.0.4-5.4.17.3" test_ref="oval:com.redhat.rhsa:tst:20070848268"/>
       <criterion comment="openoffice.org-langpack-gl_ES is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406153"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-zh_CN is earlier than 1:2.0.4-5.4.17.3" test_ref="oval:com.redhat.rhsa:tst:20070848270"/>
       <criterion comment="openoffice.org-langpack-zh_CN is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406155"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-ga_IE is earlier than 1:2.0.4-5.4.17.3" test_ref="oval:com.redhat.rhsa:tst:20070848272"/>
       <criterion comment="openoffice.org-langpack-ga_IE is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406157"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-testtools is earlier than 1:2.0.4-5.4.17.3" test_ref="oval:com.redhat.rhsa:tst:20070848274"/>
       <criterion comment="openoffice.org-testtools is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406159"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20070873" version="632">
   <metadata>
    <title>RHSA-2007:0873: star security update (Moderate)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
     <platform>Red Hat Enterprise Linux 5</platform>
    </affected>
    <reference ref_id="RHSA-2007:0873" ref_url="https://access.redhat.com/errata/RHSA-2007:0873" source="RHSA"/>
    <reference ref_id="CVE-2007-4134" ref_url="https://access.redhat.com/security/cve/CVE-2007-4134" source="CVE"/>
    <description>Star is a tar-like archiver. It saves multiple files into a single tape or
disk archive, and can restore individual files from the archive. Star
includes multi-volume support, automatic archive format detection and ACL
support.

A path traversal flaw was discovered in the way star extracted archives. A
malicious user could create a tar archive that would cause star to write to
arbitrary files to which the user running star had write access.
(CVE-2007-4134)

Red Hat would like to thank Robert Buchholz for reporting this issue.

As well, this update adds the command line argument &quot;-..&quot; to the Red Hat
Enterprise Linux 3 version of star. This allows star to extract files
containing &quot;/../&quot; in their pathname.

Users of star should upgrade to this updated package, which contain
backported patches to correct these issues.</description>
    <advisory from="secalert@redhat.com">
     <severity>Moderate</severity>
     <rights>Copyright 2007 Red Hat, Inc.</rights>
     <issued date="2008-01-07"/>
     <updated date="2007-09-04"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-4134" public="20070821">CVE-2007-4134</cve>
     <bugzilla href="https://bugzilla.redhat.com/253856" id="253856">CVE-2007-4134 star directory traversal vulnerability</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:5</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criterion comment="star is earlier than 0:1.5a08-5" test_ref="oval:com.redhat.rhsa:tst:20070873001"/>
     <criterion comment="star is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070873002"/>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criterion comment="star is earlier than 0:1.5a25-8" test_ref="oval:com.redhat.rhsa:tst:20070873004"/>
     <criterion comment="star is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070873002"/>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 5 is installed" test_ref="oval:com.redhat.rhsa:tst:20070066013"/>
     <criterion comment="star is earlier than 0:1.5a75-2" test_ref="oval:com.redhat.rhsa:tst:20070873006"/>
     <criterion comment="star is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070873007"/>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20070878" version="640">
   <metadata>
    <title>RHSA-2007:0878: cyrus-sasl security update (Moderate)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
    </affected>
    <reference ref_id="RHSA-2007:0878" ref_url="https://access.redhat.com/errata/RHSA-2007:0878" source="RHSA"/>
    <reference ref_id="CVE-2006-1721" ref_url="https://access.redhat.com/security/cve/CVE-2006-1721" source="CVE"/>
    <description>The cyrus-sasl package contains the Cyrus implementation of SASL.
SASL is the Simple Authentication and Security Layer, a method for
adding authentication support to connection-based protocols.

A bug was found in cyrus-sasl's DIGEST-MD5 authentication mechanism. As
part of the DIGEST-MD5 authentication exchange, the client is expected to
send a specific set of information to the server. If one of these items
(the &quot;realm&quot;) was not sent or was malformed, it was possible for a remote
unauthenticated attacker to cause a denial of service (segmentation fault)
on the server. (CVE-2006-1721) 

Users of cyrus-sasl should upgrade to these updated packages, which contain a
backported patch to correct this issue.</description>
    <advisory from="secalert@redhat.com">
     <severity>Moderate</severity>
     <rights>Copyright 2008 Red Hat, Inc.</rights>
     <issued date="2007-09-04"/>
     <updated date="2008-03-20"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-1721" public="20050515">CVE-2006-1721</cve>
     <bugzilla href="https://bugzilla.redhat.com/252339" id="252339">CVE-2006-1721 cyrus-sasl digest-md5 DoS</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="AND">
    <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
    <criteria operator="OR">
     <criteria operator="AND">
      <criterion comment="cyrus-sasl-plain is earlier than 0:2.1.15-15" test_ref="oval:com.redhat.rhsa:tst:20070878001"/>
      <criterion comment="cyrus-sasl-plain is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070878002"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="cyrus-sasl-gssapi is earlier than 0:2.1.15-15" test_ref="oval:com.redhat.rhsa:tst:20070878003"/>
      <criterion comment="cyrus-sasl-gssapi is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070878004"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="cyrus-sasl-devel is earlier than 0:2.1.15-15" test_ref="oval:com.redhat.rhsa:tst:20070878005"/>
      <criterion comment="cyrus-sasl-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070878006"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="cyrus-sasl is earlier than 0:2.1.15-15" test_ref="oval:com.redhat.rhsa:tst:20070878007"/>
      <criterion comment="cyrus-sasl is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070878008"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="cyrus-sasl-md5 is earlier than 0:2.1.15-15" test_ref="oval:com.redhat.rhsa:tst:20070878009"/>
      <criterion comment="cyrus-sasl-md5 is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070878010"/>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20070883" version="632">
   <metadata>
    <title>RHSA-2007:0883: qt security update (Important)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
     <platform>Red Hat Enterprise Linux 5</platform>
    </affected>
    <reference ref_id="RHSA-2007:0883" ref_url="https://access.redhat.com/errata/RHSA-2007:0883" source="RHSA"/>
    <reference ref_id="CVE-2007-0242" ref_url="https://access.redhat.com/security/cve/CVE-2007-0242" source="CVE"/>
    <reference ref_id="CVE-2007-4137" ref_url="https://access.redhat.com/security/cve/CVE-2007-4137" source="CVE"/>
    <description>Qt is a software toolkit that simplifies the task of writing and
maintaining GUI (Graphical User Interface) applications for the X Window
System.

A flaw was found in the way Qt expanded certain UTF8 characters. It was
possible to prevent a Qt-based application from properly sanitizing user
supplied input. This could, for example, result in a cross-site scripting
attack against the Konqueror web browser. (CVE-2007-0242)

A buffer overflow flaw was found in the way Qt expanded malformed Unicode
strings. If an application linked against Qt parsed a malicious Unicode
string, it could lead to a denial of service or possibly allow the
execution of arbitrary code. (CVE-2007-4137)

Users of Qt should upgrade to these updated packages, which contain a
backported patch to correct these issues.</description>
    <advisory from="secalert@redhat.com">
     <severity>Important</severity>
     <rights>Copyright 2007 Red Hat, Inc.</rights>
     <issued date="2008-01-07"/>
     <updated date="2007-09-13"/>
     <cve cvss2="4.3/AV:N/AC:M/Au:N/C:N/I:P/A:N" href="https://access.redhat.com/security/cve/CVE-2007-0242" impact="moderate" public="20070329">CVE-2007-0242</cve>
     <cve cwe="CWE-193" href="https://access.redhat.com/security/cve/CVE-2007-4137" public="20070903">CVE-2007-4137</cve>
     <bugzilla href="https://bugzilla.redhat.com/234633" id="234633">CVE-2007-0242 QT UTF8 improper character expansion</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/269001" id="269001">CVE-2007-4137 QT off by one buffer overflow</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:5</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="qt-devel is earlier than 1:3.1.2-17.RHEL3" test_ref="oval:com.redhat.rhsa:tst:20070883001"/>
       <criterion comment="qt-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060725004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="qt-designer is earlier than 1:3.1.2-17.RHEL3" test_ref="oval:com.redhat.rhsa:tst:20070883003"/>
       <criterion comment="qt-designer is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060725010"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="qt-ODBC is earlier than 1:3.1.2-17.RHEL3" test_ref="oval:com.redhat.rhsa:tst:20070883005"/>
       <criterion comment="qt-ODBC is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060725012"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="qt is earlier than 1:3.1.2-17.RHEL3" test_ref="oval:com.redhat.rhsa:tst:20070883007"/>
       <criterion comment="qt is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060725002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="qt-config is earlier than 1:3.1.2-17.RHEL3" test_ref="oval:com.redhat.rhsa:tst:20070883009"/>
       <criterion comment="qt-config is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060725006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="qt-MySQL is earlier than 1:3.1.2-17.RHEL3" test_ref="oval:com.redhat.rhsa:tst:20070883011"/>
       <criterion comment="qt-MySQL is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060725008"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="qt-MySQL is earlier than 1:3.3.3-13.RHEL4" test_ref="oval:com.redhat.rhsa:tst:20070883014"/>
       <criterion comment="qt-MySQL is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060725008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="qt-ODBC is earlier than 1:3.3.3-13.RHEL4" test_ref="oval:com.redhat.rhsa:tst:20070883015"/>
       <criterion comment="qt-ODBC is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060725012"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="qt-designer is earlier than 1:3.3.3-13.RHEL4" test_ref="oval:com.redhat.rhsa:tst:20070883016"/>
       <criterion comment="qt-designer is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060725010"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="qt-config is earlier than 1:3.3.3-13.RHEL4" test_ref="oval:com.redhat.rhsa:tst:20070883017"/>
       <criterion comment="qt-config is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060725006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="qt is earlier than 1:3.3.3-13.RHEL4" test_ref="oval:com.redhat.rhsa:tst:20070883018"/>
       <criterion comment="qt is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060725002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="qt-PostgreSQL is earlier than 1:3.3.3-13.RHEL4" test_ref="oval:com.redhat.rhsa:tst:20070883019"/>
       <criterion comment="qt-PostgreSQL is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060725021"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="qt-devel is earlier than 1:3.3.3-13.RHEL4" test_ref="oval:com.redhat.rhsa:tst:20070883021"/>
       <criterion comment="qt-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060725004"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 5 is installed" test_ref="oval:com.redhat.rhsa:tst:20070066013"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="qt-designer is earlier than 1:3.3.6-23.el5" test_ref="oval:com.redhat.rhsa:tst:20070883023"/>
       <criterion comment="qt-designer is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070721032"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="qt-ODBC is earlier than 1:3.3.6-23.el5" test_ref="oval:com.redhat.rhsa:tst:20070883025"/>
       <criterion comment="qt-ODBC is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070721036"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="qt-MySQL is earlier than 1:3.3.6-23.el5" test_ref="oval:com.redhat.rhsa:tst:20070883027"/>
       <criterion comment="qt-MySQL is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070721038"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="qt-devel-docs is earlier than 1:3.3.6-23.el5" test_ref="oval:com.redhat.rhsa:tst:20070883029"/>
       <criterion comment="qt-devel-docs is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070721028"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="qt-config is earlier than 1:3.3.6-23.el5" test_ref="oval:com.redhat.rhsa:tst:20070883031"/>
       <criterion comment="qt-config is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070721030"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="qt is earlier than 1:3.3.6-23.el5" test_ref="oval:com.redhat.rhsa:tst:20070883033"/>
       <criterion comment="qt is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070721034"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="qt-devel is earlier than 1:3.3.6-23.el5" test_ref="oval:com.redhat.rhsa:tst:20070883035"/>
       <criterion comment="qt-devel is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070721026"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="qt-PostgreSQL is earlier than 1:3.3.6-23.el5" test_ref="oval:com.redhat.rhsa:tst:20070883037"/>
       <criterion comment="qt-PostgreSQL is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070721024"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20070889" version="635">
   <metadata>
    <title>RHSA-2007:0889: php security update (Moderate)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
    </affected>
    <reference ref_id="RHSA-2007:0889" ref_url="https://access.redhat.com/errata/RHSA-2007:0889" source="RHSA"/>
    <reference ref_id="CVE-2007-2509" ref_url="https://access.redhat.com/security/cve/CVE-2007-2509" source="CVE"/>
    <reference ref_id="CVE-2007-2756" ref_url="https://access.redhat.com/security/cve/CVE-2007-2756" source="CVE"/>
    <reference ref_id="CVE-2007-2872" ref_url="https://access.redhat.com/security/cve/CVE-2007-2872" source="CVE"/>
    <reference ref_id="CVE-2007-3799" ref_url="https://access.redhat.com/security/cve/CVE-2007-3799" source="CVE"/>
    <reference ref_id="CVE-2007-3996" ref_url="https://access.redhat.com/security/cve/CVE-2007-3996" source="CVE"/>
    <reference ref_id="CVE-2007-3998" ref_url="https://access.redhat.com/security/cve/CVE-2007-3998" source="CVE"/>
    <reference ref_id="CVE-2007-4658" ref_url="https://access.redhat.com/security/cve/CVE-2007-4658" source="CVE"/>
    <reference ref_id="CVE-2007-4670" ref_url="https://access.redhat.com/security/cve/CVE-2007-4670" source="CVE"/>
    <description>PHP is an HTML-embedded scripting language commonly used with the Apache
HTTP Web server.

These updated packages address the following vulnerabilities:

Various integer overflow flaws were found in the PHP gd extension script
that could be forced to resize images from an untrusted source, possibly
allowing a remote attacker to execute arbitrary code as the apache
user. (CVE-2007-3996)

An integer overflow flaw was found in the PHP chunk_split function. If a
remote attacker was able to pass arbitrary data to the third argument of
chunk_split they could possibly execute arbitrary code as the apache user.
Note that it is unusual for a PHP script to use the chunk_split function
with a user-supplied third argument. (CVE-2007-2872)

A previous security update introduced a bug into PHP session cookie
handling. This could allow an attacker to stop a victim from viewing a
vulnerable web site if the victim has first visited a malicious web page
under the control of the attacker, and that page can set a cookie for the
vulnerable web site. (CVE-2007-4670)

A flaw was found in the PHP money_format function. If a remote attacker
was able to pass arbitrary data to the money_format function this could
possibly result in an information leak or denial of service. Note that it
is unusual for a PHP script to pass user-supplied data to the money_format
function. (CVE-2007-4658)

A flaw was found in the PHP wordwrap function. If a remote attacker was
able to pass arbitrary data to the wordwrap function this could possibly
result in a denial of service. (CVE-2007-3998)

A bug was found in PHP session cookie handling. This could allow an
attacker to create a cross-site cookie insertion attack if a victim follows
an untrusted carefully-crafted URL. (CVE-2007-3799)

An infinite-loop flaw was discovered in the PHP gd extension. A script
that could be forced to process PNG images from an untrusted source could
allow a remote attacker to cause a denial of service. (CVE-2007-2756)

A flaw was found in the PHP &quot;ftp&quot; extension. If a PHP script used this
extension to provide access to a private FTP server, and passed untrusted
script input directly to any function provided by this extension, a remote
attacker would be able to send arbitrary FTP commands to the server.
(CVE-2007-2509)

Users of PHP should upgrade to these updated packages, which contain
backported patches to correct these issues.</description>
    <advisory from="secalert@redhat.com">
     <severity>Moderate</severity>
     <rights>Copyright 2007 Red Hat, Inc.</rights>
     <issued date="2007-09-26"/>
     <updated date="2007-09-26"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-2509" impact="low" public="20070503">CVE-2007-2509</cve>
     <cve cwe="CWE-835" href="https://access.redhat.com/security/cve/CVE-2007-2756" impact="low" public="20070516">CVE-2007-2756</cve>
     <cve cwe="CWE-190" href="https://access.redhat.com/security/cve/CVE-2007-2872" public="20070601">CVE-2007-2872</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-3799" impact="low" public="20070601">CVE-2007-3799</cve>
     <cve cwe="CWE-190" href="https://access.redhat.com/security/cve/CVE-2007-3996" public="20070830">CVE-2007-3996</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-3998" impact="low" public="20070830">CVE-2007-3998</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-4658" impact="low" public="20070830">CVE-2007-4658</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-4670" impact="low" public="20070830">CVE-2007-4670</cve>
     <bugzilla href="https://bugzilla.redhat.com/239014" id="239014">CVE-2007-2509 php CRLF injection</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/242032" id="242032">CVE-2007-2872 php chunk_split integer overflow</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/242033" id="242033">CVE-2007-2756 gd / php-gd ImageCreateFromPng infinite loop caused by truncated PNG</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/250726" id="250726">CVE-2007-3799 php cross-site cookie insertion</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/276081" id="276081">CVE-2007-3998 php floating point exception inside wordwrap</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/278011" id="278011">CVE-2007-4658 php money_format format string issue</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/278031" id="278031">CVE-2007-3996 php multiple integer overflows in gd</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/278041" id="278041">CVE-2007-4670 php malformed cookie handling</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="AND">
    <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
    <criteria operator="OR">
     <criteria operator="AND">
      <criterion comment="php-odbc is earlier than 0:4.3.2-43.ent" test_ref="oval:com.redhat.rhsa:tst:20070889001"/>
      <criterion comment="php-odbc is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276004"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="php-ldap is earlier than 0:4.3.2-43.ent" test_ref="oval:com.redhat.rhsa:tst:20070889003"/>
      <criterion comment="php-ldap is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276006"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="php-imap is earlier than 0:4.3.2-43.ent" test_ref="oval:com.redhat.rhsa:tst:20070889005"/>
      <criterion comment="php-imap is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276010"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="php-mysql is earlier than 0:4.3.2-43.ent" test_ref="oval:com.redhat.rhsa:tst:20070889007"/>
      <criterion comment="php-mysql is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276014"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="php is earlier than 0:4.3.2-43.ent" test_ref="oval:com.redhat.rhsa:tst:20070889009"/>
      <criterion comment="php is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276002"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="php-pgsql is earlier than 0:4.3.2-43.ent" test_ref="oval:com.redhat.rhsa:tst:20070889011"/>
      <criterion comment="php-pgsql is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276012"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="php-devel is earlier than 0:4.3.2-43.ent" test_ref="oval:com.redhat.rhsa:tst:20070889013"/>
      <criterion comment="php-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276008"/>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20070938" version="631">
   <metadata>
    <title>RHSA-2007:0938: kernel security update (Important)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
    </affected>
    <reference ref_id="RHSA-2007:0938" ref_url="https://access.redhat.com/errata/RHSA-2007:0938" source="RHSA"/>
    <reference ref_id="CVE-2007-4573" ref_url="https://access.redhat.com/security/cve/CVE-2007-4573" source="CVE"/>
    <description>The Linux kernel handles the basic functions of the operating system.

A flaw was found in ia32 emulation affecting users running 64-bit versions
of Red Hat Enterprise Linux on x86_64 architectures.  A local user could
use this flaw to gain elevated privileges. (CVE-2007-4573).   

Red Hat would like to thank Wojciech Purczynski for reporting this issue.

Red Hat Enterprise Linux 3 users are advised to upgrade to these packages,
which contain a backported patch to correct this issue.</description>
    <advisory from="secalert@redhat.com">
     <severity>Important</severity>
     <rights>Copyright 2007 Red Hat, Inc.</rights>
     <issued date="2007-09-27"/>
     <updated date="2007-11-28"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-4573" public="20070921">CVE-2007-4573</cve>
     <bugzilla href="https://bugzilla.redhat.com/294541" id="294541">CVE-2007-4573 x86_64 syscall vulnerability</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="AND">
    <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
    <criteria operator="OR">
     <criteria operator="AND">
      <criterion comment="kernel is earlier than 0:2.4.21-52.EL" test_ref="oval:com.redhat.rhsa:tst:20070938001"/>
      <criterion comment="kernel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060140010"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-52.EL" test_ref="oval:com.redhat.rhsa:tst:20070938003"/>
      <criterion comment="kernel-smp-unsupported is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060140004"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="kernel-unsupported is earlier than 0:2.4.21-52.EL" test_ref="oval:com.redhat.rhsa:tst:20070938005"/>
      <criterion comment="kernel-unsupported is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060140002"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="kernel-doc is earlier than 0:2.4.21-52.EL" test_ref="oval:com.redhat.rhsa:tst:20070938007"/>
      <criterion comment="kernel-doc is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060140006"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="kernel-source is earlier than 0:2.4.21-52.EL" test_ref="oval:com.redhat.rhsa:tst:20070938009"/>
      <criterion comment="kernel-source is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060140012"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="kernel-smp is earlier than 0:2.4.21-52.EL" test_ref="oval:com.redhat.rhsa:tst:20070938011"/>
      <criterion comment="kernel-smp is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060140008"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="kernel-hugemem is earlier than 0:2.4.21-52.EL" test_ref="oval:com.redhat.rhsa:tst:20070938013"/>
      <criterion comment="kernel-hugemem is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060140018"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="kernel-BOOT is earlier than 0:2.4.21-52.EL" test_ref="oval:com.redhat.rhsa:tst:20070938015"/>
      <criterion comment="kernel-BOOT is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060140016"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-52.EL" test_ref="oval:com.redhat.rhsa:tst:20070938017"/>
      <criterion comment="kernel-hugemem-unsupported is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060140014"/>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20070966" version="635">
   <metadata>
    <title>RHSA-2007:0966: perl security update (Important)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
     <platform>Red Hat Enterprise Linux 5</platform>
    </affected>
    <reference ref_id="RHSA-2007:0966" ref_url="https://access.redhat.com/errata/RHSA-2007:0966" source="RHSA"/>
    <reference ref_id="CVE-2007-5116" ref_url="https://access.redhat.com/security/cve/CVE-2007-5116" source="CVE"/>
    <description>Perl is a high-level programming language commonly used for system
administration utilities and Web programming.

A flaw was found in Perl's regular expression engine. Specially crafted
input to a regular expression can cause Perl to improperly allocate memory,
possibly resulting in arbitrary code running with the permissions of the
user running Perl. (CVE-2007-5116)

Users of Perl are advised to upgrade to these updated packages, which
contain a backported patch to resolve this issue.

Red Hat would like to thank Tavis Ormandy and Will Drewry for properly
disclosing this issue.</description>
    <advisory from="secalert@redhat.com">
     <severity>Important</severity>
     <rights>Copyright 2008 Red Hat, Inc.</rights>
     <issued date="2008-01-08"/>
     <updated date="2008-03-20"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-5116" public="20071105">CVE-2007-5116</cve>
     <bugzilla href="https://bugzilla.redhat.com/323571" id="323571">CVE-2007-5116 perl regular expression UTF parsing errors</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:5</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="perl-CPAN is earlier than 2:1.61-97.EL3" test_ref="oval:com.redhat.rhsa:tst:20070966001"/>
       <criterion comment="perl-CPAN is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070966002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="perl is earlier than 2:5.8.0-97.EL3" test_ref="oval:com.redhat.rhsa:tst:20070966003"/>
       <criterion comment="perl is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070966004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="perl-CGI is earlier than 2:2.89-97.EL3" test_ref="oval:com.redhat.rhsa:tst:20070966005"/>
       <criterion comment="perl-CGI is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070966006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="perl-DB_File is earlier than 2:1.806-97.EL3" test_ref="oval:com.redhat.rhsa:tst:20070966007"/>
       <criterion comment="perl-DB_File is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070966008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="perl-suidperl is earlier than 2:5.8.0-97.EL3" test_ref="oval:com.redhat.rhsa:tst:20070966009"/>
       <criterion comment="perl-suidperl is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070966010"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="perl-suidperl is earlier than 3:5.8.5-36.el4_5.2" test_ref="oval:com.redhat.rhsa:tst:20070966012"/>
       <criterion comment="perl-suidperl is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070966010"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="perl is earlier than 3:5.8.5-36.el4_5.2" test_ref="oval:com.redhat.rhsa:tst:20070966013"/>
       <criterion comment="perl is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070966004"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 5 is installed" test_ref="oval:com.redhat.rhsa:tst:20070066013"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="perl-suidperl is earlier than 4:5.8.8-10.el5_0.2" test_ref="oval:com.redhat.rhsa:tst:20070966015"/>
       <criterion comment="perl-suidperl is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070966016"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="perl is earlier than 4:5.8.8-10.el5_0.2" test_ref="oval:com.redhat.rhsa:tst:20070966017"/>
       <criterion comment="perl is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070966018"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20070969" version="635">
   <metadata>
    <title>RHSA-2007:0969: util-linux security update (Moderate)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
     <platform>Red Hat Enterprise Linux 5</platform>
    </affected>
    <reference ref_id="RHSA-2007:0969" ref_url="https://access.redhat.com/errata/RHSA-2007:0969" source="RHSA"/>
    <reference ref_id="CVE-2007-5191" ref_url="https://access.redhat.com/security/cve/CVE-2007-5191" source="CVE"/>
    <description>The util-linux package contains a large variety of low-level system
utilities that are necessary for a Linux system to function. 

A flaw was discovered in the way that the mount and umount utilities
used the setuid and setgid functions, which could lead to privileges being
dropped improperly.  A local user could use this flaw to run mount helper
applications such as, mount.nfs, with additional privileges (CVE-2007-5191).

Users are advised to update to these erratum packages which contain a
backported patch to correct this issue.</description>
    <advisory from="secalert@redhat.com">
     <severity>Moderate</severity>
     <rights>Copyright 2007 Red Hat, Inc.</rights>
     <issued date="2007-11-15"/>
     <updated date="2007-11-15"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-5191" public="20070920">CVE-2007-5191</cve>
     <bugzilla href="https://bugzilla.redhat.com/320041" id="320041">CVE-2007-5191 util-linux (u)mount doesn't drop privileges properly when calling helpers</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:5</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="util-linux is earlier than 0:2.11y-31.24" test_ref="oval:com.redhat.rhsa:tst:20070969001"/>
       <criterion comment="util-linux is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070969002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="losetup is earlier than 0:2.11y-31.24" test_ref="oval:com.redhat.rhsa:tst:20070969003"/>
       <criterion comment="losetup is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070969004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="mount is earlier than 0:2.11y-31.24" test_ref="oval:com.redhat.rhsa:tst:20070969005"/>
       <criterion comment="mount is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070969006"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criterion comment="util-linux is earlier than 0:2.12a-17.el4_6.1" test_ref="oval:com.redhat.rhsa:tst:20070969008"/>
     <criterion comment="util-linux is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070969002"/>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 5 is installed" test_ref="oval:com.redhat.rhsa:tst:20070066013"/>
     <criterion comment="util-linux is earlier than 0:2.13-0.45.el5_1.1" test_ref="oval:com.redhat.rhsa:tst:20070969010"/>
     <criterion comment="util-linux is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070969011"/>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20070980" version="632">
   <metadata>
    <title>RHSA-2007:0980: seamonkey security update (Critical)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
    </affected>
    <reference ref_id="RHSA-2007:0980" ref_url="https://access.redhat.com/errata/RHSA-2007:0980" source="RHSA"/>
    <reference ref_id="CVE-2007-1095" ref_url="https://access.redhat.com/security/cve/CVE-2007-1095" source="CVE"/>
    <reference ref_id="CVE-2007-2292" ref_url="https://access.redhat.com/security/cve/CVE-2007-2292" source="CVE"/>
    <reference ref_id="CVE-2007-3511" ref_url="https://access.redhat.com/security/cve/CVE-2007-3511" source="CVE"/>
    <reference ref_id="CVE-2007-3844" ref_url="https://access.redhat.com/security/cve/CVE-2007-3844" source="CVE"/>
    <reference ref_id="CVE-2007-5334" ref_url="https://access.redhat.com/security/cve/CVE-2007-5334" source="CVE"/>
    <reference ref_id="CVE-2007-5337" ref_url="https://access.redhat.com/security/cve/CVE-2007-5337" source="CVE"/>
    <reference ref_id="CVE-2007-5338" ref_url="https://access.redhat.com/security/cve/CVE-2007-5338" source="CVE"/>
    <reference ref_id="CVE-2007-5339" ref_url="https://access.redhat.com/security/cve/CVE-2007-5339" source="CVE"/>
    <reference ref_id="CVE-2007-5340" ref_url="https://access.redhat.com/security/cve/CVE-2007-5340" source="CVE"/>
    <description>SeaMonkey is an open source Web browser, advanced email and newsgroup
client, IRC chat client, and HTML editor.

Several flaws were found in the way in which SeaMonkey processed certain
malformed web content. A web page containing malicious content could cause
SeaMonkey to crash or potentially execute arbitrary code as the user
running SeaMonkey. (CVE-2007-5338, CVE-2007-5339, CVE-2007-5340)

Several flaws were found in the way in which SeaMonkey displayed malformed
web content. A web page containing specially-crafted content could
potentially trick a user into surrendering sensitive information. 
(CVE-2007-1095, CVE-2007-3844, CVE-2007-3511, CVE-2007-5334)

A flaw was found in the SeaMonkey sftp protocol handler. A malicious web
page could access data from a remote sftp site, possibly stealing sensitive
user data. (CVE-2007-5337)

A request-splitting flaw was found in the way in which SeaMonkey generates
a digest authentication request. If a user opened a specially-crafted URL,
it was possible to perform cross-site scripting attacks, web cache
poisoning, or other, similar exploits. (CVE-2007-2292)

Users of SeaMonkey are advised to upgrade to these erratum packages, which
contain backported patches that correct these issues.</description>
    <advisory from="secalert@redhat.com">
     <severity>Critical</severity>
     <rights>Copyright 2007 Red Hat, Inc.</rights>
     <issued date="2008-01-08"/>
     <updated date="2007-10-19"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-1095" impact="moderate" public="20070223">CVE-2007-1095</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-2292" impact="moderate" public="20070425">CVE-2007-2292</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-3511" impact="moderate" public="20070630">CVE-2007-3511</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-3844" impact="moderate" public="20070731">CVE-2007-3844</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-5334" impact="moderate" public="20071018">CVE-2007-5334</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-5337" impact="moderate" public="20071018">CVE-2007-5337</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-5338" public="20071018">CVE-2007-5338</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-5339" public="20071018">CVE-2007-5339</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-5340" public="20071018">CVE-2007-5340</cve>
     <bugzilla href="https://bugzilla.redhat.com/333991" id="333991">Mozilla products security update (CVE-2007-1095, CVE-2007-2292, CVE-2007-3511, CVE-2007-3844, CVE-2007-5334, CVE-2007-5337, CVE-2007-5338, CVE-2007-5339, CVE-2007-5340)</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.5.el3" test_ref="oval:com.redhat.rhsa:tst:20070980001"/>
       <criterion comment="seamonkey-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578014"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.5.el3" test_ref="oval:com.redhat.rhsa:tst:20070980003"/>
       <criterion comment="seamonkey-mail is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578020"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.5.el3" test_ref="oval:com.redhat.rhsa:tst:20070980005"/>
       <criterion comment="seamonkey-js-debugger is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.5.el3" test_ref="oval:com.redhat.rhsa:tst:20070980007"/>
       <criterion comment="seamonkey-dom-inspector is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.5.el3" test_ref="oval:com.redhat.rhsa:tst:20070980009"/>
       <criterion comment="seamonkey-nss is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578016"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.5.el3" test_ref="oval:com.redhat.rhsa:tst:20070980011"/>
       <criterion comment="seamonkey-chat is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey is earlier than 0:1.0.9-0.5.el3" test_ref="oval:com.redhat.rhsa:tst:20070980013"/>
       <criterion comment="seamonkey is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578018"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.5.el3" test_ref="oval:com.redhat.rhsa:tst:20070980015"/>
       <criterion comment="seamonkey-nspr-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.5.el3" test_ref="oval:com.redhat.rhsa:tst:20070980017"/>
       <criterion comment="seamonkey-nss-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578012"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.5.el3" test_ref="oval:com.redhat.rhsa:tst:20070980019"/>
       <criterion comment="seamonkey-nspr is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578010"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="seamonkey-devel is earlier than 0:1.0.9-6.el4" test_ref="oval:com.redhat.rhsa:tst:20070980022"/>
       <criterion comment="seamonkey-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578014"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-mail is earlier than 0:1.0.9-6.el4" test_ref="oval:com.redhat.rhsa:tst:20070980023"/>
       <criterion comment="seamonkey-mail is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578020"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey is earlier than 0:1.0.9-6.el4" test_ref="oval:com.redhat.rhsa:tst:20070980024"/>
       <criterion comment="seamonkey is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578018"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-6.el4" test_ref="oval:com.redhat.rhsa:tst:20070980025"/>
       <criterion comment="seamonkey-dom-inspector is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-chat is earlier than 0:1.0.9-6.el4" test_ref="oval:com.redhat.rhsa:tst:20070980026"/>
       <criterion comment="seamonkey-chat is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-6.el4" test_ref="oval:com.redhat.rhsa:tst:20070980027"/>
       <criterion comment="seamonkey-js-debugger is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578008"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20070992" version="633">
   <metadata>
    <title>RHSA-2007:0992: libpng security update (Moderate)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
     <platform>Red Hat Enterprise Linux 5</platform>
    </affected>
    <reference ref_id="RHSA-2007:0992" ref_url="https://access.redhat.com/errata/RHSA-2007:0992" source="RHSA"/>
    <reference ref_id="CVE-2007-5269" ref_url="https://access.redhat.com/security/cve/CVE-2007-5269" source="CVE"/>
    <description>The libpng package contains a library of functions for creating and
manipulating PNG (Portable Network Graphics) image format files.

Several flaws were discovered in the way libpng handled various PNG image
chunks.  An attacker could create a carefully crafted PNG image file in
such a way that it could cause an application linked with libpng to crash
when the file was manipulated. (CVE-2007-5269)

Users should update to these updated packages which contain a backported
patch to correct these issues.</description>
    <advisory from="secalert@redhat.com">
     <severity>Moderate</severity>
     <rights>Copyright 2007 Red Hat, Inc.</rights>
     <issued date="2008-01-08"/>
     <updated date="2007-10-23"/>
     <cve cwe="CWE-125" href="https://access.redhat.com/security/cve/CVE-2007-5269" public="20070911">CVE-2007-5269</cve>
     <bugzilla href="https://bugzilla.redhat.com/324771" id="324771">CVE-2007-5269 libpng DoS via multiple out-of-bounds reads</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:5</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="libpng-devel is earlier than 2:1.2.2-28" test_ref="oval:com.redhat.rhsa:tst:20070992001"/>
       <criterion comment="libpng-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070356002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="libpng is earlier than 2:1.2.2-28" test_ref="oval:com.redhat.rhsa:tst:20070992003"/>
       <criterion comment="libpng is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070356004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="libpng10-devel is earlier than 0:1.0.13-18" test_ref="oval:com.redhat.rhsa:tst:20070992005"/>
       <criterion comment="libpng10-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070356006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="libpng10 is earlier than 0:1.0.13-18" test_ref="oval:com.redhat.rhsa:tst:20070992007"/>
       <criterion comment="libpng10 is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070356008"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="libpng-devel is earlier than 2:1.2.7-3.el4_5.1" test_ref="oval:com.redhat.rhsa:tst:20070992010"/>
       <criterion comment="libpng-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070356002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="libpng is earlier than 2:1.2.7-3.el4_5.1" test_ref="oval:com.redhat.rhsa:tst:20070992011"/>
       <criterion comment="libpng is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070356004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="libpng10 is earlier than 0:1.0.16-3.el4_5.1" test_ref="oval:com.redhat.rhsa:tst:20070992012"/>
       <criterion comment="libpng10 is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070356008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="libpng10-devel is earlier than 0:1.0.16-3.el4_5.1" test_ref="oval:com.redhat.rhsa:tst:20070992013"/>
       <criterion comment="libpng10-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070356006"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 5 is installed" test_ref="oval:com.redhat.rhsa:tst:20070066013"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="libpng is earlier than 2:1.2.10-7.1.el5_0.1" test_ref="oval:com.redhat.rhsa:tst:20070992015"/>
       <criterion comment="libpng is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070356016"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="libpng-devel is earlier than 2:1.2.10-7.1.el5_0.1" test_ref="oval:com.redhat.rhsa:tst:20070992017"/>
       <criterion comment="libpng-devel is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070356018"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20071013" version="637">
   <metadata>
    <title>RHSA-2007:1013: samba security update (Critical)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
    </affected>
    <reference ref_id="RHSA-2007:1013" ref_url="https://access.redhat.com/errata/RHSA-2007:1013" source="RHSA"/>
    <reference ref_id="CVE-2007-4572" ref_url="https://access.redhat.com/security/cve/CVE-2007-4572" source="CVE"/>
    <reference ref_id="CVE-2007-5398" ref_url="https://access.redhat.com/security/cve/CVE-2007-5398" source="CVE"/>
    <description>Samba is a suite of programs used by machines to share files, printers, and
other information.

A buffer overflow flaw was found in the way Samba creates NetBIOS replies.
If a Samba server is configured to run as a WINS server, a remote
unauthenticated user could cause the Samba server to crash or execute
arbitrary code. (CVE-2007-5398)

A heap-based buffer overflow flaw was found in the way Samba authenticates
users. A remote unauthenticated user could trigger this flaw to cause the
Samba server to crash. Careful analysis of this flaw has determined that
arbitrary code execution is not possible, and under most circumstances will
not result in a crash of the Samba server. (CVE-2007-4572)

Red Hat would like to thank Alin Rad Pop of Secunia Research, and the Samba
developers for responsibly disclosing these issues.

Users of Samba are advised to ugprade to these updated packages, which
contain backported patches to resolve these issues.</description>
    <advisory from="secalert@redhat.com">
     <severity>Critical</severity>
     <rights>Copyright 2008 Red Hat, Inc.</rights>
     <issued date="2007-11-15"/>
     <updated date="2008-03-20"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-4572" impact="moderate" public="20071115:1400">CVE-2007-4572</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-5398" public="20071115:1400">CVE-2007-5398</cve>
     <bugzilla href="https://bugzilla.redhat.com/294631" id="294631">CVE-2007-4572 samba buffer overflow</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/358831" id="358831">CVE-2007-5398 Samba &quot;reply_netbios_packet()&quot; Buffer Overflow Vulnerability</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="AND">
    <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
    <criteria operator="OR">
     <criteria operator="AND">
      <criterion comment="samba is earlier than 0:3.0.9-1.3E.14.1" test_ref="oval:com.redhat.rhsa:tst:20071013001"/>
      <criterion comment="samba is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060591004"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="samba-common is earlier than 0:3.0.9-1.3E.14.1" test_ref="oval:com.redhat.rhsa:tst:20071013003"/>
      <criterion comment="samba-common is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060591002"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="samba-client is earlier than 0:3.0.9-1.3E.14.1" test_ref="oval:com.redhat.rhsa:tst:20071013005"/>
      <criterion comment="samba-client is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060591008"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="samba-swat is earlier than 0:3.0.9-1.3E.14.1" test_ref="oval:com.redhat.rhsa:tst:20071013007"/>
      <criterion comment="samba-swat is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060591006"/>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20071023" version="632">
   <metadata>
    <title>RHSA-2007:1023: cups security update (Important)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
    </affected>
    <reference ref_id="RHSA-2007:1023" ref_url="https://access.redhat.com/errata/RHSA-2007:1023" source="RHSA"/>
    <reference ref_id="CVE-2007-4045" ref_url="https://access.redhat.com/security/cve/CVE-2007-4045" source="CVE"/>
    <reference ref_id="CVE-2007-4351" ref_url="https://access.redhat.com/security/cve/CVE-2007-4351" source="CVE"/>
    <reference ref_id="CVE-2007-5393" ref_url="https://access.redhat.com/security/cve/CVE-2007-5393" source="CVE"/>
    <description>The Common UNIX Printing System (CUPS) provides a portable printing layer
for UNIX(R) operating systems.

Alin Rad Pop discovered a flaw in the handling of PDF files. An attacker
could create a malicious PDF file that would cause CUPS to crash or
potentially execute arbitrary code when printed. (CVE-2007-5393)

Alin Rad Pop discovered a flaw in in the way CUPS handles certain IPP tags.
A remote attacker who is able to connect to the IPP TCP port could send a
malicious request causing the CUPS daemon to crash. (CVE-2007-4351)

A flaw was found in the way CUPS handled SSL negotiation. A remote attacker
capable of connecting to the CUPS daemon could cause CUPS to crash.
(CVE-2007-4045)

All CUPS users are advised to upgrade to these updated packages, which
contain backported patches to resolve these issues.</description>
    <advisory from="secalert@redhat.com">
     <severity>Important</severity>
     <rights>Copyright 2007 Red Hat, Inc.</rights>
     <issued date="2007-11-07"/>
     <updated date="2007-11-07"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-4045" impact="low" public="20070720">CVE-2007-4045</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-4351" public="20071031">CVE-2007-4351</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-5393" public="20071107">CVE-2007-5393</cve>
     <bugzilla href="https://bugzilla.redhat.com/250161" id="250161">CVE-2007-4045 Incomplete fix for CVE-2007-0720 CUPS denial of service</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/345091" id="345091">CVE-2007-4351 cups boundary error</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/345121" id="345121">CVE-2007-5393 xpdf buffer overflow in CCITTFaxStream::lookChar()</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="AND">
    <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
    <criteria operator="OR">
     <criteria operator="AND">
      <criterion comment="cups-devel is earlier than 1:1.1.17-13.3.46" test_ref="oval:com.redhat.rhsa:tst:20071023001"/>
      <criterion comment="cups-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060163002"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="cups-libs is earlier than 1:1.1.17-13.3.46" test_ref="oval:com.redhat.rhsa:tst:20071023003"/>
      <criterion comment="cups-libs is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060163004"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="cups is earlier than 1:1.1.17-13.3.46" test_ref="oval:com.redhat.rhsa:tst:20071023005"/>
      <criterion comment="cups is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060163006"/>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20071028" version="635">
   <metadata>
    <title>RHSA-2007:1028: tetex security update (Important)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
    </affected>
    <reference ref_id="RHSA-2007:1028" ref_url="https://access.redhat.com/errata/RHSA-2007:1028" source="RHSA"/>
    <reference ref_id="CVE-2007-5393" ref_url="https://access.redhat.com/security/cve/CVE-2007-5393" source="CVE"/>
    <description>TeTeX is an implementation of TeX. TeX takes a text file and a set of
formatting commands as input, and creates a typesetter-independent DeVice
Independent (dvi) file as output.

Alin Rad Pop discovered a flaw in the handling of PDF files. An attacker
could create a malicious PDF file that would cause TeTeX to crash, or
potentially execute arbitrary code when opened. (CVE-2007-5393)

Users are advised to upgrade to these updated packages, which contain
backported patches to resolve these issues.</description>
    <advisory from="secalert@redhat.com">
     <severity>Important</severity>
     <rights>Copyright 2007 Red Hat, Inc.</rights>
     <issued date="2007-11-07"/>
     <updated date="2007-11-07"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-5393" public="20071107">CVE-2007-5393</cve>
     <bugzilla href="https://bugzilla.redhat.com/345121" id="345121">CVE-2007-5393 xpdf buffer overflow in CCITTFaxStream::lookChar()</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="AND">
    <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
    <criteria operator="OR">
     <criteria operator="AND">
      <criterion comment="tetex-xdvi is earlier than 0:1.0.7-67.11" test_ref="oval:com.redhat.rhsa:tst:20071028001"/>
      <criterion comment="tetex-xdvi is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060160004"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="tetex-dvips is earlier than 0:1.0.7-67.11" test_ref="oval:com.redhat.rhsa:tst:20071028003"/>
      <criterion comment="tetex-dvips is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060160008"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="tetex-fonts is earlier than 0:1.0.7-67.11" test_ref="oval:com.redhat.rhsa:tst:20071028005"/>
      <criterion comment="tetex-fonts is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060160012"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="tetex is earlier than 0:1.0.7-67.11" test_ref="oval:com.redhat.rhsa:tst:20071028007"/>
      <criterion comment="tetex is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060160002"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="tetex-afm is earlier than 0:1.0.7-67.11" test_ref="oval:com.redhat.rhsa:tst:20071028009"/>
      <criterion comment="tetex-afm is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060160010"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="tetex-latex is earlier than 0:1.0.7-67.11" test_ref="oval:com.redhat.rhsa:tst:20071028011"/>
      <criterion comment="tetex-latex is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060160006"/>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20071030" version="633">
   <metadata>
    <title>RHSA-2007:1030: xpdf security update (Important)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
    </affected>
    <reference ref_id="RHSA-2007:1030" ref_url="https://access.redhat.com/errata/RHSA-2007:1030" source="RHSA"/>
    <reference ref_id="CVE-2007-4033" ref_url="https://access.redhat.com/security/cve/CVE-2007-4033" source="CVE"/>
    <reference ref_id="CVE-2007-4352" ref_url="https://access.redhat.com/security/cve/CVE-2007-4352" source="CVE"/>
    <reference ref_id="CVE-2007-5392" ref_url="https://access.redhat.com/security/cve/CVE-2007-5392" source="CVE"/>
    <reference ref_id="CVE-2007-5393" ref_url="https://access.redhat.com/security/cve/CVE-2007-5393" source="CVE"/>
    <description>Xpdf is an X Window System-based viewer for Portable Document Format (PDF)
files.

Alin Rad Pop discovered several flaws in the handling of PDF files. An
attacker could create a malicious PDF file that would cause Xpdf to crash,
or potentially execute arbitrary code when opened.  
(CVE-2007-4352, CVE-2007-5392, CVE-2007-5393)

A flaw was found in the t1lib library, used in the handling of Type 1
fonts. An attacker could create a malicious file that would cause Xpdf to
crash, or potentially execute arbitrary code when opened. (CVE-2007-4033)

Users are advised to upgrade to these updated packages, which contain
backported patches to resolve these issues.</description>
    <advisory from="secalert@redhat.com">
     <severity>Important</severity>
     <rights>Copyright 2007 Red Hat, Inc.</rights>
     <issued date="2007-11-07"/>
     <updated date="2007-11-07"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-4033" impact="moderate" public="20070726">CVE-2007-4033</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-4352" public="20071107">CVE-2007-4352</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-5392" public="20071107">CVE-2007-5392</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-5393" public="20071107">CVE-2007-5393</cve>
     <bugzilla href="https://bugzilla.redhat.com/345101" id="345101">CVE-2007-4352 xpdf memory corruption in DCTStream::readProgressiveDataUnit()</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/345111" id="345111">CVE-2007-5392 xpdf buffer overflow in DCTStream::reset()</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/345121" id="345121">CVE-2007-5393 xpdf buffer overflow in CCITTFaxStream::lookChar()</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/352271" id="352271">CVE-2007-4033 t1lib font filename string overflow</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="AND">
    <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
    <criterion comment="xpdf is earlier than 1:2.02-11.el3" test_ref="oval:com.redhat.rhsa:tst:20071030001"/>
    <criterion comment="xpdf is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070735002"/>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20071045" version="633">
   <metadata>
    <title>RHSA-2007:1045: net-snmp security update (Moderate)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
     <platform>Red Hat Enterprise Linux 5</platform>
    </affected>
    <reference ref_id="RHSA-2007:1045" ref_url="https://access.redhat.com/errata/RHSA-2007:1045" source="RHSA"/>
    <reference ref_id="CVE-2007-5846" ref_url="https://access.redhat.com/security/cve/CVE-2007-5846" source="CVE"/>
    <description>Simple Network Management Protocol (SNMP) is a protocol used for network
management.

A flaw was discovered in the way net-snmp handled certain requests. A
remote attacker who can connect to the snmpd UDP port (161 by default)
could send a malicious packet causing snmpd to crash, resulting in a
denial of service. (CVE-2007-5846)

All users of net-snmp are advised to upgrade to these updated packages,
which contain a backported patch to resolve this issue.</description>
    <advisory from="secalert@redhat.com">
     <severity>Moderate</severity>
     <rights>Copyright 2007 Red Hat, Inc.</rights>
     <issued date="2007-11-15"/>
     <updated date="2007-11-15"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-5846" impact="important" public="20070504">CVE-2007-5846</cve>
     <bugzilla href="https://bugzilla.redhat.com/363631" id="363631">CVE-2007-5846 net-snmp remote DoS via udp packet</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:5</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="net-snmp-utils is earlier than 0:5.0.9-2.30E.23" test_ref="oval:com.redhat.rhsa:tst:20071045001"/>
       <criterion comment="net-snmp-utils is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20071045002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="net-snmp-devel is earlier than 0:5.0.9-2.30E.23" test_ref="oval:com.redhat.rhsa:tst:20071045003"/>
       <criterion comment="net-snmp-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20071045004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="net-snmp-libs is earlier than 0:5.0.9-2.30E.23" test_ref="oval:com.redhat.rhsa:tst:20071045005"/>
       <criterion comment="net-snmp-libs is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20071045006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="net-snmp-perl is earlier than 0:5.0.9-2.30E.23" test_ref="oval:com.redhat.rhsa:tst:20071045007"/>
       <criterion comment="net-snmp-perl is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20071045008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="net-snmp is earlier than 0:5.0.9-2.30E.23" test_ref="oval:com.redhat.rhsa:tst:20071045009"/>
       <criterion comment="net-snmp is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20071045010"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="net-snmp-utils is earlier than 0:5.1.2-11.el4_6.11.1" test_ref="oval:com.redhat.rhsa:tst:20071045012"/>
       <criterion comment="net-snmp-utils is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20071045002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="net-snmp-devel is earlier than 0:5.1.2-11.el4_6.11.1" test_ref="oval:com.redhat.rhsa:tst:20071045013"/>
       <criterion comment="net-snmp-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20071045004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="net-snmp-perl is earlier than 0:5.1.2-11.el4_6.11.1" test_ref="oval:com.redhat.rhsa:tst:20071045014"/>
       <criterion comment="net-snmp-perl is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20071045008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="net-snmp is earlier than 0:5.1.2-11.el4_6.11.1" test_ref="oval:com.redhat.rhsa:tst:20071045015"/>
       <criterion comment="net-snmp is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20071045010"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="net-snmp-libs is earlier than 0:5.1.2-11.el4_6.11.1" test_ref="oval:com.redhat.rhsa:tst:20071045016"/>
       <criterion comment="net-snmp-libs is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20071045006"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 5 is installed" test_ref="oval:com.redhat.rhsa:tst:20070066013"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="net-snmp-devel is earlier than 1:5.3.1-19.el5_1.1" test_ref="oval:com.redhat.rhsa:tst:20071045018"/>
       <criterion comment="net-snmp-devel is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20071045019"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="net-snmp-libs is earlier than 1:5.3.1-19.el5_1.1" test_ref="oval:com.redhat.rhsa:tst:20071045020"/>
       <criterion comment="net-snmp-libs is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20071045021"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="net-snmp is earlier than 1:5.3.1-19.el5_1.1" test_ref="oval:com.redhat.rhsa:tst:20071045022"/>
       <criterion comment="net-snmp is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20071045023"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="net-snmp-perl is earlier than 1:5.3.1-19.el5_1.1" test_ref="oval:com.redhat.rhsa:tst:20071045024"/>
       <criterion comment="net-snmp-perl is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20071045025"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="net-snmp-utils is earlier than 1:5.3.1-19.el5_1.1" test_ref="oval:com.redhat.rhsa:tst:20071045026"/>
       <criterion comment="net-snmp-utils is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20071045027"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20071049" version="638">
   <metadata>
    <title>RHSA-2007:1049: kernel security and bug fix update (Important)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
    </affected>
    <reference ref_id="RHSA-2007:1049" ref_url="https://access.redhat.com/errata/RHSA-2007:1049" source="RHSA"/>
    <reference ref_id="CVE-2006-4538" ref_url="https://access.redhat.com/security/cve/CVE-2006-4538" source="CVE"/>
    <reference ref_id="CVE-2007-2172" ref_url="https://access.redhat.com/security/cve/CVE-2007-2172" source="CVE"/>
    <reference ref_id="CVE-2007-3739" ref_url="https://access.redhat.com/security/cve/CVE-2007-3739" source="CVE"/>
    <reference ref_id="CVE-2007-3848" ref_url="https://access.redhat.com/security/cve/CVE-2007-3848" source="CVE"/>
    <reference ref_id="CVE-2007-4308" ref_url="https://access.redhat.com/security/cve/CVE-2007-4308" source="CVE"/>
    <description>The kernel packages contain the Linux kernel, the core of any Linux
operating system. 

A flaw was found in the handling of process death signals. This allowed a
local user to send arbitrary signals to the suid-process executed by that
user. A successful exploitation of this flaw depends on the structure of
the suid-program and its signal handling. (CVE-2007-3848, Important)

A flaw was found in the IPv4 forwarding base. This allowed a local user to
cause a denial of service. (CVE-2007-2172, Important) 

A flaw was found where a corrupted executable file could cause cross-region
memory mappings on Itanium systems. This allowed a local user to cause a
denial of service. (CVE-2006-4538, Moderate) 

A flaw was found in the stack expansion when using the hugetlb kernel on
PowerPC systems. This allowed a local user to cause a denial of service.
(CVE-2007-3739, Moderate) 

A flaw was found in the aacraid SCSI driver. This allowed a local user to
make ioctl calls to the driver that should be restricted to privileged
users. (CVE-2007-4308, Moderate) 

As well, these updated packages fix the following bug:

* a bug in the TCP header prediction code may have caused &quot;TCP: Treason
uncloaked!&quot; messages to be logged. In certain situations this may have lead
to TCP connections hanging or aborting.

Red Hat Enterprise Linux 3 users are advised to upgrade to these updated
packages, which contain backported patches to resolve these issues.</description>
    <advisory from="secalert@redhat.com">
     <severity>Important</severity>
     <rights>Copyright 2007 Red Hat, Inc.</rights>
     <issued date="2007-12-03"/>
     <updated date="2007-12-03"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-4538" impact="moderate" public="20060823">CVE-2006-4538</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-2172" public="20070326">CVE-2007-2172</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-3739" impact="moderate" public="20070831">CVE-2007-3739</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-3848" public="20070814">CVE-2007-3848</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-4308" impact="moderate" public="20070723">CVE-2007-4308</cve>
     <bugzilla href="https://bugzilla.redhat.com/249237" id="249237">IPV4 'Treason uncloaked' message - hints at a more general kernel/net bug</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/250429" id="250429">CVE-2007-2172 fib_semantics.c out of bounds access vulnerability</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/250972" id="250972">CVE-2007-3848 Privilege escalation via PR_SET_PDEATHSIG</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/252309" id="252309">CVE-2007-4308 kernel: Missing ioctl() permission checks in aacraid driver</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/289151" id="289151">CVE-2006-4538 kernel: Local DoS with corrupted ELF</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/294941" id="294941">CVE-2007-3739 LTC36188-Don't allow the stack to grow into hugetlb reserved regions</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="AND">
    <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
    <criteria operator="OR">
     <criteria operator="AND">
      <criterion comment="kernel is earlier than 0:2.4.21-53.EL" test_ref="oval:com.redhat.rhsa:tst:20071049001"/>
      <criterion comment="kernel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060140010"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="kernel-doc is earlier than 0:2.4.21-53.EL" test_ref="oval:com.redhat.rhsa:tst:20071049003"/>
      <criterion comment="kernel-doc is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060140006"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="kernel-unsupported is earlier than 0:2.4.21-53.EL" test_ref="oval:com.redhat.rhsa:tst:20071049005"/>
      <criterion comment="kernel-unsupported is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060140002"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="kernel-smp is earlier than 0:2.4.21-53.EL" test_ref="oval:com.redhat.rhsa:tst:20071049007"/>
      <criterion comment="kernel-smp is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060140008"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-53.EL" test_ref="oval:com.redhat.rhsa:tst:20071049009"/>
      <criterion comment="kernel-smp-unsupported is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060140004"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="kernel-source is earlier than 0:2.4.21-53.EL" test_ref="oval:com.redhat.rhsa:tst:20071049011"/>
      <criterion comment="kernel-source is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060140012"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-53.EL" test_ref="oval:com.redhat.rhsa:tst:20071049013"/>
      <criterion comment="kernel-hugemem-unsupported is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060140014"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="kernel-BOOT is earlier than 0:2.4.21-53.EL" test_ref="oval:com.redhat.rhsa:tst:20071049015"/>
      <criterion comment="kernel-BOOT is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060140016"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="kernel-hugemem is earlier than 0:2.4.21-53.EL" test_ref="oval:com.redhat.rhsa:tst:20071049017"/>
      <criterion comment="kernel-hugemem is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060140018"/>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20071063" version="634">
   <metadata>
    <title>RHSA-2007:1063: pcre security update (Important)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
    </affected>
    <reference ref_id="RHSA-2007:1063" ref_url="https://access.redhat.com/errata/RHSA-2007:1063" source="RHSA"/>
    <reference ref_id="CVE-2006-7228" ref_url="https://access.redhat.com/security/cve/CVE-2006-7228" source="CVE"/>
    <reference ref_id="CVE-2007-1660" ref_url="https://access.redhat.com/security/cve/CVE-2007-1660" source="CVE"/>
    <description>PCRE is a Perl-compatible regular expression library.

Flaws were discovered in the way PCRE handles certain malformed regular
expressions.  If an application linked against PCRE, such as Konqueror,
parsed a malicious regular expression, it may have been possible to run
arbitrary code as the user running the application. (CVE-2006-7228,
CVE-2007-1660)

Users of PCRE are advised to upgrade to these updated packages, which
contain backported patches to resolve these issues.

Red Hat would like to thank Ludwig Nussel for reporting these issues.</description>
    <advisory from="secalert@redhat.com">
     <severity>Important</severity>
     <rights>Copyright 2008 Red Hat, Inc.</rights>
     <issued date="2007-11-29"/>
     <updated date="2008-03-20"/>
     <cve cwe="CWE-190" href="https://access.redhat.com/security/cve/CVE-2006-7228" public="20071107">CVE-2006-7228</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-1660" public="20071105">CVE-2007-1660</cve>
     <bugzilla href="https://bugzilla.redhat.com/315881" id="315881">CVE-2007-1660 pcre regular expression flaws</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/383371" id="383371">CVE-2006-7228 pcre integer overflow</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="AND">
    <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
    <criteria operator="OR">
     <criteria operator="AND">
      <criterion comment="pcre is earlier than 0:3.9-10.4" test_ref="oval:com.redhat.rhsa:tst:20071063001"/>
      <criterion comment="pcre is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20071063002"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="pcre-devel is earlier than 0:3.9-10.4" test_ref="oval:com.redhat.rhsa:tst:20071063003"/>
      <criterion comment="pcre-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20071063004"/>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20071076" version="636">
   <metadata>
    <title>RHSA-2007:1076: python security update (Moderate)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
    </affected>
    <reference ref_id="RHSA-2007:1076" ref_url="https://access.redhat.com/errata/RHSA-2007:1076" source="RHSA"/>
    <reference ref_id="CVE-2006-7228" ref_url="https://access.redhat.com/security/cve/CVE-2006-7228" source="CVE"/>
    <reference ref_id="CVE-2007-2052" ref_url="https://access.redhat.com/security/cve/CVE-2007-2052" source="CVE"/>
    <reference ref_id="CVE-2007-4965" ref_url="https://access.redhat.com/security/cve/CVE-2007-4965" source="CVE"/>
    <description>Python is an interpreted, interactive, object-oriented programming
language.

An integer overflow flaw was discovered in the way Python's pcre module
handled certain regular expressions. If a Python application used the pcre
module to compile and execute untrusted regular expressions, it may be
possible to cause the application to crash, or allow arbitrary code
execution with the privileges of the Python interpreter. (CVE-2006-7228)

A flaw was discovered in the strxfrm() function of Python's locale module.
Strings generated by this function were not properly NULL-terminated. This
may possibly cause disclosure of data stored in the memory of a Python
application using this function. (CVE-2007-2052)

Multiple integer overflow flaws were discovered in Python's imageop module.
If an application written in Python used the imageop module to process
untrusted images, it could cause the application to crash, enter an
infinite loop, or possibly execute arbitrary code with the privileges of
the Python interpreter. (CVE-2007-4965)

Users of Python are advised to upgrade to these updated packages, which
contain backported patches to resolve these issues.</description>
    <advisory from="secalert@redhat.com">
     <severity>Moderate</severity>
     <rights>Copyright 2007 Red Hat, Inc.</rights>
     <issued date="2007-12-10"/>
     <updated date="2007-12-10"/>
     <cve cwe="CWE-190" href="https://access.redhat.com/security/cve/CVE-2006-7228" impact="important" public="20071107">CVE-2006-7228</cve>
     <cve cwe="CWE-193" href="https://access.redhat.com/security/cve/CVE-2007-2052" impact="low" public="20070402">CVE-2007-2052</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-4965" public="20070916">CVE-2007-4965</cve>
     <bugzilla href="https://bugzilla.redhat.com/235093" id="235093">CVE-2007-2052 python off-by-one locale.strxfrm() (possible memory disclosure)</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/295971" id="295971">CVE-2007-4965 python imageop module heap corruption</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/383371" id="383371">CVE-2006-7228 pcre integer overflow</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="python is earlier than 0:2.2.3-6.8" test_ref="oval:com.redhat.rhsa:tst:20071076001"/>
       <criterion comment="python is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060197006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="tkinter is earlier than 0:2.2.3-6.8" test_ref="oval:com.redhat.rhsa:tst:20071076003"/>
       <criterion comment="tkinter is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060197008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="python-tools is earlier than 0:2.2.3-6.8" test_ref="oval:com.redhat.rhsa:tst:20071076005"/>
       <criterion comment="python-tools is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060197002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="python-devel is earlier than 0:2.2.3-6.8" test_ref="oval:com.redhat.rhsa:tst:20071076007"/>
       <criterion comment="python-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060197004"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="tkinter is earlier than 0:2.3.4-14.4.el4_6.1" test_ref="oval:com.redhat.rhsa:tst:20071076010"/>
       <criterion comment="tkinter is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060197008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="python is earlier than 0:2.3.4-14.4.el4_6.1" test_ref="oval:com.redhat.rhsa:tst:20071076011"/>
       <criterion comment="python is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060197006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="python-tools is earlier than 0:2.3.4-14.4.el4_6.1" test_ref="oval:com.redhat.rhsa:tst:20071076012"/>
       <criterion comment="python-tools is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060197002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="python-devel is earlier than 0:2.3.4-14.4.el4_6.1" test_ref="oval:com.redhat.rhsa:tst:20071076013"/>
       <criterion comment="python-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060197004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="python-docs is earlier than 0:2.3.4-14.4.el4_6.1" test_ref="oval:com.redhat.rhsa:tst:20071076014"/>
       <criterion comment="python-docs is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060197012"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20071084" version="638">
   <metadata>
    <title>RHSA-2007:1084: seamonkey security update (Critical)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
    </affected>
    <reference ref_id="RHSA-2007:1084" ref_url="https://access.redhat.com/errata/RHSA-2007:1084" source="RHSA"/>
    <reference ref_id="CVE-2007-5947" ref_url="https://access.redhat.com/security/cve/CVE-2007-5947" source="CVE"/>
    <reference ref_id="CVE-2007-5959" ref_url="https://access.redhat.com/security/cve/CVE-2007-5959" source="CVE"/>
    <reference ref_id="CVE-2007-5960" ref_url="https://access.redhat.com/security/cve/CVE-2007-5960" source="CVE"/>
    <description>SeaMonkey is an open source Web browser, advanced email and newsgroup
client, IRC chat client, and HTML editor.

A cross-site scripting flaw was found in the way SeaMonkey handled the
jar: URI scheme. It was possible for a malicious website to leverage this
flaw and conduct a cross-site scripting attack against a user running
SeaMonkey. (CVE-2007-5947)

Several flaws were found in the way SeaMonkey processed certain malformed
web content. A webpage containing malicious content could cause SeaMonkey
to crash, or potentially execute arbitrary code as the user running
SeaMonkey. (CVE-2007-5959)

A race condition existed when Seamonkey set the &quot;window.location&quot; property
for a webpage. This flaw could allow a webpage to set an arbitrary Referer
header, which may lead to a Cross-site Request Forgery (CSRF) attack
against websites that rely only on the Referer header for protection.
(CVE-2007-5960)

Users of SeaMonkey are advised to upgrade to these updated packages, which
contain backported patches to resolve these issues.</description>
    <advisory from="secalert@redhat.com">
     <severity>Critical</severity>
     <rights>Copyright 2008 Red Hat, Inc.</rights>
     <issued date="2007-11-26"/>
     <updated date="2008-01-07"/>
     <cve cwe="CWE-79" href="https://access.redhat.com/security/cve/CVE-2007-5947" impact="moderate" public="20070208">CVE-2007-5947</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-5959" public="20071126">CVE-2007-5959</cve>
     <cve cwe="CWE-352" href="https://access.redhat.com/security/cve/CVE-2007-5960" impact="moderate" public="20071126">CVE-2007-5960</cve>
     <bugzilla href="https://bugzilla.redhat.com/394211" id="394211">CVE-2007-5947 Mozilla jar: protocol XSS</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/394241" id="394241">CVE-2007-5959 Multiple flaws in Firefox</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/394261" id="394261">CVE-2007-5960 Mozilla Cross-site Request Forgery flaw</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.7.el3" test_ref="oval:com.redhat.rhsa:tst:20071084001"/>
       <criterion comment="seamonkey-js-debugger is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.7.el3" test_ref="oval:com.redhat.rhsa:tst:20071084003"/>
       <criterion comment="seamonkey-chat is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.7.el3" test_ref="oval:com.redhat.rhsa:tst:20071084005"/>
       <criterion comment="seamonkey-nss is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578016"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey is earlier than 0:1.0.9-0.7.el3" test_ref="oval:com.redhat.rhsa:tst:20071084007"/>
       <criterion comment="seamonkey is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578018"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.7.el3" test_ref="oval:com.redhat.rhsa:tst:20071084009"/>
       <criterion comment="seamonkey-nspr-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.7.el3" test_ref="oval:com.redhat.rhsa:tst:20071084011"/>
       <criterion comment="seamonkey-mail is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578020"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.7.el3" test_ref="oval:com.redhat.rhsa:tst:20071084013"/>
       <criterion comment="seamonkey-nss-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578012"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.7.el3" test_ref="oval:com.redhat.rhsa:tst:20071084015"/>
       <criterion comment="seamonkey-dom-inspector is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.7.el3" test_ref="oval:com.redhat.rhsa:tst:20071084017"/>
       <criterion comment="seamonkey-nspr is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578010"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.7.el3" test_ref="oval:com.redhat.rhsa:tst:20071084019"/>
       <criterion comment="seamonkey-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578014"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="seamonkey is earlier than 0:1.0.9-7.el4" test_ref="oval:com.redhat.rhsa:tst:20071084022"/>
       <criterion comment="seamonkey is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578018"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-mail is earlier than 0:1.0.9-7.el4" test_ref="oval:com.redhat.rhsa:tst:20071084023"/>
       <criterion comment="seamonkey-mail is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578020"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-7.el4" test_ref="oval:com.redhat.rhsa:tst:20071084024"/>
       <criterion comment="seamonkey-js-debugger is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-chat is earlier than 0:1.0.9-7.el4" test_ref="oval:com.redhat.rhsa:tst:20071084025"/>
       <criterion comment="seamonkey-chat is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-7.el4" test_ref="oval:com.redhat.rhsa:tst:20071084026"/>
       <criterion comment="seamonkey-dom-inspector is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-devel is earlier than 0:1.0.9-7.el4" test_ref="oval:com.redhat.rhsa:tst:20071084027"/>
       <criterion comment="seamonkey-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578014"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20071114" version="635">
   <metadata>
    <title>RHSA-2007:1114: samba security and bug fix update (Critical)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
     <platform>Red Hat Enterprise Linux 5</platform>
    </affected>
    <reference ref_id="RHSA-2007:1114" ref_url="https://access.redhat.com/errata/RHSA-2007:1114" source="RHSA"/>
    <reference ref_id="CVE-2007-6015" ref_url="https://access.redhat.com/security/cve/CVE-2007-6015" source="CVE"/>
    <description>Samba is a suite of programs used by machines to share files, printers, and
other information.

A stack buffer overflow flaw was found in the way Samba authenticates
remote users. A remote unauthenticated user could trigger this flaw to
cause the Samba server to crash, or execute arbitrary code with the
permissions of the Samba server. (CVE-2007-6015)

Red Hat would like to thank Alin Rad Pop of Secunia Research for
responsibly disclosing this issue.

This update also fixes a regression caused by the fix for CVE-2007-4572,
which prevented some clients from being able to properly access shares.

Users of Samba are advised to upgrade to these updated packages, which
contain a backported patch to resolve these issues.</description>
    <advisory from="secalert@redhat.com">
     <severity>Critical</severity>
     <rights>Copyright 2008 Red Hat, Inc.</rights>
     <issued date="2007-12-10"/>
     <updated date="2008-03-20"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-6015" public="20071210:1500">CVE-2007-6015</cve>
     <bugzilla href="https://bugzilla.redhat.com/389021" id="389021">Critical Regression caused by CVE-2007-4572</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/396401" id="396401">CVE-2007-6015 samba: send_mailslot() buffer overflow</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/407071" id="407071">Critical Regression caused by CVE-2007-4572</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/407081" id="407081">Critical Regression caused by CVE-2007-4572</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:5</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="samba-swat is earlier than 0:3.0.9-1.3E.14.3" test_ref="oval:com.redhat.rhsa:tst:20071114001"/>
       <criterion comment="samba-swat is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060591006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="samba-common is earlier than 0:3.0.9-1.3E.14.3" test_ref="oval:com.redhat.rhsa:tst:20071114003"/>
       <criterion comment="samba-common is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060591002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="samba is earlier than 0:3.0.9-1.3E.14.3" test_ref="oval:com.redhat.rhsa:tst:20071114005"/>
       <criterion comment="samba is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060591004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="samba-client is earlier than 0:3.0.9-1.3E.14.3" test_ref="oval:com.redhat.rhsa:tst:20071114007"/>
       <criterion comment="samba-client is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060591008"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="samba-swat is earlier than 0:3.0.25b-1.el4_6.4" test_ref="oval:com.redhat.rhsa:tst:20071114010"/>
       <criterion comment="samba-swat is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060591006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="samba-client is earlier than 0:3.0.25b-1.el4_6.4" test_ref="oval:com.redhat.rhsa:tst:20071114011"/>
       <criterion comment="samba-client is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060591008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="samba-common is earlier than 0:3.0.25b-1.el4_6.4" test_ref="oval:com.redhat.rhsa:tst:20071114012"/>
       <criterion comment="samba-common is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060591002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="samba is earlier than 0:3.0.25b-1.el4_6.4" test_ref="oval:com.redhat.rhsa:tst:20071114013"/>
       <criterion comment="samba is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060591004"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 5 is installed" test_ref="oval:com.redhat.rhsa:tst:20070066013"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="samba-common is earlier than 0:3.0.25b-1.el5_1.4" test_ref="oval:com.redhat.rhsa:tst:20071114015"/>
       <criterion comment="samba-common is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070354016"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="samba-swat is earlier than 0:3.0.25b-1.el5_1.4" test_ref="oval:com.redhat.rhsa:tst:20071114017"/>
       <criterion comment="samba-swat is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070354020"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="samba-client is earlier than 0:3.0.25b-1.el5_1.4" test_ref="oval:com.redhat.rhsa:tst:20071114019"/>
       <criterion comment="samba-client is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070354018"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="samba is earlier than 0:3.0.25b-1.el5_1.4" test_ref="oval:com.redhat.rhsa:tst:20071114021"/>
       <criterion comment="samba is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070354022"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20071130" version="634">
   <metadata>
    <title>RHSA-2007:1130: squid security update (Moderate)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
     <platform>Red Hat Enterprise Linux 5</platform>
    </affected>
    <reference ref_id="RHSA-2007:1130" ref_url="https://access.redhat.com/errata/RHSA-2007:1130" source="RHSA"/>
    <reference ref_id="CVE-2007-6239" ref_url="https://access.redhat.com/security/cve/CVE-2007-6239" source="CVE"/>
    <description>Squid is a high-performance proxy caching server for Web clients,
supporting FTP, gopher, and HTTP data objects.

A flaw was found in the way squid stored HTTP headers for cached objects
in system memory. An attacker could cause squid to use additional memory,
and trigger high CPU usage when processing requests for certain cached
objects, possibly leading to a denial of service. (CVE-2007-6239)

Users of squid are advised to upgrade to these updated packages, which
contain a backported patch to resolve this issue.</description>
    <advisory from="secalert@redhat.com">
     <severity>Moderate</severity>
     <rights>Copyright 2007 Red Hat, Inc.</rights>
     <issued date="2007-12-18"/>
     <updated date="2007-12-18"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-6239" public="20071204">CVE-2007-6239</cve>
     <bugzilla href="https://bugzilla.redhat.com/410181" id="410181">CVE-2007-6239 squid: DoS in cache updates</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:5</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criterion comment="squid is earlier than 7:2.5.STABLE3-8.3E" test_ref="oval:com.redhat.rhsa:tst:20071130001"/>
     <criterion comment="squid is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060045002"/>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criterion comment="squid is earlier than 7:2.5.STABLE14-1.4E.el4_6.1" test_ref="oval:com.redhat.rhsa:tst:20071130004"/>
     <criterion comment="squid is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060045002"/>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 5 is installed" test_ref="oval:com.redhat.rhsa:tst:20070066013"/>
     <criterion comment="squid is earlier than 7:2.6.STABLE6-5.el5_1.2" test_ref="oval:com.redhat.rhsa:tst:20071130006"/>
     <criterion comment="squid is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20071130007"/>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20080003" version="635">
   <metadata>
    <title>RHSA-2008:0003: e2fsprogs security update (Moderate)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
     <platform>Red Hat Enterprise Linux 5</platform>
    </affected>
    <reference ref_id="RHSA-2008:0003" ref_url="https://access.redhat.com/errata/RHSA-2008:0003" source="RHSA"/>
    <reference ref_id="CVE-2007-5497" ref_url="https://access.redhat.com/security/cve/CVE-2007-5497" source="CVE"/>
    <description>The e2fsprogs packages contain a number of utilities for creating,
checking, modifying, and correcting any inconsistencies in second and third
extended (ext2/ext3) file systems.

Multiple integer overflow flaws were found in the way e2fsprogs processes
file system content. If a victim opens a carefully crafted file system with
a program using e2fsprogs, it may be possible to execute arbitrary code
with the permissions of the victim. It may be possible to leverage this
flaw in a virtualized environment to gain access to other virtualized
hosts. (CVE-2007-5497)

Red Hat would like to thank Rafal Wojtczuk of McAfee Avert Research for
responsibly disclosing these issues.

Users of e2fsprogs are advised to upgrade to these updated packages, which
contain a backported patch to resolve these issues.</description>
    <advisory from="secalert@redhat.com">
     <severity>Moderate</severity>
     <rights>Copyright 2008 Red Hat, Inc.</rights>
     <issued date="2008-01-07"/>
     <updated date="2008-01-28"/>
     <cve cwe="CWE-190" href="https://access.redhat.com/security/cve/CVE-2007-5497" public="20071205">CVE-2007-5497</cve>
     <bugzilla href="https://bugzilla.redhat.com/403441" id="403441">CVE-2007-5497 e2fsprogs multiple integer overflows</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:5</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="e2fsprogs is earlier than 0:1.32-15.4" test_ref="oval:com.redhat.rhsa:tst:20080003001"/>
       <criterion comment="e2fsprogs is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20080003002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="e2fsprogs-devel is earlier than 0:1.32-15.4" test_ref="oval:com.redhat.rhsa:tst:20080003003"/>
       <criterion comment="e2fsprogs-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20080003004"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="e2fsprogs is earlier than 0:1.35-12.11.el4_6.1" test_ref="oval:com.redhat.rhsa:tst:20080003006"/>
       <criterion comment="e2fsprogs is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20080003002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="e2fsprogs-devel is earlier than 0:1.35-12.11.el4_6.1" test_ref="oval:com.redhat.rhsa:tst:20080003007"/>
       <criterion comment="e2fsprogs-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20080003004"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 5 is installed" test_ref="oval:com.redhat.rhsa:tst:20070066013"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="e2fsprogs is earlier than 0:1.39-10.el5_1.1" test_ref="oval:com.redhat.rhsa:tst:20080003009"/>
       <criterion comment="e2fsprogs is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20080003010"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="e2fsprogs-libs is earlier than 0:1.39-10.el5_1.1" test_ref="oval:com.redhat.rhsa:tst:20080003011"/>
       <criterion comment="e2fsprogs-libs is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20080003012"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="e2fsprogs-devel is earlier than 0:1.39-10.el5_1.1" test_ref="oval:com.redhat.rhsa:tst:20080003013"/>
       <criterion comment="e2fsprogs-devel is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20080003014"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20080005" version="634">
   <metadata>
    <title>RHSA-2008:0005: httpd security update (Moderate)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
    </affected>
    <reference ref_id="RHSA-2008:0005" ref_url="https://access.redhat.com/errata/RHSA-2008:0005" source="RHSA"/>
    <reference ref_id="CVE-2007-3847" ref_url="https://access.redhat.com/security/cve/CVE-2007-3847" source="CVE"/>
    <reference ref_id="CVE-2007-4465" ref_url="https://access.redhat.com/security/cve/CVE-2007-4465" source="CVE"/>
    <reference ref_id="CVE-2007-5000" ref_url="https://access.redhat.com/security/cve/CVE-2007-5000" source="CVE"/>
    <reference ref_id="CVE-2007-6388" ref_url="https://access.redhat.com/security/cve/CVE-2007-6388" source="CVE"/>
    <reference ref_id="CVE-2008-0005" ref_url="https://access.redhat.com/security/cve/CVE-2008-0005" source="CVE"/>
    <description>The Apache HTTP Server is a popular Web server.

A flaw was found in the mod_imap module. On sites where mod_imap was
enabled and an imagemap file was publicly available, a cross-site scripting
attack was possible. (CVE-2007-5000)

A flaw was found in the mod_autoindex module. On sites where directory
listings are used, and the &quot;AddDefaultCharset&quot; directive has been removed
from the configuration, a cross-site scripting attack was possible against
Web browsers which did not correctly derive the response character set
following the rules in RFC 2616. (CVE-2007-4465)

A flaw was found in the mod_proxy module. On sites where a reverse proxy is
configured, a remote attacker could send a carefully crafted request that
would cause the Apache child process handling that request to crash. On
sites where a forward proxy is configured, an attacker could cause a
similar crash if a user could be persuaded to visit a malicious site using
the proxy. This could lead to a denial of service if using a threaded
Multi-Processing Module. (CVE-2007-3847) 

A flaw was found in the mod_status module. On sites where mod_status was
enabled and the status pages were publicly available, a cross-site
scripting attack was possible. (CVE-2007-6388)

A flaw was found in the mod_proxy_ftp module. On sites where mod_proxy_ftp
was enabled and a forward proxy was configured, a cross-site scripting
attack was possible against Web browsers which did not correctly derive the
response character set following the rules in RFC 2616. (CVE-2008-0005)

Users of Apache httpd should upgrade to these updated packages, which
contain backported patches to resolve these issues. Users should restart
httpd after installing this update.</description>
    <advisory from="secalert@redhat.com">
     <severity>Moderate</severity>
     <rights>Copyright 2008 Red Hat, Inc.</rights>
     <issued date="2008-01-15"/>
     <updated date="2008-03-20"/>
     <cve cwe="CWE-125" href="https://access.redhat.com/security/cve/CVE-2007-3847" public="20070801">CVE-2007-3847</cve>
     <cve cwe="CWE-79" href="https://access.redhat.com/security/cve/CVE-2007-4465" impact="low" public="20070913">CVE-2007-4465</cve>
     <cve cwe="CWE-79" href="https://access.redhat.com/security/cve/CVE-2007-5000" impact="low" public="20071211">CVE-2007-5000</cve>
     <cve cwe="CWE-79" href="https://access.redhat.com/security/cve/CVE-2007-6388" public="20071229">CVE-2007-6388</cve>
     <cve cwe="CWE-79" href="https://access.redhat.com/security/cve/CVE-2008-0005" impact="low" public="20080102">CVE-2008-0005</cve>
     <bugzilla href="https://bugzilla.redhat.com/250731" id="250731">CVE-2007-3847 httpd: out of bounds read</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/289511" id="289511">CVE-2007-4465 mod_autoindex XSS</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/419931" id="419931">CVE-2007-5000 httpd: mod_imagemap XSS</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/427228" id="427228">CVE-2007-6388 apache mod_status cross-site scripting</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/427739" id="427739">CVE-2008-0005 mod_proxy_ftp XSS</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="AND">
    <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
    <criteria operator="OR">
     <criteria operator="AND">
      <criterion comment="mod_ssl is earlier than 1:2.0.46-70.ent" test_ref="oval:com.redhat.rhsa:tst:20080005001"/>
      <criterion comment="mod_ssl is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060159002"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="httpd-devel is earlier than 0:2.0.46-70.ent" test_ref="oval:com.redhat.rhsa:tst:20080005003"/>
      <criterion comment="httpd-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060159004"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="httpd is earlier than 0:2.0.46-70.ent" test_ref="oval:com.redhat.rhsa:tst:20080005005"/>
      <criterion comment="httpd is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060159006"/>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20080029" version="639">
   <metadata>
    <title>RHSA-2008:0029: XFree86 security update (Important)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
    </affected>
    <reference ref_id="RHSA-2008:0029" ref_url="https://access.redhat.com/errata/RHSA-2008:0029" source="RHSA"/>
    <reference ref_id="CVE-2007-4568" ref_url="https://access.redhat.com/security/cve/CVE-2007-4568" source="CVE"/>
    <reference ref_id="CVE-2007-4990" ref_url="https://access.redhat.com/security/cve/CVE-2007-4990" source="CVE"/>
    <reference ref_id="CVE-2007-5958" ref_url="https://access.redhat.com/security/cve/CVE-2007-5958" source="CVE"/>
    <reference ref_id="CVE-2007-6427" ref_url="https://access.redhat.com/security/cve/CVE-2007-6427" source="CVE"/>
    <reference ref_id="CVE-2007-6428" ref_url="https://access.redhat.com/security/cve/CVE-2007-6428" source="CVE"/>
    <reference ref_id="CVE-2007-6429" ref_url="https://access.redhat.com/security/cve/CVE-2007-6429" source="CVE"/>
    <reference ref_id="CVE-2008-0006" ref_url="https://access.redhat.com/security/cve/CVE-2008-0006" source="CVE"/>
    <description>XFree86 is an implementation of the X Window System, which provides the
core functionality for the Linux graphical desktop.

Two integer overflow flaws were found in the XFree86 server's EVI and
MIT-SHM modules. A malicious authorized client could exploit these issues
to cause a denial of service (crash), or potentially execute arbitrary code
with root privileges on the XFree86 server. (CVE-2007-6429)

A heap based buffer overflow flaw was found in the way the XFree86 server
handled malformed font files. A malicious local user could exploit this
issue to potentially execute arbitrary code with the privileges of the
XFree86 server. (CVE-2008-0006)

A memory corruption flaw was found in the XFree86 server's XInput
extension. A malicious authorized client could exploit this issue to cause
a denial of service (crash), or potentially execute arbitrary code with
root privileges on the XFree86 server. (CVE-2007-6427)

An information disclosure flaw was found in the XFree86 server's TOG-CUP
extension. A malicious authorized client could exploit this issue to cause
a denial of service (crash), or potentially view arbitrary memory content
within the XFree86 server's address space. (CVE-2007-6428)

An integer and heap overflow flaw were found in the X.org font server, xfs.
A user with the ability to connect to the font server could have been able
to cause a denial of service (crash), or potentially execute arbitrary code
with the permissions of the font server. (CVE-2007-4568, CVE-2007-4990)

A flaw was found in the XFree86 server's XC-SECURITY extension, that could
have allowed a local user to verify the existence of an arbitrary file,
even in directories that are not normally accessible to that user.
(CVE-2007-5958)

Users of XFree86 are advised to upgrade to these updated packages, which
contain backported patches to resolve these issues.</description>
    <advisory from="secalert@redhat.com">
     <severity>Important</severity>
     <rights>Copyright 2008 Red Hat, Inc.</rights>
     <issued date="2008-01-18"/>
     <updated date="2008-03-20"/>
     <cve cwe="CWE-190" href="https://access.redhat.com/security/cve/CVE-2007-4568" impact="low" public="20071002">CVE-2007-4568</cve>
     <cve cwe="CWE-122" href="https://access.redhat.com/security/cve/CVE-2007-4990" impact="low" public="20071002">CVE-2007-4990</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-5958" impact="low" public="20080117">CVE-2007-5958</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-6427" public="20080117:1400">CVE-2007-6427</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-6428" impact="low" public="20080117:1400">CVE-2007-6428</cve>
     <cve cwe="CWE-190" href="https://access.redhat.com/security/cve/CVE-2007-6429" public="20080117:1400">CVE-2007-6429</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2008-0006" public="20080117">CVE-2008-0006</cve>
     <bugzilla href="https://bugzilla.redhat.com/281921" id="281921">CVE-2007-4568 xfs integer overflow in the build_range function</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/322961" id="322961">CVE-2007-4990 xfs heap overflow in the swap_char2b function</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/391841" id="391841">CVE-2007-5958 Xorg / XFree86 file existence disclosure vulnerability</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/413721" id="413721">CVE-2007-6429 xorg / xfree86: integer overflow in EVI extension</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/413741" id="413741">CVE-2007-6429 xorg / xfree86: integer overflow in MIT-SHM extension</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/413791" id="413791">CVE-2007-6428 xorg / xfree86: information disclosure via TOG-CUP extension</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/413811" id="413811">CVE-2007-6427 xorg / xfree86: memory corruption via XInput extension</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/428044" id="428044">CVE-2008-0006 Xorg / XFree86 PCF font parser buffer overflow</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="AND">
    <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
    <criteria operator="OR">
     <criteria operator="AND">
      <criterion comment="XFree86-sdk is earlier than 0:4.3.0-126.EL" test_ref="oval:com.redhat.rhsa:tst:20080029001"/>
      <criterion comment="XFree86-sdk is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635050"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-xdm is earlier than 0:4.3.0-126.EL" test_ref="oval:com.redhat.rhsa:tst:20080029003"/>
      <criterion comment="XFree86-xdm is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635022"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-xfs is earlier than 0:4.3.0-126.EL" test_ref="oval:com.redhat.rhsa:tst:20080029005"/>
      <criterion comment="XFree86-xfs is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635052"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-100dpi-fonts is earlier than 0:4.3.0-126.EL" test_ref="oval:com.redhat.rhsa:tst:20080029007"/>
      <criterion comment="XFree86-100dpi-fonts is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635048"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-font-utils is earlier than 0:4.3.0-126.EL" test_ref="oval:com.redhat.rhsa:tst:20080029009"/>
      <criterion comment="XFree86-font-utils is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635006"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-tools is earlier than 0:4.3.0-126.EL" test_ref="oval:com.redhat.rhsa:tst:20080029011"/>
      <criterion comment="XFree86-tools is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635032"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-Xvfb is earlier than 0:4.3.0-126.EL" test_ref="oval:com.redhat.rhsa:tst:20080029013"/>
      <criterion comment="XFree86-Xvfb is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635028"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-truetype-fonts is earlier than 0:4.3.0-126.EL" test_ref="oval:com.redhat.rhsa:tst:20080029015"/>
      <criterion comment="XFree86-truetype-fonts is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635020"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-ISO8859-9-100dpi-fonts is earlier than 0:4.3.0-126.EL" test_ref="oval:com.redhat.rhsa:tst:20080029017"/>
      <criterion comment="XFree86-ISO8859-9-100dpi-fonts is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635060"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-xauth is earlier than 0:4.3.0-126.EL" test_ref="oval:com.redhat.rhsa:tst:20080029019"/>
      <criterion comment="XFree86-xauth is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635018"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-ISO8859-14-100dpi-fonts is earlier than 0:4.3.0-126.EL" test_ref="oval:com.redhat.rhsa:tst:20080029021"/>
      <criterion comment="XFree86-ISO8859-14-100dpi-fonts is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635010"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-syriac-fonts is earlier than 0:4.3.0-126.EL" test_ref="oval:com.redhat.rhsa:tst:20080029023"/>
      <criterion comment="XFree86-syriac-fonts is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635024"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-base-fonts is earlier than 0:4.3.0-126.EL" test_ref="oval:com.redhat.rhsa:tst:20080029025"/>
      <criterion comment="XFree86-base-fonts is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635008"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-libs-data is earlier than 0:4.3.0-126.EL" test_ref="oval:com.redhat.rhsa:tst:20080029027"/>
      <criterion comment="XFree86-libs-data is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635054"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-ISO8859-2-75dpi-fonts is earlier than 0:4.3.0-126.EL" test_ref="oval:com.redhat.rhsa:tst:20080029029"/>
      <criterion comment="XFree86-ISO8859-2-75dpi-fonts is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635004"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-ISO8859-9-75dpi-fonts is earlier than 0:4.3.0-126.EL" test_ref="oval:com.redhat.rhsa:tst:20080029031"/>
      <criterion comment="XFree86-ISO8859-9-75dpi-fonts is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635012"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86 is earlier than 0:4.3.0-126.EL" test_ref="oval:com.redhat.rhsa:tst:20080029033"/>
      <criterion comment="XFree86 is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635030"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-twm is earlier than 0:4.3.0-126.EL" test_ref="oval:com.redhat.rhsa:tst:20080029035"/>
      <criterion comment="XFree86-twm is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635056"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-ISO8859-2-100dpi-fonts is earlier than 0:4.3.0-126.EL" test_ref="oval:com.redhat.rhsa:tst:20080029037"/>
      <criterion comment="XFree86-ISO8859-2-100dpi-fonts is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635016"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-cyrillic-fonts is earlier than 0:4.3.0-126.EL" test_ref="oval:com.redhat.rhsa:tst:20080029039"/>
      <criterion comment="XFree86-cyrillic-fonts is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635014"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-75dpi-fonts is earlier than 0:4.3.0-126.EL" test_ref="oval:com.redhat.rhsa:tst:20080029041"/>
      <criterion comment="XFree86-75dpi-fonts is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635026"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-Xnest is earlier than 0:4.3.0-126.EL" test_ref="oval:com.redhat.rhsa:tst:20080029043"/>
      <criterion comment="XFree86-Xnest is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635058"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-ISO8859-14-75dpi-fonts is earlier than 0:4.3.0-126.EL" test_ref="oval:com.redhat.rhsa:tst:20080029045"/>
      <criterion comment="XFree86-ISO8859-14-75dpi-fonts is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635034"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-doc is earlier than 0:4.3.0-126.EL" test_ref="oval:com.redhat.rhsa:tst:20080029047"/>
      <criterion comment="XFree86-doc is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635036"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-ISO8859-15-75dpi-fonts is earlier than 0:4.3.0-126.EL" test_ref="oval:com.redhat.rhsa:tst:20080029049"/>
      <criterion comment="XFree86-ISO8859-15-75dpi-fonts is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635040"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-devel is earlier than 0:4.3.0-126.EL" test_ref="oval:com.redhat.rhsa:tst:20080029051"/>
      <criterion comment="XFree86-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635038"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-Mesa-libGL is earlier than 0:4.3.0-126.EL" test_ref="oval:com.redhat.rhsa:tst:20080029053"/>
      <criterion comment="XFree86-Mesa-libGL is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635046"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-ISO8859-15-100dpi-fonts is earlier than 0:4.3.0-126.EL" test_ref="oval:com.redhat.rhsa:tst:20080029055"/>
      <criterion comment="XFree86-ISO8859-15-100dpi-fonts is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635044"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-Mesa-libGLU is earlier than 0:4.3.0-126.EL" test_ref="oval:com.redhat.rhsa:tst:20080029057"/>
      <criterion comment="XFree86-Mesa-libGLU is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635002"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-libs is earlier than 0:4.3.0-126.EL" test_ref="oval:com.redhat.rhsa:tst:20080029059"/>
      <criterion comment="XFree86-libs is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635042"/>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20080032" version="633">
   <metadata>
    <title>RHSA-2008:0032: libxml2 security update (Important)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
     <platform>Red Hat Enterprise Linux 5</platform>
    </affected>
    <reference ref_id="RHSA-2008:0032" ref_url="https://access.redhat.com/errata/RHSA-2008:0032" source="RHSA"/>
    <reference ref_id="CVE-2007-6284" ref_url="https://access.redhat.com/security/cve/CVE-2007-6284" source="CVE"/>
    <description>The libxml2 packages provide a library that allows you to manipulate XML
files. It includes support to read, modify, and write XML and HTML files.

A denial of service flaw was found in the way libxml2 processes certain
content. If an application linked against libxml2 processes malformed XML
content, it could cause the application to stop responding. (CVE-2007-6284)

Red Hat would like to thank the Google Security Team for responsibly
disclosing this issue.

All users are advised to upgrade to these updated packages, which contain a
backported patch to resolve this issue.</description>
    <advisory from="secalert@redhat.com">
     <severity>Important</severity>
     <rights>Copyright 2008 Red Hat, Inc.</rights>
     <issued date="2008-01-11"/>
     <updated date="2008-01-28"/>
     <cve cwe="CWE-835" href="https://access.redhat.com/security/cve/CVE-2007-6284" public="20080111">CVE-2007-6284</cve>
     <bugzilla href="https://bugzilla.redhat.com/425927" id="425927">CVE-2007-6284 libxml2: infinite loop in UTF-8 decoding</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:5</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="libxml2-devel is earlier than 0:2.5.10-8" test_ref="oval:com.redhat.rhsa:tst:20080032001"/>
       <criterion comment="libxml2-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20080032002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="libxml2-python is earlier than 0:2.5.10-8" test_ref="oval:com.redhat.rhsa:tst:20080032003"/>
       <criterion comment="libxml2-python is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20080032004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="libxml2 is earlier than 0:2.5.10-8" test_ref="oval:com.redhat.rhsa:tst:20080032005"/>
       <criterion comment="libxml2 is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20080032006"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="libxml2-devel is earlier than 0:2.6.16-10.1" test_ref="oval:com.redhat.rhsa:tst:20080032008"/>
       <criterion comment="libxml2-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20080032002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="libxml2 is earlier than 0:2.6.16-10.1" test_ref="oval:com.redhat.rhsa:tst:20080032009"/>
       <criterion comment="libxml2 is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20080032006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="libxml2-python is earlier than 0:2.6.16-10.1" test_ref="oval:com.redhat.rhsa:tst:20080032010"/>
       <criterion comment="libxml2-python is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20080032004"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 5 is installed" test_ref="oval:com.redhat.rhsa:tst:20070066013"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="libxml2-devel is earlier than 0:2.6.26-2.1.2.1" test_ref="oval:com.redhat.rhsa:tst:20080032012"/>
       <criterion comment="libxml2-devel is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20080032013"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="libxml2-python is earlier than 0:2.6.26-2.1.2.1" test_ref="oval:com.redhat.rhsa:tst:20080032014"/>
       <criterion comment="libxml2-python is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20080032015"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="libxml2 is earlier than 0:2.6.26-2.1.2.1" test_ref="oval:com.redhat.rhsa:tst:20080032016"/>
       <criterion comment="libxml2 is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20080032017"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20080039" version="634">
   <metadata>
    <title>RHSA-2008:0039: postgresql security update (Moderate)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
    </affected>
    <reference ref_id="RHSA-2008:0039" ref_url="https://access.redhat.com/errata/RHSA-2008:0039" source="RHSA"/>
    <reference ref_id="CVE-2007-3278" ref_url="https://access.redhat.com/security/cve/CVE-2007-3278" source="CVE"/>
    <reference ref_id="CVE-2007-6600" ref_url="https://access.redhat.com/security/cve/CVE-2007-6600" source="CVE"/>
    <reference ref_id="CVE-2007-6601" ref_url="https://access.redhat.com/security/cve/CVE-2007-6601" source="CVE"/>
    <description>PostgreSQL is an advanced Object-Relational database management system
(DBMS). The postgresql packages include the client programs and libraries
needed to access a PostgreSQL DBMS server.

A privilege escalation flaw was discovered in PostgreSQL. An authenticated
attacker could create an index function that would be executed with
administrator privileges during database maintenance tasks, such as
database vacuuming. (CVE-2007-6600)

A privilege escalation flaw was discovered in PostgreSQL's Database Link
library (dblink). An authenticated attacker could use dblink to possibly
escalate privileges on systems with &quot;trust&quot; or &quot;ident&quot; authentication
configured. Please note that dblink functionality is not enabled by
default, and can only by enabled by a database administrator on systems
with the postgresql-contrib package installed.
(CVE-2007-3278, CVE-2007-6601)

All postgresql users should upgrade to these updated packages, which
include PostgreSQL 7.3.21 and resolve these issues.</description>
    <advisory from="secalert@redhat.com">
     <severity>Moderate</severity>
     <rights>Copyright 2008 Red Hat, Inc.</rights>
     <issued date="2008-01-11"/>
     <updated date="2008-01-28"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-3278" impact="none" public="20070616">CVE-2007-3278</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-6600" public="20080107">CVE-2007-6600</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-6601" public="20080107">CVE-2007-6601</cve>
     <bugzilla href="https://bugzilla.redhat.com/309141" id="309141">CVE-2007-3278 dblink allows proxying of database connections via 127.0.0.1</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/427127" id="427127">CVE-2007-6600 PostgreSQL privilege escalation</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/427128" id="427128">CVE-2007-6601 PostgreSQL privilege escalation via dblink</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="AND">
    <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
    <criteria operator="OR">
     <criteria operator="AND">
      <criterion comment="rh-postgresql-jdbc is earlier than 0:7.3.21-1" test_ref="oval:com.redhat.rhsa:tst:20080039001"/>
      <criterion comment="rh-postgresql-jdbc is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060526012"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="rh-postgresql-pl is earlier than 0:7.3.21-1" test_ref="oval:com.redhat.rhsa:tst:20080039003"/>
      <criterion comment="rh-postgresql-pl is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060526016"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="rh-postgresql-tcl is earlier than 0:7.3.21-1" test_ref="oval:com.redhat.rhsa:tst:20080039005"/>
      <criterion comment="rh-postgresql-tcl is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060526020"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="rh-postgresql-server is earlier than 0:7.3.21-1" test_ref="oval:com.redhat.rhsa:tst:20080039007"/>
      <criterion comment="rh-postgresql-server is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060526006"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="rh-postgresql-test is earlier than 0:7.3.21-1" test_ref="oval:com.redhat.rhsa:tst:20080039009"/>
      <criterion comment="rh-postgresql-test is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060526004"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="rh-postgresql-docs is earlier than 0:7.3.21-1" test_ref="oval:com.redhat.rhsa:tst:20080039011"/>
      <criterion comment="rh-postgresql-docs is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060526010"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="rh-postgresql-python is earlier than 0:7.3.21-1" test_ref="oval:com.redhat.rhsa:tst:20080039013"/>
      <criterion comment="rh-postgresql-python is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060526014"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="rh-postgresql-contrib is earlier than 0:7.3.21-1" test_ref="oval:com.redhat.rhsa:tst:20080039015"/>
      <criterion comment="rh-postgresql-contrib is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060526002"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="rh-postgresql-devel is earlier than 0:7.3.21-1" test_ref="oval:com.redhat.rhsa:tst:20080039017"/>
      <criterion comment="rh-postgresql-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060526018"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="rh-postgresql is earlier than 0:7.3.21-1" test_ref="oval:com.redhat.rhsa:tst:20080039019"/>
      <criterion comment="rh-postgresql is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060526022"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="rh-postgresql-libs is earlier than 0:7.3.21-1" test_ref="oval:com.redhat.rhsa:tst:20080039021"/>
      <criterion comment="rh-postgresql-libs is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060526008"/>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20080059" version="636">
   <metadata>
    <title>RHSA-2008:0059: wireshark security update (Moderate)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
    </affected>
    <reference ref_id="RHSA-2008:0059" ref_url="https://access.redhat.com/errata/RHSA-2008:0059" source="RHSA"/>
    <reference ref_id="CVE-2007-3389" ref_url="https://access.redhat.com/security/cve/CVE-2007-3389" source="CVE"/>
    <reference ref_id="CVE-2007-3390" ref_url="https://access.redhat.com/security/cve/CVE-2007-3390" source="CVE"/>
    <reference ref_id="CVE-2007-3391" ref_url="https://access.redhat.com/security/cve/CVE-2007-3391" source="CVE"/>
    <reference ref_id="CVE-2007-3392" ref_url="https://access.redhat.com/security/cve/CVE-2007-3392" source="CVE"/>
    <reference ref_id="CVE-2007-3393" ref_url="https://access.redhat.com/security/cve/CVE-2007-3393" source="CVE"/>
    <reference ref_id="CVE-2007-6113" ref_url="https://access.redhat.com/security/cve/CVE-2007-6113" source="CVE"/>
    <reference ref_id="CVE-2007-6114" ref_url="https://access.redhat.com/security/cve/CVE-2007-6114" source="CVE"/>
    <reference ref_id="CVE-2007-6115" ref_url="https://access.redhat.com/security/cve/CVE-2007-6115" source="CVE"/>
    <reference ref_id="CVE-2007-6117" ref_url="https://access.redhat.com/security/cve/CVE-2007-6117" source="CVE"/>
    <reference ref_id="CVE-2007-6118" ref_url="https://access.redhat.com/security/cve/CVE-2007-6118" source="CVE"/>
    <reference ref_id="CVE-2007-6120" ref_url="https://access.redhat.com/security/cve/CVE-2007-6120" source="CVE"/>
    <reference ref_id="CVE-2007-6121" ref_url="https://access.redhat.com/security/cve/CVE-2007-6121" source="CVE"/>
    <reference ref_id="CVE-2007-6450" ref_url="https://access.redhat.com/security/cve/CVE-2007-6450" source="CVE"/>
    <reference ref_id="CVE-2007-6451" ref_url="https://access.redhat.com/security/cve/CVE-2007-6451" source="CVE"/>
    <description>Wireshark is a program for monitoring network traffic. Wireshark was
previously known as Ethereal.

Several flaws were found in Wireshark. Wireshark could crash or possibly
execute arbitrary code as the user running Wireshark if it read a malformed
packet off the network. (CVE-2007-6114, CVE-2007-6115, CVE-2007-6117)

Several denial of service bugs were found in Wireshark. Wireshark could
crash or stop responding if it read a malformed packet off the network.
(CVE-2007-3389, CVE-2007-3390, CVE-2007-3391, CVE-2007-3392, CVE-2007-3392,
CVE-2007-3393, CVE-2007-6113, CVE-2007-6118, CVE-2007-6120, CVE-2007-6121,
CVE-2007-6450, CVE-2007-6451)

As well, Wireshark switched from using net-snmp to libsmi, which is
included in this errata.

Users of wireshark should upgrade to these updated packages, which contain
Wireshark version 0.99.7, and resolve these issues.</description>
    <advisory from="secalert@redhat.com">
     <severity>Moderate</severity>
     <rights>Copyright 2008 Red Hat, Inc.</rights>
     <issued date="2008-01-21"/>
     <updated date="2008-01-28"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-3389" impact="low" public="20070222">CVE-2007-3389</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-3390" impact="low" public="20070305">CVE-2007-3390</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-3391" impact="low" public="20070310">CVE-2007-3391</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-3392" impact="low" public="20070217">CVE-2007-3392</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-3393" impact="low" public="20070526">CVE-2007-3393</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-6113" impact="low" public="20071122">CVE-2007-6113</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-6114" public="20071122">CVE-2007-6114</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-6115" public="20071122">CVE-2007-6115</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-6117" public="20071122">CVE-2007-6117</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-6118" impact="low" public="20071122">CVE-2007-6118</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-6120" impact="low" public="20071122">CVE-2007-6120</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-6121" impact="low" public="20071122">CVE-2007-6121</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-6450" impact="low" public="20071218">CVE-2007-6450</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-6451" impact="low" public="20071218">CVE-2007-6451</cve>
     <bugzilla href="https://bugzilla.redhat.com/245796" id="245796">CVE-2007-3389 Wireshark crashes when inspecting HTTP traffic</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/245797" id="245797">CVE-2007-3391 Wireshark loops infinitely when inspecting DCP ETSI traffic</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/245798" id="245798">CVE-2007-3392 Wireshark loops infinitely when inspecting SSL traffic</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/246221" id="246221">CVE-2007-3393 Wireshark corrupts the stack when inspecting BOOTP traffic</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/246225" id="246225">CVE-2007-3390 Wireshark crashes when inspecting iSeries traffic</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/246229" id="246229">CVE-2007-3392 Wireshark crashes when inspecting MMS traffic</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/397281" id="397281">CVE-2007-6113 wireshark DNP3 flaws</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/397291" id="397291">CVE-2007-6114 wireshark SSL and OS/400 trace flaws</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/397311" id="397311">CVE-2007-6115 wireshark ANSI MAP flaws</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/397331" id="397331">CVE-2007-6117 wireshark HTTP dissector flaws</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/397341" id="397341">CVE-2007-6118 wireshark MEGACO dissector flaws</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/397361" id="397361">CVE-2007-6120 wireshark Bluetooth SDP dissector flaws</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/397371" id="397371">CVE-2007-6121 wireshark RPC Portmap flaws</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/426337" id="426337">Wireshare rebase requires new libsmi package adding to rhel3</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/427253" id="427253">CVE-2007-6450 wireshark RPL dissector crash</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/427254" id="427254">CVE-2007-6451 wireshark CIP dissector crash</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="AND">
    <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
    <criteria operator="OR">
     <criteria operator="AND">
      <criterion comment="libsmi is earlier than 0:0.4.5-3.el3" test_ref="oval:com.redhat.rhsa:tst:20080059001"/>
      <criterion comment="libsmi is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20080059002"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="libsmi-devel is earlier than 0:0.4.5-3.el3" test_ref="oval:com.redhat.rhsa:tst:20080059003"/>
      <criterion comment="libsmi-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20080059004"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="wireshark-gnome is earlier than 0:0.99.7-EL3.1" test_ref="oval:com.redhat.rhsa:tst:20080059005"/>
      <criterion comment="wireshark-gnome is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060602004"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="wireshark is earlier than 0:0.99.7-EL3.1" test_ref="oval:com.redhat.rhsa:tst:20080059007"/>
      <criterion comment="wireshark is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060602002"/>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20080104" version="634">
   <metadata>
    <title>RHSA-2008:0104: seamonkey security update (Critical)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
    </affected>
    <reference ref_id="RHSA-2008:0104" ref_url="https://access.redhat.com/errata/RHSA-2008:0104" source="RHSA"/>
    <reference ref_id="CVE-2008-0304" ref_url="https://access.redhat.com/security/cve/CVE-2008-0304" source="CVE"/>
    <reference ref_id="CVE-2008-0412" ref_url="https://access.redhat.com/security/cve/CVE-2008-0412" source="CVE"/>
    <reference ref_id="CVE-2008-0413" ref_url="https://access.redhat.com/security/cve/CVE-2008-0413" source="CVE"/>
    <reference ref_id="CVE-2008-0415" ref_url="https://access.redhat.com/security/cve/CVE-2008-0415" source="CVE"/>
    <reference ref_id="CVE-2008-0416" ref_url="https://access.redhat.com/security/cve/CVE-2008-0416" source="CVE"/>
    <reference ref_id="CVE-2008-0417" ref_url="https://access.redhat.com/security/cve/CVE-2008-0417" source="CVE"/>
    <reference ref_id="CVE-2008-0418" ref_url="https://access.redhat.com/security/cve/CVE-2008-0418" source="CVE"/>
    <reference ref_id="CVE-2008-0419" ref_url="https://access.redhat.com/security/cve/CVE-2008-0419" source="CVE"/>
    <reference ref_id="CVE-2008-0420" ref_url="https://access.redhat.com/security/cve/CVE-2008-0420" source="CVE"/>
    <reference ref_id="CVE-2008-0591" ref_url="https://access.redhat.com/security/cve/CVE-2008-0591" source="CVE"/>
    <reference ref_id="CVE-2008-0592" ref_url="https://access.redhat.com/security/cve/CVE-2008-0592" source="CVE"/>
    <reference ref_id="CVE-2008-0593" ref_url="https://access.redhat.com/security/cve/CVE-2008-0593" source="CVE"/>
    <description>SeaMonkey is an open source Web browser, advanced email and newsgroup
client, IRC chat client, and HTML editor.

Several flaws were found in the way SeaMonkey processed certain malformed
web content. A webpage containing malicious content could cause SeaMonkey
to crash, or potentially execute arbitrary code as the user running
SeaMonkey. (CVE-2008-0412, CVE-2008-0413, CVE-2008-0415, CVE-2008-0419)

Several flaws were found in the way SeaMonkey displayed malformed web
content. A webpage containing specially-crafted content could trick a user
into surrendering sensitive information. (CVE-2008-0591, CVE-2008-0593)

A flaw was found in the way SeaMonkey stored password data. If a user
saves login information for a malicious website, it could be possible
to corrupt the password database, preventing the user from properly
accessing saved password data. (CVE-2008-0417)

A flaw was found in the way SeaMonkey handles certain chrome URLs. If a
user has certain extensions installed, it could allow a malicious website
to steal sensitive session data. Note: this flaw does not affect a default
installation of SeaMonkey. (CVE-2008-0418)

A flaw was found in the way SeaMonkey saves certain text files. If a
website offers a file of type &quot;plain/text&quot;, rather than &quot;text/plain&quot;,
SeaMonkey will not show future &quot;text/plain&quot; content to the user in the
browser, forcing them to save those files locally to view the content.
(CVE-2008-0592)

Users of SeaMonkey are advised to upgrade to these updated packages, which
contain backported patches to resolve these issues.</description>
    <advisory from="secalert@redhat.com">
     <severity>Critical</severity>
     <rights>Copyright 2008 Red Hat, Inc.</rights>
     <issued date="2008-02-07"/>
     <updated date="2008-03-20"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2008-0304" public="20080226">CVE-2008-0304</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2008-0412" public="20080207">CVE-2008-0412</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2008-0413" public="20080207">CVE-2008-0413</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2008-0415" public="20080207">CVE-2008-0415</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2008-0416" impact="moderate" public="20080207">CVE-2008-0416</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2008-0417" impact="moderate" public="20080207">CVE-2008-0417</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2008-0418" impact="moderate" public="20080207">CVE-2008-0418</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2008-0419" public="20080207">CVE-2008-0419</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2008-0420" impact="moderate" public="20080207">CVE-2008-0420</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2008-0591" impact="moderate" public="20080207">CVE-2008-0591</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2008-0592" impact="low" public="20080207">CVE-2008-0592</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2008-0593" impact="low" public="20080207">CVE-2008-0593</cve>
     <bugzilla href="https://bugzilla.redhat.com/431732" id="431732">CVE-2008-0412 Mozilla layout engine crashes</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/431733" id="431733">CVE-2008-0413 Mozilla javascript engine crashes</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/431739" id="431739">CVE-2008-0415 Mozilla arbitrary code execution</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/431742" id="431742">CVE-2008-0417 Mozilla arbitrary code execution</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/431748" id="431748">CVE-2008-0418 Mozilla chrome: directory traversal</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/431749" id="431749">CVE-2008-0419 Mozilla arbitrary code execution</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/431751" id="431751">CVE-2008-0591 Mozilla information disclosure flaw</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/431752" id="431752">CVE-2008-0592 Mozilla text file mishandling</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/431756" id="431756">CVE-2008-0593 Mozilla URL token stealing flaw</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="seamonkey is earlier than 0:1.0.9-0.9.el3" test_ref="oval:com.redhat.rhsa:tst:20080104001"/>
       <criterion comment="seamonkey is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578018"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.9.el3" test_ref="oval:com.redhat.rhsa:tst:20080104003"/>
       <criterion comment="seamonkey-nspr-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.9.el3" test_ref="oval:com.redhat.rhsa:tst:20080104005"/>
       <criterion comment="seamonkey-nss-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578012"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.9.el3" test_ref="oval:com.redhat.rhsa:tst:20080104007"/>
       <criterion comment="seamonkey-nspr is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578010"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.9.el3" test_ref="oval:com.redhat.rhsa:tst:20080104009"/>
       <criterion comment="seamonkey-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578014"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.9.el3" test_ref="oval:com.redhat.rhsa:tst:20080104011"/>
       <criterion comment="seamonkey-mail is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578020"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.9.el3" test_ref="oval:com.redhat.rhsa:tst:20080104013"/>
       <criterion comment="seamonkey-js-debugger is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.9.el3" test_ref="oval:com.redhat.rhsa:tst:20080104015"/>
       <criterion comment="seamonkey-dom-inspector is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.9.el3" test_ref="oval:com.redhat.rhsa:tst:20080104017"/>
       <criterion comment="seamonkey-nss is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578016"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.9.el3" test_ref="oval:com.redhat.rhsa:tst:20080104019"/>
       <criterion comment="seamonkey-chat is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578006"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="seamonkey is earlier than 0:1.0.9-9.el4" test_ref="oval:com.redhat.rhsa:tst:20080104022"/>
       <criterion comment="seamonkey is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578018"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-mail is earlier than 0:1.0.9-9.el4" test_ref="oval:com.redhat.rhsa:tst:20080104023"/>
       <criterion comment="seamonkey-mail is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578020"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-devel is earlier than 0:1.0.9-9.el4" test_ref="oval:com.redhat.rhsa:tst:20080104024"/>
       <criterion comment="seamonkey-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578014"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-9.el4" test_ref="oval:com.redhat.rhsa:tst:20080104025"/>
       <criterion comment="seamonkey-js-debugger is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-chat is earlier than 0:1.0.9-9.el4" test_ref="oval:com.redhat.rhsa:tst:20080104026"/>
       <criterion comment="seamonkey-chat is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-9.el4" test_ref="oval:com.redhat.rhsa:tst:20080104027"/>
       <criterion comment="seamonkey-dom-inspector is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578002"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20080131" version="632">
   <metadata>
    <title>RHSA-2008:0131: netpbm security update (Moderate)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
    </affected>
    <reference ref_id="RHSA-2008:0131" ref_url="https://access.redhat.com/errata/RHSA-2008:0131" source="RHSA"/>
    <reference ref_id="CVE-2008-0554" ref_url="https://access.redhat.com/security/cve/CVE-2008-0554" source="CVE"/>
    <description>The netpbm package contains a library of functions for editing and
converting between various graphics file formats, including .pbm (portable
bitmaps), .pgm (portable graymaps), .pnm (portable anymaps), .ppm (portable
pixmaps) and others. The package includes no interactive tools and is
primarily used by other programs (eg CGI scripts that manage web-site
images).

An input validation flaw was discovered in the GIF-to-PNM converter
(giftopnm) shipped with the netpbm package. An attacker could create a
carefully crafted GIF file which could cause giftopnm to crash or possibly
execute arbitrary code as the user running giftopnm. (CVE-2008-0554)

All users are advised to upgrade to these updated packages which contain a
backported patch which resolves this issue.</description>
    <advisory from="secalert@redhat.com">
     <severity>Moderate</severity>
     <rights>Copyright 2008 Red Hat, Inc.</rights>
     <issued date="2008-02-28"/>
     <updated date="2008-02-28"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2008-0554" public="20080201">CVE-2008-0554</cve>
     <bugzilla href="https://bugzilla.redhat.com/431525" id="431525">CVE-2008-0554 netpbm: GIF handling buffer overflow in giftopnm</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="netpbm-devel is earlier than 0:9.24-11.30.5" test_ref="oval:com.redhat.rhsa:tst:20080131001"/>
       <criterion comment="netpbm-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20080131002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="netpbm-progs is earlier than 0:9.24-11.30.5" test_ref="oval:com.redhat.rhsa:tst:20080131003"/>
       <criterion comment="netpbm-progs is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20080131004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="netpbm is earlier than 0:9.24-11.30.5" test_ref="oval:com.redhat.rhsa:tst:20080131005"/>
       <criterion comment="netpbm is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20080131006"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="netpbm-progs is earlier than 0:10.25-2.EL4.6.el4_6.1" test_ref="oval:com.redhat.rhsa:tst:20080131008"/>
       <criterion comment="netpbm-progs is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20080131004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="netpbm is earlier than 0:10.25-2.EL4.6.el4_6.1" test_ref="oval:com.redhat.rhsa:tst:20080131009"/>
       <criterion comment="netpbm is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20080131006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="netpbm-devel is earlier than 0:10.25-2.EL4.6.el4_6.1" test_ref="oval:com.redhat.rhsa:tst:20080131010"/>
       <criterion comment="netpbm-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20080131002"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20080134" version="633">
   <metadata>
    <title>RHSA-2008:0134: tcltk security update (Moderate)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
    </affected>
    <reference ref_id="RHSA-2008:0134" ref_url="https://access.redhat.com/errata/RHSA-2008:0134" source="RHSA"/>
    <reference ref_id="CVE-2007-4772" ref_url="https://access.redhat.com/security/cve/CVE-2007-4772" source="CVE"/>
    <reference ref_id="CVE-2007-5378" ref_url="https://access.redhat.com/security/cve/CVE-2007-5378" source="CVE"/>
    <reference ref_id="CVE-2008-0553" ref_url="https://access.redhat.com/security/cve/CVE-2008-0553" source="CVE"/>
    <description>Tcl is a scripting language designed for embedding into other applications
and for use with Tk, a widget set.

An input validation flaw was discovered in Tk's GIF image handling. A
code-size value read from a GIF image was not properly validated before
being used, leading to a buffer overflow. A specially crafted GIF file
could use this to cause a crash or, potentially, execute code with the
privileges of the application using the Tk graphical toolkit.
(CVE-2008-0553)

A buffer overflow flaw was discovered in Tk's animated GIF image handling.
An animated GIF containing an initial image smaller than subsequent images
could cause a crash or, potentially, execute code with the privileges of
the application using the Tk library. (CVE-2007-5378)

A flaw in the Tcl regular expression handling engine was discovered by Will
Drewry. This flaw, first discovered in the Tcl regular expression engine
used in the PostgreSQL database server, resulted in an infinite loop when
processing certain regular expressions. (CVE-2007-4772)

All users are advised to upgrade to these updated packages which contain
backported patches which resolve these issues.</description>
    <advisory from="secalert@redhat.com">
     <severity>Moderate</severity>
     <rights>Copyright 2008 Red Hat, Inc.</rights>
     <issued date="2008-02-21"/>
     <updated date="2008-03-20"/>
     <cve cvss2="1.5/AV:L/AC:M/Au:S/C:N/I:N/A:P" cwe="CWE-835" href="https://access.redhat.com/security/cve/CVE-2007-4772" public="20080107">CVE-2007-4772</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-5378" impact="low" public="20060325">CVE-2007-5378</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2008-0553" public="20080201">CVE-2008-0553</cve>
     <bugzilla href="https://bugzilla.redhat.com/316511" id="316511">CVE-2007-4772 postgresql DoS via infinite loop in regex NFA optimization code</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/332021" id="332021">CVE-2007-5378 Tk GIF processing buffer overflow</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/431518" id="431518">CVE-2008-0553 tk: GIF handling buffer overflow</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="AND">
    <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
    <criteria operator="OR">
     <criteria operator="AND">
      <criterion comment="expect is earlier than 0:5.38.0-92.8" test_ref="oval:com.redhat.rhsa:tst:20080134001"/>
      <criterion comment="expect is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20080134002"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="tk-devel is earlier than 0:8.3.5-92.8" test_ref="oval:com.redhat.rhsa:tst:20080134003"/>
      <criterion comment="tk-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20080134004"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="itcl is earlier than 0:3.2-92.8" test_ref="oval:com.redhat.rhsa:tst:20080134005"/>
      <criterion comment="itcl is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20080134006"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="tcl is earlier than 0:8.3.5-92.8" test_ref="oval:com.redhat.rhsa:tst:20080134007"/>
      <criterion comment="tcl is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20080134008"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="tk is earlier than 0:8.3.5-92.8" test_ref="oval:com.redhat.rhsa:tst:20080134009"/>
      <criterion comment="tk is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20080134010"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="tclx is earlier than 0:8.3-92.8" test_ref="oval:com.redhat.rhsa:tst:20080134011"/>
      <criterion comment="tclx is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20080134012"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="expect-devel is earlier than 0:5.38.0-92.8" test_ref="oval:com.redhat.rhsa:tst:20080134013"/>
      <criterion comment="expect-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20080134014"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="tix is earlier than 1:8.1.4-92.8" test_ref="oval:com.redhat.rhsa:tst:20080134015"/>
      <criterion comment="tix is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20080134016"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="tcl-devel is earlier than 0:8.3.5-92.8" test_ref="oval:com.redhat.rhsa:tst:20080134017"/>
      <criterion comment="tcl-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20080134018"/>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20080145" version="638">
   <metadata>
    <title>RHSA-2008:0145: ImageMagick security update (Moderate)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
     <platform>Red Hat Enterprise Linux 5</platform>
    </affected>
    <reference ref_id="RHSA-2008:0145" ref_url="https://access.redhat.com/errata/RHSA-2008:0145" source="RHSA"/>
    <reference ref_id="CVE-2007-1797" ref_url="https://access.redhat.com/security/cve/CVE-2007-1797" source="CVE"/>
    <reference ref_id="CVE-2007-4985" ref_url="https://access.redhat.com/security/cve/CVE-2007-4985" source="CVE"/>
    <reference ref_id="CVE-2007-4986" ref_url="https://access.redhat.com/security/cve/CVE-2007-4986" source="CVE"/>
    <reference ref_id="CVE-2007-4988" ref_url="https://access.redhat.com/security/cve/CVE-2007-4988" source="CVE"/>
    <reference ref_id="CVE-2008-1096" ref_url="https://access.redhat.com/security/cve/CVE-2008-1096" source="CVE"/>
    <reference ref_id="CVE-2008-1097" ref_url="https://access.redhat.com/security/cve/CVE-2008-1097" source="CVE"/>
    <description>ImageMagick is an image display and manipulation tool for the X Window
System that can read and write multiple image formats.

Several heap-based buffer overflow flaws were found in ImageMagick. If a
victim opened a specially crafted DCM or XWD file, an attacker could
potentially execute arbitrary code on the victim's machine. (CVE-2007-1797)

Several denial of service flaws were found in ImageMagick's parsing of XCF
and DCM files. Attempting to process a specially-crafted input file in
these formats could cause ImageMagick to enter an infinite loop.
(CVE-2007-4985)

Several integer overflow flaws were found in ImageMagick. If a victim
opened a specially-crafted DCM, DIB, XBM, XCF or XWD file, an attacker
could potentially execute arbitrary code with the privileges of the user
running ImageMagick. (CVE-2007-4986)

An integer overflow flaw was found in ImageMagick's DIB parsing code. If a
victim opened a specially-crafted DIB file, an attacker could potentially
execute arbitrary code with the privileges of the user running ImageMagick.
(CVE-2007-4988)

A heap-based buffer overflow flaw was found in the way ImageMagick parsed
XCF files. If a specially-crafted XCF image was opened, ImageMagick could
be made to overwrite heap memory beyond the bounds of its allocated memory.
This could, potentially, allow an attacker to execute arbitrary code on the
machine running ImageMagick. (CVE-2008-1096)

A heap-based buffer overflow flaw was found in ImageMagick's processing of
certain malformed PCX images. If a victim opened a specially-crafted PCX
file, an attacker could possibly execute arbitrary code on the victim's
machine. (CVE-2008-1097)

All users of ImageMagick should upgrade to these updated packages, which
contain backported patches to correct these issues.</description>
    <advisory from="secalert@redhat.com">
     <severity>Moderate</severity>
     <rights>Copyright 2008 Red Hat, Inc.</rights>
     <issued date="2008-04-16"/>
     <updated date="2008-04-16"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-1797" public="20070331">CVE-2007-1797</cve>
     <cve cwe="CWE-835" href="https://access.redhat.com/security/cve/CVE-2007-4985" impact="low" public="20070919">CVE-2007-4985</cve>
     <cve cwe="CWE-190" href="https://access.redhat.com/security/cve/CVE-2007-4986" public="20070919">CVE-2007-4986</cve>
     <cve cwe="CWE-190" href="https://access.redhat.com/security/cve/CVE-2007-4988" public="20070919">CVE-2007-4988</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2008-1096" public="20070311">CVE-2008-1096</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2008-1097" public="20070311">CVE-2008-1097</cve>
     <bugzilla href="https://bugzilla.redhat.com/235071" id="235071">CVE-2007-1797 Heap overflow in ImageMagick's DCM and XWD coders</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/285861" id="285861">CVE-2008-1097 Memory corruption in ImageMagick's PCX coder</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/286411" id="286411">CVE-2008-1096 Out of bound write in ImageMagick's XCF coder</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/310081" id="310081">CVE-2007-4988 Integer overflow in ImageMagick's DIB coder</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/310091" id="310091">CVE-2007-4985 Infinite loops in ImageMagick's XCF and DCM coders</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/310121" id="310121">CVE-2007-4986 Multiple integer overflows in ImageMagick</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:5</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="ImageMagick-devel is earlier than 0:5.5.6-28" test_ref="oval:com.redhat.rhsa:tst:20080145001"/>
       <criterion comment="ImageMagick-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060178002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="ImageMagick is earlier than 0:5.5.6-28" test_ref="oval:com.redhat.rhsa:tst:20080145003"/>
       <criterion comment="ImageMagick is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060178004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="ImageMagick-perl is earlier than 0:5.5.6-28" test_ref="oval:com.redhat.rhsa:tst:20080145005"/>
       <criterion comment="ImageMagick-perl is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060178006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="ImageMagick-c++ is earlier than 0:5.5.6-28" test_ref="oval:com.redhat.rhsa:tst:20080145007"/>
       <criterion comment="ImageMagick-c++ is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060178008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="ImageMagick-c++-devel is earlier than 0:5.5.6-28" test_ref="oval:com.redhat.rhsa:tst:20080145009"/>
       <criterion comment="ImageMagick-c++-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060178010"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="ImageMagick-perl is earlier than 0:6.0.7.1-17.el4_6.1" test_ref="oval:com.redhat.rhsa:tst:20080145012"/>
       <criterion comment="ImageMagick-perl is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060178006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="ImageMagick is earlier than 0:6.0.7.1-17.el4_6.1" test_ref="oval:com.redhat.rhsa:tst:20080145013"/>
       <criterion comment="ImageMagick is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060178004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="ImageMagick-c++ is earlier than 0:6.0.7.1-17.el4_6.1" test_ref="oval:com.redhat.rhsa:tst:20080145014"/>
       <criterion comment="ImageMagick-c++ is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060178008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="ImageMagick-devel is earlier than 0:6.0.7.1-17.el4_6.1" test_ref="oval:com.redhat.rhsa:tst:20080145015"/>
       <criterion comment="ImageMagick-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060178002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="ImageMagick-c++-devel is earlier than 0:6.0.7.1-17.el4_6.1" test_ref="oval:com.redhat.rhsa:tst:20080145016"/>
       <criterion comment="ImageMagick-c++-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060178010"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 5 is installed" test_ref="oval:com.redhat.rhsa:tst:20070066013"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="ImageMagick-c++-devel is earlier than 0:6.2.8.0-4.el5_1.1" test_ref="oval:com.redhat.rhsa:tst:20080145018"/>
       <criterion comment="ImageMagick-c++-devel is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20080145019"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="ImageMagick is earlier than 0:6.2.8.0-4.el5_1.1" test_ref="oval:com.redhat.rhsa:tst:20080145020"/>
       <criterion comment="ImageMagick is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20080145021"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="ImageMagick-perl is earlier than 0:6.2.8.0-4.el5_1.1" test_ref="oval:com.redhat.rhsa:tst:20080145022"/>
       <criterion comment="ImageMagick-perl is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20080145023"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="ImageMagick-c++ is earlier than 0:6.2.8.0-4.el5_1.1" test_ref="oval:com.redhat.rhsa:tst:20080145024"/>
       <criterion comment="ImageMagick-c++ is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20080145025"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="ImageMagick-devel is earlier than 0:6.2.8.0-4.el5_1.1" test_ref="oval:com.redhat.rhsa:tst:20080145026"/>
       <criterion comment="ImageMagick-devel is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20080145027"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20080153" version="635">
   <metadata>
    <title>RHSA-2008:0153: cups security update (Important)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
    </affected>
    <reference ref_id="RHSA-2008:0153" ref_url="https://access.redhat.com/errata/RHSA-2008:0153" source="RHSA"/>
    <reference ref_id="CVE-2008-0596" ref_url="https://access.redhat.com/security/cve/CVE-2008-0596" source="CVE"/>
    <reference ref_id="CVE-2008-0597" ref_url="https://access.redhat.com/security/cve/CVE-2008-0597" source="CVE"/>
    <description>The Common UNIX Printing System (CUPS) provides a portable printing layer
for UNIX(R) operating systems.

A flaw was found in the way CUPS handled the addition and removal of remote
shared printers via IPP.  A remote attacker could send malicious UDP IPP
packets causing the CUPS daemon to attempt to dereference already freed
memory and crash. (CVE-2008-0597)

A memory management flaw was found in the way CUPS handled the addition and
removal of remote shared printers via IPP.  When shared printer was
removed, allocated memory was not properly freed, leading to a memory leak
possibly causing CUPS daemon crash after exhausting available memory.
(CVE-2008-0596)

These issues were found during the investigation of CVE-2008-0882, which
did not affect Red Hat Enterprise Linux 3. 

Note that the default configuration of CUPS on Red Hat Enterprise Linux
3 allow requests of this type only from the local subnet.

In addition, these updated cups packages fix a bug that occurred when using
the CUPS polling daemon. Excessive debugging log information was saved to
the error_log file regardless of the LogLevel setting, which filled up disk
space rapidly.

All CUPS users are advised to upgrade to these updated packages, which
contain backported patches to resolve this issue.</description>
    <advisory from="secalert@redhat.com">
     <severity>Important</severity>
     <rights>Copyright 2008 Red Hat, Inc.</rights>
     <issued date="2008-02-25"/>
     <updated date="2008-03-20"/>
     <cve cvss2="3.3/AV:A/AC:L/Au:N/C:N/I:N/A:P" cwe="CWE-401" href="https://access.redhat.com/security/cve/CVE-2008-0596" impact="moderate" public="20080225">CVE-2008-0596</cve>
     <cve cvss2="3.3/AV:A/AC:L/Au:N/C:N/I:N/A:P" href="https://access.redhat.com/security/cve/CVE-2008-0597" impact="moderate" public="20080225">CVE-2008-0597</cve>
     <bugzilla href="https://bugzilla.redhat.com/246545" id="246545">Cups fills up logfiles if queue is turned on</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/433825" id="433825">CVE-2008-0596 cups: memory leak handling IPP browse requests</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/433847" id="433847">CVE-2008-0597 cups: dereference of free'd memory handling IPP browse requests</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="AND">
    <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
    <criteria operator="OR">
     <criteria operator="AND">
      <criterion comment="cups-devel is earlier than 1:1.1.17-13.3.51" test_ref="oval:com.redhat.rhsa:tst:20080153001"/>
      <criterion comment="cups-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060163002"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="cups is earlier than 1:1.1.17-13.3.51" test_ref="oval:com.redhat.rhsa:tst:20080153003"/>
      <criterion comment="cups is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060163006"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="cups-libs is earlier than 1:1.1.17-13.3.51" test_ref="oval:com.redhat.rhsa:tst:20080153005"/>
      <criterion comment="cups-libs is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060163004"/>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20080155" version="633">
   <metadata>
    <title>RHSA-2008:0155: ghostscript security update (Important)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
     <platform>Red Hat Enterprise Linux 5</platform>
    </affected>
    <reference ref_id="RHSA-2008:0155" ref_url="https://access.redhat.com/errata/RHSA-2008:0155" source="RHSA"/>
    <reference ref_id="CVE-2008-0411" ref_url="https://access.redhat.com/security/cve/CVE-2008-0411" source="CVE"/>
    <description>Ghostscript is a program for displaying PostScript files, or printing them
to non-PostScript printers.

Chris Evans from the Google Security Team reported a stack-based buffer
overflow flaw in Ghostscript's zseticcspace() function. An attacker could
create a malicious PostScript file that would cause Ghostscript to execute
arbitrary code when opened. (CVE-2008-0411)

These updated packages also fix a bug, which prevented the pxlmono printer
driver from producing valid output on Red Hat Enterprise Linux 4.

All users of ghostscript are advised to upgrade to these updated packages,
which contain a backported patch to resolve these issues.</description>
    <advisory from="secalert@redhat.com">
     <severity>Important</severity>
     <rights>Copyright 2008 Red Hat, Inc.</rights>
     <issued date="2008-02-27"/>
     <updated date="2008-03-20"/>
     <cve cwe="CWE-121" href="https://access.redhat.com/security/cve/CVE-2008-0411" public="20080227">CVE-2008-0411</cve>
     <bugzilla href="https://bugzilla.redhat.com/431536" id="431536">CVE-2008-0411 ghostscript: stack-based buffer overflow in .seticcspace operator</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:5</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="ghostscript is earlier than 0:7.05-32.1.13" test_ref="oval:com.redhat.rhsa:tst:20080155001"/>
       <criterion comment="ghostscript is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20080155002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="hpijs is earlier than 0:1.3-32.1.13" test_ref="oval:com.redhat.rhsa:tst:20080155003"/>
       <criterion comment="hpijs is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20080155004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="ghostscript-devel is earlier than 0:7.05-32.1.13" test_ref="oval:com.redhat.rhsa:tst:20080155005"/>
       <criterion comment="ghostscript-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20080155006"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="ghostscript-devel is earlier than 0:7.07-33.2.el4_6.1" test_ref="oval:com.redhat.rhsa:tst:20080155008"/>
       <criterion comment="ghostscript-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20080155006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="ghostscript is earlier than 0:7.07-33.2.el4_6.1" test_ref="oval:com.redhat.rhsa:tst:20080155009"/>
       <criterion comment="ghostscript is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20080155002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="ghostscript-gtk is earlier than 0:7.07-33.2.el4_6.1" test_ref="oval:com.redhat.rhsa:tst:20080155010"/>
       <criterion comment="ghostscript-gtk is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20080155011"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 5 is installed" test_ref="oval:com.redhat.rhsa:tst:20070066013"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="ghostscript is earlier than 0:8.15.2-9.1.el5_1.1" test_ref="oval:com.redhat.rhsa:tst:20080155013"/>
       <criterion comment="ghostscript is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20080155014"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="ghostscript-gtk is earlier than 0:8.15.2-9.1.el5_1.1" test_ref="oval:com.redhat.rhsa:tst:20080155015"/>
       <criterion comment="ghostscript-gtk is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20080155016"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="ghostscript-devel is earlier than 0:8.15.2-9.1.el5_1.1" test_ref="oval:com.redhat.rhsa:tst:20080155017"/>
       <criterion comment="ghostscript-devel is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20080155018"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20080176" version="637">
   <metadata>
    <title>RHSA-2008:0176: openoffice.org security update (Important)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
    </affected>
    <reference ref_id="RHSA-2008:0176" ref_url="https://access.redhat.com/errata/RHSA-2008:0176" source="RHSA"/>
    <reference ref_id="CVE-2007-5746" ref_url="https://access.redhat.com/security/cve/CVE-2007-5746" source="CVE"/>
    <reference ref_id="CVE-2008-0320" ref_url="https://access.redhat.com/security/cve/CVE-2008-0320" source="CVE"/>
    <description>OpenOffice.org is an office productivity suite that includes desktop
applications such as a word processor, spreadsheet, presentation manager,
formula editor, and drawing program.

A heap overflow flaw was found in the EMF parser. An attacker could create
a carefully crafted EMF file that could cause OpenOffice.org to crash or
possibly execute arbitrary code if the malicious EMF image was added to a
document or if a document containing the malicious EMF file was opened by a
victim. (CVE-2007-5746)

A heap overflow flaw was found in the OLE Structured Storage file parser.
(OLE Structured Storage is a format used by Microsoft Office documents.) An
attacker could create a carefully crafted OLE file that could cause
OpenOffice.org to crash or possibly execute arbitrary code if the file was
opened by a victim. (CVE-2008-0320)

All users of OpenOffice.org are advised to upgrade to these updated
packages, which contain backported fixes to correct these issues.</description>
    <advisory from="secalert@redhat.com">
     <severity>Important</severity>
     <rights>Copyright 2008 Red Hat, Inc.</rights>
     <issued date="2008-04-17"/>
     <updated date="2008-04-17"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-5746" public="20080417">CVE-2007-5746</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2008-0320" public="20080417">CVE-2008-0320</cve>
     <bugzilla href="https://bugzilla.redhat.com/435675" id="435675">CVE-2007-5746 openoffice.org: EMF files parsing EMR_BITBLT record heap overflows</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/435676" id="435676">CVE-2008-0320 openoffice.org: OLE files parsing heap overflows</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="openoffice.org-i18n is earlier than 0:1.1.2-41.2.0.EL3" test_ref="oval:com.redhat.rhsa:tst:20080176001"/>
       <criterion comment="openoffice.org-i18n is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060573002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org is earlier than 0:1.1.2-41.2.0.EL3" test_ref="oval:com.redhat.rhsa:tst:20080176003"/>
       <criterion comment="openoffice.org is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060573006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-libs is earlier than 0:1.1.2-41.2.0.EL3" test_ref="oval:com.redhat.rhsa:tst:20080176005"/>
       <criterion comment="openoffice.org-libs is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060573004"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="openoffice.org is earlier than 0:1.1.5-10.6.0.3.EL4" test_ref="oval:com.redhat.rhsa:tst:20080176008"/>
       <criterion comment="openoffice.org is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060573006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-i18n is earlier than 0:1.1.5-10.6.0.3.EL4" test_ref="oval:com.redhat.rhsa:tst:20080176009"/>
       <criterion comment="openoffice.org-i18n is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060573002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-kde is earlier than 0:1.1.5-10.6.0.3.EL4" test_ref="oval:com.redhat.rhsa:tst:20080176010"/>
       <criterion comment="openoffice.org-kde is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060573011"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-libs is earlier than 0:1.1.5-10.6.0.3.EL4" test_ref="oval:com.redhat.rhsa:tst:20080176012"/>
       <criterion comment="openoffice.org-libs is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060573004"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20080181" version="633">
   <metadata>
    <title>RHSA-2008:0181: krb5 security update (Critical)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
    </affected>
    <reference ref_id="RHSA-2008:0181" ref_url="https://access.redhat.com/errata/RHSA-2008:0181" source="RHSA"/>
    <reference ref_id="CVE-2008-0062" ref_url="https://access.redhat.com/security/cve/CVE-2008-0062" source="CVE"/>
    <reference ref_id="CVE-2008-0063" ref_url="https://access.redhat.com/security/cve/CVE-2008-0063" source="CVE"/>
    <reference ref_id="CVE-2008-0948" ref_url="https://access.redhat.com/security/cve/CVE-2008-0948" source="CVE"/>
    <description>Kerberos is a network authentication system which allows clients and
servers to authenticate to each other through use of symmetric encryption
and a trusted third party, the KDC.

A flaw was found in the way the MIT Kerberos Authentication Service and Key
Distribution Center server (krb5kdc) handled Kerberos v4 protocol packets.
An unauthenticated remote attacker could use this flaw to crash the
krb5kdc daemon, disclose portions of its memory, or possibly execute
arbitrary code using malformed or truncated Kerberos v4 protocol
requests. (CVE-2008-0062, CVE-2008-0063)

This issue only affected krb5kdc with Kerberos v4 protocol compatibility
enabled, which is the default setting on Red Hat Enterprise Linux 4.
Kerberos v4 protocol support can be disabled by adding &quot;v4_mode=none&quot;
(without the quotes) to the &quot;[kdcdefaults]&quot; section of
/var/kerberos/krb5kdc/kdc.conf.

A flaw was found in the RPC library used by the MIT Kerberos kadmind
server. An unauthenticated remote attacker could use this flaw to crash
kadmind. This issue only affected systems with certain resource limits
configured and did not affect systems using default resource limits used by
Red Hat Enterprise Linux 2.1 or 3. (CVE-2008-0948)

Red Hat would like to thank MIT for reporting these issues.

All krb5 users are advised to update to these erratum packages which
contain backported fixes to correct these issues.</description>
    <advisory from="secalert@redhat.com">
     <severity>Critical</severity>
     <rights>Copyright 2008 Red Hat, Inc.</rights>
     <issued date="2008-03-18"/>
     <updated date="2008-03-18"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2008-0062" public="20080318">CVE-2008-0062</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2008-0063" impact="moderate" public="20080318">CVE-2008-0063</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2008-0948" impact="moderate" public="20080318">CVE-2008-0948</cve>
     <bugzilla href="https://bugzilla.redhat.com/432620" id="432620">CVE-2008-0062 krb5: uninitialized pointer use in krb5kdc</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/432621" id="432621">CVE-2008-0063 krb5: possible leak of sensitive data from krb5kdc using krb4 request</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/435087" id="435087">CVE-2008-0948 krb5: incorrect handling of high-numbered file descriptors in RPC library</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="AND">
    <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
    <criteria operator="OR">
     <criteria operator="AND">
      <criterion comment="krb5-devel is earlier than 0:1.2.7-68" test_ref="oval:com.redhat.rhsa:tst:20080181001"/>
      <criterion comment="krb5-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070095004"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="krb5-libs is earlier than 0:1.2.7-68" test_ref="oval:com.redhat.rhsa:tst:20080181003"/>
      <criterion comment="krb5-libs is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070095006"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="krb5-workstation is earlier than 0:1.2.7-68" test_ref="oval:com.redhat.rhsa:tst:20080181005"/>
      <criterion comment="krb5-workstation is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070095008"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="krb5-server is earlier than 0:1.2.7-68" test_ref="oval:com.redhat.rhsa:tst:20080181007"/>
      <criterion comment="krb5-server is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070095002"/>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20080196" version="633">
   <metadata>
    <title>RHSA-2008:0196: unzip security update (Moderate)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
    </affected>
    <reference ref_id="RHSA-2008:0196" ref_url="https://access.redhat.com/errata/RHSA-2008:0196" source="RHSA"/>
    <reference ref_id="CVE-2008-0888" ref_url="https://access.redhat.com/security/cve/CVE-2008-0888" source="CVE"/>
    <description>The unzip utility is used to list, test, or extract files from a zip
archive.

An invalid pointer flaw was found in unzip. If a user ran unzip on a
specially crafted file, an attacker could execute arbitrary code with that
user's privileges. (CVE-2008-0888)

Red Hat would like to thank Tavis Ormandy of the Google Security Team for
reporting this issue.

All unzip users are advised to upgrade to these updated packages, which
contain a backported patch to resolve this issue.</description>
    <advisory from="secalert@redhat.com">
     <severity>Moderate</severity>
     <rights>Copyright 2008 Red Hat, Inc.</rights>
     <issued date="2008-03-18"/>
     <updated date="2008-03-18"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2008-0888" public="20080317">CVE-2008-0888</cve>
     <bugzilla href="https://bugzilla.redhat.com/431438" id="431438">CVE-2008-0888 unzip: free() called for uninitialized or already freed pointer</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="AND">
    <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
    <criterion comment="unzip is earlier than 0:5.50-36.EL3" test_ref="oval:com.redhat.rhsa:tst:20080196001"/>
    <criterion comment="unzip is signed with Red Hat master key" test_ref="oval:com.redhat.rhba:tst:20070418002"/>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20080206" version="634">
   <metadata>
    <title>RHSA-2008:0206: cups security update (Moderate)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
    </affected>
    <reference ref_id="RHSA-2008:0206" ref_url="https://access.redhat.com/errata/RHSA-2008:0206" source="RHSA"/>
    <reference ref_id="CVE-2008-0053" ref_url="https://access.redhat.com/security/cve/CVE-2008-0053" source="CVE"/>
    <reference ref_id="CVE-2008-1373" ref_url="https://access.redhat.com/security/cve/CVE-2008-1373" source="CVE"/>
    <reference ref_id="CVE-2008-1374" ref_url="https://access.redhat.com/security/cve/CVE-2008-1374" source="CVE"/>
    <description>The Common UNIX Printing System (CUPS) provides a portable printing layer
for UNIX(R) operating systems.

Two overflows were discovered in the HP-GL/2-to-PostScript filter. An
attacker could create a malicious HP-GL/2 file that could possibly execute
arbitrary code as the &quot;lp&quot; user if the file is printed. (CVE-2008-0053)

A buffer overflow flaw was discovered in the GIF decoding routines used by
CUPS image converting filters &quot;imagetops&quot; and &quot;imagetoraster&quot;. An attacker
could create a malicious GIF file that could possibly execute arbitrary
code as the &quot;lp&quot; user if the file was printed. (CVE-2008-1373)

It was discovered that the patch used to address CVE-2004-0888 in CUPS
packages in Red Hat Enterprise Linux 3 and 4 did not completely resolve the
integer overflow in the &quot;pdftops&quot; filter on 64-bit platforms.  An attacker
could create a malicious PDF file that could possibly execute arbitrary
code as the &quot;lp&quot; user if the file was printed. (CVE-2008-1374)

All cups users are advised to upgrade to these updated packages, which
contain backported patches to resolve these issues.</description>
    <advisory from="secalert@redhat.com">
     <severity>Moderate</severity>
     <rights>Copyright 2008 Red Hat, Inc.</rights>
     <issued date="2008-04-01"/>
     <updated date="2008-04-01"/>
     <cve cvss2="5.4/AV:A/AC:M/Au:N/C:P/I:P/A:P" href="https://access.redhat.com/security/cve/CVE-2008-0053" public="20080318">CVE-2008-0053</cve>
     <cve cvss2="4.3/AV:A/AC:H/Au:N/C:P/I:P/A:P" href="https://access.redhat.com/security/cve/CVE-2008-1373" public="20080401:1400">CVE-2008-1373</cve>
     <cve cvss2="5.8/AV:A/AC:L/Au:N/C:P/I:P/A:P" href="https://access.redhat.com/security/cve/CVE-2008-1374" public="20080401:1400">CVE-2008-1374</cve>
     <bugzilla href="https://bugzilla.redhat.com/438117" id="438117">CVE-2008-0053 cups: buffer overflows in HP-GL/2 filter</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/438303" id="438303">CVE-2008-1373 cups: overflow in gif image filter</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/438336" id="438336">CVE-2008-1374 cups: incomplete fix for CVE-2004-0888 / CVE-2005-0206</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="cups is earlier than 1:1.1.17-13.3.52" test_ref="oval:com.redhat.rhsa:tst:20080206001"/>
       <criterion comment="cups is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060163006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="cups-libs is earlier than 1:1.1.17-13.3.52" test_ref="oval:com.redhat.rhsa:tst:20080206003"/>
       <criterion comment="cups-libs is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060163004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="cups-devel is earlier than 1:1.1.17-13.3.52" test_ref="oval:com.redhat.rhsa:tst:20080206005"/>
       <criterion comment="cups-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060163002"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="cups is earlier than 1:1.1.22-0.rc1.9.20.2.el4_6.6" test_ref="oval:com.redhat.rhsa:tst:20080206008"/>
       <criterion comment="cups is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060163006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="cups-libs is earlier than 1:1.1.22-0.rc1.9.20.2.el4_6.6" test_ref="oval:com.redhat.rhsa:tst:20080206009"/>
       <criterion comment="cups-libs is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060163004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="cups-devel is earlier than 1:1.1.22-0.rc1.9.20.2.el4_6.6" test_ref="oval:com.redhat.rhsa:tst:20080206010"/>
       <criterion comment="cups-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060163002"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20080208" version="646">
   <metadata>
    <title>RHSA-2008:0208: seamonkey security update (Critical)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
    </affected>
    <reference ref_id="RHSA-2008:0208" ref_url="https://access.redhat.com/errata/RHSA-2008:0208" source="RHSA"/>
    <reference ref_id="CVE-2008-0414" ref_url="https://access.redhat.com/security/cve/CVE-2008-0414" source="CVE"/>
    <reference ref_id="CVE-2008-1233" ref_url="https://access.redhat.com/security/cve/CVE-2008-1233" source="CVE"/>
    <reference ref_id="CVE-2008-1234" ref_url="https://access.redhat.com/security/cve/CVE-2008-1234" source="CVE"/>
    <reference ref_id="CVE-2008-1235" ref_url="https://access.redhat.com/security/cve/CVE-2008-1235" source="CVE"/>
    <reference ref_id="CVE-2008-1236" ref_url="https://access.redhat.com/security/cve/CVE-2008-1236" source="CVE"/>
    <reference ref_id="CVE-2008-1237" ref_url="https://access.redhat.com/security/cve/CVE-2008-1237" source="CVE"/>
    <reference ref_id="CVE-2008-1238" ref_url="https://access.redhat.com/security/cve/CVE-2008-1238" source="CVE"/>
    <reference ref_id="CVE-2008-1241" ref_url="https://access.redhat.com/security/cve/CVE-2008-1241" source="CVE"/>
    <description>SeaMonkey is an open source Web browser, advanced email and newsgroup
client, IRC chat client, and HTML editor.

Several flaws were found in the processing of some malformed web content. A
web page containing such malicious content could cause SeaMonkey to crash
or, potentially, execute arbitrary code as the user running SeaMonkey.
(CVE-2008-1233, CVE-2008-1235, CVE-2008-1236, CVE-2008-1237)

Several flaws were found in the display of malformed web content. A web
page containing specially-crafted content could, potentially, trick a
SeaMonkey user into surrendering sensitive information. (CVE-2008-1234,
CVE-2008-1238, CVE-2008-1241)

All SeaMonkey users should upgrade to these updated packages, which contain
backported patches to resolve these issues.</description>
    <advisory from="secalert@redhat.com">
     <severity>Critical</severity>
     <rights>Copyright 2008 Red Hat, Inc.</rights>
     <issued date="2008-03-27"/>
     <updated date="2008-03-27"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2008-0414" impact="moderate" public="20080207">CVE-2008-0414</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2008-1233" public="20080325">CVE-2008-1233</cve>
     <cve cwe="CWE-79" href="https://access.redhat.com/security/cve/CVE-2008-1234" impact="moderate" public="20080325">CVE-2008-1234</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2008-1235" public="20080325">CVE-2008-1235</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2008-1236" public="20080325">CVE-2008-1236</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2008-1237" public="20080325">CVE-2008-1237</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2008-1238" impact="moderate" public="20080325">CVE-2008-1238</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2008-1241" impact="moderate" public="20080325">CVE-2008-1241</cve>
     <bugzilla href="https://bugzilla.redhat.com/438713" id="438713">CVE-2008-1233 Mozilla products XPCNativeWrapper pollution</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/438715" id="438715">CVE-2008-1234 universal XSS using event handlers</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/438717" id="438717">CVE-2008-1235 chrome privilege via wrong principal</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/438718" id="438718">CVE-2008-1236 browser engine crashes</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/438721" id="438721">CVE-2008-1237 javascript crashes</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/438724" id="438724">CVE-2008-1238 Referrer spoofing bug</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/438730" id="438730">CVE-2008-1241 XUL popup spoofing</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.16.el3" test_ref="oval:com.redhat.rhsa:tst:20080208001"/>
       <criterion comment="seamonkey-dom-inspector is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.16.el3" test_ref="oval:com.redhat.rhsa:tst:20080208003"/>
       <criterion comment="seamonkey-chat is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.16.el3" test_ref="oval:com.redhat.rhsa:tst:20080208005"/>
       <criterion comment="seamonkey-nspr-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.16.el3" test_ref="oval:com.redhat.rhsa:tst:20080208007"/>
       <criterion comment="seamonkey-mail is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578020"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey is earlier than 0:1.0.9-0.16.el3" test_ref="oval:com.redhat.rhsa:tst:20080208009"/>
       <criterion comment="seamonkey is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578018"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.16.el3" test_ref="oval:com.redhat.rhsa:tst:20080208011"/>
       <criterion comment="seamonkey-nss is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578016"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.16.el3" test_ref="oval:com.redhat.rhsa:tst:20080208013"/>
       <criterion comment="seamonkey-nss-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578012"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.16.el3" test_ref="oval:com.redhat.rhsa:tst:20080208015"/>
       <criterion comment="seamonkey-js-debugger is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.16.el3" test_ref="oval:com.redhat.rhsa:tst:20080208017"/>
       <criterion comment="seamonkey-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578014"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.16.el3" test_ref="oval:com.redhat.rhsa:tst:20080208019"/>
       <criterion comment="seamonkey-nspr is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578010"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="seamonkey-chat is earlier than 0:1.0.9-15.el4" test_ref="oval:com.redhat.rhsa:tst:20080208022"/>
       <criterion comment="seamonkey-chat is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-mail is earlier than 0:1.0.9-15.el4" test_ref="oval:com.redhat.rhsa:tst:20080208023"/>
       <criterion comment="seamonkey-mail is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578020"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-15.el4" test_ref="oval:com.redhat.rhsa:tst:20080208024"/>
       <criterion comment="seamonkey-js-debugger is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-devel is earlier than 0:1.0.9-15.el4" test_ref="oval:com.redhat.rhsa:tst:20080208025"/>
       <criterion comment="seamonkey-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578014"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-15.el4" test_ref="oval:com.redhat.rhsa:tst:20080208026"/>
       <criterion comment="seamonkey-dom-inspector is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey is earlier than 0:1.0.9-15.el4" test_ref="oval:com.redhat.rhsa:tst:20080208027"/>
       <criterion comment="seamonkey is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578018"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20080211" version="638">
   <metadata>
    <title>RHSA-2008:0211: kernel security and bug fix update (Important)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
    </affected>
    <reference ref_id="RHSA-2008:0211" ref_url="https://access.redhat.com/errata/RHSA-2008:0211" source="RHSA"/>
    <reference ref_id="CVE-2006-4814" ref_url="https://access.redhat.com/security/cve/CVE-2006-4814" source="CVE"/>
    <reference ref_id="CVE-2007-5001" ref_url="https://access.redhat.com/security/cve/CVE-2007-5001" source="CVE"/>
    <reference ref_id="CVE-2007-6151" ref_url="https://access.redhat.com/security/cve/CVE-2007-6151" source="CVE"/>
    <reference ref_id="CVE-2007-6206" ref_url="https://access.redhat.com/security/cve/CVE-2007-6206" source="CVE"/>
    <reference ref_id="CVE-2008-0007" ref_url="https://access.redhat.com/security/cve/CVE-2008-0007" source="CVE"/>
    <reference ref_id="CVE-2008-1367" ref_url="https://access.redhat.com/security/cve/CVE-2008-1367" source="CVE"/>
    <reference ref_id="CVE-2008-1375" ref_url="https://access.redhat.com/security/cve/CVE-2008-1375" source="CVE"/>
    <reference ref_id="CVE-2008-1669" ref_url="https://access.redhat.com/security/cve/CVE-2008-1669" source="CVE"/>
    <description>The kernel packages contain the Linux kernel, the core of any Linux
operating system.

These updated packages fix the following security issues:

* the absence of a protection mechanism when attempting to access a
critical section of code has been found in the Linux kernel open file
descriptors control mechanism, fcntl. This could allow a local unprivileged
user to simultaneously execute code, which would otherwise be protected
against parallel execution. As well, a race condition when handling locks
in the Linux kernel fcntl functionality, may have allowed a process
belonging to a local unprivileged user to gain re-ordered access to the
descriptor table. (CVE-2008-1669, Important)

* the absence of a protection mechanism when attempting to access a
critical section of code, as well as a race condition, have been found in
the Linux kernel file system event notifier, dnotify. This could allow a
local unprivileged user to get inconsistent data, or to send arbitrary
signals to arbitrary system processes. (CVE-2008-1375, Important)

Red Hat would like to thank Nick Piggin for responsibly disclosing the
following issue:

* when accessing kernel memory locations, certain Linux kernel drivers
registering a fault handler did not perform required range checks. A local
unprivileged user could use this flaw to gain read or write access to
arbitrary kernel memory, or possibly cause a kernel crash.
(CVE-2008-0007, Important)

* a flaw was found when performing asynchronous input or output operations
on a FIFO special file. A local unprivileged user could use this flaw to
cause a kernel panic. (CVE-2007-5001, Important)

* a flaw was found in the way core dump files were created. If a local user
could get a root-owned process to dump a core file into a directory, which
the user has write access to, they could gain read access to that core
file. This could potentially grant unauthorized access to sensitive
information. (CVE-2007-6206, Moderate)

* a buffer overflow was found in the Linux kernel ISDN subsystem. A local
unprivileged user could use this flaw to cause a denial of service.
(CVE-2007-6151, Moderate)

* a race condition found in the mincore system core could allow a local
user to cause a denial of service (system hang). (CVE-2006-4814, Moderate)

* it was discovered that the Linux kernel handled string operations in the
opposite way to the GNU Compiler Collection (GCC). This could allow a local
unprivileged user to cause memory corruption. (CVE-2008-1367, Low)

As well, these updated packages fix the following bugs:

* a bug, which caused long delays when unmounting mounts containing a large
number of unused dentries, has been resolved.

* in the previous kernel packages, the kernel was unable to handle certain
floating point instructions on Itanium(R) architectures.

* on certain Intel CPUs, the Translation Lookaside Buffer (TLB) was not
flushed correctly, which caused machine check errors.

Red Hat Enterprise Linux 3 users are advised to upgrade to these updated
packages, which contain backported patches to resolve these issues.</description>
    <advisory from="secalert@redhat.com">
     <severity>Important</severity>
     <rights>Copyright 2008 Red Hat, Inc.</rights>
     <issued date="2008-05-07"/>
     <updated date="2008-05-07"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2006-4814" impact="moderate" public="20061214">CVE-2006-4814</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-5001" public="20080507">CVE-2007-5001</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-6151" impact="low" public="20071201">CVE-2007-6151</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-6206" impact="moderate" public="20040710">CVE-2007-6206</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2008-0007" public="20080208">CVE-2008-0007</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2008-1367" impact="low" public="20080305">CVE-2008-1367</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2008-1375" public="20080501">CVE-2008-1375</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2008-1669" public="20080506">CVE-2008-1669</cve>
     <bugzilla href="https://bugzilla.redhat.com/306971" id="306971">CVE-2006-4814 kernel Race condition in mincore can cause &quot;ps -ef&quot; to hang</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/326251" id="326251">CVE-2007-5001 kernel asynchronous IO on a FIFO kernel panic</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/396861" id="396861">CVE-2007-6206 Issue with core dump owner</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/413731" id="413731">RHEL3: System hangs at unmount</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/425111" id="425111">CVE-2007-6151 I4L: fix isdn_ioctl memory issue</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/428961" id="428961">CVE-2008-0007 kernel: insufficient range checks in fault handlers with mremap</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/437312" id="437312">CVE-2008-1367 Kernel doesn't clear DF for signal handlers</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/439754" id="439754">CVE-2008-1375 kernel: race condition in dnotify (local DoS, local roothole possible)</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/443433" id="443433">CVE-2008-1669 kernel: add rcu_read_lock() to fcheck() in both dnotify, locks.c and fix fcntl store/load race in locks.c</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="AND">
    <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
    <criteria operator="OR">
     <criteria operator="AND">
      <criterion comment="kernel-BOOT is earlier than 0:2.4.21-57.EL" test_ref="oval:com.redhat.rhsa:tst:20080211001"/>
      <criterion comment="kernel-BOOT is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060140016"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="kernel-source is earlier than 0:2.4.21-57.EL" test_ref="oval:com.redhat.rhsa:tst:20080211003"/>
      <criterion comment="kernel-source is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060140012"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-57.EL" test_ref="oval:com.redhat.rhsa:tst:20080211005"/>
      <criterion comment="kernel-hugemem-unsupported is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060140014"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="kernel-smp is earlier than 0:2.4.21-57.EL" test_ref="oval:com.redhat.rhsa:tst:20080211007"/>
      <criterion comment="kernel-smp is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060140008"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="kernel is earlier than 0:2.4.21-57.EL" test_ref="oval:com.redhat.rhsa:tst:20080211009"/>
      <criterion comment="kernel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060140010"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-57.EL" test_ref="oval:com.redhat.rhsa:tst:20080211011"/>
      <criterion comment="kernel-smp-unsupported is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060140004"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="kernel-hugemem is earlier than 0:2.4.21-57.EL" test_ref="oval:com.redhat.rhsa:tst:20080211013"/>
      <criterion comment="kernel-hugemem is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060140018"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="kernel-unsupported is earlier than 0:2.4.21-57.EL" test_ref="oval:com.redhat.rhsa:tst:20080211015"/>
      <criterion comment="kernel-unsupported is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060140002"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="kernel-doc is earlier than 0:2.4.21-57.EL" test_ref="oval:com.redhat.rhsa:tst:20080211017"/>
      <criterion comment="kernel-doc is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060140006"/>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20080214" version="633">
   <metadata>
    <title>RHSA-2008:0214: squid security update (Moderate)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
     <platform>Red Hat Enterprise Linux 5</platform>
    </affected>
    <reference ref_id="RHSA-2008:0214" ref_url="https://access.redhat.com/errata/RHSA-2008:0214" source="RHSA"/>
    <reference ref_id="CVE-2008-1612" ref_url="https://access.redhat.com/security/cve/CVE-2008-1612" source="CVE"/>
    <description>Squid is a high-performance proxy caching server for Web clients,
supporting FTP, gopher, and HTTP data objects.

A flaw was found in the way squid manipulated HTTP headers for cached
objects stored in system memory. An attacker could use this flaw to cause a
squid child process to exit. This interrupted existing connections and made
proxy services unavailable. Note: the parent squid process started a new
child process, so this attack only resulted in a temporary denial of
service. (CVE-2008-1612)

Users of squid are advised to upgrade to these updated packages, which
contain a backported patch to resolve this issue.</description>
    <advisory from="secalert@redhat.com">
     <severity>Moderate</severity>
     <rights>Copyright 2008 Red Hat, Inc.</rights>
     <issued date="2008-04-08"/>
     <updated date="2008-04-08"/>
     <cve cvss2="4.3/AV:N/AC:M/Au:N/C:N/I:N/A:P" href="https://access.redhat.com/security/cve/CVE-2008-1612" public="20080322">CVE-2008-1612</cve>
     <bugzilla href="https://bugzilla.redhat.com/439801" id="439801">CVE-2008-1612 squid: regression in SQUID-2007:2 / CVE-2007-6239</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:5</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criterion comment="squid is earlier than 7:2.5.STABLE3-9.3E" test_ref="oval:com.redhat.rhsa:tst:20080214001"/>
     <criterion comment="squid is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060045002"/>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criterion comment="squid is earlier than 7:2.5.STABLE14-1.4E.el4_6.2" test_ref="oval:com.redhat.rhsa:tst:20080214004"/>
     <criterion comment="squid is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060045002"/>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 5 is installed" test_ref="oval:com.redhat.rhsa:tst:20070066013"/>
     <criterion comment="squid is earlier than 7:2.6.STABLE6-5.el5_1.3" test_ref="oval:com.redhat.rhsa:tst:20080214006"/>
     <criterion comment="squid is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20071130007"/>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20080223" version="633">
   <metadata>
    <title>RHSA-2008:0223: seamonkey security update (Critical)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
    </affected>
    <reference ref_id="RHSA-2008:0223" ref_url="https://access.redhat.com/errata/RHSA-2008:0223" source="RHSA"/>
    <reference ref_id="CVE-2008-1380" ref_url="https://access.redhat.com/security/cve/CVE-2008-1380" source="CVE"/>
    <description>SeaMonkey is an open source Web browser, advanced email and newsgroup
client, IRC chat client, and HTML editor.

A flaw was found in the processing of malformed JavaScript content. A web
page containing such malicious content could cause SeaMonkey to crash or,
potentially, execute arbitrary code as the user running SeaMonkey.
(CVE-2008-1380)

All SeaMonkey users should upgrade to these updated packages, which contain
backported patches to resolve these issues.</description>
    <advisory from="secalert@redhat.com">
     <severity>Critical</severity>
     <rights>Copyright 2008 Red Hat, Inc.</rights>
     <issued date="2008-04-16"/>
     <updated date="2008-04-16"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2008-1380" public="20080416">CVE-2008-1380</cve>
     <bugzilla href="https://bugzilla.redhat.com/440518" id="440518">CVE-2008-1380 Firefox JavaScript garbage collection crash</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="seamonkey is earlier than 0:1.0.9-0.17.el3" test_ref="oval:com.redhat.rhsa:tst:20080223001"/>
       <criterion comment="seamonkey is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578018"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.17.el3" test_ref="oval:com.redhat.rhsa:tst:20080223003"/>
       <criterion comment="seamonkey-js-debugger is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.17.el3" test_ref="oval:com.redhat.rhsa:tst:20080223005"/>
       <criterion comment="seamonkey-mail is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578020"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.17.el3" test_ref="oval:com.redhat.rhsa:tst:20080223007"/>
       <criterion comment="seamonkey-chat is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.17.el3" test_ref="oval:com.redhat.rhsa:tst:20080223009"/>
       <criterion comment="seamonkey-nspr is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578010"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.17.el3" test_ref="oval:com.redhat.rhsa:tst:20080223011"/>
       <criterion comment="seamonkey-nss is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578016"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.17.el3" test_ref="oval:com.redhat.rhsa:tst:20080223013"/>
       <criterion comment="seamonkey-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578014"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.17.el3" test_ref="oval:com.redhat.rhsa:tst:20080223015"/>
       <criterion comment="seamonkey-nss-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578012"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.17.el3" test_ref="oval:com.redhat.rhsa:tst:20080223017"/>
       <criterion comment="seamonkey-dom-inspector is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.17.el3" test_ref="oval:com.redhat.rhsa:tst:20080223019"/>
       <criterion comment="seamonkey-nspr-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578004"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-16.el4" test_ref="oval:com.redhat.rhsa:tst:20080223022"/>
       <criterion comment="seamonkey-js-debugger is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-16.el4" test_ref="oval:com.redhat.rhsa:tst:20080223023"/>
       <criterion comment="seamonkey-dom-inspector is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-mail is earlier than 0:1.0.9-16.el4" test_ref="oval:com.redhat.rhsa:tst:20080223024"/>
       <criterion comment="seamonkey-mail is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578020"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-devel is earlier than 0:1.0.9-16.el4" test_ref="oval:com.redhat.rhsa:tst:20080223025"/>
       <criterion comment="seamonkey-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578014"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey is earlier than 0:1.0.9-16.el4" test_ref="oval:com.redhat.rhsa:tst:20080223026"/>
       <criterion comment="seamonkey is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578018"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-chat is earlier than 0:1.0.9-16.el4" test_ref="oval:com.redhat.rhsa:tst:20080223027"/>
       <criterion comment="seamonkey-chat is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578006"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20080270" version="635">
   <metadata>
    <title>RHSA-2008:0270: libvorbis security update (Important)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
     <platform>Red Hat Enterprise Linux 5</platform>
    </affected>
    <reference ref_id="RHSA-2008:0270" ref_url="https://access.redhat.com/errata/RHSA-2008:0270" source="RHSA"/>
    <reference ref_id="CVE-2008-1419" ref_url="https://access.redhat.com/security/cve/CVE-2008-1419" source="CVE"/>
    <reference ref_id="CVE-2008-1420" ref_url="https://access.redhat.com/security/cve/CVE-2008-1420" source="CVE"/>
    <reference ref_id="CVE-2008-1423" ref_url="https://access.redhat.com/security/cve/CVE-2008-1423" source="CVE"/>
    <description>The libvorbis packages contain runtime libraries for use in programs that
support Ogg Vorbis. Ogg Vorbis is a fully open, non-proprietary, patent-and
royalty-free, general-purpose compressed audio format.

Will Drewry of the Google Security Team reported several flaws in the way
libvorbis processed audio data. An attacker could create a carefully
crafted OGG audio file in such a way that it could cause an application
linked with libvorbis to crash, or execute arbitrary code when it was
opened. (CVE-2008-1419, CVE-2008-1420, CVE-2008-1423)

Moreover, additional OGG file sanity-checks have been added to prevent
possible exploitation of similar issues in the future.

Users of libvorbis are advised to upgrade to these updated packages, which
contain backported patches to resolve these issues.</description>
    <advisory from="secalert@redhat.com">
     <severity>Important</severity>
     <rights>Copyright 2008 Red Hat, Inc.</rights>
     <issued date="2008-05-14"/>
     <updated date="2008-05-14"/>
     <cve cwe="CWE-835" href="https://access.redhat.com/security/cve/CVE-2008-1419" public="20080514">CVE-2008-1419</cve>
     <cve cwe="CWE-190" href="https://access.redhat.com/security/cve/CVE-2008-1420" public="20080514">CVE-2008-1420</cve>
     <cve cwe="CWE-190 CWE-122" href="https://access.redhat.com/security/cve/CVE-2008-1423" public="20080514">CVE-2008-1423</cve>
     <bugzilla href="https://bugzilla.redhat.com/440700" id="440700">CVE-2008-1419 vorbis: zero-dim codebooks can cause crash, infinite loop or heap overflow</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/440706" id="440706">CVE-2008-1420 vorbis: integer overflow in partvals computation</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/440709" id="440709">CVE-2008-1423 vorbis: integer oveflow caused by huge codebooks</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:5</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="libvorbis-devel is earlier than 1:1.0-10.el3" test_ref="oval:com.redhat.rhsa:tst:20080270001"/>
       <criterion comment="libvorbis-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070845004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="libvorbis is earlier than 1:1.0-10.el3" test_ref="oval:com.redhat.rhsa:tst:20080270003"/>
       <criterion comment="libvorbis is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070845002"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="libvorbis-devel is earlier than 1:1.1.0-3.el4_6.1" test_ref="oval:com.redhat.rhsa:tst:20080270006"/>
       <criterion comment="libvorbis-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070845004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="libvorbis is earlier than 1:1.1.0-3.el4_6.1" test_ref="oval:com.redhat.rhsa:tst:20080270007"/>
       <criterion comment="libvorbis is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070845002"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 5 is installed" test_ref="oval:com.redhat.rhsa:tst:20070066013"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="libvorbis-devel is earlier than 1:1.1.2-3.el5_1.2" test_ref="oval:com.redhat.rhsa:tst:20080270009"/>
       <criterion comment="libvorbis-devel is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070845012"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="libvorbis is earlier than 1:1.1.2-3.el5_1.2" test_ref="oval:com.redhat.rhsa:tst:20080270011"/>
       <criterion comment="libvorbis is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070845010"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20080287" version="632">
   <metadata>
    <title>RHSA-2008:0287: libxslt security update (Important)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
     <platform>Red Hat Enterprise Linux 5</platform>
    </affected>
    <reference ref_id="RHSA-2008:0287" ref_url="https://access.redhat.com/errata/RHSA-2008:0287" source="RHSA"/>
    <reference ref_id="CVE-2008-1767" ref_url="https://access.redhat.com/security/cve/CVE-2008-1767" source="CVE"/>
    <description>libxslt is a C library, based on libxml, for parsing of XML files into
other textual formats (eg HTML, plain text and other XML representations of
the underlying data). It uses the standard XSLT stylesheet transformation
mechanism and, being written in plain ANSI C, is designed to be simple to
incorporate into other applications

Anthony de Almeida Lopes reported the libxslt library did not properly
process long &quot;transformation match&quot; conditions in the XSL stylesheet files.
An attacker could create a malicious XSL file that would cause a crash, or,
possibly, execute and arbitrary code with the privileges of the application
using libxslt library to perform XSL transformations. (CVE-2008-1767)

All users are advised to upgrade to these updated packages, which contain a
backported patch to resolve this issue.</description>
    <advisory from="secalert@redhat.com">
     <severity>Important</severity>
     <rights>Copyright 2008 Red Hat, Inc.</rights>
     <issued date="2008-05-21"/>
     <updated date="2008-05-21"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2008-1767" public="20080410">CVE-2008-1767</cve>
     <bugzilla href="https://bugzilla.redhat.com/446809" id="446809">CVE-2008-1767 libxslt: fixed-sized steps array overflow via &quot;template match&quot; condition in XSL file</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:5</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="libxslt-devel is earlier than 0:1.0.33-6" test_ref="oval:com.redhat.rhsa:tst:20080287001"/>
       <criterion comment="libxslt-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20080287002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="libxslt is earlier than 0:1.0.33-6" test_ref="oval:com.redhat.rhsa:tst:20080287003"/>
       <criterion comment="libxslt is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20080287004"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="libxslt is earlier than 0:1.1.11-1.el4_6.1" test_ref="oval:com.redhat.rhsa:tst:20080287006"/>
       <criterion comment="libxslt is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20080287004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="libxslt-python is earlier than 0:1.1.11-1.el4_6.1" test_ref="oval:com.redhat.rhsa:tst:20080287007"/>
       <criterion comment="libxslt-python is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20080287008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="libxslt-devel is earlier than 0:1.1.11-1.el4_6.1" test_ref="oval:com.redhat.rhsa:tst:20080287009"/>
       <criterion comment="libxslt-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20080287002"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 5 is installed" test_ref="oval:com.redhat.rhsa:tst:20070066013"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="libxslt-python is earlier than 0:1.1.17-2.el5_1.1" test_ref="oval:com.redhat.rhsa:tst:20080287011"/>
       <criterion comment="libxslt-python is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20080287012"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="libxslt is earlier than 0:1.1.17-2.el5_1.1" test_ref="oval:com.redhat.rhsa:tst:20080287013"/>
       <criterion comment="libxslt is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20080287014"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="libxslt-devel is earlier than 0:1.1.17-2.el5_1.1" test_ref="oval:com.redhat.rhsa:tst:20080287015"/>
       <criterion comment="libxslt-devel is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20080287016"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20080288" version="634">
   <metadata>
    <title>RHSA-2008:0288: samba security update (Critical)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
    </affected>
    <reference ref_id="RHSA-2008:0288" ref_url="https://access.redhat.com/errata/RHSA-2008:0288" source="RHSA"/>
    <reference ref_id="CVE-2008-1105" ref_url="https://access.redhat.com/security/cve/CVE-2008-1105" source="CVE"/>
    <description>Samba is a suite of programs used by machines to share files, printers, and
other information.

A heap-based buffer overflow flaw was found in the way Samba clients handle
over-sized packets. If a client connected to a malicious Samba server, it
was possible to execute arbitrary code as the Samba client user. It was
also possible for a remote user to send a specially crafted print request
to a Samba server that could result in the server executing the vulnerable
client code, resulting in arbitrary code execution with the permissions of
the Samba server. (CVE-2008-1105)

Red Hat would like to thank Alin Rad Pop of Secunia Research for
responsibly disclosing this issue.

Users of Samba are advised to upgrade to these updated packages, which
contain a backported patch to resolve this issue.</description>
    <advisory from="secalert@redhat.com">
     <severity>Critical</severity>
     <rights>Copyright 2008 Red Hat, Inc.</rights>
     <issued date="2008-05-28"/>
     <updated date="2008-05-28"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2008-1105" public="20080528">CVE-2008-1105</cve>
     <bugzilla href="https://bugzilla.redhat.com/446724" id="446724">CVE-2008-1105 Samba client buffer overflow</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="samba-swat is earlier than 0:3.0.9-1.3E.15" test_ref="oval:com.redhat.rhsa:tst:20080288001"/>
       <criterion comment="samba-swat is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060591006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="samba-client is earlier than 0:3.0.9-1.3E.15" test_ref="oval:com.redhat.rhsa:tst:20080288003"/>
       <criterion comment="samba-client is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060591008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="samba-common is earlier than 0:3.0.9-1.3E.15" test_ref="oval:com.redhat.rhsa:tst:20080288005"/>
       <criterion comment="samba-common is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060591002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="samba is earlier than 0:3.0.9-1.3E.15" test_ref="oval:com.redhat.rhsa:tst:20080288007"/>
       <criterion comment="samba is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060591004"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="samba-swat is earlier than 0:3.0.25b-1.el4_6.5" test_ref="oval:com.redhat.rhsa:tst:20080288010"/>
       <criterion comment="samba-swat is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060591006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="samba-client is earlier than 0:3.0.25b-1.el4_6.5" test_ref="oval:com.redhat.rhsa:tst:20080288011"/>
       <criterion comment="samba-client is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060591008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="samba-common is earlier than 0:3.0.25b-1.el4_6.5" test_ref="oval:com.redhat.rhsa:tst:20080288012"/>
       <criterion comment="samba-common is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060591002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="samba is earlier than 0:3.0.25b-1.el4_6.5" test_ref="oval:com.redhat.rhsa:tst:20080288013"/>
       <criterion comment="samba is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060591004"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20080498" version="633">
   <metadata>
    <title>RHSA-2008:0498: cups security update (Moderate)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
     <platform>Red Hat Enterprise Linux 5</platform>
    </affected>
    <reference ref_id="RHSA-2008:0498" ref_url="https://access.redhat.com/errata/RHSA-2008:0498" source="RHSA"/>
    <reference ref_id="CVE-2008-1722" ref_url="https://access.redhat.com/security/cve/CVE-2008-1722" source="CVE"/>
    <description>The Common UNIX Printing System (CUPS) provides a portable printing layer
for UNIX operating systems.

An integer overflow flaw leading to a heap buffer overflow was discovered
in the Portable Network Graphics (PNG) decoding routines used by the CUPS
image converting filters &quot;imagetops&quot; and &quot;imagetoraster&quot;. An attacker could
create a malicious PNG file that could possibly execute arbitrary code as
the &quot;lp&quot; user if the file was printed. (CVE-2008-1722)

All CUPS users are advised to upgrade to these updated packages, which
contain backported patch to resolve this issue.</description>
    <advisory from="secalert@redhat.com">
     <severity>Moderate</severity>
     <rights>Copyright 2008 Red Hat, Inc.</rights>
     <issued date="2008-06-05"/>
     <updated date="2008-06-05"/>
     <cve cwe="CWE-190" href="https://access.redhat.com/security/cve/CVE-2008-1722" public="20080408">CVE-2008-1722</cve>
     <bugzilla href="https://bugzilla.redhat.com/441692" id="441692">CVE-2008-1722 cups: integer overflow in the image filter</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:5</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="cups is earlier than 1:1.1.17-13.3.53" test_ref="oval:com.redhat.rhsa:tst:20080498001"/>
       <criterion comment="cups is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060163006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="cups-libs is earlier than 1:1.1.17-13.3.53" test_ref="oval:com.redhat.rhsa:tst:20080498003"/>
       <criterion comment="cups-libs is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060163004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="cups-devel is earlier than 1:1.1.17-13.3.53" test_ref="oval:com.redhat.rhsa:tst:20080498005"/>
       <criterion comment="cups-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060163002"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="cups is earlier than 1:1.1.22-0.rc1.9.20.2.el4_6.8" test_ref="oval:com.redhat.rhsa:tst:20080498008"/>
       <criterion comment="cups is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060163006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="cups-libs is earlier than 1:1.1.22-0.rc1.9.20.2.el4_6.8" test_ref="oval:com.redhat.rhsa:tst:20080498009"/>
       <criterion comment="cups-libs is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060163004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="cups-devel is earlier than 1:1.1.22-0.rc1.9.20.2.el4_6.8" test_ref="oval:com.redhat.rhsa:tst:20080498010"/>
       <criterion comment="cups-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060163002"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 5 is installed" test_ref="oval:com.redhat.rhsa:tst:20070066013"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="cups-devel is earlier than 1:1.2.4-11.18.el5_2.1" test_ref="oval:com.redhat.rhsa:tst:20080498012"/>
       <criterion comment="cups-devel is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070123015"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="cups-lpd is earlier than 1:1.2.4-11.18.el5_2.1" test_ref="oval:com.redhat.rhsa:tst:20080498014"/>
       <criterion comment="cups-lpd is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070123019"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="cups is earlier than 1:1.2.4-11.18.el5_2.1" test_ref="oval:com.redhat.rhsa:tst:20080498016"/>
       <criterion comment="cups is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070123013"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="cups-libs is earlier than 1:1.2.4-11.18.el5_2.1" test_ref="oval:com.redhat.rhsa:tst:20080498018"/>
       <criterion comment="cups-libs is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070123017"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20080502" version="633">
   <metadata>
    <title>RHSA-2008:0502: XFree86 security update (Important)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
    </affected>
    <reference ref_id="RHSA-2008:0502" ref_url="https://access.redhat.com/errata/RHSA-2008:0502" source="RHSA"/>
    <reference ref_id="CVE-2008-1377" ref_url="https://access.redhat.com/security/cve/CVE-2008-1377" source="CVE"/>
    <reference ref_id="CVE-2008-1379" ref_url="https://access.redhat.com/security/cve/CVE-2008-1379" source="CVE"/>
    <reference ref_id="CVE-2008-2360" ref_url="https://access.redhat.com/security/cve/CVE-2008-2360" source="CVE"/>
    <reference ref_id="CVE-2008-2361" ref_url="https://access.redhat.com/security/cve/CVE-2008-2361" source="CVE"/>
    <description>XFree86 is an implementation of the X Window System, which provides the
core functionality for the Linux graphical desktop.

An input validation flaw was discovered in X.org's Security and Record
extensions. A malicious authorized client could exploit this issue to cause
a denial of service (crash) or, potentially, execute arbitrary code with
root privileges on the X.Org server. (CVE-2008-1377)

Multiple integer overflow flaws were found in X.org's Render extension. A
malicious authorized client could exploit these issues to cause a denial of
service (crash) or, potentially, execute arbitrary code with root
privileges on the X.Org server. (CVE-2008-2360, CVE-2008-2361)

An input validation flaw was discovered in X.org's MIT-SHM extension. A
client connected to the X.org server could read arbitrary server memory.
This could result in the sensitive data of other users of the X.org server
being disclosed. (CVE-2008-1379)

Users of XFree86 are advised to upgrade to these updated packages, which
contain backported patches to resolve these issues.</description>
    <advisory from="secalert@redhat.com">
     <severity>Important</severity>
     <rights>Copyright 2008 Red Hat, Inc.</rights>
     <issued date="2008-06-11"/>
     <updated date="2008-06-13"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2008-1377" public="20080611">CVE-2008-1377</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2008-1379" impact="moderate" public="20080611">CVE-2008-1379</cve>
     <cve cwe="CWE-122" href="https://access.redhat.com/security/cve/CVE-2008-2360" public="20080611">CVE-2008-2360</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2008-2361" public="20080611">CVE-2008-2361</cve>
     <bugzilla href="https://bugzilla.redhat.com/445403" id="445403">CVE-2008-1377 X.org Record and Security extensions memory corruption</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/445414" id="445414">CVE-2008-1379 X.org MIT-SHM extension arbitrary memory read</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/448783" id="448783">CVE-2008-2360 X.org Render extension AllocateGlyph() heap buffer overflow</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/448784" id="448784">CVE-2008-2361 X.org Render extension ProcRenderCreateCursor() crash</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="AND">
    <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
    <criteria operator="OR">
     <criteria operator="AND">
      <criterion comment="XFree86-Mesa-libGLU is earlier than 0:4.3.0-128.EL" test_ref="oval:com.redhat.rhsa:tst:20080502001"/>
      <criterion comment="XFree86-Mesa-libGLU is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635002"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-xfs is earlier than 0:4.3.0-128.EL" test_ref="oval:com.redhat.rhsa:tst:20080502003"/>
      <criterion comment="XFree86-xfs is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635052"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-ISO8859-9-75dpi-fonts is earlier than 0:4.3.0-128.EL" test_ref="oval:com.redhat.rhsa:tst:20080502005"/>
      <criterion comment="XFree86-ISO8859-9-75dpi-fonts is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635012"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-base-fonts is earlier than 0:4.3.0-128.EL" test_ref="oval:com.redhat.rhsa:tst:20080502007"/>
      <criterion comment="XFree86-base-fonts is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635008"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-sdk is earlier than 0:4.3.0-128.EL" test_ref="oval:com.redhat.rhsa:tst:20080502009"/>
      <criterion comment="XFree86-sdk is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635050"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-ISO8859-14-75dpi-fonts is earlier than 0:4.3.0-128.EL" test_ref="oval:com.redhat.rhsa:tst:20080502011"/>
      <criterion comment="XFree86-ISO8859-14-75dpi-fonts is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635034"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-ISO8859-14-100dpi-fonts is earlier than 0:4.3.0-128.EL" test_ref="oval:com.redhat.rhsa:tst:20080502013"/>
      <criterion comment="XFree86-ISO8859-14-100dpi-fonts is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635010"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-Xvfb is earlier than 0:4.3.0-128.EL" test_ref="oval:com.redhat.rhsa:tst:20080502015"/>
      <criterion comment="XFree86-Xvfb is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635028"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-font-utils is earlier than 0:4.3.0-128.EL" test_ref="oval:com.redhat.rhsa:tst:20080502017"/>
      <criterion comment="XFree86-font-utils is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635006"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-cyrillic-fonts is earlier than 0:4.3.0-128.EL" test_ref="oval:com.redhat.rhsa:tst:20080502019"/>
      <criterion comment="XFree86-cyrillic-fonts is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635014"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-devel is earlier than 0:4.3.0-128.EL" test_ref="oval:com.redhat.rhsa:tst:20080502021"/>
      <criterion comment="XFree86-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635038"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-truetype-fonts is earlier than 0:4.3.0-128.EL" test_ref="oval:com.redhat.rhsa:tst:20080502023"/>
      <criterion comment="XFree86-truetype-fonts is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635020"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-ISO8859-15-75dpi-fonts is earlier than 0:4.3.0-128.EL" test_ref="oval:com.redhat.rhsa:tst:20080502025"/>
      <criterion comment="XFree86-ISO8859-15-75dpi-fonts is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635040"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-xdm is earlier than 0:4.3.0-128.EL" test_ref="oval:com.redhat.rhsa:tst:20080502027"/>
      <criterion comment="XFree86-xdm is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635022"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-ISO8859-15-100dpi-fonts is earlier than 0:4.3.0-128.EL" test_ref="oval:com.redhat.rhsa:tst:20080502029"/>
      <criterion comment="XFree86-ISO8859-15-100dpi-fonts is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635044"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-75dpi-fonts is earlier than 0:4.3.0-128.EL" test_ref="oval:com.redhat.rhsa:tst:20080502031"/>
      <criterion comment="XFree86-75dpi-fonts is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635026"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-syriac-fonts is earlier than 0:4.3.0-128.EL" test_ref="oval:com.redhat.rhsa:tst:20080502033"/>
      <criterion comment="XFree86-syriac-fonts is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635024"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-libs-data is earlier than 0:4.3.0-128.EL" test_ref="oval:com.redhat.rhsa:tst:20080502035"/>
      <criterion comment="XFree86-libs-data is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635054"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-doc is earlier than 0:4.3.0-128.EL" test_ref="oval:com.redhat.rhsa:tst:20080502037"/>
      <criterion comment="XFree86-doc is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635036"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86 is earlier than 0:4.3.0-128.EL" test_ref="oval:com.redhat.rhsa:tst:20080502039"/>
      <criterion comment="XFree86 is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635030"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-Mesa-libGL is earlier than 0:4.3.0-128.EL" test_ref="oval:com.redhat.rhsa:tst:20080502041"/>
      <criterion comment="XFree86-Mesa-libGL is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635046"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-libs is earlier than 0:4.3.0-128.EL" test_ref="oval:com.redhat.rhsa:tst:20080502043"/>
      <criterion comment="XFree86-libs is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635042"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-xauth is earlier than 0:4.3.0-128.EL" test_ref="oval:com.redhat.rhsa:tst:20080502045"/>
      <criterion comment="XFree86-xauth is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635018"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-twm is earlier than 0:4.3.0-128.EL" test_ref="oval:com.redhat.rhsa:tst:20080502047"/>
      <criterion comment="XFree86-twm is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635056"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-100dpi-fonts is earlier than 0:4.3.0-128.EL" test_ref="oval:com.redhat.rhsa:tst:20080502049"/>
      <criterion comment="XFree86-100dpi-fonts is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635048"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-ISO8859-2-75dpi-fonts is earlier than 0:4.3.0-128.EL" test_ref="oval:com.redhat.rhsa:tst:20080502051"/>
      <criterion comment="XFree86-ISO8859-2-75dpi-fonts is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635004"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-Xnest is earlier than 0:4.3.0-128.EL" test_ref="oval:com.redhat.rhsa:tst:20080502053"/>
      <criterion comment="XFree86-Xnest is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635058"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-tools is earlier than 0:4.3.0-128.EL" test_ref="oval:com.redhat.rhsa:tst:20080502055"/>
      <criterion comment="XFree86-tools is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635032"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-ISO8859-9-100dpi-fonts is earlier than 0:4.3.0-128.EL" test_ref="oval:com.redhat.rhsa:tst:20080502057"/>
      <criterion comment="XFree86-ISO8859-9-100dpi-fonts is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635060"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="XFree86-ISO8859-2-100dpi-fonts is earlier than 0:4.3.0-128.EL" test_ref="oval:com.redhat.rhsa:tst:20080502059"/>
      <criterion comment="XFree86-ISO8859-2-100dpi-fonts is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060635016"/>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20080516" version="638">
   <metadata>
    <title>RHSA-2008:0516: evolution security update (Critical)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
    </affected>
    <reference ref_id="RHSA-2008:0516" ref_url="https://access.redhat.com/errata/RHSA-2008:0516" source="RHSA"/>
    <reference ref_id="CVE-2008-1108" ref_url="https://access.redhat.com/security/cve/CVE-2008-1108" source="CVE"/>
    <description>Evolution is the integrated collection of e-mail, calendaring, contact
management, communications and personal information management (PIM) tools
for the GNOME desktop environment.

A flaw was found in the way Evolution parsed iCalendar timezone attachment
data. If mail which included a carefully crafted iCalendar attachment was
opened, arbitrary code could be executed as the user running Evolution.
(CVE-2008-1108)

Red Hat would like to thank Alin Rad Pop of Secunia Research for
responsibly disclosing this issue.

All users of Evolution should upgrade to these updated packages, which
contains a backported patch which resolves this issue.</description>
    <advisory from="secalert@redhat.com">
     <severity>Critical</severity>
     <rights>Copyright 2008 Red Hat, Inc.</rights>
     <issued date="2008-06-04"/>
     <updated date="2008-06-04"/>
     <cve cvss2="7.5/AV:N/AC:L/Au:N/C:P/I:P/A:P" cwe="CWE-119" href="https://access.redhat.com/security/cve/CVE-2008-1108" public="20080604">CVE-2008-1108</cve>
     <bugzilla href="https://bugzilla.redhat.com/448540" id="448540">CVE-2008-1108 evolution: iCalendar buffer overflow via large timezone specification</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="evolution-devel is earlier than 0:1.4.5-22.el3" test_ref="oval:com.redhat.rhsa:tst:20080516001"/>
       <criterion comment="evolution-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070353002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="evolution is earlier than 0:1.4.5-22.el3" test_ref="oval:com.redhat.rhsa:tst:20080516003"/>
       <criterion comment="evolution is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070353004"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="evolution-devel is earlier than 0:2.0.2-35.0.4.el4_6.2" test_ref="oval:com.redhat.rhsa:tst:20080516006"/>
       <criterion comment="evolution-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070353002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="evolution is earlier than 0:2.0.2-35.0.4.el4_6.2" test_ref="oval:com.redhat.rhsa:tst:20080516007"/>
       <criterion comment="evolution is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070353004"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20080522" version="634">
   <metadata>
    <title>RHSA-2008:0522: perl security update (Important)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
     <platform>Red Hat Enterprise Linux 5</platform>
    </affected>
    <reference ref_id="RHSA-2008:0522" ref_url="https://access.redhat.com/errata/RHSA-2008:0522" source="RHSA"/>
    <reference ref_id="CVE-2008-1927" ref_url="https://access.redhat.com/security/cve/CVE-2008-1927" source="CVE"/>
    <description>Perl is a high-level programming language commonly used for system
administration utilities and Web programming.

A flaw was found in Perl's regular expression engine. A specially crafted
regular expression with Unicode characters could trigger a buffer overflow,
causing Perl to crash, or possibly execute arbitrary code with the
privileges of the user running Perl. (CVE-2008-1927)

Users of perl are advised to upgrade to these updated packages, which
contain a backported patch to resolve this issue.</description>
    <advisory from="secalert@redhat.com">
     <severity>Important</severity>
     <rights>Copyright 2008 Red Hat, Inc.</rights>
     <issued date="2008-06-11"/>
     <updated date="2008-06-13"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2008-1927" public="20071204">CVE-2008-1927</cve>
     <bugzilla href="https://bugzilla.redhat.com/443928" id="443928">CVE-2008-1927 perl: heap corruption by regular expressions with utf8 characters</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:5</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="perl is earlier than 2:5.8.0-98.EL3" test_ref="oval:com.redhat.rhsa:tst:20080522001"/>
       <criterion comment="perl is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070966004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="perl-suidperl is earlier than 2:5.8.0-98.EL3" test_ref="oval:com.redhat.rhsa:tst:20080522003"/>
       <criterion comment="perl-suidperl is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070966010"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="perl-DB_File is earlier than 2:1.806-98.EL3" test_ref="oval:com.redhat.rhsa:tst:20080522005"/>
       <criterion comment="perl-DB_File is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070966008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="perl-CGI is earlier than 2:2.89-98.EL3" test_ref="oval:com.redhat.rhsa:tst:20080522007"/>
       <criterion comment="perl-CGI is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070966006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="perl-CPAN is earlier than 2:1.61-98.EL3" test_ref="oval:com.redhat.rhsa:tst:20080522009"/>
       <criterion comment="perl-CPAN is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070966002"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="perl-suidperl is earlier than 3:5.8.5-36.el4_6.3" test_ref="oval:com.redhat.rhsa:tst:20080522012"/>
       <criterion comment="perl-suidperl is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070966010"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="perl is earlier than 3:5.8.5-36.el4_6.3" test_ref="oval:com.redhat.rhsa:tst:20080522013"/>
       <criterion comment="perl is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070966004"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 5 is installed" test_ref="oval:com.redhat.rhsa:tst:20070066013"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="perl-suidperl is earlier than 4:5.8.8-10.el5_2.3" test_ref="oval:com.redhat.rhsa:tst:20080522015"/>
       <criterion comment="perl-suidperl is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070966016"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="perl is earlier than 4:5.8.8-10.el5_2.3" test_ref="oval:com.redhat.rhsa:tst:20080522017"/>
       <criterion comment="perl is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070966018"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20080529" version="634">
   <metadata>
    <title>RHSA-2008:0529: net-snmp security update (Moderate)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
     <platform>Red Hat Enterprise Linux 5</platform>
    </affected>
    <reference ref_id="RHSA-2008:0529" ref_url="https://access.redhat.com/errata/RHSA-2008:0529" source="RHSA"/>
    <reference ref_id="CVE-2008-0960" ref_url="https://access.redhat.com/security/cve/CVE-2008-0960" source="CVE"/>
    <reference ref_id="CVE-2008-2292" ref_url="https://access.redhat.com/security/cve/CVE-2008-2292" source="CVE"/>
    <description>The Simple Network Management Protocol (SNMP) is a protocol used for
network management.

A flaw was found in the way Net-SNMP checked an SNMPv3 packet's Keyed-Hash
Message Authentication Code (HMAC). An attacker could use this flaw to
spoof an authenticated SNMPv3 packet. (CVE-2008-0960)

A buffer overflow was found in the Perl bindings for Net-SNMP. This could
be exploited if an attacker could convince an application using the
Net-SNMP Perl module to connect to a malicious SNMP agent. (CVE-2008-2292)

All users of net-snmp should upgrade to these updated packages, which
contain backported patches to resolve these issues.</description>
    <advisory from="secalert@redhat.com">
     <severity>Moderate</severity>
     <rights>Copyright 2008 Red Hat, Inc.</rights>
     <issued date="2008-06-10"/>
     <updated date="2008-06-10"/>
     <cve cvss2="5.8/AV:N/AC:M/Au:N/C:P/I:P/A:N" href="https://access.redhat.com/security/cve/CVE-2008-0960" public="20080609">CVE-2008-0960</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2008-2292" public="20071105">CVE-2008-2292</cve>
     <bugzilla href="https://bugzilla.redhat.com/447262" id="447262">CVE-2008-2292 net-snmp: buffer overflow in perl module's Perl Module __snprint_value()</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/447974" id="447974">CVE-2008-0960 net-snmp SNMPv3 authentication bypass (VU#877044)</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:5</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="net-snmp-utils is earlier than 0:5.0.9-2.30E.24" test_ref="oval:com.redhat.rhsa:tst:20080529001"/>
       <criterion comment="net-snmp-utils is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20071045002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="net-snmp-devel is earlier than 0:5.0.9-2.30E.24" test_ref="oval:com.redhat.rhsa:tst:20080529003"/>
       <criterion comment="net-snmp-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20071045004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="net-snmp-libs is earlier than 0:5.0.9-2.30E.24" test_ref="oval:com.redhat.rhsa:tst:20080529005"/>
       <criterion comment="net-snmp-libs is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20071045006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="net-snmp-perl is earlier than 0:5.0.9-2.30E.24" test_ref="oval:com.redhat.rhsa:tst:20080529007"/>
       <criterion comment="net-snmp-perl is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20071045008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="net-snmp is earlier than 0:5.0.9-2.30E.24" test_ref="oval:com.redhat.rhsa:tst:20080529009"/>
       <criterion comment="net-snmp is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20071045010"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="net-snmp-utils is earlier than 0:5.1.2-11.el4_6.11.3" test_ref="oval:com.redhat.rhsa:tst:20080529012"/>
       <criterion comment="net-snmp-utils is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20071045002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="net-snmp-devel is earlier than 0:5.1.2-11.el4_6.11.3" test_ref="oval:com.redhat.rhsa:tst:20080529013"/>
       <criterion comment="net-snmp-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20071045004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="net-snmp-perl is earlier than 0:5.1.2-11.el4_6.11.3" test_ref="oval:com.redhat.rhsa:tst:20080529014"/>
       <criterion comment="net-snmp-perl is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20071045008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="net-snmp is earlier than 0:5.1.2-11.el4_6.11.3" test_ref="oval:com.redhat.rhsa:tst:20080529015"/>
       <criterion comment="net-snmp is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20071045010"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="net-snmp-libs is earlier than 0:5.1.2-11.el4_6.11.3" test_ref="oval:com.redhat.rhsa:tst:20080529016"/>
       <criterion comment="net-snmp-libs is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20071045006"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 5 is installed" test_ref="oval:com.redhat.rhsa:tst:20070066013"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="net-snmp-libs is earlier than 1:5.3.1-24.el5_2.1" test_ref="oval:com.redhat.rhsa:tst:20080529018"/>
       <criterion comment="net-snmp-libs is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20071045021"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="net-snmp is earlier than 1:5.3.1-24.el5_2.1" test_ref="oval:com.redhat.rhsa:tst:20080529020"/>
       <criterion comment="net-snmp is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20071045023"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="net-snmp-devel is earlier than 1:5.3.1-24.el5_2.1" test_ref="oval:com.redhat.rhsa:tst:20080529022"/>
       <criterion comment="net-snmp-devel is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20071045019"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="net-snmp-utils is earlier than 1:5.3.1-24.el5_2.1" test_ref="oval:com.redhat.rhsa:tst:20080529024"/>
       <criterion comment="net-snmp-utils is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20071045027"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="net-snmp-perl is earlier than 1:5.3.1-24.el5_2.1" test_ref="oval:com.redhat.rhsa:tst:20080529026"/>
       <criterion comment="net-snmp-perl is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20071045025"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20080533" version="633">
   <metadata>
    <title>RHSA-2008:0533: bind security update (Important)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
     <platform>Red Hat Enterprise Linux 5</platform>
    </affected>
    <reference ref_id="RHSA-2008:0533" ref_url="https://access.redhat.com/errata/RHSA-2008:0533" source="RHSA"/>
    <reference ref_id="CVE-2008-1447" ref_url="https://access.redhat.com/security/cve/CVE-2008-1447" source="CVE"/>
    <description>ISC BIND (Berkeley Internet Name Domain) is an implementation of the DNS
(Domain Name System) protocols.

The DNS protocol protects against spoofing attacks by requiring an attacker
to predict both the DNS transaction ID and UDP source port of a request. In
recent years, a number of papers have found problems with DNS
implementations which make it easier for an attacker to perform DNS
cache-poisoning attacks.

Previous versions of BIND did not use randomized UDP source ports. If an
attacker was able to predict the random DNS transaction ID, this could make
DNS cache-poisoning attacks easier. In order to provide more resilience,
BIND has been updated to use a range of random UDP source ports.
(CVE-2008-1447)

Note: This errata also updates SELinux policy on Red Hat Enterprise Linux 4
and 5 to allow BIND to use random UDP source ports.

Users of BIND are advised to upgrade to these updated packages, which
contain a backported patch to add this functionality.

Red Hat would like to thank Dan Kaminsky for reporting this issue.</description>
    <advisory from="secalert@redhat.com">
     <severity>Important</severity>
     <rights>Copyright 2008 Red Hat, Inc.</rights>
     <issued date="2008-07-10"/>
     <updated date="2008-07-10"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2008-1447" public="20080708:1800">CVE-2008-1447</cve>
     <bugzilla href="https://bugzilla.redhat.com/449345" id="449345">CVE-2008-1447 bind: implement source UDP port randomization (CERT VU#800113)</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/454852" id="454852">Default caching-nameserver configuration blocks fixes for CVE-2008-1447 (rhel-5)</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:5</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="bind-devel is earlier than 20:9.2.4-22.el3" test_ref="oval:com.redhat.rhsa:tst:20080533001"/>
       <criterion comment="bind-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070044008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="bind is earlier than 20:9.2.4-22.el3" test_ref="oval:com.redhat.rhsa:tst:20080533003"/>
       <criterion comment="bind is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070044010"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="bind-libs is earlier than 20:9.2.4-22.el3" test_ref="oval:com.redhat.rhsa:tst:20080533005"/>
       <criterion comment="bind-libs is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070044002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="bind-utils is earlier than 20:9.2.4-22.el3" test_ref="oval:com.redhat.rhsa:tst:20080533007"/>
       <criterion comment="bind-utils is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070044004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="bind-chroot is earlier than 20:9.2.4-22.el3" test_ref="oval:com.redhat.rhsa:tst:20080533009"/>
       <criterion comment="bind-chroot is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070044006"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="bind is earlier than 20:9.2.4-28.0.1.el4" test_ref="oval:com.redhat.rhsa:tst:20080533012"/>
       <criterion comment="bind is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070044010"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="bind-libs is earlier than 20:9.2.4-28.0.1.el4" test_ref="oval:com.redhat.rhsa:tst:20080533013"/>
       <criterion comment="bind-libs is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070044002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="bind-devel is earlier than 20:9.2.4-28.0.1.el4" test_ref="oval:com.redhat.rhsa:tst:20080533014"/>
       <criterion comment="bind-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070044008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="bind-chroot is earlier than 20:9.2.4-28.0.1.el4" test_ref="oval:com.redhat.rhsa:tst:20080533015"/>
       <criterion comment="bind-chroot is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070044006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="bind-utils is earlier than 20:9.2.4-28.0.1.el4" test_ref="oval:com.redhat.rhsa:tst:20080533016"/>
       <criterion comment="bind-utils is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070044004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="selinux-policy-targeted is earlier than 0:1.17.30-2.150.el4" test_ref="oval:com.redhat.rhsa:tst:20080533017"/>
       <criterion comment="selinux-policy-targeted is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20080533018"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="selinux-policy-targeted-sources is earlier than 0:1.17.30-2.150.el4" test_ref="oval:com.redhat.rhsa:tst:20080533019"/>
       <criterion comment="selinux-policy-targeted-sources is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20080533020"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 5 is installed" test_ref="oval:com.redhat.rhsa:tst:20070066013"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="selinux-policy-mls is earlier than 0:2.4.6-137.1.el5_2" test_ref="oval:com.redhat.rhsa:tst:20080533022"/>
       <criterion comment="selinux-policy-mls is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20080533023"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="selinux-policy-targeted is earlier than 0:2.4.6-137.1.el5_2" test_ref="oval:com.redhat.rhsa:tst:20080533024"/>
       <criterion comment="selinux-policy-targeted is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20080533025"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="selinux-policy is earlier than 0:2.4.6-137.1.el5_2" test_ref="oval:com.redhat.rhsa:tst:20080533026"/>
       <criterion comment="selinux-policy is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20080533027"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="selinux-policy-strict is earlier than 0:2.4.6-137.1.el5_2" test_ref="oval:com.redhat.rhsa:tst:20080533028"/>
       <criterion comment="selinux-policy-strict is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20080533029"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="selinux-policy-devel is earlier than 0:2.4.6-137.1.el5_2" test_ref="oval:com.redhat.rhsa:tst:20080533030"/>
       <criterion comment="selinux-policy-devel is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20080533031"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="bind-devel is earlier than 30:9.3.4-6.0.2.P1.el5_2" test_ref="oval:com.redhat.rhsa:tst:20080533032"/>
       <criterion comment="bind-devel is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070740031"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="bind-sdb is earlier than 30:9.3.4-6.0.2.P1.el5_2" test_ref="oval:com.redhat.rhsa:tst:20080533034"/>
       <criterion comment="bind-sdb is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070740025"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="bind-utils is earlier than 30:9.3.4-6.0.2.P1.el5_2" test_ref="oval:com.redhat.rhsa:tst:20080533036"/>
       <criterion comment="bind-utils is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070740019"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="bind-libs is earlier than 30:9.3.4-6.0.2.P1.el5_2" test_ref="oval:com.redhat.rhsa:tst:20080533038"/>
       <criterion comment="bind-libs is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070740029"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="bind-chroot is earlier than 30:9.3.4-6.0.2.P1.el5_2" test_ref="oval:com.redhat.rhsa:tst:20080533040"/>
       <criterion comment="bind-chroot is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070740033"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="bind-libbind-devel is earlier than 30:9.3.4-6.0.2.P1.el5_2" test_ref="oval:com.redhat.rhsa:tst:20080533042"/>
       <criterion comment="bind-libbind-devel is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070740021"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="bind is earlier than 30:9.3.4-6.0.2.P1.el5_2" test_ref="oval:com.redhat.rhsa:tst:20080533044"/>
       <criterion comment="bind is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070740023"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="caching-nameserver is earlier than 30:9.3.4-6.0.2.P1.el5_2" test_ref="oval:com.redhat.rhsa:tst:20080533046"/>
       <criterion comment="caching-nameserver is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070740027"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20080538" version="637">
   <metadata>
    <title>RHSA-2008:0538: openoffice.org security update (Important)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
    </affected>
    <reference ref_id="RHSA-2008:0538" ref_url="https://access.redhat.com/errata/RHSA-2008:0538" source="RHSA"/>
    <reference ref_id="CVE-2008-2152" ref_url="https://access.redhat.com/security/cve/CVE-2008-2152" source="CVE"/>
    <reference ref_id="CVE-2008-2366" ref_url="https://access.redhat.com/security/cve/CVE-2008-2366" source="CVE"/>
    <description>OpenOffice.org is an office productivity suite that includes desktop
applications such as a word processor, spreadsheet, presentation manager,
formula editor, and drawing program.

Sean Larsson found a heap overflow flaw in the OpenOffice memory allocator.
If a carefully crafted file was opened by a victim, an attacker could use
the flaw to crash OpenOffice.org or, possibly, execute arbitrary code.
(CVE-2008-2152)

It was discovered that certain libraries in the Red Hat Enterprise Linux 3
and 4 openoffice.org packages had an insecure relative RPATH (runtime
library search path) set in the ELF (Executable and Linking Format) header.
A local user able to convince another user to run OpenOffice in an
attacker-controlled directory, could run arbitrary code with the privileges
of the victim. (CVE-2008-2366)

All users of openoffice.org are advised to upgrade to these updated
packages, which contain backported fixes which correct these issues.</description>
    <advisory from="secalert@redhat.com">
     <severity>Important</severity>
     <rights>Copyright 2008 Red Hat, Inc.</rights>
     <issued date="2008-06-12"/>
     <updated date="2008-06-12"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2008-2152" public="20080610">CVE-2008-2152</cve>
     <cve cvss2="3.7/AV:L/AC:H/Au:N/C:P/I:P/A:P" href="https://access.redhat.com/security/cve/CVE-2008-2366" impact="low" public="20080612">CVE-2008-2366</cve>
     <bugzilla href="https://bugzilla.redhat.com/450518" id="450518">CVE-2008-2152 OpenOffice.org overflow possible on allocation</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/450532" id="450532">CVE-2008-2366 openoffice.org: insecure relative RPATH in OOo 1.1.x packages</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="openoffice.org-libs is earlier than 0:1.1.2-42.2.0.EL3" test_ref="oval:com.redhat.rhsa:tst:20080538001"/>
       <criterion comment="openoffice.org-libs is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060573004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org is earlier than 0:1.1.2-42.2.0.EL3" test_ref="oval:com.redhat.rhsa:tst:20080538003"/>
       <criterion comment="openoffice.org is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060573006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-i18n is earlier than 0:1.1.2-42.2.0.EL3" test_ref="oval:com.redhat.rhsa:tst:20080538005"/>
       <criterion comment="openoffice.org-i18n is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060573002"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="openoffice.org-libs is earlier than 0:1.1.5-10.6.0.5.EL4" test_ref="oval:com.redhat.rhsa:tst:20080538008"/>
       <criterion comment="openoffice.org-libs is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060573004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org is earlier than 0:1.1.5-10.6.0.5.EL4" test_ref="oval:com.redhat.rhsa:tst:20080538009"/>
       <criterion comment="openoffice.org is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060573006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-i18n is earlier than 0:1.1.5-10.6.0.5.EL4" test_ref="oval:com.redhat.rhsa:tst:20080538010"/>
       <criterion comment="openoffice.org-i18n is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060573002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-kde is earlier than 0:1.1.5-10.6.0.5.EL4" test_ref="oval:com.redhat.rhsa:tst:20080538011"/>
       <criterion comment="openoffice.org-kde is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060573011"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20080544" version="636">
   <metadata>
    <title>RHSA-2008:0544: php security update (Moderate)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 5</platform>
    </affected>
    <reference ref_id="RHSA-2008:0544" ref_url="https://access.redhat.com/errata/RHSA-2008:0544" source="RHSA"/>
    <reference ref_id="CVE-2007-4782" ref_url="https://access.redhat.com/security/cve/CVE-2007-4782" source="CVE"/>
    <reference ref_id="CVE-2007-5898" ref_url="https://access.redhat.com/security/cve/CVE-2007-5898" source="CVE"/>
    <reference ref_id="CVE-2007-5899" ref_url="https://access.redhat.com/security/cve/CVE-2007-5899" source="CVE"/>
    <reference ref_id="CVE-2008-2051" ref_url="https://access.redhat.com/security/cve/CVE-2008-2051" source="CVE"/>
    <reference ref_id="CVE-2008-2107" ref_url="https://access.redhat.com/security/cve/CVE-2008-2107" source="CVE"/>
    <reference ref_id="CVE-2008-2108" ref_url="https://access.redhat.com/security/cve/CVE-2008-2108" source="CVE"/>
    <description>PHP is an HTML-embedded scripting language commonly used with the Apache
HTTP Web server.

It was discovered that the PHP escapeshellcmd() function did not properly
escape multi-byte characters which are not valid in the locale used by the
script. This could allow an attacker to bypass quoting restrictions imposed
by escapeshellcmd() and execute arbitrary commands if the PHP script was
using certain locales. Scripts using the default UTF-8 locale are not
affected by this issue. (CVE-2008-2051)

PHP functions htmlentities() and htmlspecialchars() did not properly
recognize partial multi-byte sequences. Certain sequences of bytes could be
passed through these functions without being correctly HTML-escaped.
Depending on the browser being used, an attacker could use this flaw to
conduct cross-site scripting attacks. (CVE-2007-5898)

A PHP script which used the transparent session ID configuration option, or
which used the output_add_rewrite_var() function, could leak session
identifiers to external web sites. If a page included an HTML form with an
ACTION attribute referencing a non-local URL, the user's session ID would
be included in the form data passed to that URL. (CVE-2007-5899)

It was discovered that PHP fnmatch() function did not restrict the length
of the string argument. An attacker could use this flaw to crash the PHP
interpreter where a script used fnmatch() on untrusted input data.
(CVE-2007-4782)

It was discovered that PHP did not properly seed its pseudo-random number
generator used by functions such as rand() and mt_rand(), possibly allowing
an attacker to easily predict the generated pseudo-random values.
(CVE-2008-2107, CVE-2008-2108)

Users of PHP should upgrade to these updated packages, which contain
backported patches to correct these issues.</description>
    <advisory from="secalert@redhat.com">
     <severity>Moderate</severity>
     <rights>Copyright 2008 Red Hat, Inc.</rights>
     <issued date="2008-07-16"/>
     <updated date="2008-07-16"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-4782" impact="low" public="20070904">CVE-2007-4782</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-5898" public="20071108">CVE-2007-5898</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-5899" impact="low" public="20071108">CVE-2007-5899</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2008-2051" public="20080501">CVE-2008-2051</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2008-2107" impact="low" public="20080506">CVE-2008-2107</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2008-2108" impact="low" public="20080506">CVE-2008-2108</cve>
     <bugzilla href="https://bugzilla.redhat.com/285881" id="285881">CVE-2007-4782 php crash in glob() and fnmatch() functions</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/382411" id="382411">CVE-2007-5898 php htmlentities/htmlspecialchars multibyte sequences</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/382431" id="382431">CVE-2007-5899 php session ID leakage</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/445006" id="445006">CVE-2008-2051 PHP multibyte shell escape flaw</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/445684" id="445684">CVE-2008-2107 PHP 32 bit weak random seed</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/445685" id="445685">CVE-2008-2108 PHP weak 64 bit random seed</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:5</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="php is earlier than 0:4.3.2-48.ent" test_ref="oval:com.redhat.rhsa:tst:20080544001"/>
       <criterion comment="php is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-pgsql is earlier than 0:4.3.2-48.ent" test_ref="oval:com.redhat.rhsa:tst:20080544003"/>
       <criterion comment="php-pgsql is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276012"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-odbc is earlier than 0:4.3.2-48.ent" test_ref="oval:com.redhat.rhsa:tst:20080544005"/>
       <criterion comment="php-odbc is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-ldap is earlier than 0:4.3.2-48.ent" test_ref="oval:com.redhat.rhsa:tst:20080544007"/>
       <criterion comment="php-ldap is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-mysql is earlier than 0:4.3.2-48.ent" test_ref="oval:com.redhat.rhsa:tst:20080544009"/>
       <criterion comment="php-mysql is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276014"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-imap is earlier than 0:4.3.2-48.ent" test_ref="oval:com.redhat.rhsa:tst:20080544011"/>
       <criterion comment="php-imap is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276010"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-devel is earlier than 0:4.3.2-48.ent" test_ref="oval:com.redhat.rhsa:tst:20080544013"/>
       <criterion comment="php-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276008"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 5 is installed" test_ref="oval:com.redhat.rhsa:tst:20070066013"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="php-snmp is earlier than 0:5.1.6-20.el5_2.1" test_ref="oval:com.redhat.rhsa:tst:20080544016"/>
       <criterion comment="php-snmp is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20080544017"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-ncurses is earlier than 0:5.1.6-20.el5_2.1" test_ref="oval:com.redhat.rhsa:tst:20080544018"/>
       <criterion comment="php-ncurses is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20080544019"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-pdo is earlier than 0:5.1.6-20.el5_2.1" test_ref="oval:com.redhat.rhsa:tst:20080544020"/>
       <criterion comment="php-pdo is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20080544021"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-mbstring is earlier than 0:5.1.6-20.el5_2.1" test_ref="oval:com.redhat.rhsa:tst:20080544022"/>
       <criterion comment="php-mbstring is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20080544023"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-ldap is earlier than 0:5.1.6-20.el5_2.1" test_ref="oval:com.redhat.rhsa:tst:20080544024"/>
       <criterion comment="php-ldap is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20080544025"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-devel is earlier than 0:5.1.6-20.el5_2.1" test_ref="oval:com.redhat.rhsa:tst:20080544026"/>
       <criterion comment="php-devel is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20080544027"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-odbc is earlier than 0:5.1.6-20.el5_2.1" test_ref="oval:com.redhat.rhsa:tst:20080544028"/>
       <criterion comment="php-odbc is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20080544029"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-imap is earlier than 0:5.1.6-20.el5_2.1" test_ref="oval:com.redhat.rhsa:tst:20080544030"/>
       <criterion comment="php-imap is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20080544031"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-gd is earlier than 0:5.1.6-20.el5_2.1" test_ref="oval:com.redhat.rhsa:tst:20080544032"/>
       <criterion comment="php-gd is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20080544033"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-mysql is earlier than 0:5.1.6-20.el5_2.1" test_ref="oval:com.redhat.rhsa:tst:20080544034"/>
       <criterion comment="php-mysql is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20080544035"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-pgsql is earlier than 0:5.1.6-20.el5_2.1" test_ref="oval:com.redhat.rhsa:tst:20080544036"/>
       <criterion comment="php-pgsql is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20080544037"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-bcmath is earlier than 0:5.1.6-20.el5_2.1" test_ref="oval:com.redhat.rhsa:tst:20080544038"/>
       <criterion comment="php-bcmath is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20080544039"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-dba is earlier than 0:5.1.6-20.el5_2.1" test_ref="oval:com.redhat.rhsa:tst:20080544040"/>
       <criterion comment="php-dba is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20080544041"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-xmlrpc is earlier than 0:5.1.6-20.el5_2.1" test_ref="oval:com.redhat.rhsa:tst:20080544042"/>
       <criterion comment="php-xmlrpc is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20080544043"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-common is earlier than 0:5.1.6-20.el5_2.1" test_ref="oval:com.redhat.rhsa:tst:20080544044"/>
       <criterion comment="php-common is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20080544045"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-soap is earlier than 0:5.1.6-20.el5_2.1" test_ref="oval:com.redhat.rhsa:tst:20080544046"/>
       <criterion comment="php-soap is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20080544047"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-cli is earlier than 0:5.1.6-20.el5_2.1" test_ref="oval:com.redhat.rhsa:tst:20080544048"/>
       <criterion comment="php-cli is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20080544049"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-xml is earlier than 0:5.1.6-20.el5_2.1" test_ref="oval:com.redhat.rhsa:tst:20080544050"/>
       <criterion comment="php-xml is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20080544051"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php is earlier than 0:5.1.6-20.el5_2.1" test_ref="oval:com.redhat.rhsa:tst:20080544052"/>
       <criterion comment="php is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20080544053"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20080547" version="635">
   <metadata>
    <title>RHSA-2008:0547: seamonkey security update (Critical)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
    </affected>
    <reference ref_id="RHSA-2008:0547" ref_url="https://access.redhat.com/errata/RHSA-2008:0547" source="RHSA"/>
    <reference ref_id="CVE-2008-2798" ref_url="https://access.redhat.com/security/cve/CVE-2008-2798" source="CVE"/>
    <reference ref_id="CVE-2008-2799" ref_url="https://access.redhat.com/security/cve/CVE-2008-2799" source="CVE"/>
    <reference ref_id="CVE-2008-2800" ref_url="https://access.redhat.com/security/cve/CVE-2008-2800" source="CVE"/>
    <reference ref_id="CVE-2008-2801" ref_url="https://access.redhat.com/security/cve/CVE-2008-2801" source="CVE"/>
    <reference ref_id="CVE-2008-2802" ref_url="https://access.redhat.com/security/cve/CVE-2008-2802" source="CVE"/>
    <reference ref_id="CVE-2008-2803" ref_url="https://access.redhat.com/security/cve/CVE-2008-2803" source="CVE"/>
    <reference ref_id="CVE-2008-2805" ref_url="https://access.redhat.com/security/cve/CVE-2008-2805" source="CVE"/>
    <reference ref_id="CVE-2008-2807" ref_url="https://access.redhat.com/security/cve/CVE-2008-2807" source="CVE"/>
    <reference ref_id="CVE-2008-2808" ref_url="https://access.redhat.com/security/cve/CVE-2008-2808" source="CVE"/>
    <reference ref_id="CVE-2008-2809" ref_url="https://access.redhat.com/security/cve/CVE-2008-2809" source="CVE"/>
    <reference ref_id="CVE-2008-2810" ref_url="https://access.redhat.com/security/cve/CVE-2008-2810" source="CVE"/>
    <reference ref_id="CVE-2008-2811" ref_url="https://access.redhat.com/security/cve/CVE-2008-2811" source="CVE"/>
    <description>SeaMonkey is an open source Web browser, advanced email and newsgroup
client, IRC chat client, and HTML editor.

Multiple flaws were found in the processing of malformed JavaScript
content. A web page containing such malicious content could cause SeaMonkey
to crash or, potentially, execute arbitrary code as the user running
SeaMonkey. (CVE-2008-2801, CVE-2008-2802, CVE-2008-2803)

Several flaws were found in the processing of malformed web content. A web
page containing malicious content could cause SeaMonkey to crash or,
potentially, execute arbitrary code as the user running SeaMonkey.
(CVE-2008-2798, CVE-2008-2799, CVE-2008-2811)

Several flaws were found in the way malformed web content was displayed. A
web page containing specially-crafted content could potentially trick a
SeaMonkey user into surrendering sensitive information. (CVE-2008-2800)

Two local file disclosure flaws were found in SeaMonkey. A web page
containing malicious content could cause SeaMonkey to reveal the contents
of a local file to a remote attacker. (CVE-2008-2805, CVE-2008-2810)

A flaw was found in the way a malformed .properties file was processed by
SeaMonkey. A malicious extension could read uninitialized memory, possibly
leaking sensitive data to the extension. (CVE-2008-2807)

A flaw was found in the way SeaMonkey escaped a listing of local file
names. If a user could be tricked into listing a local directory containing
malicious file names, arbitrary JavaScript could be run with the
permissions of the user running SeaMonkey. (CVE-2008-2808)

A flaw was found in the way SeaMonkey displayed information about
self-signed certificates. It was possible for a self-signed certificate to
contain multiple alternate name entries, which were not all displayed to
the user, allowing them to mistakenly extend trust to an unknown site.
(CVE-2008-2809)

All SeaMonkey users should upgrade to these updated packages, which contain
backported patches to resolve these issues.</description>
    <advisory from="secalert@redhat.com">
     <severity>Critical</severity>
     <rights>Copyright 2008 Red Hat, Inc.</rights>
     <issued date="2008-07-02"/>
     <updated date="2008-07-02"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2008-2798" public="20080701">CVE-2008-2798</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2008-2799" public="20080701">CVE-2008-2799</cve>
     <cve cwe="CWE-79" href="https://access.redhat.com/security/cve/CVE-2008-2800" impact="moderate" public="20080702">CVE-2008-2800</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2008-2801" public="20080702">CVE-2008-2801</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2008-2802" public="20080702">CVE-2008-2802</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2008-2803" public="20080702">CVE-2008-2803</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2008-2805" impact="moderate" public="20080702">CVE-2008-2805</cve>
     <cve cwe="CWE-401" href="https://access.redhat.com/security/cve/CVE-2008-2807" impact="moderate" public="20080702">CVE-2008-2807</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2008-2808" impact="moderate" public="20080702">CVE-2008-2808</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2008-2809" impact="moderate" public="20080702">CVE-2008-2809</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2008-2810" impact="moderate" public="20080702">CVE-2008-2810</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2008-2811" public="20080702">CVE-2008-2811</cve>
     <bugzilla href="https://bugzilla.redhat.com/452597" id="452597">CVE-2008-2798 Firefox malformed web content flaws</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/452598" id="452598">CVE-2008-2799 Firefox javascript arbitrary code execution</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/452599" id="452599">CVE-2008-2800 Firefox XSS attacks</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/452600" id="452600">CVE-2008-2802 Firefox arbitrary JavaScript code execution</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/452602" id="452602">CVE-2008-2803 Firefox javascript arbitrary code execution</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/452604" id="452604">CVE-2008-2805 Firefox arbitrary file disclosure</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/452605" id="452605">CVE-2008-2801 Firefox arbitrary signed JAR code execution</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/452709" id="452709">CVE-2008-2807 Firefox .properties memory leak</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/452710" id="452710">CVE-2008-2808 Firefox file location escaping flaw</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/452711" id="452711">CVE-2008-2809 Firefox self signed certificate flaw</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/452712" id="452712">CVE-2008-2810 Firefox arbitrary file disclosure</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/453007" id="453007">CVE-2008-2811 Firefox block reflow flaw</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.20.el3" test_ref="oval:com.redhat.rhsa:tst:20080547001"/>
       <criterion comment="seamonkey-dom-inspector is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.20.el3" test_ref="oval:com.redhat.rhsa:tst:20080547003"/>
       <criterion comment="seamonkey-js-debugger is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.20.el3" test_ref="oval:com.redhat.rhsa:tst:20080547005"/>
       <criterion comment="seamonkey-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578014"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.20.el3" test_ref="oval:com.redhat.rhsa:tst:20080547007"/>
       <criterion comment="seamonkey-chat is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.20.el3" test_ref="oval:com.redhat.rhsa:tst:20080547009"/>
       <criterion comment="seamonkey-nspr is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578010"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.20.el3" test_ref="oval:com.redhat.rhsa:tst:20080547011"/>
       <criterion comment="seamonkey-nss-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578012"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.20.el3" test_ref="oval:com.redhat.rhsa:tst:20080547013"/>
       <criterion comment="seamonkey-nspr-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey is earlier than 0:1.0.9-0.20.el3" test_ref="oval:com.redhat.rhsa:tst:20080547015"/>
       <criterion comment="seamonkey is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578018"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.20.el3" test_ref="oval:com.redhat.rhsa:tst:20080547017"/>
       <criterion comment="seamonkey-mail is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578020"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.20.el3" test_ref="oval:com.redhat.rhsa:tst:20080547019"/>
       <criterion comment="seamonkey-nss is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578016"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="seamonkey-chat is earlier than 0:1.0.9-16.3.el4_6" test_ref="oval:com.redhat.rhsa:tst:20080547022"/>
       <criterion comment="seamonkey-chat is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-16.3.el4_6" test_ref="oval:com.redhat.rhsa:tst:20080547023"/>
       <criterion comment="seamonkey-dom-inspector is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-mail is earlier than 0:1.0.9-16.3.el4_6" test_ref="oval:com.redhat.rhsa:tst:20080547024"/>
       <criterion comment="seamonkey-mail is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578020"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey is earlier than 0:1.0.9-16.3.el4_6" test_ref="oval:com.redhat.rhsa:tst:20080547025"/>
       <criterion comment="seamonkey is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578018"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-16.3.el4_6" test_ref="oval:com.redhat.rhsa:tst:20080547026"/>
       <criterion comment="seamonkey-js-debugger is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-devel is earlier than 0:1.0.9-16.3.el4_6" test_ref="oval:com.redhat.rhsa:tst:20080547027"/>
       <criterion comment="seamonkey-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578014"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20080556" version="638">
   <metadata>
    <title>RHSA-2008:0556: freetype security update (Important)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
     <platform>Red Hat Enterprise Linux 5</platform>
    </affected>
    <reference ref_id="RHSA-2008:0556" ref_url="https://access.redhat.com/errata/RHSA-2008:0556" source="RHSA"/>
    <reference ref_id="CVE-2008-1806" ref_url="https://access.redhat.com/security/cve/CVE-2008-1806" source="CVE"/>
    <reference ref_id="CVE-2008-1807" ref_url="https://access.redhat.com/security/cve/CVE-2008-1807" source="CVE"/>
    <reference ref_id="CVE-2008-1808" ref_url="https://access.redhat.com/security/cve/CVE-2008-1808" source="CVE"/>
    <description>FreeType is a free, high-quality, portable font engine that can open and
manage font files, as well as efficiently load, hint and render individual
glyphs.

Multiple flaws were discovered in FreeType's Printer Font Binary (PFB)
font-file format parser. If a user loaded a carefully crafted font-file
with a program linked against FreeType, it could cause the application to
crash, or possibly execute arbitrary code. (CVE-2008-1806, CVE-2008-1807,
CVE-2008-1808)

Note: the flaw in FreeType's TrueType Font (TTF) font-file format parser,
covered by CVE-2008-1808, did not affect the freetype packages as shipped
in Red Hat Enterprise Linux 3, 4, and 5, as they are not compiled with TTF
Byte Code Interpreter (BCI) support.

Users of freetype should upgrade to these updated packages, which contain
backported patches to resolve these issues.</description>
    <advisory from="secalert@redhat.com">
     <severity>Important</severity>
     <rights>Copyright 2008 Red Hat, Inc.</rights>
     <issued date="2008-06-25"/>
     <updated date="2008-06-25"/>
     <cve cwe="CWE-190" href="https://access.redhat.com/security/cve/CVE-2008-1806" public="20080610">CVE-2008-1806</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2008-1807" public="20080610">CVE-2008-1807</cve>
     <cve cwe="CWE-193" href="https://access.redhat.com/security/cve/CVE-2008-1808" public="20080610">CVE-2008-1808</cve>
     <bugzilla href="https://bugzilla.redhat.com/450768" id="450768">CVE-2008-1806 FreeType PFB integer overflow</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/450773" id="450773">CVE-2008-1807 FreeType invalid free() flaw</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/450774" id="450774">CVE-2008-1808 FreeType off-by-one flaws</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/452474" id="452474">Latest freetype erratum does not display all fonts</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:5</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="freetype-devel is earlier than 0:2.1.4-10.el3" test_ref="oval:com.redhat.rhsa:tst:20080556001"/>
       <criterion comment="freetype-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060500004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="freetype is earlier than 0:2.1.4-10.el3" test_ref="oval:com.redhat.rhsa:tst:20080556003"/>
       <criterion comment="freetype is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060500002"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="freetype-devel is earlier than 0:2.1.9-8.el4.6" test_ref="oval:com.redhat.rhsa:tst:20080556006"/>
       <criterion comment="freetype-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060500004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="freetype-demos is earlier than 0:2.1.9-8.el4.6" test_ref="oval:com.redhat.rhsa:tst:20080556007"/>
       <criterion comment="freetype-demos is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060500008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="freetype is earlier than 0:2.1.9-8.el4.6" test_ref="oval:com.redhat.rhsa:tst:20080556009"/>
       <criterion comment="freetype is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060500002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="freetype-utils is earlier than 0:2.1.9-8.el4.6" test_ref="oval:com.redhat.rhsa:tst:20080556010"/>
       <criterion comment="freetype-utils is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060500010"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 5 is installed" test_ref="oval:com.redhat.rhsa:tst:20070066013"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="freetype-demos is earlier than 0:2.2.1-20.el5_2" test_ref="oval:com.redhat.rhsa:tst:20080556013"/>
       <criterion comment="freetype-demos is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070150014"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="freetype-devel is earlier than 0:2.2.1-20.el5_2" test_ref="oval:com.redhat.rhsa:tst:20080556015"/>
       <criterion comment="freetype-devel is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070150018"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="freetype is earlier than 0:2.2.1-20.el5_2" test_ref="oval:com.redhat.rhsa:tst:20080556017"/>
       <criterion comment="freetype is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070150016"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20080562" version="635">
   <metadata>
    <title>RHSA-2008:0562: ruby security update (Moderate)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
    </affected>
    <reference ref_id="RHSA-2008:0562" ref_url="https://access.redhat.com/errata/RHSA-2008:0562" source="RHSA"/>
    <reference ref_id="CVE-2006-6303" ref_url="https://access.redhat.com/security/cve/CVE-2006-6303" source="CVE"/>
    <reference ref_id="CVE-2008-2376" ref_url="https://access.redhat.com/security/cve/CVE-2008-2376" source="CVE"/>
    <reference ref_id="CVE-2008-2663" ref_url="https://access.redhat.com/security/cve/CVE-2008-2663" source="CVE"/>
    <reference ref_id="CVE-2008-2664" ref_url="https://access.redhat.com/security/cve/CVE-2008-2664" source="CVE"/>
    <reference ref_id="CVE-2008-2725" ref_url="https://access.redhat.com/security/cve/CVE-2008-2725" source="CVE"/>
    <reference ref_id="CVE-2008-2726" ref_url="https://access.redhat.com/security/cve/CVE-2008-2726" source="CVE"/>
    <description>Ruby is an interpreted scripting language for quick and easy
object-oriented programming.

Multiple integer overflows leading to a heap overflow were discovered in
the array- and string-handling code used by Ruby. An attacker could use
these flaws to crash a Ruby application or, possibly, execute arbitrary
code with the privileges of the Ruby application using untrusted inputs in
array or string operations. (CVE-2008-2376, CVE-2008-2663, CVE-2008-2725,
CVE-2008-2726)

It was discovered that Ruby used the alloca() memory allocation function in
the format (%) method of the String class without properly restricting
maximum string length. An attacker could use this flaw to crash a Ruby
application or, possibly, execute arbitrary code with the privileges of the
Ruby application using long, untrusted strings as format strings.
(CVE-2008-2664)

Red Hat would like to thank Drew Yao of the Apple Product Security team for
reporting these issues.

A flaw was discovered in the way Ruby's CGI module handles certain HTTP
requests. A remote attacker could send a specially crafted request and
cause the Ruby CGI script to enter an infinite loop, possibly causing a
denial of service. (CVE-2006-6303)

Users of Ruby should upgrade to these updated packages, which contain a
backported patches to resolve these issues.</description>
    <advisory from="secalert@redhat.com">
     <severity>Moderate</severity>
     <rights>Copyright 2008 Red Hat, Inc.</rights>
     <issued date="2008-07-14"/>
     <updated date="2008-07-14"/>
     <cve cwe="CWE-835" href="https://access.redhat.com/security/cve/CVE-2006-6303" impact="low" public="20061204">CVE-2006-6303</cve>
     <cve cwe="CWE-190" href="https://access.redhat.com/security/cve/CVE-2008-2376" public="20080701">CVE-2008-2376</cve>
     <cve cwe="CWE-190" href="https://access.redhat.com/security/cve/CVE-2008-2663" public="20080620">CVE-2008-2663</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2008-2664" impact="low" public="20080620">CVE-2008-2664</cve>
     <cve cwe="CWE-190" href="https://access.redhat.com/security/cve/CVE-2008-2725" public="20080620">CVE-2008-2725</cve>
     <cve cwe="CWE-190" href="https://access.redhat.com/security/cve/CVE-2008-2726" public="20080620">CVE-2008-2726</cve>
     <bugzilla href="https://bugzilla.redhat.com/218287" id="218287">CVE-2006-6303 ruby's cgi.rb vulnerable infinite loop DoS</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/450825" id="450825">CVE-2008-2663 ruby: Integer overflows in rb_ary_store()</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/450834" id="450834">CVE-2008-2664 ruby: Unsafe use of alloca in rb_str_format()</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/451821" id="451821">CVE-2008-2725 ruby: integer overflow in rb_ary_splice/update/replace() - REALLOC_N</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/451828" id="451828">CVE-2008-2726 ruby: integer overflow in rb_ary_splice/update/replace() - beg + rlen</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/453589" id="453589">CVE-2008-2376 ruby: integer overflows in rb_ary_fill() / Array#fill</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="AND">
    <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
    <criteria operator="OR">
     <criteria operator="AND">
      <criterion comment="ruby is earlier than 0:1.6.8-12.el3" test_ref="oval:com.redhat.rhsa:tst:20080562001"/>
      <criterion comment="ruby is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060604010"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="ruby-docs is earlier than 0:1.6.8-12.el3" test_ref="oval:com.redhat.rhsa:tst:20080562003"/>
      <criterion comment="ruby-docs is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060604006"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="ruby-tcltk is earlier than 0:1.6.8-12.el3" test_ref="oval:com.redhat.rhsa:tst:20080562005"/>
      <criterion comment="ruby-tcltk is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060604008"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="ruby-devel is earlier than 0:1.6.8-12.el3" test_ref="oval:com.redhat.rhsa:tst:20080562007"/>
      <criterion comment="ruby-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060604004"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="irb is earlier than 0:1.6.8-12.el3" test_ref="oval:com.redhat.rhsa:tst:20080562009"/>
      <criterion comment="irb is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060604014"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="ruby-mode is earlier than 0:1.6.8-12.el3" test_ref="oval:com.redhat.rhsa:tst:20080562011"/>
      <criterion comment="ruby-mode is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060604012"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="ruby-libs is earlier than 0:1.6.8-12.el3" test_ref="oval:com.redhat.rhsa:tst:20080562013"/>
      <criterion comment="ruby-libs is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060604002"/>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20080576" version="633">
   <metadata>
    <title>RHSA-2008:0576: rdesktop security update (Moderate)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
    </affected>
    <reference ref_id="RHSA-2008:0576" ref_url="https://access.redhat.com/errata/RHSA-2008:0576" source="RHSA"/>
    <reference ref_id="CVE-2008-1801" ref_url="https://access.redhat.com/security/cve/CVE-2008-1801" source="CVE"/>
    <description>rdesktop is an open source client for Microsoft Windows NT Terminal Server
and Microsoft Windows 2000 and 2003 Terminal Services, capable of natively
using the Remote Desktop Protocol (RDP) to present the user's NT desktop.
No additional server extensions are required.

An integer underflow vulnerability was discovered in the rdesktop. If an
attacker could convince a victim to connect to a malicious RDP server, the
attacker could cause the victim's rdesktop to crash or, possibly, execute
an arbitrary code. (CVE-2008-1801)

Users of rdesktop should upgrade to these updated packages, which contain a
backported patch to resolve this issue.</description>
    <advisory from="secalert@redhat.com">
     <severity>Moderate</severity>
     <rights>Copyright 2008 Red Hat, Inc.</rights>
     <issued date="2008-07-24"/>
     <updated date="2008-07-24"/>
     <cve cvss2="5.4/AV:A/AC:M/Au:N/C:P/I:P/A:P" cwe="CWE-190" href="https://access.redhat.com/security/cve/CVE-2008-1801" public="20080507">CVE-2008-1801</cve>
     <bugzilla href="https://bugzilla.redhat.com/445825" id="445825">CVE-2008-1801 rdesktop: iso_recv_msg() Integer Underflow Vulnerability</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="AND">
    <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
    <criterion comment="rdesktop is earlier than 0:1.2.0-3" test_ref="oval:com.redhat.rhsa:tst:20080576001"/>
    <criterion comment="rdesktop is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20080576002"/>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20080579" version="632">
   <metadata>
    <title>RHSA-2008:0579: vsftpd security update (Moderate)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
    </affected>
    <reference ref_id="RHSA-2008:0579" ref_url="https://access.redhat.com/errata/RHSA-2008:0579" source="RHSA"/>
    <reference ref_id="CVE-2008-2375" ref_url="https://access.redhat.com/security/cve/CVE-2008-2375" source="CVE"/>
    <description>vsftpd (Very Secure File Transfer Protocol (FTP) daemon) is a secure FTP
server for Linux and Unix-like systems.

The version of vsftpd as shipped in Red Hat Enterprise Linux 3 when used in
combination with Pluggable Authentication Modules (PAM) had a memory leak
on an invalid authentication attempt. Since vsftpd prior to version 2.0.5
allows any number of invalid attempts on the same connection this memory
leak could lead to an eventual DoS. (CVE-2008-2375)

This update mitigates this security issue by including a backported patch
which terminates a session after a given number of failed log in attempts.
The default number of attempts is 3 and this can be configured using the
&quot;max_login_fails&quot; directive.

All vsftpd users should upgrade to this updated package, which addresses
this vulnerability.</description>
    <advisory from="secalert@redhat.com">
     <severity>Moderate</severity>
     <rights>Copyright 2008 Red Hat, Inc.</rights>
     <issued date="2008-07-24"/>
     <updated date="2008-07-24"/>
     <cve cwe="CWE-401" href="https://access.redhat.com/security/cve/CVE-2008-2375" public="20060628">CVE-2008-2375</cve>
     <bugzilla href="https://bugzilla.redhat.com/453376" id="453376">CVE-2008-2375 older vsftpd authentication memory leak</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="AND">
    <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
    <criterion comment="vsftpd is earlier than 0:1.2.1-3E.16" test_ref="oval:com.redhat.rhsa:tst:20080579001"/>
    <criterion comment="vsftpd is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20080579002"/>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20080584" version="632">
   <metadata>
    <title>RHSA-2008:0584: pidgin security and bug fix update (Important)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
     <platform>Red Hat Enterprise Linux 5</platform>
    </affected>
    <reference ref_id="RHSA-2008:0584" ref_url="https://access.redhat.com/errata/RHSA-2008:0584" source="RHSA"/>
    <reference ref_id="CVE-2008-2927" ref_url="https://access.redhat.com/security/cve/CVE-2008-2927" source="CVE"/>
    <description>Pidgin is a multi-protocol Internet Messaging client.

An integer overflow flaw was found in Pidgin's MSN protocol handler. If a
user received a malicious MSN message, it was possible to execute arbitrary
code with the permissions of the user running Pidgin. (CVE-2008-2927)

Note: the default Pidgin privacy setting only allows messages from users in
the buddy list. This prevents arbitrary MSN users from exploiting this
flaw.

This update also addresses the following bug:

* when attempting to connect to the ICQ network, Pidgin would fail to
connect, present an alert saying the &quot;The client version you are using is
too old&quot;, and de-activate the ICQ account. This update restores Pidgin's
ability to connect to the ICQ network.

All Pidgin users should upgrade to these updated packages, which contain
backported patches to resolve these issues.</description>
    <advisory from="secalert@redhat.com">
     <severity>Important</severity>
     <rights>Copyright 2008 Red Hat, Inc.</rights>
     <issued date="2008-07-09"/>
     <updated date="2008-07-09"/>
     <cve cvss2="6/AV:N/AC:M/Au:S/C:P/I:P/A:P" cwe="CWE-190" href="https://access.redhat.com/security/cve/CVE-2008-2927" public="20080704">CVE-2008-2927</cve>
     <bugzilla href="https://bugzilla.redhat.com/453634" id="453634">RHEL5 - Fix ICQ login</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/453764" id="453764">CVE-2008-2927 pidgin MSN integer overflow</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/453773" id="453773">RHEL4 - Fix ICQ login</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/453774" id="453774">RHEL3 - Fix ICQ login</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
      <cpe>cpe:/a:redhat:rhel_productivity:5</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:5</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criterion comment="pidgin is earlier than 0:1.5.1-2.el3" test_ref="oval:com.redhat.rhsa:tst:20080584001"/>
     <criterion comment="pidgin is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20080584002"/>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criterion comment="pidgin is earlier than 0:1.5.1-2.el4" test_ref="oval:com.redhat.rhsa:tst:20080584004"/>
     <criterion comment="pidgin is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20080584002"/>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 5 is installed" test_ref="oval:com.redhat.rhsa:tst:20070066013"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="finch is earlier than 0:2.3.1-2.el5_2" test_ref="oval:com.redhat.rhsa:tst:20080584006"/>
       <criterion comment="finch is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20080584007"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="libpurple is earlier than 0:2.3.1-2.el5_2" test_ref="oval:com.redhat.rhsa:tst:20080584008"/>
       <criterion comment="libpurple is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20080584009"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="finch-devel is earlier than 0:2.3.1-2.el5_2" test_ref="oval:com.redhat.rhsa:tst:20080584010"/>
       <criterion comment="finch-devel is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20080584011"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="pidgin is earlier than 0:2.3.1-2.el5_2" test_ref="oval:com.redhat.rhsa:tst:20080584012"/>
       <criterion comment="pidgin is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20080584013"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="libpurple-tcl is earlier than 0:2.3.1-2.el5_2" test_ref="oval:com.redhat.rhsa:tst:20080584014"/>
       <criterion comment="libpurple-tcl is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20080584015"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="libpurple-perl is earlier than 0:2.3.1-2.el5_2" test_ref="oval:com.redhat.rhsa:tst:20080584016"/>
       <criterion comment="libpurple-perl is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20080584017"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="pidgin-perl is earlier than 0:2.3.1-2.el5_2" test_ref="oval:com.redhat.rhsa:tst:20080584018"/>
       <criterion comment="pidgin-perl is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20080584019"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="pidgin-devel is earlier than 0:2.3.1-2.el5_2" test_ref="oval:com.redhat.rhsa:tst:20080584020"/>
       <criterion comment="pidgin-devel is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20080584021"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="libpurple-devel is earlier than 0:2.3.1-2.el5_2" test_ref="oval:com.redhat.rhsa:tst:20080584022"/>
       <criterion comment="libpurple-devel is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20080584023"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20080599" version="637">
   <metadata>
    <title>RHSA-2008:0599: seamonkey security update (Critical)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
    </affected>
    <reference ref_id="RHSA-2008:0599" ref_url="https://access.redhat.com/errata/RHSA-2008:0599" source="RHSA"/>
    <reference ref_id="CVE-2008-2785" ref_url="https://access.redhat.com/security/cve/CVE-2008-2785" source="CVE"/>
    <description>SeaMonkey is an open source Web browser, advanced email and newsgroup
client, IRC chat client, and HTML editor.

An integer overflow flaw was found in the way SeaMonkey displayed certain
web content. A malicious web site could cause SeaMonkey to crash or execute
arbitrary code with the permissions of the user running SeaMonkey.
(CVE-2008-2785)

All seamonkey users should upgrade to these updated packages, which contain
a backported patch to resolve this issue.</description>
    <advisory from="secalert@redhat.com">
     <severity>Critical</severity>
     <rights>Copyright 2008 Red Hat, Inc.</rights>
     <issued date="2008-07-16"/>
     <updated date="2008-07-17"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2008-2785" public="20080716">CVE-2008-2785</cve>
     <bugzilla href="https://bugzilla.redhat.com/452204" id="452204">CVE-2008-2785 mozilla: CSS reference counter overflow (ZDI-CAN-349)</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.22.el3" test_ref="oval:com.redhat.rhsa:tst:20080599001"/>
       <criterion comment="seamonkey-nss-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578012"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.22.el3" test_ref="oval:com.redhat.rhsa:tst:20080599003"/>
       <criterion comment="seamonkey-nss is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578016"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.22.el3" test_ref="oval:com.redhat.rhsa:tst:20080599005"/>
       <criterion comment="seamonkey-js-debugger is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.22.el3" test_ref="oval:com.redhat.rhsa:tst:20080599007"/>
       <criterion comment="seamonkey-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578014"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.22.el3" test_ref="oval:com.redhat.rhsa:tst:20080599009"/>
       <criterion comment="seamonkey-nspr is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578010"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.22.el3" test_ref="oval:com.redhat.rhsa:tst:20080599011"/>
       <criterion comment="seamonkey-dom-inspector is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.22.el3" test_ref="oval:com.redhat.rhsa:tst:20080599013"/>
       <criterion comment="seamonkey-nspr-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.22.el3" test_ref="oval:com.redhat.rhsa:tst:20080599015"/>
       <criterion comment="seamonkey-chat is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey is earlier than 0:1.0.9-0.22.el3" test_ref="oval:com.redhat.rhsa:tst:20080599017"/>
       <criterion comment="seamonkey is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578018"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.22.el3" test_ref="oval:com.redhat.rhsa:tst:20080599019"/>
       <criterion comment="seamonkey-mail is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578020"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="seamonkey is earlier than 0:1.0.9-16.4.el4_6" test_ref="oval:com.redhat.rhsa:tst:20080599022"/>
       <criterion comment="seamonkey is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578018"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-16.4.el4_6" test_ref="oval:com.redhat.rhsa:tst:20080599023"/>
       <criterion comment="seamonkey-dom-inspector is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-mail is earlier than 0:1.0.9-16.4.el4_6" test_ref="oval:com.redhat.rhsa:tst:20080599024"/>
       <criterion comment="seamonkey-mail is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578020"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-chat is earlier than 0:1.0.9-16.4.el4_6" test_ref="oval:com.redhat.rhsa:tst:20080599025"/>
       <criterion comment="seamonkey-chat is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-16.4.el4_6" test_ref="oval:com.redhat.rhsa:tst:20080599026"/>
       <criterion comment="seamonkey-js-debugger is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-devel is earlier than 0:1.0.9-16.4.el4_6" test_ref="oval:com.redhat.rhsa:tst:20080599027"/>
       <criterion comment="seamonkey-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578014"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="devhelp-devel is earlier than 0:0.10-0.8.1.el4" test_ref="oval:com.redhat.rhsa:tst:20080599028"/>
       <criterion comment="devhelp-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060329002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="devhelp is earlier than 0:0.10-0.8.1.el4" test_ref="oval:com.redhat.rhsa:tst:20080599030"/>
       <criterion comment="devhelp is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060329004"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20080617" version="645">
   <metadata>
    <title>RHSA-2008:0617: vim security update (Moderate)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
    </affected>
    <reference ref_id="RHSA-2008:0617" ref_url="https://access.redhat.com/errata/RHSA-2008:0617" source="RHSA"/>
    <reference ref_id="CVE-2007-2953" ref_url="https://access.redhat.com/security/cve/CVE-2007-2953" source="CVE"/>
    <reference ref_id="CVE-2008-2712" ref_url="https://access.redhat.com/security/cve/CVE-2008-2712" source="CVE"/>
    <reference ref_id="CVE-2008-3432" ref_url="https://access.redhat.com/security/cve/CVE-2008-3432" source="CVE"/>
    <reference ref_id="CVE-2008-4101" ref_url="https://access.redhat.com/security/cve/CVE-2008-4101" source="CVE"/>
    <description>Vim (Visual editor IMproved) is an updated and improved version of the vi
editor.

Several input sanitization flaws were found in Vim's keyword and tag
handling. If Vim looked up a document's maliciously crafted tag or keyword,
it was possible to execute arbitrary code as the user running Vim.
(CVE-2008-4101)

A heap-based overflow flaw was discovered in Vim's expansion of file name
patterns with shell wildcards. An attacker could create a specially-crafted
file or directory name that, when opened by Vim, caused the application to
crash or, possibly, execute arbitrary code. (CVE-2008-3432)

Several input sanitization flaws were found in various Vim system
functions. If a user opened a specially crafted file, it was possible to
execute arbitrary code as the user running Vim. (CVE-2008-2712)

Ulf Härnhammar, of Secunia Research, discovered a format string flaw in
Vim's help tag processor. If a user was tricked into executing the
&quot;helptags&quot; command on malicious data, arbitrary code could be executed with
the permissions of the user running Vim. (CVE-2007-2953)

All Vim users are advised to upgrade to these updated packages, which
contain backported patches to correct these issues.</description>
    <advisory from="secalert@redhat.com">
     <severity>Moderate</severity>
     <rights>Copyright 2008 Red Hat, Inc.</rights>
     <issued date="2008-11-25"/>
     <updated date="2008-11-25"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-2953" impact="low" public="20070725">CVE-2007-2953</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2008-2712" public="20080615">CVE-2008-2712</cve>
     <cve cwe="CWE-122" href="https://access.redhat.com/security/cve/CVE-2008-3432" public="20050129">CVE-2008-3432</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2008-4101" public="20080822">CVE-2008-4101</cve>
     <bugzilla href="https://bugzilla.redhat.com/248542" id="248542">CVE-2007-2953 vim format string flaw</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/451759" id="451759">CVE-2008-2712 vim: command execution via scripts not sanitizing inputs to execute and system</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/455455" id="455455">CVE-2008-3432 vim: heap buffer overflow in mch_expand_wildcards()</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/461927" id="461927">CVE-2008-4101 vim: arbitrary code execution in commands: K, Control-], g]</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="vim-minimal is earlier than 1:6.3.046-0.30E.11" test_ref="oval:com.redhat.rhsa:tst:20080617001"/>
       <criterion comment="vim-minimal is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20080617002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="vim-common is earlier than 1:6.3.046-0.30E.11" test_ref="oval:com.redhat.rhsa:tst:20080617003"/>
       <criterion comment="vim-common is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20080617004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="vim-X11 is earlier than 1:6.3.046-0.30E.11" test_ref="oval:com.redhat.rhsa:tst:20080617005"/>
       <criterion comment="vim-X11 is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20080617006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="vim-enhanced is earlier than 1:6.3.046-0.30E.11" test_ref="oval:com.redhat.rhsa:tst:20080617007"/>
       <criterion comment="vim-enhanced is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20080617008"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="vim-common is earlier than 1:6.3.046-1.el4_7.5z" test_ref="oval:com.redhat.rhsa:tst:20080617010"/>
       <criterion comment="vim-common is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20080617004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="vim-enhanced is earlier than 1:6.3.046-1.el4_7.5z" test_ref="oval:com.redhat.rhsa:tst:20080617011"/>
       <criterion comment="vim-enhanced is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20080617008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="vim-minimal is earlier than 1:6.3.046-1.el4_7.5z" test_ref="oval:com.redhat.rhsa:tst:20080617012"/>
       <criterion comment="vim-minimal is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20080617002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="vim-X11 is earlier than 1:6.3.046-1.el4_7.5z" test_ref="oval:com.redhat.rhsa:tst:20080617013"/>
       <criterion comment="vim-X11 is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20080617006"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20080836" version="637">
   <metadata>
    <title>RHSA-2008:0836: libxml2 security update (Moderate)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
     <platform>Red Hat Enterprise Linux 5</platform>
    </affected>
    <reference ref_id="RHSA-2008:0836" ref_url="https://access.redhat.com/errata/RHSA-2008:0836" source="RHSA"/>
    <reference ref_id="CVE-2008-3281" ref_url="https://access.redhat.com/security/cve/CVE-2008-3281" source="CVE"/>
    <description>The libxml2 packages provide a library that allows you to manipulate XML
files. It includes support to read, modify, and write XML and HTML files.

A denial of service flaw was found in the way libxml2 processes certain
content. If an application linked against libxml2 processes malformed XML
content, it could cause the application to stop responding. (CVE-2008-3281)

Red Hat would like to thank Andreas Solberg for responsibly disclosing this
issue.

All users of libxml2 are advised to upgrade to these updated packages,
which contain a backported patch to resolve this issue.</description>
    <advisory from="secalert@redhat.com">
     <severity>Moderate</severity>
     <rights>Copyright 2008 Red Hat, Inc.</rights>
     <issued date="2008-08-26"/>
     <updated date="2008-08-26"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2008-3281" public="20080820">CVE-2008-3281</cve>
     <bugzilla href="https://bugzilla.redhat.com/458086" id="458086">CVE-2008-3281 libxml2 denial of service</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:5</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="libxml2-python is earlier than 0:2.5.10-11" test_ref="oval:com.redhat.rhsa:tst:20080836001"/>
       <criterion comment="libxml2-python is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20080032004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="libxml2-devel is earlier than 0:2.5.10-11" test_ref="oval:com.redhat.rhsa:tst:20080836003"/>
       <criterion comment="libxml2-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20080032002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="libxml2 is earlier than 0:2.5.10-11" test_ref="oval:com.redhat.rhsa:tst:20080836005"/>
       <criterion comment="libxml2 is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20080032006"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="libxml2-devel is earlier than 0:2.6.16-12.3" test_ref="oval:com.redhat.rhsa:tst:20080836008"/>
       <criterion comment="libxml2-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20080032002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="libxml2 is earlier than 0:2.6.16-12.3" test_ref="oval:com.redhat.rhsa:tst:20080836009"/>
       <criterion comment="libxml2 is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20080032006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="libxml2-python is earlier than 0:2.6.16-12.3" test_ref="oval:com.redhat.rhsa:tst:20080836010"/>
       <criterion comment="libxml2-python is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20080032004"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 5 is installed" test_ref="oval:com.redhat.rhsa:tst:20070066013"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="libxml2-devel is earlier than 0:2.6.26-2.1.2.4" test_ref="oval:com.redhat.rhsa:tst:20080836012"/>
       <criterion comment="libxml2-devel is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20080032013"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="libxml2-python is earlier than 0:2.6.26-2.1.2.4" test_ref="oval:com.redhat.rhsa:tst:20080836014"/>
       <criterion comment="libxml2-python is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20080032015"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="libxml2 is earlier than 0:2.6.26-2.1.2.4" test_ref="oval:com.redhat.rhsa:tst:20080836016"/>
       <criterion comment="libxml2 is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20080032017"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20080839" version="633">
   <metadata>
    <title>RHSA-2008:0839: postfix security update (Moderate)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
     <platform>Red Hat Enterprise Linux 5</platform>
    </affected>
    <reference ref_id="RHSA-2008:0839" ref_url="https://access.redhat.com/errata/RHSA-2008:0839" source="RHSA"/>
    <reference ref_id="CVE-2008-2936" ref_url="https://access.redhat.com/security/cve/CVE-2008-2936" source="CVE"/>
    <description>Postfix is a Mail Transport Agent (MTA), supporting LDAP, SMTP AUTH (SASL),
and TLS.

A flaw was found in the way Postfix dereferences symbolic links. If a local
user has write access to a mail spool directory with no root mailbox, it
may be possible for them to append arbitrary data to files that root has
write permission to. (CVE-2008-2936)

Red Hat would like to thank Sebastian Krahmer for responsibly disclosing
this issue.

All users of postfix should upgrade to these updated packages, which
contain a backported patch that resolves this issue.</description>
    <advisory from="secalert@redhat.com">
     <severity>Moderate</severity>
     <rights>Copyright 2008 Red Hat, Inc.</rights>
     <issued date="2008-08-14"/>
     <updated date="2008-08-14"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2008-2936" public="20080814">CVE-2008-2936</cve>
     <bugzilla href="https://bugzilla.redhat.com/456314" id="456314">CVE-2008-2936 postfix privilege escalation flaw</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:5</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criterion comment="postfix is earlier than 2:2.0.16-14.1.RHEL3" test_ref="oval:com.redhat.rhsa:tst:20080839001"/>
     <criterion comment="postfix is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20080839002"/>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="postfix-pflogsumm is earlier than 2:2.2.10-1.2.1.el4_7" test_ref="oval:com.redhat.rhsa:tst:20080839004"/>
       <criterion comment="postfix-pflogsumm is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20080839005"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="postfix is earlier than 2:2.2.10-1.2.1.el4_7" test_ref="oval:com.redhat.rhsa:tst:20080839006"/>
       <criterion comment="postfix is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20080839002"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 5 is installed" test_ref="oval:com.redhat.rhsa:tst:20070066013"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="postfix is earlier than 2:2.3.3-2.1.el5_2" test_ref="oval:com.redhat.rhsa:tst:20080839008"/>
       <criterion comment="postfix is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20080839009"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="postfix-pflogsumm is earlier than 2:2.3.3-2.1.el5_2" test_ref="oval:com.redhat.rhsa:tst:20080839010"/>
       <criterion comment="postfix-pflogsumm is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20080839011"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20080849" version="635">
   <metadata>
    <title>RHSA-2008:0849: ipsec-tools security update (Important)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
     <platform>Red Hat Enterprise Linux 5</platform>
    </affected>
    <reference ref_id="RHSA-2008:0849" ref_url="https://access.redhat.com/errata/RHSA-2008:0849" source="RHSA"/>
    <reference ref_id="CVE-2008-3651" ref_url="https://access.redhat.com/security/cve/CVE-2008-3651" source="CVE"/>
    <reference ref_id="CVE-2008-3652" ref_url="https://access.redhat.com/security/cve/CVE-2008-3652" source="CVE"/>
    <description>The ipsec-tools package is used in conjunction with the IPsec functionality
in the Linux kernel and includes racoon, an IKEv1 keying daemon.

Two denial of service flaws were found in the ipsec-tools racoon daemon. It
was possible for a remote attacker to cause the racoon daemon to consume
all available memory. (CVE-2008-3651, CVE-2008-3652)

Users of ipsec-tools should upgrade to this updated package, which contains
backported patches that resolve these issues.</description>
    <advisory from="secalert@redhat.com">
     <severity>Important</severity>
     <rights>Copyright 2008 Red Hat, Inc.</rights>
     <issued date="2008-08-26"/>
     <updated date="2008-08-26"/>
     <cve cwe="CWE-401" href="https://access.redhat.com/security/cve/CVE-2008-3651" impact="moderate" public="20080724">CVE-2008-3651</cve>
     <cve cwe="CWE-401" href="https://access.redhat.com/security/cve/CVE-2008-3652" public="20080811">CVE-2008-3652</cve>
     <bugzilla href="https://bugzilla.redhat.com/456660" id="456660">CVE-2008-3651 ipsec-tools: racoon memory leak caused by invalid proposals</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/458846" id="458846">CVE-2008-3652 ipsec-tools: racoon orphaned ph1s memory leak</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:5</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criterion comment="ipsec-tools is earlier than 0:0.2.5-0.7.rhel3.5" test_ref="oval:com.redhat.rhsa:tst:20080849001"/>
     <criterion comment="ipsec-tools is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060267002"/>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criterion comment="ipsec-tools is earlier than 0:0.3.3-7.el4_7" test_ref="oval:com.redhat.rhsa:tst:20080849004"/>
     <criterion comment="ipsec-tools is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060267002"/>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 5 is installed" test_ref="oval:com.redhat.rhsa:tst:20070066013"/>
     <criterion comment="ipsec-tools is earlier than 0:0.6.5-9.el5_2.3" test_ref="oval:com.redhat.rhsa:tst:20080849006"/>
     <criterion comment="ipsec-tools is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20080849007"/>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20080863" version="633">
   <metadata>
    <title>RHSA-2008:0863: libtiff security update (Important)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
    </affected>
    <reference ref_id="RHSA-2008:0863" ref_url="https://access.redhat.com/errata/RHSA-2008:0863" source="RHSA"/>
    <reference ref_id="CVE-2008-2327" ref_url="https://access.redhat.com/security/cve/CVE-2008-2327" source="CVE"/>
    <description>The libtiff packages contain a library of functions for manipulating Tagged
Image File Format (TIFF) files.

Multiple uses of uninitialized values were discovered in libtiff's
Lempel-Ziv-Welch (LZW) compression algorithm decoder. An attacker could
create a carefully crafted LZW-encoded TIFF file that would cause an
application linked with libtiff to crash or, possibly, execute arbitrary
code. (CVE-2008-2327)

Red Hat would like to thank Drew Yao of the Apple Product Security team for
reporting this issue.

All libtiff users are advised to upgrade to these updated packages, which
contain backported patches to resolve this issue.</description>
    <advisory from="secalert@redhat.com">
     <severity>Important</severity>
     <rights>Copyright 2008 Red Hat, Inc.</rights>
     <issued date="2008-08-28"/>
     <updated date="2008-08-28"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2008-2327" public="20080826">CVE-2008-2327</cve>
     <bugzilla href="https://bugzilla.redhat.com/458674" id="458674">CVE-2008-2327 libtiff: use of uninitialized memory in LZW decoder</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="AND">
    <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
    <criteria operator="OR">
     <criteria operator="AND">
      <criterion comment="libtiff-devel is earlier than 0:3.5.7-31.el3" test_ref="oval:com.redhat.rhsa:tst:20080863001"/>
      <criterion comment="libtiff-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060425002"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="libtiff is earlier than 0:3.5.7-31.el3" test_ref="oval:com.redhat.rhsa:tst:20080863003"/>
      <criterion comment="libtiff is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060425004"/>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20080882" version="634">
   <metadata>
    <title>RHSA-2008:0882: seamonkey security update (Critical)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
    </affected>
    <reference ref_id="RHSA-2008:0882" ref_url="https://access.redhat.com/errata/RHSA-2008:0882" source="RHSA"/>
    <reference ref_id="CVE-2008-0016" ref_url="https://access.redhat.com/security/cve/CVE-2008-0016" source="CVE"/>
    <reference ref_id="CVE-2008-3835" ref_url="https://access.redhat.com/security/cve/CVE-2008-3835" source="CVE"/>
    <reference ref_id="CVE-2008-3837" ref_url="https://access.redhat.com/security/cve/CVE-2008-3837" source="CVE"/>
    <reference ref_id="CVE-2008-4058" ref_url="https://access.redhat.com/security/cve/CVE-2008-4058" source="CVE"/>
    <reference ref_id="CVE-2008-4059" ref_url="https://access.redhat.com/security/cve/CVE-2008-4059" source="CVE"/>
    <reference ref_id="CVE-2008-4060" ref_url="https://access.redhat.com/security/cve/CVE-2008-4060" source="CVE"/>
    <reference ref_id="CVE-2008-4061" ref_url="https://access.redhat.com/security/cve/CVE-2008-4061" source="CVE"/>
    <reference ref_id="CVE-2008-4062" ref_url="https://access.redhat.com/security/cve/CVE-2008-4062" source="CVE"/>
    <reference ref_id="CVE-2008-4065" ref_url="https://access.redhat.com/security/cve/CVE-2008-4065" source="CVE"/>
    <reference ref_id="CVE-2008-4066" ref_url="https://access.redhat.com/security/cve/CVE-2008-4066" source="CVE"/>
    <reference ref_id="CVE-2008-4067" ref_url="https://access.redhat.com/security/cve/CVE-2008-4067" source="CVE"/>
    <reference ref_id="CVE-2008-4068" ref_url="https://access.redhat.com/security/cve/CVE-2008-4068" source="CVE"/>
    <reference ref_id="CVE-2008-4069" ref_url="https://access.redhat.com/security/cve/CVE-2008-4069" source="CVE"/>
    <description>SeaMonkey is an open source Web browser, advanced email and newsgroup
client, IRC chat client, and HTML editor.

Several flaws were found in the processing of malformed web content. A web
page containing malicious content could cause SeaMonkey to crash or,
potentially, execute arbitrary code as the user running SeaMonkey.
(CVE-2008-0016, CVE-2008-4058, CVE-2008-4059, CVE-2008-4060, CVE-2008-4061,
CVE-2008-4062)

Several flaws were found in the way malformed web content was displayed. A
web page containing specially crafted content could potentially trick a
SeaMonkey user into surrendering sensitive information. (CVE-2008-3835,
CVE-2008-4067, CVE-2008-4068, CVE-2008-4069)

A flaw was found in the way SeaMonkey handles mouse click events. A web page
containing specially crafted JavaScript code could move the content window
while a mouse-button was pressed, causing any item under the pointer to be
dragged. This could, potentially, cause the user to perform an unsafe
drag-and-drop action. (CVE-2008-3837)

A flaw was found in SeaMonkey that caused certain characters to be stripped
from JavaScript code. This flaw could allow malicious JavaScript to bypass
or evade script filters. (CVE-2008-4065, CVE-2008-4066)

All SeaMonkey users should upgrade to these updated packages, which contain
backported patches to resolve these issues.</description>
    <advisory from="secalert@redhat.com">
     <severity>Critical</severity>
     <rights>Copyright 2008 Red Hat, Inc.</rights>
     <issued date="2008-09-23"/>
     <updated date="2008-09-23"/>
     <cve cwe="CWE-121" href="https://access.redhat.com/security/cve/CVE-2008-0016" public="20080923">CVE-2008-0016</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2008-3835" impact="moderate" public="20080923">CVE-2008-3835</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2008-3837" impact="moderate" public="20080923">CVE-2008-3837</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2008-4058" public="20080923">CVE-2008-4058</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2008-4059" public="20080923">CVE-2008-4059</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2008-4060" public="20080923">CVE-2008-4060</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2008-4061" public="20080923">CVE-2008-4061</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2008-4062" public="20080923">CVE-2008-4062</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2008-4065" impact="moderate" public="20080923">CVE-2008-4065</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2008-4066" impact="moderate" public="20080923">CVE-2008-4066</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2008-4067" impact="moderate" public="20080923">CVE-2008-4067</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2008-4068" impact="moderate" public="20080923">CVE-2008-4068</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2008-4069" impact="moderate" public="20080923">CVE-2008-4069</cve>
     <bugzilla href="https://bugzilla.redhat.com/463181" id="463181">CVE-2008-0016 Mozilla UTF-8 stack buffer overflow</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/463182" id="463182">CVE-2008-3835 mozilla: nsXMLDocument::OnChannelRedirect() same-origin violation</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/463189" id="463189">CVE-2008-3837 mozilla: Forced mouse drag</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/463190" id="463190">CVE-2008-4058 Mozilla privilege escalation via XPCnativeWrapper pollution</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/463192" id="463192">CVE-2008-4059 Mozilla privilege escalation via XPCnativeWrapper pollution</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/463198" id="463198">CVE-2008-4060 Mozilla privilege escalation via XPCnativeWrapper pollution</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/463199" id="463199">CVE-2008-4061 Mozilla layout engine crash</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/463201" id="463201">CVE-2008-4062 Mozilla crashes with evidence of memory corruption</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/463234" id="463234">CVE-2008-4065 Mozilla BOM characters stripped from JavaScript before execution</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/463243" id="463243">CVE-2008-4066 Mozilla low surrogates stripped from JavaScript before execution</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/463246" id="463246">CVE-2008-4067 Mozilla resource: traversal vulnerability</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/463248" id="463248">CVE-2008-4068 Mozilla local HTML file recource: bypass</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/463251" id="463251">CVE-2008-4069 Mozilla XBM decoder information disclosure</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.24.el3" test_ref="oval:com.redhat.rhsa:tst:20080882001"/>
       <criterion comment="seamonkey-dom-inspector is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.24.el3" test_ref="oval:com.redhat.rhsa:tst:20080882003"/>
       <criterion comment="seamonkey-nspr-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey is earlier than 0:1.0.9-0.24.el3" test_ref="oval:com.redhat.rhsa:tst:20080882005"/>
       <criterion comment="seamonkey is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578018"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.24.el3" test_ref="oval:com.redhat.rhsa:tst:20080882007"/>
       <criterion comment="seamonkey-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578014"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.24.el3" test_ref="oval:com.redhat.rhsa:tst:20080882009"/>
       <criterion comment="seamonkey-chat is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.24.el3" test_ref="oval:com.redhat.rhsa:tst:20080882011"/>
       <criterion comment="seamonkey-nss-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578012"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.24.el3" test_ref="oval:com.redhat.rhsa:tst:20080882013"/>
       <criterion comment="seamonkey-nspr is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578010"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.24.el3" test_ref="oval:com.redhat.rhsa:tst:20080882015"/>
       <criterion comment="seamonkey-mail is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578020"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.24.el3" test_ref="oval:com.redhat.rhsa:tst:20080882017"/>
       <criterion comment="seamonkey-nss is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578016"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.24.el3" test_ref="oval:com.redhat.rhsa:tst:20080882019"/>
       <criterion comment="seamonkey-js-debugger is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578008"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="devhelp-devel is earlier than 0:0.10-0.10.el4" test_ref="oval:com.redhat.rhsa:tst:20080882022"/>
       <criterion comment="devhelp-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060329002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="devhelp is earlier than 0:0.10-0.10.el4" test_ref="oval:com.redhat.rhsa:tst:20080882024"/>
       <criterion comment="devhelp is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060329004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-26.el4" test_ref="oval:com.redhat.rhsa:tst:20080882026"/>
       <criterion comment="seamonkey-js-debugger is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-26.el4" test_ref="oval:com.redhat.rhsa:tst:20080882027"/>
       <criterion comment="seamonkey-dom-inspector is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-mail is earlier than 0:1.0.9-26.el4" test_ref="oval:com.redhat.rhsa:tst:20080882028"/>
       <criterion comment="seamonkey-mail is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578020"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-devel is earlier than 0:1.0.9-26.el4" test_ref="oval:com.redhat.rhsa:tst:20080882029"/>
       <criterion comment="seamonkey-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578014"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey is earlier than 0:1.0.9-26.el4" test_ref="oval:com.redhat.rhsa:tst:20080882030"/>
       <criterion comment="seamonkey is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578018"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-chat is earlier than 0:1.0.9-26.el4" test_ref="oval:com.redhat.rhsa:tst:20080882031"/>
       <criterion comment="seamonkey-chat is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578006"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20080884" version="633">
   <metadata>
    <title>RHSA-2008:0884: libxml2 security update (Important)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
     <platform>Red Hat Enterprise Linux 5</platform>
    </affected>
    <reference ref_id="RHSA-2008:0884" ref_url="https://access.redhat.com/errata/RHSA-2008:0884" source="RHSA"/>
    <reference ref_id="CVE-2008-3529" ref_url="https://access.redhat.com/security/cve/CVE-2008-3529" source="CVE"/>
    <description>The libxml2 packages provide a library that allows you to manipulate XML
files. It includes support to read, modify, and write XML and HTML files.

A heap-based buffer overflow flaw was found in the way libxml2 handled long
XML entity names. If an application linked against libxml2 processed
untrusted malformed XML content, it could cause the application to crash
or, possibly, execute arbitrary code. (CVE-2008-3529)

All users of libxml2 are advised to upgrade to these updated packages,
which contain a backported patch to resolve this issue.</description>
    <advisory from="secalert@redhat.com">
     <severity>Important</severity>
     <rights>Copyright 2008 Red Hat, Inc.</rights>
     <issued date="2008-09-11"/>
     <updated date="2008-09-11"/>
     <cve cwe="CWE-122" href="https://access.redhat.com/security/cve/CVE-2008-3529" public="20080911">CVE-2008-3529</cve>
     <bugzilla href="https://bugzilla.redhat.com/461015" id="461015">CVE-2008-3529 libxml2: long entity name heap buffer overflow</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:5</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="libxml2 is earlier than 0:2.5.10-13" test_ref="oval:com.redhat.rhsa:tst:20080884001"/>
       <criterion comment="libxml2 is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20080032006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="libxml2-python is earlier than 0:2.5.10-13" test_ref="oval:com.redhat.rhsa:tst:20080884003"/>
       <criterion comment="libxml2-python is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20080032004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="libxml2-devel is earlier than 0:2.5.10-13" test_ref="oval:com.redhat.rhsa:tst:20080884005"/>
       <criterion comment="libxml2-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20080032002"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="libxml2 is earlier than 0:2.6.16-12.5" test_ref="oval:com.redhat.rhsa:tst:20080884008"/>
       <criterion comment="libxml2 is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20080032006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="libxml2-python is earlier than 0:2.6.16-12.5" test_ref="oval:com.redhat.rhsa:tst:20080884009"/>
       <criterion comment="libxml2-python is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20080032004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="libxml2-devel is earlier than 0:2.6.16-12.5" test_ref="oval:com.redhat.rhsa:tst:20080884010"/>
       <criterion comment="libxml2-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20080032002"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 5 is installed" test_ref="oval:com.redhat.rhsa:tst:20070066013"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="libxml2-devel is earlier than 0:2.6.26-2.1.2.6" test_ref="oval:com.redhat.rhsa:tst:20080884012"/>
       <criterion comment="libxml2-devel is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20080032013"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="libxml2-python is earlier than 0:2.6.26-2.1.2.6" test_ref="oval:com.redhat.rhsa:tst:20080884014"/>
       <criterion comment="libxml2-python is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20080032015"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="libxml2 is earlier than 0:2.6.26-2.1.2.6" test_ref="oval:com.redhat.rhsa:tst:20080884016"/>
       <criterion comment="libxml2 is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20080032017"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20080890" version="632">
   <metadata>
    <title>RHSA-2008:0890: wireshark security update (Moderate)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
     <platform>Red Hat Enterprise Linux 5</platform>
    </affected>
    <reference ref_id="RHSA-2008:0890" ref_url="https://access.redhat.com/errata/RHSA-2008:0890" source="RHSA"/>
    <reference ref_id="CVE-2008-1070" ref_url="https://access.redhat.com/security/cve/CVE-2008-1070" source="CVE"/>
    <reference ref_id="CVE-2008-1071" ref_url="https://access.redhat.com/security/cve/CVE-2008-1071" source="CVE"/>
    <reference ref_id="CVE-2008-1072" ref_url="https://access.redhat.com/security/cve/CVE-2008-1072" source="CVE"/>
    <reference ref_id="CVE-2008-1561" ref_url="https://access.redhat.com/security/cve/CVE-2008-1561" source="CVE"/>
    <reference ref_id="CVE-2008-1562" ref_url="https://access.redhat.com/security/cve/CVE-2008-1562" source="CVE"/>
    <reference ref_id="CVE-2008-1563" ref_url="https://access.redhat.com/security/cve/CVE-2008-1563" source="CVE"/>
    <reference ref_id="CVE-2008-3137" ref_url="https://access.redhat.com/security/cve/CVE-2008-3137" source="CVE"/>
    <reference ref_id="CVE-2008-3138" ref_url="https://access.redhat.com/security/cve/CVE-2008-3138" source="CVE"/>
    <reference ref_id="CVE-2008-3141" ref_url="https://access.redhat.com/security/cve/CVE-2008-3141" source="CVE"/>
    <reference ref_id="CVE-2008-3145" ref_url="https://access.redhat.com/security/cve/CVE-2008-3145" source="CVE"/>
    <reference ref_id="CVE-2008-3146" ref_url="https://access.redhat.com/security/cve/CVE-2008-3146" source="CVE"/>
    <reference ref_id="CVE-2008-3932" ref_url="https://access.redhat.com/security/cve/CVE-2008-3932" source="CVE"/>
    <reference ref_id="CVE-2008-3933" ref_url="https://access.redhat.com/security/cve/CVE-2008-3933" source="CVE"/>
    <reference ref_id="CVE-2008-3934" ref_url="https://access.redhat.com/security/cve/CVE-2008-3934" source="CVE"/>
    <description>Wireshark is a program for monitoring network traffic. Wireshark was
previously known as Ethereal.

Multiple buffer overflow flaws were found in Wireshark. If Wireshark read
a malformed packet off a network, it could crash or, possibly, execute
arbitrary code as the user running Wireshark. (CVE-2008-3146)

Several denial of service flaws were found in Wireshark. Wireshark could
crash or stop responding if it read a malformed packet off a network, or
opened a malformed dump file. (CVE-2008-1070, CVE-2008-1071, CVE-2008-1072,
CVE-2008-1561, CVE-2008-1562, CVE-2008-1563, CVE-2008-3137, CVE-2008-3138,
CVE-2008-3141, CVE-2008-3145, CVE-2008-3932, CVE-2008-3933, CVE-2008-3934)

Additionally, this update changes the default Pluggable Authentication
Modules (PAM) configuration to always prompt for the root password before
each start of Wireshark. This avoids unintentionally running Wireshark with
root privileges.

Users of wireshark should upgrade to these updated packages, which contain
Wireshark version 1.0.3, and resolve these issues.</description>
    <advisory from="secalert@redhat.com">
     <severity>Moderate</severity>
     <rights>Copyright 2008 Red Hat, Inc.</rights>
     <issued date="2008-10-01"/>
     <updated date="2008-10-01"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2008-1070" impact="low" public="20070227">CVE-2008-1070</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2008-1071" impact="low" public="20070227">CVE-2008-1071</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2008-1072" impact="low" public="20070227">CVE-2008-1072</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2008-1561" impact="low" public="20080328">CVE-2008-1561</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2008-1562" impact="low" public="20080328">CVE-2008-1562</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2008-1563" impact="low" public="20080328">CVE-2008-1563</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2008-3137" impact="low" public="20080630">CVE-2008-3137</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2008-3138" impact="low" public="20080630">CVE-2008-3138</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2008-3141" impact="low" public="20080630">CVE-2008-3141</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2008-3145" impact="low" public="20080710">CVE-2008-3145</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2008-3146" public="20080903">CVE-2008-3146</cve>
     <cve cwe="CWE-835" href="https://access.redhat.com/security/cve/CVE-2008-3932" impact="low" public="20080903">CVE-2008-3932</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2008-3933" impact="low" public="20080903">CVE-2008-3933</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2008-3934" impact="low" public="20080903">CVE-2008-3934</cve>
     <bugzilla href="https://bugzilla.redhat.com/435481" id="435481">CVE-2008-1070 wireshark: SCTP dissector crash</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/435482" id="435482">CVE-2008-1071 wireshark: SNMP dissector crash</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/435483" id="435483">CVE-2008-1072 wireshark: TFTP dissector crash</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/439943" id="439943">CVE-2008-1563 wireshark: crash in SCCP dissector</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/440014" id="440014">CVE-2008-1561 wireshark: crash in X.509sat and Roofnet dissectors</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/440015" id="440015">CVE-2008-1562 wireshark: crash in LDAP dissector</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/448584" id="448584">Don't automatically use stored privileges</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/454970" id="454970">CVE-2008-3137 wireshark: crash in the GSM SMS dissector</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/454971" id="454971">CVE-2008-3138 wireshark: unexpected exit in the PANA and KISMET dissectors</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/454975" id="454975">CVE-2008-3141 wireshark: memory disclosure in the RMI dissector</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/454984" id="454984">CVE-2008-3145 wireshark: crash in the packet reassembling</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/461242" id="461242">CVE-2008-3146 wireshark: multiple buffer overflows in NCP dissector</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/461243" id="461243">CVE-2008-3932 wireshark: infinite loop in the NCP dissector</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/461244" id="461244">CVE-2008-3933 wireshark: crash triggered by zlib-compressed packet data</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/461245" id="461245">CVE-2008-3934 wireshark: crash via crafted Tektronix .rf5 file</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:5</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="wireshark is earlier than 0:1.0.3-EL3.3" test_ref="oval:com.redhat.rhsa:tst:20080890001"/>
       <criterion comment="wireshark is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060602002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="wireshark-gnome is earlier than 0:1.0.3-EL3.3" test_ref="oval:com.redhat.rhsa:tst:20080890003"/>
       <criterion comment="wireshark-gnome is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060602004"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="wireshark-gnome is earlier than 0:1.0.3-3.el4_7" test_ref="oval:com.redhat.rhsa:tst:20080890006"/>
       <criterion comment="wireshark-gnome is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060602004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="wireshark is earlier than 0:1.0.3-3.el4_7" test_ref="oval:com.redhat.rhsa:tst:20080890007"/>
       <criterion comment="wireshark is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060602002"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 5 is installed" test_ref="oval:com.redhat.rhsa:tst:20070066013"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="wireshark is earlier than 0:1.0.3-4.el5_2" test_ref="oval:com.redhat.rhsa:tst:20080890009"/>
       <criterion comment="wireshark is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070066012"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="wireshark-gnome is earlier than 0:1.0.3-4.el5_2" test_ref="oval:com.redhat.rhsa:tst:20080890011"/>
       <criterion comment="wireshark-gnome is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070066010"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20080893" version="632">
   <metadata>
    <title>RHSA-2008:0893: bzip2 security update (Moderate)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
     <platform>Red Hat Enterprise Linux 5</platform>
    </affected>
    <reference ref_id="RHSA-2008:0893" ref_url="https://access.redhat.com/errata/RHSA-2008:0893" source="RHSA"/>
    <reference ref_id="CVE-2008-1372" ref_url="https://access.redhat.com/security/cve/CVE-2008-1372" source="CVE"/>
    <description>Bzip2 is a freely available, high-quality data compressor. It provides both
stand-alone compression and decompression utilities, as well as a shared
library for use with other programs.

A buffer over-read flaw was discovered in the bzip2 decompression routine.
This issue could cause an application linked against the libbz2 library to
crash when decompressing malformed archives. (CVE-2008-1372)

Users of bzip2 should upgrade to these updated packages, which contain a
backported patch to resolve this issue.</description>
    <advisory from="secalert@redhat.com">
     <severity>Moderate</severity>
     <rights>Copyright 2008 Red Hat, Inc.</rights>
     <issued date="2008-09-16"/>
     <updated date="2008-09-16"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2008-1372" public="20080318">CVE-2008-1372</cve>
     <bugzilla href="https://bugzilla.redhat.com/438118" id="438118">CVE-2008-1372 bzip2: crash on malformed archive file</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:5</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="bzip2-libs is earlier than 0:1.0.2-12.EL3" test_ref="oval:com.redhat.rhsa:tst:20080893001"/>
       <criterion comment="bzip2-libs is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20080893002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="bzip2-devel is earlier than 0:1.0.2-12.EL3" test_ref="oval:com.redhat.rhsa:tst:20080893003"/>
       <criterion comment="bzip2-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20080893004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="bzip2 is earlier than 0:1.0.2-12.EL3" test_ref="oval:com.redhat.rhsa:tst:20080893005"/>
       <criterion comment="bzip2 is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20080893006"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="bzip2-libs is earlier than 0:1.0.2-14.el4_7" test_ref="oval:com.redhat.rhsa:tst:20080893008"/>
       <criterion comment="bzip2-libs is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20080893002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="bzip2 is earlier than 0:1.0.2-14.el4_7" test_ref="oval:com.redhat.rhsa:tst:20080893009"/>
       <criterion comment="bzip2 is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20080893006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="bzip2-devel is earlier than 0:1.0.2-14.el4_7" test_ref="oval:com.redhat.rhsa:tst:20080893010"/>
       <criterion comment="bzip2-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20080893004"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 5 is installed" test_ref="oval:com.redhat.rhsa:tst:20070066013"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="bzip2-libs is earlier than 0:1.0.3-4.el5_2" test_ref="oval:com.redhat.rhsa:tst:20080893012"/>
       <criterion comment="bzip2-libs is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20080893013"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="bzip2 is earlier than 0:1.0.3-4.el5_2" test_ref="oval:com.redhat.rhsa:tst:20080893014"/>
       <criterion comment="bzip2 is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20080893015"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="bzip2-devel is earlier than 0:1.0.3-4.el5_2" test_ref="oval:com.redhat.rhsa:tst:20080893016"/>
       <criterion comment="bzip2-devel is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20080893017"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20080896" version="635">
   <metadata>
    <title>RHSA-2008:0896: ruby security update (Moderate)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
    </affected>
    <reference ref_id="RHSA-2008:0896" ref_url="https://access.redhat.com/errata/RHSA-2008:0896" source="RHSA"/>
    <reference ref_id="CVE-2008-3443" ref_url="https://access.redhat.com/security/cve/CVE-2008-3443" source="CVE"/>
    <reference ref_id="CVE-2008-3655" ref_url="https://access.redhat.com/security/cve/CVE-2008-3655" source="CVE"/>
    <reference ref_id="CVE-2008-3905" ref_url="https://access.redhat.com/security/cve/CVE-2008-3905" source="CVE"/>
    <description>Ruby is an interpreted scripting language for quick and easy
object-oriented programming.

The Ruby DNS resolver library, resolv.rb, used predictable transaction IDs
and a fixed source port when sending DNS requests. A remote attacker could
use this flaw to spoof a malicious reply to a DNS query. (CVE-2008-3905)

A number of flaws were found in the safe-level restrictions in Ruby. It
was possible for an attacker to create a carefully crafted malicious script
that can allow the bypass of certain safe-level restrictions. (CVE-2008-3655)

A denial of service flaw was found in Ruby's regular expression engine. If
a Ruby script tried to process a large amount of data via a regular
expression, it could cause Ruby to enter an infinite-loop and crash.
(CVE-2008-3443)

Users of ruby should upgrade to these updated packages, which contain
backported patches to resolve these issues.</description>
    <advisory from="secalert@redhat.com">
     <severity>Moderate</severity>
     <rights>Copyright 2008 Red Hat, Inc.</rights>
     <issued date="2008-10-21"/>
     <updated date="2008-10-21"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2008-3443" public="20080814">CVE-2008-3443</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2008-3655" public="20080808">CVE-2008-3655</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2008-3905" public="20080808">CVE-2008-3905</cve>
     <bugzilla href="https://bugzilla.redhat.com/458948" id="458948">CVE-2008-3655 ruby: multiple insufficient safe mode restrictions</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/459266" id="459266">CVE-2008-3443 ruby: Memory allocation failure in Ruby regex engine (remotely exploitable DoS)</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/461495" id="461495">CVE-2008-3905 ruby: use of predictable source port and transaction id in DNS requests done by resolv.rb module</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="AND">
    <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
    <criteria operator="OR">
     <criteria operator="AND">
      <criterion comment="ruby-mode is earlier than 0:1.6.8-13.el3" test_ref="oval:com.redhat.rhsa:tst:20080896001"/>
      <criterion comment="ruby-mode is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060604012"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="irb is earlier than 0:1.6.8-13.el3" test_ref="oval:com.redhat.rhsa:tst:20080896003"/>
      <criterion comment="irb is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060604014"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="ruby-tcltk is earlier than 0:1.6.8-13.el3" test_ref="oval:com.redhat.rhsa:tst:20080896005"/>
      <criterion comment="ruby-tcltk is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060604008"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="ruby is earlier than 0:1.6.8-13.el3" test_ref="oval:com.redhat.rhsa:tst:20080896007"/>
      <criterion comment="ruby is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060604010"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="ruby-libs is earlier than 0:1.6.8-13.el3" test_ref="oval:com.redhat.rhsa:tst:20080896009"/>
      <criterion comment="ruby-libs is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060604002"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="ruby-docs is earlier than 0:1.6.8-13.el3" test_ref="oval:com.redhat.rhsa:tst:20080896011"/>
      <criterion comment="ruby-docs is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060604006"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="ruby-devel is earlier than 0:1.6.8-13.el3" test_ref="oval:com.redhat.rhsa:tst:20080896013"/>
      <criterion comment="ruby-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060604004"/>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20080937" version="633">
   <metadata>
    <title>RHSA-2008:0937: cups security update (Important)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
     <platform>Red Hat Enterprise Linux 5</platform>
    </affected>
    <reference ref_id="RHSA-2008:0937" ref_url="https://access.redhat.com/errata/RHSA-2008:0937" source="RHSA"/>
    <reference ref_id="CVE-2008-3639" ref_url="https://access.redhat.com/security/cve/CVE-2008-3639" source="CVE"/>
    <reference ref_id="CVE-2008-3640" ref_url="https://access.redhat.com/security/cve/CVE-2008-3640" source="CVE"/>
    <reference ref_id="CVE-2008-3641" ref_url="https://access.redhat.com/security/cve/CVE-2008-3641" source="CVE"/>
    <description>The Common UNIX Printing System (CUPS) provides a portable printing layer
for UNIX(R) operating systems.

A buffer overflow flaw was discovered in the SGI image format decoding
routines used by the CUPS image converting filter &quot;imagetops&quot;. An attacker
could create a malicious SGI image file that could, possibly, execute
arbitrary code as the &quot;lp&quot; user if the file was printed. (CVE-2008-3639)

An integer overflow flaw leading to a heap buffer overflow was discovered
in the Text-to-PostScript &quot;texttops&quot; filter. An attacker could create a
malicious text file that could, possibly, execute arbitrary code as the
&quot;lp&quot; user if the file was printed. (CVE-2008-3640)

An insufficient buffer bounds checking flaw was discovered in the
HP-GL/2-to-PostScript &quot;hpgltops&quot; filter. An attacker could create a
malicious HP-GL/2 file that could, possibly, execute arbitrary code as the
&quot;lp&quot; user if the file was printed. (CVE-2008-3641)

Red Hat would like to thank regenrecht for reporting these issues.

All CUPS users are advised to upgrade to these updated packages, which
contain backported patches to resolve these issues.</description>
    <advisory from="secalert@redhat.com">
     <severity>Important</severity>
     <rights>Copyright 2008 Red Hat, Inc.</rights>
     <issued date="2008-10-10"/>
     <updated date="2008-10-10"/>
     <cve cvss2="5.8/AV:A/AC:L/Au:N/C:P/I:P/A:P" cwe="CWE-122" href="https://access.redhat.com/security/cve/CVE-2008-3639" public="20081009">CVE-2008-3639</cve>
     <cve cvss2="5.8/AV:A/AC:L/Au:N/C:P/I:P/A:P" cwe="CWE-190" href="https://access.redhat.com/security/cve/CVE-2008-3640" public="20081009">CVE-2008-3640</cve>
     <cve cvss2="5.8/AV:A/AC:L/Au:N/C:P/I:P/A:P" href="https://access.redhat.com/security/cve/CVE-2008-3641" public="20081009">CVE-2008-3641</cve>
     <bugzilla href="https://bugzilla.redhat.com/464710" id="464710">CVE-2008-3639 CUPS: SGI image parser heap-based buffer overflow</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/464713" id="464713">CVE-2008-3640 CUPS: texttops integer overflow</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/464716" id="464716">CVE-2008-3641 CUPS: HP/GL reader insufficient bounds checking</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:5</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="cups is earlier than 1:1.1.17-13.3.54" test_ref="oval:com.redhat.rhsa:tst:20080937001"/>
       <criterion comment="cups is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060163006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="cups-devel is earlier than 1:1.1.17-13.3.54" test_ref="oval:com.redhat.rhsa:tst:20080937003"/>
       <criterion comment="cups-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060163002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="cups-libs is earlier than 1:1.1.17-13.3.54" test_ref="oval:com.redhat.rhsa:tst:20080937005"/>
       <criterion comment="cups-libs is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060163004"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="cups-devel is earlier than 1:1.1.22-0.rc1.9.27.el4_7.1" test_ref="oval:com.redhat.rhsa:tst:20080937008"/>
       <criterion comment="cups-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060163002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="cups is earlier than 1:1.1.22-0.rc1.9.27.el4_7.1" test_ref="oval:com.redhat.rhsa:tst:20080937009"/>
       <criterion comment="cups is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060163006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="cups-libs is earlier than 1:1.1.22-0.rc1.9.27.el4_7.1" test_ref="oval:com.redhat.rhsa:tst:20080937010"/>
       <criterion comment="cups-libs is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060163004"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 5 is installed" test_ref="oval:com.redhat.rhsa:tst:20070066013"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="cups-devel is earlier than 1:1.2.4-11.18.el5_2.2" test_ref="oval:com.redhat.rhsa:tst:20080937012"/>
       <criterion comment="cups-devel is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070123015"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="cups-lpd is earlier than 1:1.2.4-11.18.el5_2.2" test_ref="oval:com.redhat.rhsa:tst:20080937014"/>
       <criterion comment="cups-lpd is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070123019"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="cups is earlier than 1:1.2.4-11.18.el5_2.2" test_ref="oval:com.redhat.rhsa:tst:20080937016"/>
       <criterion comment="cups is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070123013"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="cups-libs is earlier than 1:1.2.4-11.18.el5_2.2" test_ref="oval:com.redhat.rhsa:tst:20080937018"/>
       <criterion comment="cups-libs is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070123017"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20080939" version="636">
   <metadata>
    <title>RHSA-2008:0939: openoffice.org security update (Important)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
     <platform>Red Hat Enterprise Linux 5</platform>
    </affected>
    <reference ref_id="RHSA-2008:0939" ref_url="https://access.redhat.com/errata/RHSA-2008:0939" source="RHSA"/>
    <reference ref_id="CVE-2008-2237" ref_url="https://access.redhat.com/security/cve/CVE-2008-2237" source="CVE"/>
    <reference ref_id="CVE-2008-2238" ref_url="https://access.redhat.com/security/cve/CVE-2008-2238" source="CVE"/>
    <description>OpenOffice.org is an office productivity suite that includes desktop
applications such as a word processor, spreadsheet, presentation manager,
formula editor, and drawing program.

SureRun Security Team discovered an integer overflow flaw leading to a heap
buffer overflow in the Windows Metafile (WMF) image format parser. An
attacker could create a carefully crafted document containing a malicious
WMF file that could cause OpenOffice.org to crash, or, possibly, execute
arbitrary code if opened by a victim. (CVE-2008-2237)

Multiple integer overflow flaws were found in the Enhanced Windows Metafile
(EMF) parser. An attacker could create a carefully crafted document
containing a malicious EMF file that could cause OpenOffice.org to crash,
or, possibly, execute arbitrary code if opened by a victim. (CVE-2008-2238)

All users of OpenOffice.org are advised to upgrade to these updated
packages, which contain backported patches that correct these issues.</description>
    <advisory from="secalert@redhat.com">
     <severity>Important</severity>
     <rights>Copyright 2008 Red Hat, Inc.</rights>
     <issued date="2008-11-05"/>
     <updated date="2008-11-05"/>
     <cve cwe="CWE-190" href="https://access.redhat.com/security/cve/CVE-2008-2237" public="20081029">CVE-2008-2237</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2008-2238" public="20081029">CVE-2008-2238</cve>
     <bugzilla href="https://bugzilla.redhat.com/462639" id="462639">CVE-2008-2237 OpenOffice.org WMF integer overflow</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/466528" id="466528">CVE-2008-2238 OpenOffice.org multiple EMF buffer overflows</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
      <cpe>cpe:/a:redhat:rhel_productivity:5</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:5</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="openoffice.org-libs is earlier than 0:1.1.2-43.2.0.EL3" test_ref="oval:com.redhat.rhsa:tst:20080939001"/>
       <criterion comment="openoffice.org-libs is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060573004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org is earlier than 0:1.1.2-43.2.0.EL3" test_ref="oval:com.redhat.rhsa:tst:20080939003"/>
       <criterion comment="openoffice.org is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060573006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-i18n is earlier than 0:1.1.2-43.2.0.EL3" test_ref="oval:com.redhat.rhsa:tst:20080939005"/>
       <criterion comment="openoffice.org-i18n is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060573002"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="openoffice.org-kde is earlier than 0:1.1.5-10.6.0.7.EL4" test_ref="oval:com.redhat.rhsa:tst:20080939008"/>
       <criterion comment="openoffice.org-kde is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060573011"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-libs is earlier than 0:1.1.5-10.6.0.7.EL4" test_ref="oval:com.redhat.rhsa:tst:20080939010"/>
       <criterion comment="openoffice.org-libs is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060573004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org is earlier than 0:1.1.5-10.6.0.7.EL4" test_ref="oval:com.redhat.rhsa:tst:20080939011"/>
       <criterion comment="openoffice.org is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060573006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-i18n is earlier than 0:1.1.5-10.6.0.7.EL4" test_ref="oval:com.redhat.rhsa:tst:20080939012"/>
       <criterion comment="openoffice.org-i18n is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060573002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-gu_IN is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:com.redhat.rhsa:tst:20080939013"/>
       <criterion comment="openoffice.org2-langpack-gu_IN is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406064"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-ru is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:com.redhat.rhsa:tst:20080939015"/>
       <criterion comment="openoffice.org2-langpack-ru is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406060"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-xsltfilter is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:com.redhat.rhsa:tst:20080939017"/>
       <criterion comment="openoffice.org2-xsltfilter is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406062"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-ar is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:com.redhat.rhsa:tst:20080939019"/>
       <criterion comment="openoffice.org2-langpack-ar is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406058"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-ja_JP is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:com.redhat.rhsa:tst:20080939021"/>
       <criterion comment="openoffice.org2-langpack-ja_JP is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406076"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-math is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:com.redhat.rhsa:tst:20080939023"/>
       <criterion comment="openoffice.org2-math is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406070"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-cy_GB is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:com.redhat.rhsa:tst:20080939025"/>
       <criterion comment="openoffice.org2-langpack-cy_GB is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406072"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-writer is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:com.redhat.rhsa:tst:20080939027"/>
       <criterion comment="openoffice.org2-writer is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406074"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-bn is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:com.redhat.rhsa:tst:20080939029"/>
       <criterion comment="openoffice.org2-langpack-bn is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406068"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-pl_PL is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:com.redhat.rhsa:tst:20080939031"/>
       <criterion comment="openoffice.org2-langpack-pl_PL is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406082"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-zh_TW is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:com.redhat.rhsa:tst:20080939033"/>
       <criterion comment="openoffice.org2-langpack-zh_TW is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406084"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-it is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:com.redhat.rhsa:tst:20080939035"/>
       <criterion comment="openoffice.org2-langpack-it is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406094"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-da_DK is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:com.redhat.rhsa:tst:20080939037"/>
       <criterion comment="openoffice.org2-langpack-da_DK is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406100"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-hr_HR is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:com.redhat.rhsa:tst:20080939039"/>
       <criterion comment="openoffice.org2-langpack-hr_HR is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406080"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-sk_SK is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:com.redhat.rhsa:tst:20080939041"/>
       <criterion comment="openoffice.org2-langpack-sk_SK is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406078"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-lt_LT is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:com.redhat.rhsa:tst:20080939043"/>
       <criterion comment="openoffice.org2-langpack-lt_LT is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406086"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-ko_KR is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:com.redhat.rhsa:tst:20080939045"/>
       <criterion comment="openoffice.org2-langpack-ko_KR is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406090"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-pa_IN is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:com.redhat.rhsa:tst:20080939047"/>
       <criterion comment="openoffice.org2-langpack-pa_IN is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406096"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-impress is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:com.redhat.rhsa:tst:20080939049"/>
       <criterion comment="openoffice.org2-impress is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406088"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-es is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:com.redhat.rhsa:tst:20080939051"/>
       <criterion comment="openoffice.org2-langpack-es is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406104"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-ta_IN is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:com.redhat.rhsa:tst:20080939053"/>
       <criterion comment="openoffice.org2-langpack-ta_IN is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406098"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-emailmerge is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:com.redhat.rhsa:tst:20080939055"/>
       <criterion comment="openoffice.org2-emailmerge is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406106"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-base is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:com.redhat.rhsa:tst:20080939057"/>
       <criterion comment="openoffice.org2-base is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406102"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-nb_NO is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:com.redhat.rhsa:tst:20080939059"/>
       <criterion comment="openoffice.org2-langpack-nb_NO is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406092"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-gl_ES is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:com.redhat.rhsa:tst:20080939061"/>
       <criterion comment="openoffice.org2-langpack-gl_ES is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406118"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-testtools is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:com.redhat.rhsa:tst:20080939063"/>
       <criterion comment="openoffice.org2-testtools is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406116"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-zu_ZA is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:com.redhat.rhsa:tst:20080939065"/>
       <criterion comment="openoffice.org2-langpack-zu_ZA is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406112"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-ga_IE is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:com.redhat.rhsa:tst:20080939067"/>
       <criterion comment="openoffice.org2-langpack-ga_IE is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406114"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-sv is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:com.redhat.rhsa:tst:20080939069"/>
       <criterion comment="openoffice.org2-langpack-sv is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406120"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-pt_BR is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:com.redhat.rhsa:tst:20080939071"/>
       <criterion comment="openoffice.org2-langpack-pt_BR is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406108"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-af_ZA is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:com.redhat.rhsa:tst:20080939073"/>
       <criterion comment="openoffice.org2-langpack-af_ZA is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406110"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-draw is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:com.redhat.rhsa:tst:20080939075"/>
       <criterion comment="openoffice.org2-draw is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406122"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-javafilter is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:com.redhat.rhsa:tst:20080939077"/>
       <criterion comment="openoffice.org2-javafilter is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406128"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-nn_NO is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:com.redhat.rhsa:tst:20080939079"/>
       <criterion comment="openoffice.org2-langpack-nn_NO is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406126"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-fr is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:com.redhat.rhsa:tst:20080939081"/>
       <criterion comment="openoffice.org2-langpack-fr is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406124"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-bg_BG is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:com.redhat.rhsa:tst:20080939083"/>
       <criterion comment="openoffice.org2-langpack-bg_BG is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406014"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-pt_PT is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:com.redhat.rhsa:tst:20080939085"/>
       <criterion comment="openoffice.org2-langpack-pt_PT is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406020"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-de is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:com.redhat.rhsa:tst:20080939087"/>
       <criterion comment="openoffice.org2-langpack-de is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406016"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-tr_TR is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:com.redhat.rhsa:tst:20080939089"/>
       <criterion comment="openoffice.org2-langpack-tr_TR is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406022"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-fi_FI is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:com.redhat.rhsa:tst:20080939091"/>
       <criterion comment="openoffice.org2-langpack-fi_FI is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406024"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-pyuno is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:com.redhat.rhsa:tst:20080939093"/>
       <criterion comment="openoffice.org2-pyuno is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406032"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-et_EE is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:com.redhat.rhsa:tst:20080939095"/>
       <criterion comment="openoffice.org2-langpack-et_EE is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406018"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-th_TH is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:com.redhat.rhsa:tst:20080939097"/>
       <criterion comment="openoffice.org2-langpack-th_TH is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406028"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-core is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:com.redhat.rhsa:tst:20080939099"/>
       <criterion comment="openoffice.org2-core is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406034"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-hu_HU is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:com.redhat.rhsa:tst:20080939101"/>
       <criterion comment="openoffice.org2-langpack-hu_HU is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406026"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-ca_ES is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:com.redhat.rhsa:tst:20080939103"/>
       <criterion comment="openoffice.org2-langpack-ca_ES is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406030"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-eu_ES is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:com.redhat.rhsa:tst:20080939105"/>
       <criterion comment="openoffice.org2-langpack-eu_ES is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406036"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-graphicfilter is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:com.redhat.rhsa:tst:20080939107"/>
       <criterion comment="openoffice.org2-graphicfilter is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406040"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-sl_SI is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:com.redhat.rhsa:tst:20080939109"/>
       <criterion comment="openoffice.org2-langpack-sl_SI is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406046"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-cs_CZ is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:com.redhat.rhsa:tst:20080939111"/>
       <criterion comment="openoffice.org2-langpack-cs_CZ is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406054"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-hi_IN is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:com.redhat.rhsa:tst:20080939113"/>
       <criterion comment="openoffice.org2-langpack-hi_IN is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406038"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-zh_CN is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:com.redhat.rhsa:tst:20080939115"/>
       <criterion comment="openoffice.org2-langpack-zh_CN is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406042"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-nl is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:com.redhat.rhsa:tst:20080939117"/>
       <criterion comment="openoffice.org2-langpack-nl is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406044"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-el_GR is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:com.redhat.rhsa:tst:20080939119"/>
       <criterion comment="openoffice.org2-langpack-el_GR is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406048"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-he_IL is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:com.redhat.rhsa:tst:20080939121"/>
       <criterion comment="openoffice.org2-langpack-he_IL is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406066"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-ms_MY is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:com.redhat.rhsa:tst:20080939123"/>
       <criterion comment="openoffice.org2-langpack-ms_MY is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406056"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-calc is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:com.redhat.rhsa:tst:20080939125"/>
       <criterion comment="openoffice.org2-calc is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406050"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-sr_CS is earlier than 1:2.0.4-5.7.0.6.0" test_ref="oval:com.redhat.rhsa:tst:20080939127"/>
       <criterion comment="openoffice.org2-langpack-sr_CS is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406052"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 5 is installed" test_ref="oval:com.redhat.rhsa:tst:20070066013"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-ve_ZA is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:com.redhat.rhsa:tst:20080939130"/>
       <criterion comment="openoffice.org-langpack-ve_ZA is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406141"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-zh_TW is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:com.redhat.rhsa:tst:20080939132"/>
       <criterion comment="openoffice.org-langpack-zh_TW is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406219"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-headless is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:com.redhat.rhsa:tst:20080939134"/>
       <criterion comment="openoffice.org-headless is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20080939135"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-testtools is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:com.redhat.rhsa:tst:20080939136"/>
       <criterion comment="openoffice.org-testtools is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406159"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-as_IN is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:com.redhat.rhsa:tst:20080939138"/>
       <criterion comment="openoffice.org-langpack-as_IN is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406213"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-hu_HU is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:com.redhat.rhsa:tst:20080939140"/>
       <criterion comment="openoffice.org-langpack-hu_HU is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406161"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-ml_IN is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:com.redhat.rhsa:tst:20080939142"/>
       <criterion comment="openoffice.org-langpack-ml_IN is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406231"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-th_TH is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:com.redhat.rhsa:tst:20080939144"/>
       <criterion comment="openoffice.org-langpack-th_TH is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406235"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-ko_KR is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:com.redhat.rhsa:tst:20080939146"/>
       <criterion comment="openoffice.org-langpack-ko_KR is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406173"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-gu_IN is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:com.redhat.rhsa:tst:20080939148"/>
       <criterion comment="openoffice.org-langpack-gu_IN is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406169"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-de is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:com.redhat.rhsa:tst:20080939150"/>
       <criterion comment="openoffice.org-langpack-de is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406221"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-pyuno is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:com.redhat.rhsa:tst:20080939152"/>
       <criterion comment="openoffice.org-pyuno is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406239"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-lt_LT is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:com.redhat.rhsa:tst:20080939154"/>
       <criterion comment="openoffice.org-langpack-lt_LT is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406185"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-or_IN is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:com.redhat.rhsa:tst:20080939156"/>
       <criterion comment="openoffice.org-langpack-or_IN is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406251"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-pt_PT is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:com.redhat.rhsa:tst:20080939158"/>
       <criterion comment="openoffice.org-langpack-pt_PT is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406203"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-ta_IN is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:com.redhat.rhsa:tst:20080939160"/>
       <criterion comment="openoffice.org-langpack-ta_IN is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406227"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-javafilter is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:com.redhat.rhsa:tst:20080939162"/>
       <criterion comment="openoffice.org-javafilter is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406269"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-ga_IE is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:com.redhat.rhsa:tst:20080939164"/>
       <criterion comment="openoffice.org-langpack-ga_IE is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406157"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-math is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:com.redhat.rhsa:tst:20080939166"/>
       <criterion comment="openoffice.org-math is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406167"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-st_ZA is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:com.redhat.rhsa:tst:20080939168"/>
       <criterion comment="openoffice.org-langpack-st_ZA is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406273"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-sdk is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:com.redhat.rhsa:tst:20080939170"/>
       <criterion comment="openoffice.org-sdk is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20080939171"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-pa_IN is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:com.redhat.rhsa:tst:20080939172"/>
       <criterion comment="openoffice.org-langpack-pa_IN is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406215"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-fr is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:com.redhat.rhsa:tst:20080939174"/>
       <criterion comment="openoffice.org-langpack-fr is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406175"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-emailmerge is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:com.redhat.rhsa:tst:20080939176"/>
       <criterion comment="openoffice.org-emailmerge is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406201"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-hi_IN is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:com.redhat.rhsa:tst:20080939178"/>
       <criterion comment="openoffice.org-langpack-hi_IN is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406135"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-ss_ZA is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:com.redhat.rhsa:tst:20080939180"/>
       <criterion comment="openoffice.org-langpack-ss_ZA is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406151"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-zh_CN is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:com.redhat.rhsa:tst:20080939182"/>
       <criterion comment="openoffice.org-langpack-zh_CN is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406155"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-da_DK is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:com.redhat.rhsa:tst:20080939184"/>
       <criterion comment="openoffice.org-langpack-da_DK is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406229"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-ar is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:com.redhat.rhsa:tst:20080939186"/>
       <criterion comment="openoffice.org-langpack-ar is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406217"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-xh_ZA is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:com.redhat.rhsa:tst:20080939188"/>
       <criterion comment="openoffice.org-langpack-xh_ZA is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406183"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-nl is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:com.redhat.rhsa:tst:20080939190"/>
       <criterion comment="openoffice.org-langpack-nl is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406207"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-ja_JP is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:com.redhat.rhsa:tst:20080939192"/>
       <criterion comment="openoffice.org-langpack-ja_JP is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406189"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-es is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:com.redhat.rhsa:tst:20080939194"/>
       <criterion comment="openoffice.org-langpack-es is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406259"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-mr_IN is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:com.redhat.rhsa:tst:20080939196"/>
       <criterion comment="openoffice.org-langpack-mr_IN is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406193"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-nso_ZA is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:com.redhat.rhsa:tst:20080939198"/>
       <criterion comment="openoffice.org-langpack-nso_ZA is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406187"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-sl_SI is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:com.redhat.rhsa:tst:20080939200"/>
       <criterion comment="openoffice.org-langpack-sl_SI is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406267"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-sr_CS is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:com.redhat.rhsa:tst:20080939202"/>
       <criterion comment="openoffice.org-langpack-sr_CS is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406233"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-pl_PL is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:com.redhat.rhsa:tst:20080939204"/>
       <criterion comment="openoffice.org-langpack-pl_PL is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406223"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-draw is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:com.redhat.rhsa:tst:20080939206"/>
       <criterion comment="openoffice.org-draw is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406205"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-nb_NO is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:com.redhat.rhsa:tst:20080939208"/>
       <criterion comment="openoffice.org-langpack-nb_NO is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406149"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-bg_BG is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:com.redhat.rhsa:tst:20080939210"/>
       <criterion comment="openoffice.org-langpack-bg_BG is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406241"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-ts_ZA is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:com.redhat.rhsa:tst:20080939212"/>
       <criterion comment="openoffice.org-langpack-ts_ZA is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406253"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-el_GR is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:com.redhat.rhsa:tst:20080939214"/>
       <criterion comment="openoffice.org-langpack-el_GR is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406245"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-calc is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:com.redhat.rhsa:tst:20080939216"/>
       <criterion comment="openoffice.org-calc is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406265"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-ms_MY is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:com.redhat.rhsa:tst:20080939218"/>
       <criterion comment="openoffice.org-langpack-ms_MY is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406171"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-sv is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:com.redhat.rhsa:tst:20080939220"/>
       <criterion comment="openoffice.org-langpack-sv is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406263"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-zu_ZA is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:com.redhat.rhsa:tst:20080939222"/>
       <criterion comment="openoffice.org-langpack-zu_ZA is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406209"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-impress is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:com.redhat.rhsa:tst:20080939224"/>
       <criterion comment="openoffice.org-impress is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406261"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-eu_ES is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:com.redhat.rhsa:tst:20080939226"/>
       <criterion comment="openoffice.org-langpack-eu_ES is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406257"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-graphicfilter is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:com.redhat.rhsa:tst:20080939228"/>
       <criterion comment="openoffice.org-graphicfilter is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406143"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-af_ZA is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:com.redhat.rhsa:tst:20080939230"/>
       <criterion comment="openoffice.org-langpack-af_ZA is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406247"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-writer is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:com.redhat.rhsa:tst:20080939232"/>
       <criterion comment="openoffice.org-writer is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406147"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-fi_FI is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:com.redhat.rhsa:tst:20080939234"/>
       <criterion comment="openoffice.org-langpack-fi_FI is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406255"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-base is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:com.redhat.rhsa:tst:20080939236"/>
       <criterion comment="openoffice.org-base is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406181"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-kn_IN is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:com.redhat.rhsa:tst:20080939238"/>
       <criterion comment="openoffice.org-langpack-kn_IN is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406271"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-te_IN is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:com.redhat.rhsa:tst:20080939240"/>
       <criterion comment="openoffice.org-langpack-te_IN is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406195"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-pt_BR is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:com.redhat.rhsa:tst:20080939242"/>
       <criterion comment="openoffice.org-langpack-pt_BR is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406133"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-nr_ZA is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:com.redhat.rhsa:tst:20080939244"/>
       <criterion comment="openoffice.org-langpack-nr_ZA is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406139"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-ru is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:com.redhat.rhsa:tst:20080939246"/>
       <criterion comment="openoffice.org-langpack-ru is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406275"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-ur is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:com.redhat.rhsa:tst:20080939248"/>
       <criterion comment="openoffice.org-langpack-ur is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406237"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-gl_ES is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:com.redhat.rhsa:tst:20080939250"/>
       <criterion comment="openoffice.org-langpack-gl_ES is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406153"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-cs_CZ is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:com.redhat.rhsa:tst:20080939252"/>
       <criterion comment="openoffice.org-langpack-cs_CZ is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406137"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-cy_GB is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:com.redhat.rhsa:tst:20080939254"/>
       <criterion comment="openoffice.org-langpack-cy_GB is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406177"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-bn is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:com.redhat.rhsa:tst:20080939256"/>
       <criterion comment="openoffice.org-langpack-bn is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406211"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-xsltfilter is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:com.redhat.rhsa:tst:20080939258"/>
       <criterion comment="openoffice.org-xsltfilter is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406179"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-tr_TR is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:com.redhat.rhsa:tst:20080939260"/>
       <criterion comment="openoffice.org-langpack-tr_TR is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406145"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-nn_NO is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:com.redhat.rhsa:tst:20080939262"/>
       <criterion comment="openoffice.org-langpack-nn_NO is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406225"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-ca_ES is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:com.redhat.rhsa:tst:20080939264"/>
       <criterion comment="openoffice.org-langpack-ca_ES is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406165"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-et_EE is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:com.redhat.rhsa:tst:20080939266"/>
       <criterion comment="openoffice.org-langpack-et_EE is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406199"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-it is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:com.redhat.rhsa:tst:20080939268"/>
       <criterion comment="openoffice.org-langpack-it is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406197"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-he_IL is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:com.redhat.rhsa:tst:20080939270"/>
       <criterion comment="openoffice.org-langpack-he_IL is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406243"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-tn_ZA is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:com.redhat.rhsa:tst:20080939272"/>
       <criterion comment="openoffice.org-langpack-tn_ZA is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406191"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-core is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:com.redhat.rhsa:tst:20080939274"/>
       <criterion comment="openoffice.org-core is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406249"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-sdk-doc is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:com.redhat.rhsa:tst:20080939276"/>
       <criterion comment="openoffice.org-sdk-doc is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20080939277"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-sk_SK is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:com.redhat.rhsa:tst:20080939278"/>
       <criterion comment="openoffice.org-langpack-sk_SK is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406131"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-hr_HR is earlier than 1:2.3.0-6.5.4.el5_2" test_ref="oval:com.redhat.rhsa:tst:20080939280"/>
       <criterion comment="openoffice.org-langpack-hr_HR is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406163"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20080946" version="633">
   <metadata>
    <title>RHSA-2008:0946: ed security update (Moderate)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
     <platform>Red Hat Enterprise Linux 5</platform>
    </affected>
    <reference ref_id="RHSA-2008:0946" ref_url="https://access.redhat.com/errata/RHSA-2008:0946" source="RHSA"/>
    <reference ref_id="CVE-2008-3916" ref_url="https://access.redhat.com/security/cve/CVE-2008-3916" source="CVE"/>
    <description>ed is a line-oriented text editor, used to create, display, and modify
text files (both interactively and via shell scripts).

A heap-based buffer overflow was discovered in the way ed, the GNU line
editor, processed long file names. An attacker could create a file with a
specially-crafted name that could possibly execute an arbitrary code when
opened in the ed editor. (CVE-2008-3916)

Users of ed should upgrade to this updated package, which contains
a backported patch to resolve this issue.</description>
    <advisory from="secalert@redhat.com">
     <severity>Moderate</severity>
     <rights>Copyright 2008 Red Hat, Inc.</rights>
     <issued date="2008-10-21"/>
     <updated date="2008-10-21"/>
     <cve cwe="CWE-122" href="https://access.redhat.com/security/cve/CVE-2008-3916" public="20080630">CVE-2008-3916</cve>
     <bugzilla href="https://bugzilla.redhat.com/462584" id="462584">CVE-2008-3916 ed: Heap-based buffer overflow (arb. code execution)</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:5</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criterion comment="ed is earlier than 0:0.2-33.30E.1" test_ref="oval:com.redhat.rhsa:tst:20080946001"/>
     <criterion comment="ed is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20080946002"/>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criterion comment="ed is earlier than 0:0.2-36.el4_7.1" test_ref="oval:com.redhat.rhsa:tst:20080946004"/>
     <criterion comment="ed is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20080946002"/>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 5 is installed" test_ref="oval:com.redhat.rhsa:tst:20070066013"/>
     <criterion comment="ed is earlier than 0:0.2-39.el5_2" test_ref="oval:com.redhat.rhsa:tst:20080946006"/>
     <criterion comment="ed is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20080946007"/>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20080965" version="639">
   <metadata>
    <title>RHSA-2008:0965: lynx security update (Important)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
     <platform>Red Hat Enterprise Linux 5</platform>
    </affected>
    <reference ref_id="RHSA-2008:0965" ref_url="https://access.redhat.com/errata/RHSA-2008:0965" source="RHSA"/>
    <reference ref_id="CVE-2006-7234" ref_url="https://access.redhat.com/security/cve/CVE-2006-7234" source="CVE"/>
    <reference ref_id="CVE-2008-4690" ref_url="https://access.redhat.com/security/cve/CVE-2008-4690" source="CVE"/>
    <description>Lynx is a text-based Web browser.

An arbitrary command execution flaw was found in the Lynx &quot;lynxcgi:&quot; URI
handler. An attacker could create a web page redirecting to a malicious URL
that could execute arbitrary code as the user running Lynx in the
non-default &quot;Advanced&quot; user mode. (CVE-2008-4690)

Note: In these updated lynx packages, Lynx will always prompt users before
loading a &quot;lynxcgi:&quot; URI. Additionally, the default lynx.cfg configuration
file now marks all &quot;lynxcgi:&quot; URIs as untrusted by default.

A flaw was found in a way Lynx handled &quot;.mailcap&quot; and &quot;.mime.types&quot;
configuration files. Files in the browser's current working directory were
opened before those in the user's home directory. A local attacker, able to
convince a user to run Lynx in a directory under their control, could
possibly execute arbitrary commands as the user running Lynx. (CVE-2006-7234)

All users of Lynx are advised to upgrade to this updated package, which
contains backported patches correcting these issues.</description>
    <advisory from="secalert@redhat.com">
     <severity>Important</severity>
     <rights>Copyright 2008 Red Hat, Inc.</rights>
     <issued date="2008-10-27"/>
     <updated date="2008-10-27"/>
     <cve cvss2="4.4/AV:L/AC:M/Au:N/C:P/I:P/A:P" href="https://access.redhat.com/security/cve/CVE-2006-7234" impact="low" public="20061003">CVE-2006-7234</cve>
     <cve cvss2="7.5/AV:N/AC:L/Au:N/C:P/I:P/A:P" cwe="CWE-78" href="https://access.redhat.com/security/cve/CVE-2008-4690" public="20081009">CVE-2008-4690</cve>
     <bugzilla href="https://bugzilla.redhat.com/214205" id="214205">CVE-2006-7234 lynx: .mailcap and .mime.types files read from CWD</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/468184" id="468184">CVE-2008-4690 lynx: remote arbitrary command execution via a crafted lynxcgi: URL</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:5</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criterion comment="lynx is earlier than 0:2.8.5-11.3" test_ref="oval:com.redhat.rhsa:tst:20080965001"/>
     <criterion comment="lynx is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20080965002"/>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criterion comment="lynx is earlier than 0:2.8.5-18.2.el4_7.1" test_ref="oval:com.redhat.rhsa:tst:20080965004"/>
     <criterion comment="lynx is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20080965002"/>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 5 is installed" test_ref="oval:com.redhat.rhsa:tst:20070066013"/>
     <criterion comment="lynx is earlier than 0:2.8.5-28.1.el5_2.1" test_ref="oval:com.redhat.rhsa:tst:20080965006"/>
     <criterion comment="lynx is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20080965007"/>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20080967" version="634">
   <metadata>
    <title>RHSA-2008:0967: httpd security and bug fix update (Moderate)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
     <platform>Red Hat Enterprise Linux 5</platform>
    </affected>
    <reference ref_id="RHSA-2008:0967" ref_url="https://access.redhat.com/errata/RHSA-2008:0967" source="RHSA"/>
    <reference ref_id="CVE-2008-2364" ref_url="https://access.redhat.com/security/cve/CVE-2008-2364" source="CVE"/>
    <reference ref_id="CVE-2008-2939" ref_url="https://access.redhat.com/security/cve/CVE-2008-2939" source="CVE"/>
    <description>The Apache HTTP Server is a popular Web server.

A flaw was found in the mod_proxy Apache module. An attacker in control of
a Web server to which requests were being proxied could have caused a
limited denial of service due to CPU consumption and stack exhaustion.
(CVE-2008-2364)

A flaw was found in the mod_proxy_ftp Apache module. If Apache was
configured to support FTP-over-HTTP proxying, a remote attacker could have
performed a cross-site scripting attack. (CVE-2008-2939)

In addition, these updated packages fix a bug found in the handling of the
&quot;ProxyRemoteMatch&quot; directive in the Red Hat Enterprise Linux 4 httpd
packages. This bug is not present in the Red Hat Enterprise Linux 3 or Red
Hat Enterprise Linux 5 packages.

Users of httpd should upgrade to these updated packages, which contain
backported patches to correct these issues.</description>
    <advisory from="secalert@redhat.com">
     <severity>Moderate</severity>
     <rights>Copyright 2008 Red Hat, Inc.</rights>
     <issued date="2008-11-11"/>
     <updated date="2008-11-11"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2008-2364" public="20080610">CVE-2008-2364</cve>
     <cve cwe="CWE-79" href="https://access.redhat.com/security/cve/CVE-2008-2939" impact="low" public="20080805">CVE-2008-2939</cve>
     <bugzilla href="https://bugzilla.redhat.com/451615" id="451615">CVE-2008-2364 httpd: mod_proxy_http DoS via excessive interim responses from the origin server</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/458250" id="458250">CVE-2008-2939 httpd: mod_proxy_ftp globbing XSS</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/464492" id="464492">mod_proxy: ProxyRemoteMatch uses remote proxy if regex does *not* match</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:5</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="httpd-devel is earlier than 0:2.0.46-71.ent" test_ref="oval:com.redhat.rhsa:tst:20080967001"/>
       <criterion comment="httpd-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060159004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="httpd is earlier than 0:2.0.46-71.ent" test_ref="oval:com.redhat.rhsa:tst:20080967003"/>
       <criterion comment="httpd is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060159006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="mod_ssl is earlier than 1:2.0.46-71.ent" test_ref="oval:com.redhat.rhsa:tst:20080967005"/>
       <criterion comment="mod_ssl is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060159002"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="mod_ssl is earlier than 1:2.0.52-41.ent.2" test_ref="oval:com.redhat.rhsa:tst:20080967008"/>
       <criterion comment="mod_ssl is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060159002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="httpd is earlier than 0:2.0.52-41.ent.2" test_ref="oval:com.redhat.rhsa:tst:20080967009"/>
       <criterion comment="httpd is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060159006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="httpd-manual is earlier than 0:2.0.52-41.ent.2" test_ref="oval:com.redhat.rhsa:tst:20080967010"/>
       <criterion comment="httpd-manual is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060159011"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="httpd-devel is earlier than 0:2.0.52-41.ent.2" test_ref="oval:com.redhat.rhsa:tst:20080967012"/>
       <criterion comment="httpd-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060159004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="httpd-suexec is earlier than 0:2.0.52-41.ent.2" test_ref="oval:com.redhat.rhsa:tst:20080967013"/>
       <criterion comment="httpd-suexec is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060159009"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 5 is installed" test_ref="oval:com.redhat.rhsa:tst:20070066013"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="httpd is earlier than 0:2.2.3-11.el5_2.4" test_ref="oval:com.redhat.rhsa:tst:20080967016"/>
       <criterion comment="httpd is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20080967017"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="mod_ssl is earlier than 1:2.2.3-11.el5_2.4" test_ref="oval:com.redhat.rhsa:tst:20080967018"/>
       <criterion comment="mod_ssl is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20080967019"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="httpd-devel is earlier than 0:2.2.3-11.el5_2.4" test_ref="oval:com.redhat.rhsa:tst:20080967020"/>
       <criterion comment="httpd-devel is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20080967021"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="httpd-manual is earlier than 0:2.2.3-11.el5_2.4" test_ref="oval:com.redhat.rhsa:tst:20080967022"/>
       <criterion comment="httpd-manual is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20080967023"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20080971" version="636">
   <metadata>
    <title>RHSA-2008:0971: net-snmp security update (Important)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
     <platform>Red Hat Enterprise Linux 5</platform>
    </affected>
    <reference ref_id="RHSA-2008:0971" ref_url="https://access.redhat.com/errata/RHSA-2008:0971" source="RHSA"/>
    <reference ref_id="CVE-2008-4309" ref_url="https://access.redhat.com/security/cve/CVE-2008-4309" source="CVE"/>
    <description>The Simple Network Management Protocol (SNMP) is a protocol used for
network management.

A denial-of-service flaw was found in the way Net-SNMP processes SNMP
GETBULK requests. A remote attacker who issued a specially-crafted request
could cause the snmpd server to crash. (CVE-2008-4309)

Note: An attacker must have read access to the SNMP server in order to
exploit this flaw. In the default configuration, the community name
&quot;public&quot; grants read-only access. In production deployments, it is
recommended to change this default community name.

All users of net-snmp should upgrade to these updated packages, which
contain a backported patch to resolve this issue.</description>
    <advisory from="secalert@redhat.com">
     <severity>Important</severity>
     <rights>Copyright 2008 Red Hat, Inc.</rights>
     <issued date="2008-11-03"/>
     <updated date="2008-11-03"/>
     <cve cwe="CWE-190" href="https://access.redhat.com/security/cve/CVE-2008-4309" public="20081031">CVE-2008-4309</cve>
     <bugzilla href="https://bugzilla.redhat.com/469349" id="469349">CVE-2008-4309 net-snmp: numresponses calculation integer overflow in snmp_agent.c</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:5</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="net-snmp-libs is earlier than 0:5.0.9-2.30E.25" test_ref="oval:com.redhat.rhsa:tst:20080971001"/>
       <criterion comment="net-snmp-libs is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20071045006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="net-snmp-perl is earlier than 0:5.0.9-2.30E.25" test_ref="oval:com.redhat.rhsa:tst:20080971003"/>
       <criterion comment="net-snmp-perl is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20071045008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="net-snmp is earlier than 0:5.0.9-2.30E.25" test_ref="oval:com.redhat.rhsa:tst:20080971005"/>
       <criterion comment="net-snmp is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20071045010"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="net-snmp-devel is earlier than 0:5.0.9-2.30E.25" test_ref="oval:com.redhat.rhsa:tst:20080971007"/>
       <criterion comment="net-snmp-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20071045004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="net-snmp-utils is earlier than 0:5.0.9-2.30E.25" test_ref="oval:com.redhat.rhsa:tst:20080971009"/>
       <criterion comment="net-snmp-utils is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20071045002"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="net-snmp-devel is earlier than 0:5.1.2-13.el4_7.2" test_ref="oval:com.redhat.rhsa:tst:20080971012"/>
       <criterion comment="net-snmp-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20071045004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="net-snmp-libs is earlier than 0:5.1.2-13.el4_7.2" test_ref="oval:com.redhat.rhsa:tst:20080971013"/>
       <criterion comment="net-snmp-libs is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20071045006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="net-snmp-perl is earlier than 0:5.1.2-13.el4_7.2" test_ref="oval:com.redhat.rhsa:tst:20080971014"/>
       <criterion comment="net-snmp-perl is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20071045008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="net-snmp is earlier than 0:5.1.2-13.el4_7.2" test_ref="oval:com.redhat.rhsa:tst:20080971015"/>
       <criterion comment="net-snmp is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20071045010"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="net-snmp-utils is earlier than 0:5.1.2-13.el4_7.2" test_ref="oval:com.redhat.rhsa:tst:20080971016"/>
       <criterion comment="net-snmp-utils is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20071045002"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 5 is installed" test_ref="oval:com.redhat.rhsa:tst:20070066013"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="net-snmp-libs is earlier than 1:5.3.1-24.el5_2.2" test_ref="oval:com.redhat.rhsa:tst:20080971018"/>
       <criterion comment="net-snmp-libs is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20071045021"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="net-snmp is earlier than 1:5.3.1-24.el5_2.2" test_ref="oval:com.redhat.rhsa:tst:20080971020"/>
       <criterion comment="net-snmp is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20071045023"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="net-snmp-devel is earlier than 1:5.3.1-24.el5_2.2" test_ref="oval:com.redhat.rhsa:tst:20080971022"/>
       <criterion comment="net-snmp-devel is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20071045019"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="net-snmp-utils is earlier than 1:5.3.1-24.el5_2.2" test_ref="oval:com.redhat.rhsa:tst:20080971024"/>
       <criterion comment="net-snmp-utils is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20071045027"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="net-snmp-perl is earlier than 1:5.3.1-24.el5_2.2" test_ref="oval:com.redhat.rhsa:tst:20080971026"/>
       <criterion comment="net-snmp-perl is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20071045025"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20080973" version="640">
   <metadata>
    <title>RHSA-2008:0973: kernel security and bug fix update (Important)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
    </affected>
    <reference ref_id="RHSA-2008:0973" ref_url="https://access.redhat.com/errata/RHSA-2008:0973" source="RHSA"/>
    <reference ref_id="CVE-2007-6063" ref_url="https://access.redhat.com/security/cve/CVE-2007-6063" source="CVE"/>
    <reference ref_id="CVE-2008-0598" ref_url="https://access.redhat.com/security/cve/CVE-2008-0598" source="CVE"/>
    <reference ref_id="CVE-2008-2136" ref_url="https://access.redhat.com/security/cve/CVE-2008-2136" source="CVE"/>
    <reference ref_id="CVE-2008-2812" ref_url="https://access.redhat.com/security/cve/CVE-2008-2812" source="CVE"/>
    <reference ref_id="CVE-2008-3275" ref_url="https://access.redhat.com/security/cve/CVE-2008-3275" source="CVE"/>
    <reference ref_id="CVE-2008-3525" ref_url="https://access.redhat.com/security/cve/CVE-2008-3525" source="CVE"/>
    <reference ref_id="CVE-2008-4210" ref_url="https://access.redhat.com/security/cve/CVE-2008-4210" source="CVE"/>
    <description>The kernel packages contain the Linux kernel, the core of any Linux
operating system.

This update addresses the following security issues:

* Tavis Ormandy discovered a deficiency in the Linux kernel 32-bit and
64-bit emulation. This could allow a local, unprivileged user to prepare
and run a specially-crafted binary which would use this deficiency to leak
uninitialized and potentially sensitive data. (CVE-2008-0598, Important)

* a possible kernel memory leak was found in the Linux kernel Simple
Internet Transition (SIT) INET6 implementation. This could allow a local,
unprivileged user to cause a denial of service. (CVE-2008-2136, Important)

* missing capability checks were found in the SBNI WAN driver which could
allow a local user to bypass intended capability restrictions.
(CVE-2008-3525, Important)

* the do_truncate() and generic_file_splice_write() functions did not clear
the setuid and setgid bits. This could allow a local, unprivileged user to
obtain access to privileged information. (CVE-2008-4210, Important)

* a buffer overflow flaw was found in Integrated Services Digital Network
(ISDN) subsystem. A local, unprivileged user could use this flaw to cause a
denial of service. (CVE-2007-6063, Moderate)

* multiple NULL pointer dereferences were found in various Linux kernel
network drivers. These drivers were missing checks for terminal validity,
which could allow privilege escalation. (CVE-2008-2812, Moderate)

* a deficiency was found in the Linux kernel virtual filesystem (VFS)
implementation. This could allow a local, unprivileged user to attempt file
creation within deleted directories, possibly causing a denial of service.
(CVE-2008-3275, Moderate)

This update also fixes the following bugs:

* the incorrect kunmap function was used in nfs_xdr_readlinkres. kunmap()
was used where kunmap_atomic() should have been. As a consequence, if an
NFSv2 or NFSv3 server exported a volume containing a symlink which included
a path equal to or longer than the local system's PATH_MAX, accessing the
link caused a kernel oops. This has been corrected in this update.

* mptctl_gettargetinfo did not check if pIoc3 was NULL before using it as a
pointer. This caused a kernel panic in mptctl_gettargetinfo in some
circumstances. A check has been added which prevents this.

* lost tick compensation code in the timer interrupt routine triggered
without apparent cause. When running as a fully-virtualized client, this
spurious triggering caused the 64-bit version of Red Hat Enterprise Linux 3
to present highly inaccurate times. With this update the lost tick
compensation code is turned off when the operating system is running as a
fully-virtualized client under Xen or VMWare®.

All Red Hat Enterprise Linux 3 users should install this updated kernel
which addresses these vulnerabilities and fixes these bugs.</description>
    <advisory from="secalert@redhat.com">
     <severity>Important</severity>
     <rights>Copyright 2008 Red Hat, Inc.</rights>
     <issued date="2008-12-16"/>
     <updated date="2008-12-16"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-6063" impact="moderate" public="20071120">CVE-2007-6063</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2008-0598" public="20080625">CVE-2008-0598</cve>
     <cve cwe="CWE-401" href="https://access.redhat.com/security/cve/CVE-2008-2136" public="20080509">CVE-2008-2136</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2008-2812" impact="moderate" public="20080430">CVE-2008-2812</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2008-3275" impact="moderate" public="20080702">CVE-2008-3275</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2008-3525" public="20080827">CVE-2008-3525</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2008-4210" public="20070502">CVE-2008-4210</cve>
     <bugzilla href="https://bugzilla.redhat.com/392101" id="392101">CVE-2007-6063 Linux Kernel isdn_net_setcfg buffer overflow</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/433938" id="433938">CVE-2008-0598 kernel: linux x86_64 ia32 emulation leaks uninitialized data</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/438758" id="438758">wrong kunmap call in nfs_xdr_readlinkres</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/446031" id="446031">CVE-2008-2136 kernel: sit memory leak</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/453419" id="453419">CVE-2008-2812 kernel: NULL ptr dereference in multiple network drivers due to missing checks in tty code</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/457858" id="457858">CVE-2008-3275 Linux kernel local filesystem DoS</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/460401" id="460401">CVE-2008-3525 kernel: missing capability checks in sbni_ioctl()</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/463661" id="463661">CVE-2008-4210 kernel: open() call allows setgid bit when user is not in new file's group</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="AND">
    <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
    <criteria operator="OR">
     <criteria operator="AND">
      <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-58.EL" test_ref="oval:com.redhat.rhsa:tst:20080973001"/>
      <criterion comment="kernel-smp-unsupported is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060140004"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="kernel-source is earlier than 0:2.4.21-58.EL" test_ref="oval:com.redhat.rhsa:tst:20080973003"/>
      <criterion comment="kernel-source is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060140012"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="kernel is earlier than 0:2.4.21-58.EL" test_ref="oval:com.redhat.rhsa:tst:20080973005"/>
      <criterion comment="kernel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060140010"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="kernel-unsupported is earlier than 0:2.4.21-58.EL" test_ref="oval:com.redhat.rhsa:tst:20080973007"/>
      <criterion comment="kernel-unsupported is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060140002"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="kernel-doc is earlier than 0:2.4.21-58.EL" test_ref="oval:com.redhat.rhsa:tst:20080973009"/>
      <criterion comment="kernel-doc is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060140006"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="kernel-smp is earlier than 0:2.4.21-58.EL" test_ref="oval:com.redhat.rhsa:tst:20080973011"/>
      <criterion comment="kernel-smp is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060140008"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="kernel-BOOT is earlier than 0:2.4.21-58.EL" test_ref="oval:com.redhat.rhsa:tst:20080973013"/>
      <criterion comment="kernel-BOOT is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060140016"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="kernel-hugemem is earlier than 0:2.4.21-58.EL" test_ref="oval:com.redhat.rhsa:tst:20080973015"/>
      <criterion comment="kernel-hugemem is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060140018"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-58.EL" test_ref="oval:com.redhat.rhsa:tst:20080973017"/>
      <criterion comment="kernel-hugemem-unsupported is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060140014"/>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20080977" version="636">
   <metadata>
    <title>RHSA-2008:0977: seamonkey security update (Critical)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
    </affected>
    <reference ref_id="RHSA-2008:0977" ref_url="https://access.redhat.com/errata/RHSA-2008:0977" source="RHSA"/>
    <reference ref_id="CVE-2008-0017" ref_url="https://access.redhat.com/security/cve/CVE-2008-0017" source="CVE"/>
    <reference ref_id="CVE-2008-5012" ref_url="https://access.redhat.com/security/cve/CVE-2008-5012" source="CVE"/>
    <reference ref_id="CVE-2008-5013" ref_url="https://access.redhat.com/security/cve/CVE-2008-5013" source="CVE"/>
    <reference ref_id="CVE-2008-5014" ref_url="https://access.redhat.com/security/cve/CVE-2008-5014" source="CVE"/>
    <reference ref_id="CVE-2008-5016" ref_url="https://access.redhat.com/security/cve/CVE-2008-5016" source="CVE"/>
    <reference ref_id="CVE-2008-5017" ref_url="https://access.redhat.com/security/cve/CVE-2008-5017" source="CVE"/>
    <reference ref_id="CVE-2008-5018" ref_url="https://access.redhat.com/security/cve/CVE-2008-5018" source="CVE"/>
    <reference ref_id="CVE-2008-5019" ref_url="https://access.redhat.com/security/cve/CVE-2008-5019" source="CVE"/>
    <reference ref_id="CVE-2008-5021" ref_url="https://access.redhat.com/security/cve/CVE-2008-5021" source="CVE"/>
    <reference ref_id="CVE-2008-5022" ref_url="https://access.redhat.com/security/cve/CVE-2008-5022" source="CVE"/>
    <reference ref_id="CVE-2008-5023" ref_url="https://access.redhat.com/security/cve/CVE-2008-5023" source="CVE"/>
    <reference ref_id="CVE-2008-5024" ref_url="https://access.redhat.com/security/cve/CVE-2008-5024" source="CVE"/>
    <reference ref_id="CVE-2008-5052" ref_url="https://access.redhat.com/security/cve/CVE-2008-5052" source="CVE"/>
    <description>SeaMonkey is an open source Web browser, email and newsgroup client, IRC
chat client, and HTML editor.

Several flaws were found in the processing of malformed web content. A web
page containing malicious content could cause SeaMonkey to crash or,
potentially, execute arbitrary code as the user running SeaMonkey.
(CVE-2008-0017, CVE-2008-5013, CVE-2008-5014, CVE-2008-5016,
CVE-2008-5017, CVE-2008-5018, CVE-2008-5019, CVE-2008-5021)

Several flaws were found in the way malformed content was processed. A web
site containing specially-crafted content could potentially trick a
SeaMonkey user into surrendering sensitive information. (CVE-2008-5012,
CVE-2008-5022, CVE-2008-5023, CVE-2008-5024)

All SeaMonkey users should upgrade to these updated packages, which contain
backported patches to resolve these issues.</description>
    <advisory from="secalert@redhat.com">
     <severity>Critical</severity>
     <rights>Copyright 2008 Red Hat, Inc.</rights>
     <issued date="2008-11-12"/>
     <updated date="2008-11-12"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2008-0017" public="20081112">CVE-2008-0017</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2008-5012" impact="moderate" public="20081112">CVE-2008-5012</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2008-5013" public="20081112">CVE-2008-5013</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2008-5014" public="20081112">CVE-2008-5014</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2008-5016" public="20081112">CVE-2008-5016</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2008-5017" public="20081112">CVE-2008-5017</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2008-5018" public="20081112">CVE-2008-5018</cve>
     <cve cwe="CWE-79" href="https://access.redhat.com/security/cve/CVE-2008-5019" impact="moderate" public="20081112">CVE-2008-5019</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2008-5021" public="20081112">CVE-2008-5021</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2008-5022" impact="moderate" public="20081112">CVE-2008-5022</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2008-5023" impact="moderate" public="20081112">CVE-2008-5023</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2008-5024" impact="low" public="20081112">CVE-2008-5024</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2008-5052" public="20081112">CVE-2008-5052</cve>
     <bugzilla href="https://bugzilla.redhat.com/470864" id="470864">CVE-2008-5012 Mozilla Image stealing via canvas and HTTP redirect</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/470867" id="470867">CVE-2008-5013 Mozilla Flash Player dynamic module unloading flaw</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/470873" id="470873">CVE-2008-5014 Mozilla crash and remote code execution via __proto__ tampering</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/470881" id="470881">CVE-2008-5016 Mozilla crash with evidence of memory corruption</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/470883" id="470883">CVE-2008-5017 Mozilla crash with evidence of memory corruption</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/470884" id="470884">CVE-2008-5018 Mozilla crash with evidence of memory corruption</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/470889" id="470889">CVE-2008-5019 Mozilla XSS via session restore</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/470892" id="470892">CVE-2008-0017 Mozilla buffer overflow in http-index-format parser</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/470894" id="470894">CVE-2008-5021 Mozilla crash and remote code execution in nsFrameManager</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/470895" id="470895">CVE-2008-5022 Mozilla nsXMLHttpRequest::NotifyEventListeners() same-origin violation</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/470898" id="470898">CVE-2008-5023 Mozilla -moz-binding property bypasses security checks on codebase principals</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/470902" id="470902">CVE-2008-5024 Mozilla parsing error in E4X default namespace</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.25.el3" test_ref="oval:com.redhat.rhsa:tst:20080977001"/>
       <criterion comment="seamonkey-nspr is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578010"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.25.el3" test_ref="oval:com.redhat.rhsa:tst:20080977003"/>
       <criterion comment="seamonkey-mail is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578020"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.25.el3" test_ref="oval:com.redhat.rhsa:tst:20080977005"/>
       <criterion comment="seamonkey-chat is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.25.el3" test_ref="oval:com.redhat.rhsa:tst:20080977007"/>
       <criterion comment="seamonkey-dom-inspector is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.25.el3" test_ref="oval:com.redhat.rhsa:tst:20080977009"/>
       <criterion comment="seamonkey-nspr-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.25.el3" test_ref="oval:com.redhat.rhsa:tst:20080977011"/>
       <criterion comment="seamonkey-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578014"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey is earlier than 0:1.0.9-0.25.el3" test_ref="oval:com.redhat.rhsa:tst:20080977013"/>
       <criterion comment="seamonkey is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578018"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.25.el3" test_ref="oval:com.redhat.rhsa:tst:20080977015"/>
       <criterion comment="seamonkey-nss is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578016"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.25.el3" test_ref="oval:com.redhat.rhsa:tst:20080977017"/>
       <criterion comment="seamonkey-nss-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578012"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.25.el3" test_ref="oval:com.redhat.rhsa:tst:20080977019"/>
       <criterion comment="seamonkey-js-debugger is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578008"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-28.el4" test_ref="oval:com.redhat.rhsa:tst:20080977022"/>
       <criterion comment="seamonkey-js-debugger is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-devel is earlier than 0:1.0.9-28.el4" test_ref="oval:com.redhat.rhsa:tst:20080977023"/>
       <criterion comment="seamonkey-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578014"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-28.el4" test_ref="oval:com.redhat.rhsa:tst:20080977024"/>
       <criterion comment="seamonkey-dom-inspector is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-mail is earlier than 0:1.0.9-28.el4" test_ref="oval:com.redhat.rhsa:tst:20080977025"/>
       <criterion comment="seamonkey-mail is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578020"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey is earlier than 0:1.0.9-28.el4" test_ref="oval:com.redhat.rhsa:tst:20080977026"/>
       <criterion comment="seamonkey is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578018"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-chat is earlier than 0:1.0.9-28.el4" test_ref="oval:com.redhat.rhsa:tst:20080977027"/>
       <criterion comment="seamonkey-chat is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578006"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20080988" version="636">
   <metadata>
    <title>RHSA-2008:0988: libxml2 security update (Important)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
     <platform>Red Hat Enterprise Linux 5</platform>
    </affected>
    <reference ref_id="RHSA-2008:0988" ref_url="https://access.redhat.com/errata/RHSA-2008:0988" source="RHSA"/>
    <reference ref_id="CVE-2008-4225" ref_url="https://access.redhat.com/security/cve/CVE-2008-4225" source="CVE"/>
    <reference ref_id="CVE-2008-4226" ref_url="https://access.redhat.com/security/cve/CVE-2008-4226" source="CVE"/>
    <description>libxml2 is a library for parsing and manipulating XML files. It includes
support for reading, modifying, and writing XML and HTML files.

An integer overflow flaw causing a heap-based buffer overflow was found in
the libxml2 XML parser. If an application linked against libxml2 processed
untrusted, malformed XML content, it could cause the application to crash
or, possibly, execute arbitrary code. (CVE-2008-4226)

A denial of service flaw was discovered in the libxml2 XML parser. If an
application linked against libxml2 processed untrusted, malformed XML
content, it could cause the application to enter an infinite loop.
(CVE-2008-4225)

Red Hat would like to thank Drew Yao of the Apple Product Security team for
reporting these issues.

Users of libxml2 are advised to upgrade to these updated packages, which
contain backported patches to correct these issues.</description>
    <advisory from="secalert@redhat.com">
     <severity>Important</severity>
     <rights>Copyright 2008 Red Hat, Inc.</rights>
     <issued date="2008-11-17"/>
     <updated date="2008-11-17"/>
     <cve cwe="CWE-190" href="https://access.redhat.com/security/cve/CVE-2008-4225" impact="moderate" public="20081117">CVE-2008-4225</cve>
     <cve cwe="CWE-190" href="https://access.redhat.com/security/cve/CVE-2008-4226" public="20081117">CVE-2008-4226</cve>
     <bugzilla href="https://bugzilla.redhat.com/470466" id="470466">CVE-2008-4226 libxml2: integer overflow leading to memory corruption in  xmlSAX2Characters</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/470480" id="470480">CVE-2008-4225 libxml2: integer overflow leading to infinite loop in xmlBufferResize</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:5</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="libxml2 is earlier than 0:2.5.10-14" test_ref="oval:com.redhat.rhsa:tst:20080988001"/>
       <criterion comment="libxml2 is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20080032006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="libxml2-python is earlier than 0:2.5.10-14" test_ref="oval:com.redhat.rhsa:tst:20080988003"/>
       <criterion comment="libxml2-python is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20080032004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="libxml2-devel is earlier than 0:2.5.10-14" test_ref="oval:com.redhat.rhsa:tst:20080988005"/>
       <criterion comment="libxml2-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20080032002"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="libxml2 is earlier than 0:2.6.16-12.6" test_ref="oval:com.redhat.rhsa:tst:20080988008"/>
       <criterion comment="libxml2 is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20080032006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="libxml2-python is earlier than 0:2.6.16-12.6" test_ref="oval:com.redhat.rhsa:tst:20080988009"/>
       <criterion comment="libxml2-python is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20080032004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="libxml2-devel is earlier than 0:2.6.16-12.6" test_ref="oval:com.redhat.rhsa:tst:20080988010"/>
       <criterion comment="libxml2-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20080032002"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 5 is installed" test_ref="oval:com.redhat.rhsa:tst:20070066013"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="libxml2-python is earlier than 0:2.6.26-2.1.2.7" test_ref="oval:com.redhat.rhsa:tst:20080988012"/>
       <criterion comment="libxml2-python is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20080032015"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="libxml2 is earlier than 0:2.6.26-2.1.2.7" test_ref="oval:com.redhat.rhsa:tst:20080988014"/>
       <criterion comment="libxml2 is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20080032017"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="libxml2-devel is earlier than 0:2.6.26-2.1.2.7" test_ref="oval:com.redhat.rhsa:tst:20080988016"/>
       <criterion comment="libxml2-devel is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20080032013"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20081021" version="632">
   <metadata>
    <title>RHSA-2008:1021: enscript security update (Moderate)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
    </affected>
    <reference ref_id="RHSA-2008:1021" ref_url="https://access.redhat.com/errata/RHSA-2008:1021" source="RHSA"/>
    <reference ref_id="CVE-2008-3863" ref_url="https://access.redhat.com/security/cve/CVE-2008-3863" source="CVE"/>
    <reference ref_id="CVE-2008-4306" ref_url="https://access.redhat.com/security/cve/CVE-2008-4306" source="CVE"/>
    <reference ref_id="CVE-2008-5078" ref_url="https://access.redhat.com/security/cve/CVE-2008-5078" source="CVE"/>
    <description>GNU enscript converts ASCII files to PostScript(R) language files and
spools the generated output to a specified printer or saves it to a file.
Enscript can be extended to handle different output media and includes
options for customizing printouts.

Several buffer overflow flaws were found in GNU enscript. An attacker could
craft an ASCII file in such a way that it could execute arbitrary commands
if the file was opened with enscript with the &quot;special escapes&quot; option (-e
or --escapes) enabled. (CVE-2008-3863, CVE-2008-4306, CVE-2008-5078)

All users of enscript should upgrade to these updated packages, which
contain backported patches to correct these issues.</description>
    <advisory from="secalert@redhat.com">
     <severity>Moderate</severity>
     <rights>Copyright 2008 Red Hat, Inc.</rights>
     <issued date="2008-12-15"/>
     <updated date="2008-12-15"/>
     <cve cvss2="4.4/AV:L/AC:M/Au:N/C:P/I:P/A:P" href="https://access.redhat.com/security/cve/CVE-2008-3863" public="20081022">CVE-2008-3863</cve>
     <cve cvss2="4.4/AV:L/AC:M/Au:N/C:P/I:P/A:P" href="https://access.redhat.com/security/cve/CVE-2008-4306" public="20081029">CVE-2008-4306</cve>
     <cve cvss2="4.4/AV:L/AC:M/Au:N/C:P/I:P/A:P" href="https://access.redhat.com/security/cve/CVE-2008-5078" public="20081215">CVE-2008-5078</cve>
     <bugzilla href="https://bugzilla.redhat.com/466771" id="466771">CVE-2008-3863 enscript: &quot;setfilename&quot; special escape buffer overflow</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/469311" id="469311">CVE-2008-4306 enscript: &quot;font&quot; special escape buffer overflows</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/473958" id="473958">CVE-2008-5078 enscript: &quot;epsf&quot; special escape buffer overflows</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criterion comment="enscript is earlier than 0:1.6.1-24.7" test_ref="oval:com.redhat.rhsa:tst:20081021001"/>
     <criterion comment="enscript is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20081021002"/>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criterion comment="enscript is earlier than 0:1.6.1-33.el4_7.1" test_ref="oval:com.redhat.rhsa:tst:20081021004"/>
     <criterion comment="enscript is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20081021002"/>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20081028" version="637">
   <metadata>
    <title>RHSA-2008:1028: cups security update (Moderate)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
    </affected>
    <reference ref_id="RHSA-2008:1028" ref_url="https://access.redhat.com/errata/RHSA-2008:1028" source="RHSA"/>
    <reference ref_id="CVE-2008-5286" ref_url="https://access.redhat.com/security/cve/CVE-2008-5286" source="CVE"/>
    <description>The Common UNIX® Printing System (CUPS) provides a portable printing layer
for UNIX operating systems.

An integer overflow flaw, leading to a heap buffer overflow, was discovered
in the Portable Network Graphics (PNG) decoding routines used by the CUPS
image-converting filters, &quot;imagetops&quot; and &quot;imagetoraster&quot;. An attacker
could create a malicious PNG file that could, potentially, execute
arbitrary code as the &quot;lp&quot; user if the file was printed. (CVE-2008-5286)

CUPS users should upgrade to these updated packages, which contain a
backported patch to correct this issue.</description>
    <advisory from="secalert@redhat.com">
     <severity>Moderate</severity>
     <rights>Copyright 2008 Red Hat, Inc.</rights>
     <issued date="2008-12-15"/>
     <updated date="2008-12-15"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2008-5286" public="20081016">CVE-2008-5286</cve>
     <bugzilla href="https://bugzilla.redhat.com/473905" id="473905">CVE-2008-5286 cups: Incomplete fix for CVE-2008-1722</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="AND">
    <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
    <criteria operator="OR">
     <criteria operator="AND">
      <criterion comment="cups-devel is earlier than 1:1.1.17-13.3.55" test_ref="oval:com.redhat.rhsa:tst:20081028001"/>
      <criterion comment="cups-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060163002"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="cups-libs is earlier than 1:1.1.17-13.3.55" test_ref="oval:com.redhat.rhsa:tst:20081028003"/>
      <criterion comment="cups-libs is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060163004"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="cups is earlier than 1:1.1.17-13.3.55" test_ref="oval:com.redhat.rhsa:tst:20081028005"/>
      <criterion comment="cups is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060163006"/>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20081037" version="637">
   <metadata>
    <title>RHSA-2008:1037: seamonkey security update (Critical)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
    </affected>
    <reference ref_id="RHSA-2008:1037" ref_url="https://access.redhat.com/errata/RHSA-2008:1037" source="RHSA"/>
    <reference ref_id="CVE-2008-5500" ref_url="https://access.redhat.com/security/cve/CVE-2008-5500" source="CVE"/>
    <reference ref_id="CVE-2008-5501" ref_url="https://access.redhat.com/security/cve/CVE-2008-5501" source="CVE"/>
    <reference ref_id="CVE-2008-5502" ref_url="https://access.redhat.com/security/cve/CVE-2008-5502" source="CVE"/>
    <reference ref_id="CVE-2008-5503" ref_url="https://access.redhat.com/security/cve/CVE-2008-5503" source="CVE"/>
    <reference ref_id="CVE-2008-5504" ref_url="https://access.redhat.com/security/cve/CVE-2008-5504" source="CVE"/>
    <reference ref_id="CVE-2008-5506" ref_url="https://access.redhat.com/security/cve/CVE-2008-5506" source="CVE"/>
    <reference ref_id="CVE-2008-5507" ref_url="https://access.redhat.com/security/cve/CVE-2008-5507" source="CVE"/>
    <reference ref_id="CVE-2008-5508" ref_url="https://access.redhat.com/security/cve/CVE-2008-5508" source="CVE"/>
    <reference ref_id="CVE-2008-5511" ref_url="https://access.redhat.com/security/cve/CVE-2008-5511" source="CVE"/>
    <reference ref_id="CVE-2008-5512" ref_url="https://access.redhat.com/security/cve/CVE-2008-5512" source="CVE"/>
    <reference ref_id="CVE-2008-5513" ref_url="https://access.redhat.com/security/cve/CVE-2008-5513" source="CVE"/>
    <description>SeaMonkey is an open source Web browser, email and newsgroup client, IRC
chat client, and HTML editor.

Several flaws were found in the processing of malformed web content. A web
page containing malicious content could cause SeaMonkey to crash or,
potentially, execute arbitrary code as the user running SeaMonkey.
(CVE-2008-5500, CVE-2008-5501, CVE-2008-5502, CVE-2008-5504, CVE-2008-5511,
CVE-2008-5512, CVE-2008-5513)

Several flaws were found in the way malformed content was processed. A
website containing specially-crafted content could potentially trick a
SeaMonkey user into surrendering sensitive information. (CVE-2008-5503,
CVE-2008-5506, CVE-2008-5507)

A flaw was found in the way malformed URLs were processed by SeaMonkey.
This flaw could prevent various URL sanitization mechanisms from properly
parsing a malicious URL. (CVE-2008-5508)

Note: after the errata packages are installed, SeaMonkey must be restarted
for the update to take effect.

All SeaMonkey users should upgrade to these updated packages, which contain
backported patches to resolve these issues.</description>
    <advisory from="secalert@redhat.com">
     <severity>Critical</severity>
     <rights>Copyright 2008 Red Hat, Inc.</rights>
     <issued date="2008-12-16"/>
     <updated date="2008-12-16"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2008-5500" public="20081216">CVE-2008-5500</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2008-5501" public="20081216">CVE-2008-5501</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2008-5502" public="20081216">CVE-2008-5502</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2008-5503" impact="moderate" public="20081216">CVE-2008-5503</cve>
     <cve cwe="CWE-79" href="https://access.redhat.com/security/cve/CVE-2008-5504" public="20081216">CVE-2008-5504</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2008-5506" impact="moderate" public="20081216">CVE-2008-5506</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2008-5507" impact="moderate" public="20081216">CVE-2008-5507</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2008-5508" impact="low" public="20081216">CVE-2008-5508</cve>
     <cve cwe="CWE-79" href="https://access.redhat.com/security/cve/CVE-2008-5511" public="20081216">CVE-2008-5511</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2008-5512" public="20081216">CVE-2008-5512</cve>
     <cve cwe="CWE-79" href="https://access.redhat.com/security/cve/CVE-2008-5513" public="20081216">CVE-2008-5513</cve>
     <bugzilla href="https://bugzilla.redhat.com/476266" id="476266">CVE-2008-5500 Layout engine crashes - Firefox 2 and 3</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/476267" id="476267">CVE-2008-5501 Layout engine crash - Firefox 3 only</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/476269" id="476269">CVE-2008-5502 JavaScript engine crash - Firefox 3 only</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/476272" id="476272">CVE-2008-5503 Firefox 2  Information stealing via loadBindingDocument</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/476273" id="476273">CVE-2008-5504 Firefox 2 XSS attack vectors in feed preview</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/476278" id="476278">CVE-2008-5506 Firefox XMLHttpRequest 302 response disclosure</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/476280" id="476280">CVE-2008-5507 Firefox Cross-domain data theft via script redirect error message</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/476281" id="476281">CVE-2008-5508 Firefox errors parsing URLs with control characters</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/476285" id="476285">CVE-2008-5511 Firefox XSS via XBL bindings to unloaded document</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/476287" id="476287">CVE-2008-5512 Firefox JavaScript privilege escalation</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/476289" id="476289">CVE-2008-5513 Firefox XSS vulnerabilities in SessionStore</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.29.el3" test_ref="oval:com.redhat.rhsa:tst:20081037001"/>
       <criterion comment="seamonkey-chat is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.29.el3" test_ref="oval:com.redhat.rhsa:tst:20081037003"/>
       <criterion comment="seamonkey-nspr-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey is earlier than 0:1.0.9-0.29.el3" test_ref="oval:com.redhat.rhsa:tst:20081037005"/>
       <criterion comment="seamonkey is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578018"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.29.el3" test_ref="oval:com.redhat.rhsa:tst:20081037007"/>
       <criterion comment="seamonkey-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578014"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.29.el3" test_ref="oval:com.redhat.rhsa:tst:20081037009"/>
       <criterion comment="seamonkey-nss-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578012"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.29.el3" test_ref="oval:com.redhat.rhsa:tst:20081037011"/>
       <criterion comment="seamonkey-nss is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578016"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.29.el3" test_ref="oval:com.redhat.rhsa:tst:20081037013"/>
       <criterion comment="seamonkey-js-debugger is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.29.el3" test_ref="oval:com.redhat.rhsa:tst:20081037015"/>
       <criterion comment="seamonkey-nspr is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578010"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.29.el3" test_ref="oval:com.redhat.rhsa:tst:20081037017"/>
       <criterion comment="seamonkey-dom-inspector is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.29.el3" test_ref="oval:com.redhat.rhsa:tst:20081037019"/>
       <criterion comment="seamonkey-mail is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578020"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-32.el4" test_ref="oval:com.redhat.rhsa:tst:20081037022"/>
       <criterion comment="seamonkey-js-debugger is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-32.el4" test_ref="oval:com.redhat.rhsa:tst:20081037023"/>
       <criterion comment="seamonkey-dom-inspector is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-devel is earlier than 0:1.0.9-32.el4" test_ref="oval:com.redhat.rhsa:tst:20081037024"/>
       <criterion comment="seamonkey-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578014"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-mail is earlier than 0:1.0.9-32.el4" test_ref="oval:com.redhat.rhsa:tst:20081037025"/>
       <criterion comment="seamonkey-mail is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578020"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey is earlier than 0:1.0.9-32.el4" test_ref="oval:com.redhat.rhsa:tst:20081037026"/>
       <criterion comment="seamonkey is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578018"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-chat is earlier than 0:1.0.9-32.el4" test_ref="oval:com.redhat.rhsa:tst:20081037027"/>
       <criterion comment="seamonkey-chat is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578006"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20090004" version="634">
   <metadata>
    <title>RHSA-2009:0004: openssl security update (Important)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
     <platform>Red Hat Enterprise Linux 5</platform>
    </affected>
    <reference ref_id="RHSA-2009:0004" ref_url="https://access.redhat.com/errata/RHSA-2009:0004" source="RHSA"/>
    <reference ref_id="CVE-2008-5077" ref_url="https://access.redhat.com/security/cve/CVE-2008-5077" source="CVE"/>
    <description>OpenSSL is a toolkit that implements Secure Sockets Layer (SSL v2/v3) and
Transport Layer Security (TLS v1) protocols as well as a full-strength,
general purpose, cryptography library.

The Google security team discovered a flaw in the way OpenSSL checked the
verification of certificates. An attacker in control of a malicious server,
or able to effect a &quot;man in the middle&quot; attack, could present a malformed
SSL/TLS signature from a certificate chain to a vulnerable client and
bypass validation. (CVE-2008-5077)

All OpenSSL users should upgrade to these updated packages, which contain
backported patches to resolve these issues. For the update to take effect,
all running OpenSSL client applications must be restarted, or the system
rebooted.</description>
    <advisory from="secalert@redhat.com">
     <severity>Important</severity>
     <rights>Copyright 2009 Red Hat, Inc.</rights>
     <issued date="2009-01-07"/>
     <updated date="2009-01-07"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2008-5077" public="20090107">CVE-2008-5077</cve>
     <bugzilla href="https://bugzilla.redhat.com/476671" id="476671">CVE-2008-5077 OpenSSL Incorrect checks for malformed signatures</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:5</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="openssl-perl is earlier than 0:0.9.7a-33.25" test_ref="oval:com.redhat.rhsa:tst:20090004001"/>
       <criterion comment="openssl-perl is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060661004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openssl is earlier than 0:0.9.7a-33.25" test_ref="oval:com.redhat.rhsa:tst:20090004003"/>
       <criterion comment="openssl is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060661006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openssl-devel is earlier than 0:0.9.7a-33.25" test_ref="oval:com.redhat.rhsa:tst:20090004005"/>
       <criterion comment="openssl-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060661008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openssl096b is earlier than 0:0.9.6b-16.49" test_ref="oval:com.redhat.rhsa:tst:20090004007"/>
       <criterion comment="openssl096b is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060661002"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="openssl-devel is earlier than 0:0.9.7a-43.17.el4_7.2" test_ref="oval:com.redhat.rhsa:tst:20090004010"/>
       <criterion comment="openssl-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060661008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openssl-perl is earlier than 0:0.9.7a-43.17.el4_7.2" test_ref="oval:com.redhat.rhsa:tst:20090004011"/>
       <criterion comment="openssl-perl is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060661004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openssl is earlier than 0:0.9.7a-43.17.el4_7.2" test_ref="oval:com.redhat.rhsa:tst:20090004012"/>
       <criterion comment="openssl is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060661006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openssl096b is earlier than 0:0.9.6b-22.46.el4_7" test_ref="oval:com.redhat.rhsa:tst:20090004013"/>
       <criterion comment="openssl096b is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060661002"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 5 is installed" test_ref="oval:com.redhat.rhsa:tst:20070066013"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="openssl097a is earlier than 0:0.9.7a-9.el5_2.1" test_ref="oval:com.redhat.rhsa:tst:20090004015"/>
       <criterion comment="openssl097a is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20090004016"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openssl-devel is earlier than 0:0.9.8b-10.el5_2.1" test_ref="oval:com.redhat.rhsa:tst:20090004017"/>
       <criterion comment="openssl-devel is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20090004018"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openssl-perl is earlier than 0:0.9.8b-10.el5_2.1" test_ref="oval:com.redhat.rhsa:tst:20090004019"/>
       <criterion comment="openssl-perl is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20090004020"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openssl is earlier than 0:0.9.8b-10.el5_2.1" test_ref="oval:com.redhat.rhsa:tst:20090004021"/>
       <criterion comment="openssl is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20090004022"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20090005" version="636">
   <metadata>
    <title>RHSA-2009:0005: gnome-vfs, gnome-vfs2 security update (Moderate)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
    </affected>
    <reference ref_id="RHSA-2009:0005" ref_url="https://access.redhat.com/errata/RHSA-2009:0005" source="RHSA"/>
    <reference ref_id="CVE-2005-0706" ref_url="https://access.redhat.com/security/cve/CVE-2005-0706" source="CVE"/>
    <description>GNOME VFS is the GNOME virtual file system. It provides a modular
architecture and ships with several modules that implement support for
various local and remote file systems as well as numerous protocols,
including HTTP, FTP, and others.

A buffer overflow flaw was discovered in the GNOME virtual file system when
handling data returned by CDDB servers. If a user connected to a malicious
CDDB server, an attacker could use this flaw to execute arbitrary code on
the victim's machine. (CVE-2005-0706)

Users of gnome-vfs and gnome-vfs2 are advised to upgrade to these updated
packages, which contain a backported patch to correct this issue. All
running GNOME sessions must be restarted for the update to take effect.</description>
    <advisory from="secalert@redhat.com">
     <severity>Moderate</severity>
     <rights>Copyright 2009 Red Hat, Inc.</rights>
     <issued date="2009-01-07"/>
     <updated date="2009-01-07"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2005-0706" public="20050309">CVE-2005-0706</cve>
     <bugzilla href="https://bugzilla.redhat.com/470552" id="470552">CVE-2005-0706 grip,libcdaudio: buffer overflow caused by large amount of CDDB replies</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="gnome-vfs2-devel is earlier than 0:2.2.5-2E.3.3" test_ref="oval:com.redhat.rhsa:tst:20090005001"/>
       <criterion comment="gnome-vfs2-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20090005002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="gnome-vfs2 is earlier than 0:2.2.5-2E.3.3" test_ref="oval:com.redhat.rhsa:tst:20090005003"/>
       <criterion comment="gnome-vfs2 is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20090005004"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="gnome-vfs2-devel is earlier than 0:2.8.2-8.7.el4_7.2" test_ref="oval:com.redhat.rhsa:tst:20090005006"/>
       <criterion comment="gnome-vfs2-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20090005002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="gnome-vfs2-smb is earlier than 0:2.8.2-8.7.el4_7.2" test_ref="oval:com.redhat.rhsa:tst:20090005007"/>
       <criterion comment="gnome-vfs2-smb is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20090005008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="gnome-vfs2 is earlier than 0:2.8.2-8.7.el4_7.2" test_ref="oval:com.redhat.rhsa:tst:20090005009"/>
       <criterion comment="gnome-vfs2 is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20090005004"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20090010" version="636">
   <metadata>
    <title>RHSA-2009:0010: squirrelmail security update (Moderate)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
     <platform>Red Hat Enterprise Linux 5</platform>
    </affected>
    <reference ref_id="RHSA-2009:0010" ref_url="https://access.redhat.com/errata/RHSA-2009:0010" source="RHSA"/>
    <reference ref_id="CVE-2008-2379" ref_url="https://access.redhat.com/security/cve/CVE-2008-2379" source="CVE"/>
    <reference ref_id="CVE-2008-3663" ref_url="https://access.redhat.com/security/cve/CVE-2008-3663" source="CVE"/>
    <description>SquirrelMail is an easy-to-configure, standards-based, webmail package
written in PHP. It includes built-in PHP support for the IMAP and SMTP
protocols, and pure HTML 4.0 page-rendering (with no JavaScript required)
for maximum browser-compatibility, strong MIME support, address books, and
folder manipulation.

Ivan Markovic discovered a cross-site scripting (XSS) flaw in SquirrelMail
caused by insufficient HTML mail sanitization. A remote attacker could send
a specially-crafted HTML mail or attachment that could cause a user's Web
browser to execute a malicious script in the context of the SquirrelMail
session when that email or attachment was opened by the user.
(CVE-2008-2379)

It was discovered that SquirrelMail allowed cookies over insecure
connections (ie did not restrict cookies to HTTPS connections). An attacker
who controlled the communication channel between a user and the
SquirrelMail server, or who was able to sniff the user's network
communication, could use this flaw to obtain the user's session cookie, if
a user made an HTTP request to the server. (CVE-2008-3663)

Note: After applying this update, all session cookies set for SquirrelMail
sessions started over HTTPS connections will have the &quot;secure&quot; flag set.
That is, browsers will only send such cookies over an HTTPS connection. If
needed, you can revert to the previous behavior by setting the
configuration option &quot;$only_secure_cookies&quot; to &quot;false&quot; in SquirrelMail's
/etc/squirrelmail/config.php configuration file.

Users of squirrelmail should upgrade to this updated package, which
contains backported patches to correct these issues.</description>
    <advisory from="secalert@redhat.com">
     <severity>Moderate</severity>
     <rights>Copyright 2009 Red Hat, Inc.</rights>
     <issued date="2009-01-12"/>
     <updated date="2009-01-12"/>
     <cve cwe="CWE-79" href="https://access.redhat.com/security/cve/CVE-2008-2379" public="20081203">CVE-2008-2379</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2008-3663" public="20080812">CVE-2008-3663</cve>
     <bugzilla href="https://bugzilla.redhat.com/464183" id="464183">CVE-2008-3663 squirrelmail: session hijacking - secure flag not set for HTTPS-only cookies</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/473877" id="473877">CVE-2008-2379 squirrelmail: XSS issue caused by an insufficient html mail sanitation</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:5</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criterion comment="squirrelmail is earlier than 0:1.4.8-8.el3" test_ref="oval:com.redhat.rhsa:tst:20090010001"/>
     <criterion comment="squirrelmail is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060283002"/>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criterion comment="squirrelmail is earlier than 0:1.4.8-5.el4_7.2" test_ref="oval:com.redhat.rhsa:tst:20090010004"/>
     <criterion comment="squirrelmail is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060283002"/>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 5 is installed" test_ref="oval:com.redhat.rhsa:tst:20070066013"/>
     <criterion comment="squirrelmail is earlier than 0:1.4.8-5.el5_2.2" test_ref="oval:com.redhat.rhsa:tst:20090010006"/>
     <criterion comment="squirrelmail is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070358007"/>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20090018" version="638">
   <metadata>
    <title>RHSA-2009:0018: xterm security update (Important)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
     <platform>Red Hat Enterprise Linux 5</platform>
    </affected>
    <reference ref_id="RHSA-2009:0018" ref_url="https://access.redhat.com/errata/RHSA-2009:0018" source="RHSA"/>
    <reference ref_id="CVE-2008-2383" ref_url="https://access.redhat.com/security/cve/CVE-2008-2383" source="CVE"/>
    <description>The xterm program is a terminal emulator for the X Window System.

A flaw was found in the xterm handling of Device Control Request Status
String (DECRQSS) escape sequences. An attacker could create a malicious
text file (or log entry, if unfiltered) that could run arbitrary commands
if read by a victim inside an xterm window. (CVE-2008-2383)

All xterm users are advised to upgrade to the updated package, which
contains a backported patch to resolve this issue. All running instances of
xterm must be restarted for the update to take effect.</description>
    <advisory from="secalert@redhat.com">
     <severity>Important</severity>
     <rights>Copyright 2009 Red Hat, Inc.</rights>
     <issued date="2009-01-07"/>
     <updated date="2009-01-07"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2008-2383" public="20081229">CVE-2008-2383</cve>
     <bugzilla href="https://bugzilla.redhat.com/478888" id="478888">CVE-2008-2383 xterm: arbitrary command injection</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:5</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criterion comment="xterm is earlier than 0:179-11.EL3" test_ref="oval:com.redhat.rhsa:tst:20090018001"/>
     <criterion comment="xterm is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20090018002"/>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criterion comment="xterm is earlier than 0:192-8.el4_7.2" test_ref="oval:com.redhat.rhsa:tst:20090018004"/>
     <criterion comment="xterm is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20090018002"/>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 5 is installed" test_ref="oval:com.redhat.rhsa:tst:20070066013"/>
     <criterion comment="xterm is earlier than 0:215-5.el5_2.2" test_ref="oval:com.redhat.rhsa:tst:20090018006"/>
     <criterion comment="xterm is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20090018007"/>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20090020" version="636">
   <metadata>
    <title>RHSA-2009:0020: bind security update (Moderate)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
     <platform>Red Hat Enterprise Linux 5</platform>
    </affected>
    <reference ref_id="RHSA-2009:0020" ref_url="https://access.redhat.com/errata/RHSA-2009:0020" source="RHSA"/>
    <reference ref_id="CVE-2009-0025" ref_url="https://access.redhat.com/security/cve/CVE-2009-0025" source="CVE"/>
    <description>BIND (Berkeley Internet Name Domain) is an implementation of the DNS
(Domain Name System) protocols.

A flaw was discovered in the way BIND checked the return value of the
OpenSSL DSA_do_verify function. On systems using DNSSEC, a malicious zone
could present a malformed DSA certificate and bypass proper certificate
validation, allowing spoofing attacks. (CVE-2009-0025)

For users of Red Hat Enterprise Linux 3 this update also addresses a bug
which can cause BIND to occasionally exit with an assertion failure.

All BIND users are advised to upgrade to the updated package, which
contains a backported patch to resolve this issue. After installing the
update, BIND daemon will be restarted automatically.</description>
    <advisory from="secalert@redhat.com">
     <severity>Moderate</severity>
     <rights>Copyright 2009 Red Hat, Inc.</rights>
     <issued date="2009-01-08"/>
     <updated date="2009-01-08"/>
     <cve cvss2="4.3/AV:N/AC:M/Au:N/C:N/I:P/A:N" href="https://access.redhat.com/security/cve/CVE-2009-0025" public="20090107">CVE-2009-0025</cve>
     <bugzilla href="https://bugzilla.redhat.com/461047" id="461047">named dies due to assertion failure</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/478984" id="478984">CVE-2009-0025 bind: DSA_do_verify() returns check issue</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:5</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="bind is earlier than 20:9.2.4-23.el3" test_ref="oval:com.redhat.rhsa:tst:20090020001"/>
       <criterion comment="bind is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070044010"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="bind-utils is earlier than 20:9.2.4-23.el3" test_ref="oval:com.redhat.rhsa:tst:20090020003"/>
       <criterion comment="bind-utils is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070044004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="bind-devel is earlier than 20:9.2.4-23.el3" test_ref="oval:com.redhat.rhsa:tst:20090020005"/>
       <criterion comment="bind-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070044008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="bind-chroot is earlier than 20:9.2.4-23.el3" test_ref="oval:com.redhat.rhsa:tst:20090020007"/>
       <criterion comment="bind-chroot is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070044006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="bind-libs is earlier than 20:9.2.4-23.el3" test_ref="oval:com.redhat.rhsa:tst:20090020009"/>
       <criterion comment="bind-libs is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070044002"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="bind-libs is earlier than 20:9.2.4-30.el4_7.1" test_ref="oval:com.redhat.rhsa:tst:20090020012"/>
       <criterion comment="bind-libs is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070044002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="bind is earlier than 20:9.2.4-30.el4_7.1" test_ref="oval:com.redhat.rhsa:tst:20090020013"/>
       <criterion comment="bind is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070044010"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="bind-utils is earlier than 20:9.2.4-30.el4_7.1" test_ref="oval:com.redhat.rhsa:tst:20090020014"/>
       <criterion comment="bind-utils is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070044004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="bind-devel is earlier than 20:9.2.4-30.el4_7.1" test_ref="oval:com.redhat.rhsa:tst:20090020015"/>
       <criterion comment="bind-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070044008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="bind-chroot is earlier than 20:9.2.4-30.el4_7.1" test_ref="oval:com.redhat.rhsa:tst:20090020016"/>
       <criterion comment="bind-chroot is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070044006"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 5 is installed" test_ref="oval:com.redhat.rhsa:tst:20070066013"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="bind is earlier than 30:9.3.4-6.0.3.P1.el5_2" test_ref="oval:com.redhat.rhsa:tst:20090020018"/>
       <criterion comment="bind is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070740023"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="bind-utils is earlier than 30:9.3.4-6.0.3.P1.el5_2" test_ref="oval:com.redhat.rhsa:tst:20090020020"/>
       <criterion comment="bind-utils is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070740019"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="bind-libs is earlier than 30:9.3.4-6.0.3.P1.el5_2" test_ref="oval:com.redhat.rhsa:tst:20090020022"/>
       <criterion comment="bind-libs is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070740029"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="bind-chroot is earlier than 30:9.3.4-6.0.3.P1.el5_2" test_ref="oval:com.redhat.rhsa:tst:20090020024"/>
       <criterion comment="bind-chroot is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070740033"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="bind-sdb is earlier than 30:9.3.4-6.0.3.P1.el5_2" test_ref="oval:com.redhat.rhsa:tst:20090020026"/>
       <criterion comment="bind-sdb is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070740025"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="bind-devel is earlier than 30:9.3.4-6.0.3.P1.el5_2" test_ref="oval:com.redhat.rhsa:tst:20090020028"/>
       <criterion comment="bind-devel is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070740031"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="bind-libbind-devel is earlier than 30:9.3.4-6.0.3.P1.el5_2" test_ref="oval:com.redhat.rhsa:tst:20090020030"/>
       <criterion comment="bind-libbind-devel is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070740021"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="caching-nameserver is earlier than 30:9.3.4-6.0.3.P1.el5_2" test_ref="oval:com.redhat.rhsa:tst:20090020032"/>
       <criterion comment="caching-nameserver is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070740027"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20090057" version="633">
   <metadata>
    <title>RHSA-2009:0057: squirrelmail security update (Important)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
     <platform>Red Hat Enterprise Linux 5</platform>
    </affected>
    <reference ref_id="RHSA-2009:0057" ref_url="https://access.redhat.com/errata/RHSA-2009:0057" source="RHSA"/>
    <reference ref_id="CVE-2009-0030" ref_url="https://access.redhat.com/security/cve/CVE-2009-0030" source="CVE"/>
    <reference ref_id="CVE-2009-1580" ref_url="https://access.redhat.com/security/cve/CVE-2009-1580" source="CVE"/>
    <description>SquirrelMail is an easy-to-configure, standards-based, webmail package
written in PHP. It includes built-in PHP support for the IMAP and SMTP
protocols, and pure HTML 4.0 page-rendering (with no JavaScript required)
for maximum browser-compatibility, strong MIME support, address books, and
folder manipulation.

The Red Hat SquirrelMail packages provided by the RHSA-2009:0010 advisory
introduced a session handling flaw. Users who logged back into SquirrelMail
without restarting their web browsers were assigned fixed session
identifiers. A remote attacker could make use of that flaw to hijack user
sessions. (CVE-2009-0030)

SquirrelMail users should upgrade to this updated package, which contains a
patch to correct this issue. As well, all users who used affected versions
of SquirrelMail should review their preferences.</description>
    <advisory from="secalert@redhat.com">
     <severity>Important</severity>
     <rights>Copyright 2009 Red Hat, Inc.</rights>
     <issued date="2009-01-19"/>
     <updated date="2009-01-19"/>
     <cve cvss2="6.5/AV:N/AC:L/Au:S/C:P/I:P/A:P" href="https://access.redhat.com/security/cve/CVE-2009-0030" public="20090115">CVE-2009-0030</cve>
     <cve cvss2="4/AV:N/AC:H/Au:N/C:P/I:P/A:N" cwe="CWE-384" href="https://access.redhat.com/security/cve/CVE-2009-1580" impact="low" public="20090511">CVE-2009-1580</cve>
     <bugzilla href="https://bugzilla.redhat.com/480224" id="480224">Squirrelmail session management broken by security backport</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/480488" id="480488">CVE-2009-0030 squirrelmail: session management flaw</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:5</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criterion comment="squirrelmail is earlier than 0:1.4.8-9.el3" test_ref="oval:com.redhat.rhsa:tst:20090057001"/>
     <criterion comment="squirrelmail is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060283002"/>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criterion comment="squirrelmail is earlier than 0:1.4.8-5.el4_7.3" test_ref="oval:com.redhat.rhsa:tst:20090057004"/>
     <criterion comment="squirrelmail is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060283002"/>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 5 is installed" test_ref="oval:com.redhat.rhsa:tst:20070066013"/>
     <criterion comment="squirrelmail is earlier than 0:1.4.8-5.el5_2.3" test_ref="oval:com.redhat.rhsa:tst:20090057006"/>
     <criterion comment="squirrelmail is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070358007"/>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20090257" version="634">
   <metadata>
    <title>RHSA-2009:0257: seamonkey security update (Critical)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
    </affected>
    <reference ref_id="RHSA-2009:0257" ref_url="https://access.redhat.com/errata/RHSA-2009:0257" source="RHSA"/>
    <reference ref_id="CVE-2009-0352" ref_url="https://access.redhat.com/security/cve/CVE-2009-0352" source="CVE"/>
    <reference ref_id="CVE-2009-0353" ref_url="https://access.redhat.com/security/cve/CVE-2009-0353" source="CVE"/>
    <reference ref_id="CVE-2009-0355" ref_url="https://access.redhat.com/security/cve/CVE-2009-0355" source="CVE"/>
    <reference ref_id="CVE-2009-0357" ref_url="https://access.redhat.com/security/cve/CVE-2009-0357" source="CVE"/>
    <description>SeaMonkey is an open source Web browser, email and newsgroup client, IRC
chat client, and HTML editor.

Several flaws were found in the processing of malformed web content. A web
page containing malicious content could cause SeaMonkey to crash or,
potentially, execute arbitrary code as the user running SeaMonkey.
(CVE-2009-0352, CVE-2009-0353)

A flaw was found in the way malformed content was processed. A website
containing specially-crafted content could, potentially, trick a SeaMonkey
user into uploading a local file. (CVE-2009-0355)

A flaw was found in the way SeaMonkey treated HTTPOnly cookies. An attacker
able to execute arbitrary JavaScript on a target site using HTTPOnly
cookies may be able to use this flaw to steal the cookie. (CVE-2009-0357)

All SeaMonkey users should upgrade to these updated packages, which contain
backported patches that correct these issues. After installing the update,
SeaMonkey must be restarted for the changes to take effect.</description>
    <advisory from="secalert@redhat.com">
     <severity>Critical</severity>
     <rights>Copyright 2009 Red Hat, Inc.</rights>
     <issued date="2009-02-04"/>
     <updated date="2009-02-04"/>
     <cve cvss2="6.8/AV:N/AC:M/Au:N/C:P/I:P/A:P" href="https://access.redhat.com/security/cve/CVE-2009-0352" public="20090203">CVE-2009-0352</cve>
     <cve cvss2="6.8/AV:N/AC:M/Au:N/C:P/I:P/A:P" href="https://access.redhat.com/security/cve/CVE-2009-0353" public="20090203">CVE-2009-0353</cve>
     <cve cvss2="2.6/AV:N/AC:H/Au:N/C:P/I:N/A:N" href="https://access.redhat.com/security/cve/CVE-2009-0355" impact="moderate" public="20090203">CVE-2009-0355</cve>
     <cve cvss2="4.3/AV:N/AC:M/Au:N/C:P/I:N/A:N" href="https://access.redhat.com/security/cve/CVE-2009-0357" impact="low" public="20090203">CVE-2009-0357</cve>
     <bugzilla href="https://bugzilla.redhat.com/483139" id="483139">CVE-2009-0352 Firefox layout crashes with evidence of memory corruption</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/483141" id="483141">CVE-2009-0353 Firefox javascript crashes with evidence of memory corruption</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/483143" id="483143">CVE-2009-0355 Firefox local file stealing with SessionStore</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/483145" id="483145">CVE-2009-0357 Firefox XMLHttpRequest allows reading HTTPOnly cookies</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.32.el3" test_ref="oval:com.redhat.rhsa:tst:20090257001"/>
       <criterion comment="seamonkey-mail is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578020"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.32.el3" test_ref="oval:com.redhat.rhsa:tst:20090257003"/>
       <criterion comment="seamonkey-nss is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578016"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.32.el3" test_ref="oval:com.redhat.rhsa:tst:20090257005"/>
       <criterion comment="seamonkey-js-debugger is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.32.el3" test_ref="oval:com.redhat.rhsa:tst:20090257007"/>
       <criterion comment="seamonkey-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578014"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.32.el3" test_ref="oval:com.redhat.rhsa:tst:20090257009"/>
       <criterion comment="seamonkey-nss-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578012"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.32.el3" test_ref="oval:com.redhat.rhsa:tst:20090257011"/>
       <criterion comment="seamonkey-nspr is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578010"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.32.el3" test_ref="oval:com.redhat.rhsa:tst:20090257013"/>
       <criterion comment="seamonkey-dom-inspector is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.32.el3" test_ref="oval:com.redhat.rhsa:tst:20090257015"/>
       <criterion comment="seamonkey-nspr-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey is earlier than 0:1.0.9-0.32.el3" test_ref="oval:com.redhat.rhsa:tst:20090257017"/>
       <criterion comment="seamonkey is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578018"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.32.el3" test_ref="oval:com.redhat.rhsa:tst:20090257019"/>
       <criterion comment="seamonkey-chat is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578006"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-35.el4" test_ref="oval:com.redhat.rhsa:tst:20090257022"/>
       <criterion comment="seamonkey-js-debugger is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-35.el4" test_ref="oval:com.redhat.rhsa:tst:20090257023"/>
       <criterion comment="seamonkey-dom-inspector is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-mail is earlier than 0:1.0.9-35.el4" test_ref="oval:com.redhat.rhsa:tst:20090257024"/>
       <criterion comment="seamonkey-mail is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578020"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey is earlier than 0:1.0.9-35.el4" test_ref="oval:com.redhat.rhsa:tst:20090257025"/>
       <criterion comment="seamonkey is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578018"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-chat is earlier than 0:1.0.9-35.el4" test_ref="oval:com.redhat.rhsa:tst:20090257026"/>
       <criterion comment="seamonkey-chat is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-devel is earlier than 0:1.0.9-35.el4" test_ref="oval:com.redhat.rhsa:tst:20090257027"/>
       <criterion comment="seamonkey-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578014"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20090261" version="635">
   <metadata>
    <title>RHSA-2009:0261: vnc security update (Moderate)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
     <platform>Red Hat Enterprise Linux 5</platform>
    </affected>
    <reference ref_id="RHSA-2009:0261" ref_url="https://access.redhat.com/errata/RHSA-2009:0261" source="RHSA"/>
    <reference ref_id="CVE-2008-4770" ref_url="https://access.redhat.com/security/cve/CVE-2008-4770" source="CVE"/>
    <description>Virtual Network Computing (VNC) is a remote display system which allows you
to view a computer's &quot;desktop&quot; environment not only on the machine where it
is running, but from anywhere on the Internet and from a wide variety of
machine architectures.

An insufficient input validation flaw was discovered in the VNC client
application, vncviewer. If an attacker could convince a victim to connect
to a malicious VNC server, or when an attacker was able to connect to
vncviewer running in the &quot;listen&quot; mode, the attacker could cause the
victim's vncviewer to crash or, possibly, execute arbitrary code.
(CVE-2008-4770)

Users of vncviewer should upgrade to these updated packages, which contain
a backported patch to resolve this issue. For the update to take effect,
all running instances of vncviewer must be restarted after the update is
installed.</description>
    <advisory from="secalert@redhat.com">
     <severity>Moderate</severity>
     <rights>Copyright 2009 Red Hat, Inc.</rights>
     <issued date="2009-02-11"/>
     <updated date="2009-02-11"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2008-4770" public="20081126">CVE-2008-4770</cve>
     <bugzilla href="https://bugzilla.redhat.com/471777" id="471777">VNC Free Edition 4.1.3 fixes a  possible security vulnerability only present in the listening viewer. VNC Server is not compromised.</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/480590" id="480590">CVE-2008-4770 vnc: vncviewer insufficient encoding value validation in CMsgReader::readRect</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:5</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="vnc is earlier than 0:4.0-0.beta4.1.8" test_ref="oval:com.redhat.rhsa:tst:20090261001"/>
       <criterion comment="vnc is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20090261002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="vnc-server is earlier than 0:4.0-0.beta4.1.8" test_ref="oval:com.redhat.rhsa:tst:20090261003"/>
       <criterion comment="vnc-server is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20090261004"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="vnc-server is earlier than 0:4.0-12.el4_7.1" test_ref="oval:com.redhat.rhsa:tst:20090261006"/>
       <criterion comment="vnc-server is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20090261004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="vnc is earlier than 0:4.0-12.el4_7.1" test_ref="oval:com.redhat.rhsa:tst:20090261007"/>
       <criterion comment="vnc is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20090261002"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 5 is installed" test_ref="oval:com.redhat.rhsa:tst:20070066013"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="vnc is earlier than 0:4.1.2-14.el5_3.1" test_ref="oval:com.redhat.rhsa:tst:20090261009"/>
       <criterion comment="vnc is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20090261010"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="vnc-server is earlier than 0:4.1.2-14.el5_3.1" test_ref="oval:com.redhat.rhsa:tst:20090261011"/>
       <criterion comment="vnc-server is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20090261012"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20090269" version="639">
   <metadata>
    <title>RHSA-2009:0269: gstreamer-plugins security update (Important)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
    </affected>
    <reference ref_id="RHSA-2009:0269" ref_url="https://access.redhat.com/errata/RHSA-2009:0269" source="RHSA"/>
    <reference ref_id="CVE-2009-0398" ref_url="https://access.redhat.com/security/cve/CVE-2009-0398" source="CVE"/>
    <description>The gstreamer-plugins package contains plug-ins used by the GStreamer
streaming-media framework to support a wide variety of media types.

An array indexing error was found in the GStreamer's QuickTime media file
format decoding plug-in. An attacker could create a carefully-crafted
QuickTime media .mov file that would cause an application using GStreamer
to crash or, potentially, execute arbitrary code if played by a victim.
(CVE-2009-0398)

All users of gstreamer-plugins are advised to upgrade to these updated
packages, which contain a backported patch to correct this issue. After
installing the update, all applications using GStreamer (such as
nautilus-media) must be restarted for the changes to take effect.</description>
    <advisory from="secalert@redhat.com">
     <severity>Important</severity>
     <rights>Copyright 2009 Red Hat, Inc.</rights>
     <issued date="2009-02-06"/>
     <updated date="2009-02-06"/>
     <cve cvss2="6.8/AV:N/AC:M/Au:N/C:P/I:P/A:P" href="https://access.redhat.com/security/cve/CVE-2009-0398" public="20090122">CVE-2009-0398</cve>
     <bugzilla href="https://bugzilla.redhat.com/483740" id="483740">CVE-2009-0398 gstreamer-plugins: Array index error while parsing malformed QuickTime media files</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="AND">
    <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
    <criteria operator="OR">
     <criteria operator="AND">
      <criterion comment="gstreamer-plugins-devel is earlier than 0:0.6.0-19" test_ref="oval:com.redhat.rhsa:tst:20090269001"/>
      <criterion comment="gstreamer-plugins-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20090269002"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="gstreamer-plugins is earlier than 0:0.6.0-19" test_ref="oval:com.redhat.rhsa:tst:20090269003"/>
      <criterion comment="gstreamer-plugins is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20090269004"/>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20090275" version="635">
   <metadata>
    <title>RHSA-2009:0275: imap security update (Moderate)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
    </affected>
    <reference ref_id="RHSA-2009:0275" ref_url="https://access.redhat.com/errata/RHSA-2009:0275" source="RHSA"/>
    <reference ref_id="CVE-2008-5005" ref_url="https://access.redhat.com/security/cve/CVE-2008-5005" source="CVE"/>
    <description>The imap package provides server daemons for both the IMAP (Internet
Message Access Protocol) and POP (Post Office Protocol) mail access protocols.

A buffer overflow flaw was discovered in the dmail and tmail mail delivery
utilities shipped with imap. If either of these utilities were used as a
mail delivery agent, a remote attacker could potentially use this flaw to
run arbitrary code as the targeted user by sending a specially-crafted mail
message to the victim. (CVE-2008-5005)

Users of imap should upgrade to these updated packages, which contain a
backported patch to resolve this issue.</description>
    <advisory from="secalert@redhat.com">
     <severity>Moderate</severity>
     <rights>Copyright 2009 Red Hat, Inc.</rights>
     <issued date="2009-02-19"/>
     <updated date="2009-02-19"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2008-5005" public="20081031">CVE-2008-5005</cve>
     <bugzilla href="https://bugzilla.redhat.com/469667" id="469667">CVE-2008-5005 uw-imap: buffer overflow in dmail and tmail</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="AND">
    <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
    <criteria operator="OR">
     <criteria operator="AND">
      <criterion comment="imap-devel is earlier than 1:2002d-15" test_ref="oval:com.redhat.rhsa:tst:20090275001"/>
      <criterion comment="imap-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20090275002"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="imap-utils is earlier than 1:2002d-15" test_ref="oval:com.redhat.rhsa:tst:20090275003"/>
      <criterion comment="imap-utils is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20090275004"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="imap is earlier than 1:2002d-15" test_ref="oval:com.redhat.rhsa:tst:20090275005"/>
      <criterion comment="imap is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20090275006"/>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20090295" version="644">
   <metadata>
    <title>RHSA-2009:0295: net-snmp security update (Moderate)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
    </affected>
    <reference ref_id="RHSA-2009:0295" ref_url="https://access.redhat.com/errata/RHSA-2009:0295" source="RHSA"/>
    <reference ref_id="CVE-2008-6123" ref_url="https://access.redhat.com/security/cve/CVE-2008-6123" source="CVE"/>
    <description>The Simple Network Management Protocol (SNMP) is a protocol used for
network management.

It was discovered that the snmpd daemon did not use TCP wrappers correctly,
causing network hosts access restrictions defined in &quot;/etc/hosts.allow&quot; and
&quot;/etc/hosts.deny&quot; to not be honored. A remote attacker could use this flaw
to bypass intended access restrictions. (CVE-2008-6123)

This issue only affected configurations where hosts.allow and hosts.deny
were used to limit access to the SNMP server. To obtain information from
the server, the attacker would have to successfully authenticate, usually
by providing a correct community string.

All net-snmp users should upgrade to these updated packages, which contain
a backported patch to correct this issue. After installing the update, the
snmpd and snmptrapd daemons will be restarted automatically.</description>
    <advisory from="secalert@redhat.com">
     <severity>Moderate</severity>
     <rights>Copyright 2009 Red Hat, Inc.</rights>
     <issued date="2009-03-26"/>
     <updated date="2009-03-26"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2008-6123" public="20081209">CVE-2008-6123</cve>
     <bugzilla href="https://bugzilla.redhat.com/485211" id="485211">CVE-2008-6123 net-snmp: incorrect application of hosts access restrictions in hosts.{allow,deny}</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="AND">
    <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
    <criteria operator="OR">
     <criteria operator="AND">
      <criterion comment="net-snmp-libs is earlier than 0:5.0.9-2.30E.27" test_ref="oval:com.redhat.rhsa:tst:20090295001"/>
      <criterion comment="net-snmp-libs is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20071045006"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="net-snmp-perl is earlier than 0:5.0.9-2.30E.27" test_ref="oval:com.redhat.rhsa:tst:20090295003"/>
      <criterion comment="net-snmp-perl is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20071045008"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="net-snmp is earlier than 0:5.0.9-2.30E.27" test_ref="oval:com.redhat.rhsa:tst:20090295005"/>
      <criterion comment="net-snmp is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20071045010"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="net-snmp-devel is earlier than 0:5.0.9-2.30E.27" test_ref="oval:com.redhat.rhsa:tst:20090295007"/>
      <criterion comment="net-snmp-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20071045004"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="net-snmp-utils is earlier than 0:5.0.9-2.30E.27" test_ref="oval:com.redhat.rhsa:tst:20090295009"/>
      <criterion comment="net-snmp-utils is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20071045002"/>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20090308" version="634">
   <metadata>
    <title>RHSA-2009:0308: cups security update (Important)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
    </affected>
    <reference ref_id="RHSA-2009:0308" ref_url="https://access.redhat.com/errata/RHSA-2009:0308" source="RHSA"/>
    <reference ref_id="CVE-2009-0577" ref_url="https://access.redhat.com/security/cve/CVE-2009-0577" source="CVE"/>
    <description>The Common UNIX® Printing System (CUPS) provides a portable printing layer
for UNIX operating systems.

The CUPS security advisory, RHSA-2008:0937, stated that it fixed
CVE-2008-3640 for Red Hat Enterprise Linux 3, 4, and 5. It was discovered
this flaw was not properly fixed on Red Hat Enterprise Linux 3, however.
(CVE-2009-0577)

These new packages contain a proper fix for CVE-2008-3640 on Red Hat
Enterprise Linux 3. Red Hat Enterprise Linux 4 and 5 already contain the
appropriate fix for this flaw and do not need to be updated.

Users of cups should upgrade to these updated packages, which contain a
backported patch to correct this issue.</description>
    <advisory from="secalert@redhat.com">
     <severity>Important</severity>
     <rights>Copyright 2009 Red Hat, Inc.</rights>
     <issued date="2009-02-19"/>
     <updated date="2009-02-19"/>
     <cve cvss2="5.8/AV:A/AC:L/Au:N/C:P/I:P/A:P" href="https://access.redhat.com/security/cve/CVE-2009-0577" public="20090217">CVE-2009-0577</cve>
     <bugzilla href="https://bugzilla.redhat.com/486052" id="486052">CVE-2009-0577 cups-CVE-2008-3640.patch has been corrupted.</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="AND">
    <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
    <criteria operator="OR">
     <criteria operator="AND">
      <criterion comment="cups-devel is earlier than 1:1.1.17-13.3.56" test_ref="oval:com.redhat.rhsa:tst:20090308001"/>
      <criterion comment="cups-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060163002"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="cups-libs is earlier than 1:1.1.17-13.3.56" test_ref="oval:com.redhat.rhsa:tst:20090308003"/>
      <criterion comment="cups-libs is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060163004"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="cups is earlier than 1:1.1.17-13.3.56" test_ref="oval:com.redhat.rhsa:tst:20090308005"/>
      <criterion comment="cups is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060163006"/>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20090313" version="631">
   <metadata>
    <title>RHSA-2009:0313: wireshark security update (Moderate)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
     <platform>Red Hat Enterprise Linux 5</platform>
    </affected>
    <reference ref_id="RHSA-2009:0313" ref_url="https://access.redhat.com/errata/RHSA-2009:0313" source="RHSA"/>
    <reference ref_id="CVE-2008-4680" ref_url="https://access.redhat.com/security/cve/CVE-2008-4680" source="CVE"/>
    <reference ref_id="CVE-2008-4681" ref_url="https://access.redhat.com/security/cve/CVE-2008-4681" source="CVE"/>
    <reference ref_id="CVE-2008-4682" ref_url="https://access.redhat.com/security/cve/CVE-2008-4682" source="CVE"/>
    <reference ref_id="CVE-2008-4683" ref_url="https://access.redhat.com/security/cve/CVE-2008-4683" source="CVE"/>
    <reference ref_id="CVE-2008-4684" ref_url="https://access.redhat.com/security/cve/CVE-2008-4684" source="CVE"/>
    <reference ref_id="CVE-2008-4685" ref_url="https://access.redhat.com/security/cve/CVE-2008-4685" source="CVE"/>
    <reference ref_id="CVE-2008-5285" ref_url="https://access.redhat.com/security/cve/CVE-2008-5285" source="CVE"/>
    <reference ref_id="CVE-2008-6472" ref_url="https://access.redhat.com/security/cve/CVE-2008-6472" source="CVE"/>
    <reference ref_id="CVE-2009-0599" ref_url="https://access.redhat.com/security/cve/CVE-2009-0599" source="CVE"/>
    <reference ref_id="CVE-2009-0600" ref_url="https://access.redhat.com/security/cve/CVE-2009-0600" source="CVE"/>
    <description>Wireshark is a program for monitoring network traffic. Wireshark was
previously known as Ethereal.

Multiple buffer overflow flaws were found in Wireshark. If Wireshark read
a malformed packet off a network or opened a malformed dump file, it could
crash or, possibly, execute arbitrary code as the user running Wireshark.
(CVE-2008-4683, CVE-2009-0599)

Several denial of service flaws were found in Wireshark. Wireshark could
crash or stop responding if it read a malformed packet off a network, or
opened a malformed dump file. (CVE-2008-4680, CVE-2008-4681, CVE-2008-4682,
CVE-2008-4684, CVE-2008-4685, CVE-2008-5285, CVE-2009-0600)

Users of wireshark should upgrade to these updated packages, which contain
Wireshark version 1.0.6, and resolve these issues. All running instances of
Wireshark must be restarted for the update to take effect.</description>
    <advisory from="secalert@redhat.com">
     <severity>Moderate</severity>
     <rights>Copyright 2009 Red Hat, Inc.</rights>
     <issued date="2009-03-04"/>
     <updated date="2009-03-04"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2008-4680" impact="low" public="20081001">CVE-2008-4680</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2008-4681" impact="low" public="20081020">CVE-2008-4681</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2008-4682" impact="low" public="20081001">CVE-2008-4682</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2008-4683" public="20070404">CVE-2008-4683</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2008-4684" impact="low" public="20080516">CVE-2008-4684</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2008-4685" impact="low" public="20080913">CVE-2008-4685</cve>
     <cve cwe="CWE-835" href="https://access.redhat.com/security/cve/CVE-2008-5285" impact="low" public="20081122">CVE-2008-5285</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2008-6472" impact="low" public="20081208">CVE-2008-6472</cve>
     <cve cvss2="6.8/AV:N/AC:M/Au:N/C:P/I:P/A:P" href="https://access.redhat.com/security/cve/CVE-2009-0599" public="20090206">CVE-2009-0599</cve>
     <cve cvss2="4.3/AV:N/AC:M/Au:N/C:N/I:N/A:P" href="https://access.redhat.com/security/cve/CVE-2009-0600" impact="low" public="20090206">CVE-2009-0600</cve>
     <bugzilla href="https://bugzilla.redhat.com/468166" id="468166">CVE-2008-4680 wireshark: DoS (app crash or abort) via malformed USB Request Block (URB).</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/468167" id="468167">CVE-2008-4681 wireshark: DoS (app crash or abort) in Bluetooth RFCOMM dissector via unknown packets</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/468169" id="468169">CVE-2008-4682 wireshark: DoS (app abort) via a malformed  .ncf file with an unknown/unexpected packet type</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/468171" id="468171">CVE-2008-4683 wireshark: DoS (app crash or abort) in Bluetooth ACL dissector  via a packet with an invalid length</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/468174" id="468174">CVE-2008-4684 wireshark: DoS (app crash) via certain series of packets by enabling the (1) PRP or (2) MATE post dissector</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/468175" id="468175">CVE-2008-4685 wireshark: DoS (app crash or abort) in Q.931 dissector via certain packets</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/472737" id="472737">CVE-2008-5285 wireshark: DoS (infinite loop) in SMTP dissector via large SMTP request</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/485888" id="485888">CVE-2009-0599 wireshark: buffer overflows in NetScreen snoop file reader</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/485889" id="485889">CVE-2009-0600 wireshark: denial of service (application crash) via a crafted Tektronix K12 text capture file</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:5</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="wireshark is earlier than 0:1.0.6-EL3.3" test_ref="oval:com.redhat.rhsa:tst:20090313001"/>
       <criterion comment="wireshark is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060602002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="wireshark-gnome is earlier than 0:1.0.6-EL3.3" test_ref="oval:com.redhat.rhsa:tst:20090313003"/>
       <criterion comment="wireshark-gnome is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060602004"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="wireshark is earlier than 0:1.0.6-2.el4_7" test_ref="oval:com.redhat.rhsa:tst:20090313006"/>
       <criterion comment="wireshark is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060602002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="wireshark-gnome is earlier than 0:1.0.6-2.el4_7" test_ref="oval:com.redhat.rhsa:tst:20090313007"/>
       <criterion comment="wireshark-gnome is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060602004"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 5 is installed" test_ref="oval:com.redhat.rhsa:tst:20070066013"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="wireshark-gnome is earlier than 0:1.0.6-2.el5_3" test_ref="oval:com.redhat.rhsa:tst:20090313009"/>
       <criterion comment="wireshark-gnome is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070066010"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="wireshark is earlier than 0:1.0.6-2.el5_3" test_ref="oval:com.redhat.rhsa:tst:20090313011"/>
       <criterion comment="wireshark is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070066012"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20090325" version="634">
   <metadata>
    <title>RHSA-2009:0325: seamonkey security update (Critical)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
    </affected>
    <reference ref_id="RHSA-2009:0325" ref_url="https://access.redhat.com/errata/RHSA-2009:0325" source="RHSA"/>
    <reference ref_id="CVE-2009-0040" ref_url="https://access.redhat.com/security/cve/CVE-2009-0040" source="CVE"/>
    <reference ref_id="CVE-2009-0772" ref_url="https://access.redhat.com/security/cve/CVE-2009-0772" source="CVE"/>
    <reference ref_id="CVE-2009-0774" ref_url="https://access.redhat.com/security/cve/CVE-2009-0774" source="CVE"/>
    <reference ref_id="CVE-2009-0775" ref_url="https://access.redhat.com/security/cve/CVE-2009-0775" source="CVE"/>
    <reference ref_id="CVE-2009-0776" ref_url="https://access.redhat.com/security/cve/CVE-2009-0776" source="CVE"/>
    <description>SeaMonkey is an open source Web browser, email and newsgroup client, IRC
chat client, and HTML editor.

Several flaws were found in the processing of malformed web content. A web
page containing malicious content could cause SeaMonkey to crash or,
potentially, execute arbitrary code as the user running SeaMonkey.
(CVE-2009-0040, CVE-2009-0772, CVE-2009-0774, CVE-2009-0775)

A flaw was found in the way malformed content was processed. A website
containing specially-crafted content could, potentially, trick a SeaMonkey
user into surrendering sensitive information. (CVE-2009-0776)

All SeaMonkey users should upgrade to these updated packages, which contain
backported patches that correct these issues. After installing the update,
SeaMonkey must be restarted for the changes to take effect.</description>
    <advisory from="secalert@redhat.com">
     <severity>Critical</severity>
     <rights>Copyright 2009 Red Hat, Inc.</rights>
     <issued date="2009-03-04"/>
     <updated date="2009-03-04"/>
     <cve cvss2="6.8/AV:N/AC:M/Au:N/C:P/I:P/A:P" href="https://access.redhat.com/security/cve/CVE-2009-0040" impact="moderate" public="20090219">CVE-2009-0040</cve>
     <cve cvss2="6.8/AV:N/AC:M/Au:N/C:P/I:P/A:P" href="https://access.redhat.com/security/cve/CVE-2009-0772" public="20090304">CVE-2009-0772</cve>
     <cve cvss2="6.8/AV:N/AC:M/Au:N/C:P/I:P/A:P" href="https://access.redhat.com/security/cve/CVE-2009-0774" public="20090304">CVE-2009-0774</cve>
     <cve cvss2="6.8/AV:N/AC:M/Au:N/C:P/I:P/A:P" href="https://access.redhat.com/security/cve/CVE-2009-0775" public="20090304">CVE-2009-0775</cve>
     <cve cvss2="4.3/AV:N/AC:M/Au:N/C:N/I:P/A:N" href="https://access.redhat.com/security/cve/CVE-2009-0776" impact="moderate" public="20090304">CVE-2009-0776</cve>
     <bugzilla href="https://bugzilla.redhat.com/486355" id="486355">CVE-2009-0040 libpng arbitrary free() flaw</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/488273" id="488273">CVE-2009-0772 Firefox 2 and 3 - Layout engine crashes</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/488283" id="488283">CVE-2009-0774 Firefox 2 and 3 crashes in the JavaScript engine</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/488287" id="488287">CVE-2009-0775 Firefox XUL Linked Clones Double Free Vulnerability</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/488290" id="488290">CVE-2009-0776 Firefox XML data theft via RDFXMLDataSource and cross-domain redirect</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.34.el3" test_ref="oval:com.redhat.rhsa:tst:20090325001"/>
       <criterion comment="seamonkey-nspr is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578010"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.34.el3" test_ref="oval:com.redhat.rhsa:tst:20090325003"/>
       <criterion comment="seamonkey-mail is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578020"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.34.el3" test_ref="oval:com.redhat.rhsa:tst:20090325005"/>
       <criterion comment="seamonkey-nss is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578016"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.34.el3" test_ref="oval:com.redhat.rhsa:tst:20090325007"/>
       <criterion comment="seamonkey-js-debugger is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.34.el3" test_ref="oval:com.redhat.rhsa:tst:20090325009"/>
       <criterion comment="seamonkey-dom-inspector is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.34.el3" test_ref="oval:com.redhat.rhsa:tst:20090325011"/>
       <criterion comment="seamonkey-nspr-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey is earlier than 0:1.0.9-0.34.el3" test_ref="oval:com.redhat.rhsa:tst:20090325013"/>
       <criterion comment="seamonkey is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578018"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.34.el3" test_ref="oval:com.redhat.rhsa:tst:20090325015"/>
       <criterion comment="seamonkey-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578014"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.34.el3" test_ref="oval:com.redhat.rhsa:tst:20090325017"/>
       <criterion comment="seamonkey-nss-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578012"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.34.el3" test_ref="oval:com.redhat.rhsa:tst:20090325019"/>
       <criterion comment="seamonkey-chat is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578006"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="seamonkey-mail is earlier than 0:1.0.9-38.el4" test_ref="oval:com.redhat.rhsa:tst:20090325022"/>
       <criterion comment="seamonkey-mail is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578020"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-38.el4" test_ref="oval:com.redhat.rhsa:tst:20090325023"/>
       <criterion comment="seamonkey-js-debugger is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-devel is earlier than 0:1.0.9-38.el4" test_ref="oval:com.redhat.rhsa:tst:20090325024"/>
       <criterion comment="seamonkey-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578014"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-38.el4" test_ref="oval:com.redhat.rhsa:tst:20090325025"/>
       <criterion comment="seamonkey-dom-inspector is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey is earlier than 0:1.0.9-38.el4" test_ref="oval:com.redhat.rhsa:tst:20090325026"/>
       <criterion comment="seamonkey is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578018"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-chat is earlier than 0:1.0.9-38.el4" test_ref="oval:com.redhat.rhsa:tst:20090325027"/>
       <criterion comment="seamonkey-chat is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578006"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20090329" version="655">
   <metadata>
    <title>RHSA-2009:0329: freetype security update (Important)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
    </affected>
    <reference ref_id="RHSA-2009:0329" ref_url="https://access.redhat.com/errata/RHSA-2009:0329" source="RHSA"/>
    <reference ref_id="CVE-2006-1861" ref_url="https://access.redhat.com/security/cve/CVE-2006-1861" source="CVE"/>
    <reference ref_id="CVE-2007-2754" ref_url="https://access.redhat.com/security/cve/CVE-2007-2754" source="CVE"/>
    <reference ref_id="CVE-2008-1808" ref_url="https://access.redhat.com/security/cve/CVE-2008-1808" source="CVE"/>
    <reference ref_id="CVE-2009-0946" ref_url="https://access.redhat.com/security/cve/CVE-2009-0946" source="CVE"/>
    <description>FreeType is a free, high-quality, portable font engine that can open and
manage font files. It also loads, hints, and renders individual glyphs
efficiently. These packages provide both the FreeType 1 and FreeType 2
font engines.

Tavis Ormandy of the Google Security Team discovered several integer
overflow flaws in the FreeType 2 font engine. If a user loaded a
carefully-crafted font file with an application linked against FreeType 2,
it could cause the application to crash or, possibly, execute arbitrary
code with the privileges of the user running the application.
(CVE-2009-0946)

Chris Evans discovered multiple integer overflow flaws in the FreeType font
engine. If a user loaded a carefully-crafted font file with an application
linked against FreeType, it could cause the application to crash or,
possibly, execute arbitrary code with the privileges of the user running
the application. (CVE-2006-1861)

An integer overflow flaw was found in the way the FreeType font engine
processed TrueType® Font (TTF) files. If a user loaded a carefully-crafted
font file with an application linked against FreeType, it could cause the
application to crash or, possibly, execute arbitrary code with the
privileges of the user running the application. (CVE-2007-2754)

A flaw was discovered in the FreeType TTF font-file format parser when the
TrueType virtual machine Byte Code Interpreter (BCI) is enabled. If a user
loaded a carefully-crafted font file with an application linked against
FreeType, it could cause the application to crash or, possibly, execute
arbitrary code with the privileges of the user running the application.
(CVE-2008-1808)

The CVE-2008-1808 flaw did not affect the freetype packages as distributed
in Red Hat Enterprise Linux 3 and 4, as they are not compiled with TrueType
BCI support. A fix for this flaw has been included in this update as users
may choose to recompile the freetype packages in order to enable TrueType
BCI support. Red Hat does not, however, provide support for modified and
recompiled packages.

Note: For the FreeType 2 font engine, the CVE-2006-1861, CVE-2007-2754,
and CVE-2008-1808 flaws were addressed via RHSA-2006:0500, RHSA-2007:0403,
and RHSA-2008:0556 respectively. This update provides corresponding
updates for the FreeType 1 font engine, included in the freetype packages
distributed in Red Hat Enterprise Linux 3 and 4.

Users are advised to upgrade to these updated packages, which contain
backported patches to correct these issues. The X server must be restarted
(log out, then log back in) for this update to take effect.</description>
    <advisory from="secalert@redhat.com">
     <severity>Important</severity>
     <rights>Copyright 2009 Red Hat, Inc.</rights>
     <issued date="2009-05-22"/>
     <updated date="2009-05-22"/>
     <cve cwe="CWE-190" href="https://access.redhat.com/security/cve/CVE-2006-1861" impact="moderate" public="20060515">CVE-2006-1861</cve>
     <cve cwe="CWE-190" href="https://access.redhat.com/security/cve/CVE-2007-2754" impact="moderate" public="20070427">CVE-2007-2754</cve>
     <cve cwe="CWE-193" href="https://access.redhat.com/security/cve/CVE-2008-1808" public="20080610">CVE-2008-1808</cve>
     <cve cvss2="6.8/AV:N/AC:M/Au:N/C:P/I:P/A:P" cwe="CWE-190" href="https://access.redhat.com/security/cve/CVE-2009-0946" public="20090320">CVE-2009-0946</cve>
     <bugzilla href="https://bugzilla.redhat.com/240200" id="240200">CVE-2007-2754 freetype integer overflow</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/450774" id="450774">CVE-2008-1808 FreeType off-by-one flaws</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/484437" id="484437">CVE-2006-1861 freetype: multiple integer overflow vulnerabilities</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/491384" id="491384">CVE-2009-0946 freetype: multiple integer overflows</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="freetype-devel is earlier than 0:2.1.4-12.el3" test_ref="oval:com.redhat.rhsa:tst:20090329001"/>
       <criterion comment="freetype-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060500004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="freetype is earlier than 0:2.1.4-12.el3" test_ref="oval:com.redhat.rhsa:tst:20090329003"/>
       <criterion comment="freetype is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060500002"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="freetype is earlier than 0:2.1.9-10.el4.7" test_ref="oval:com.redhat.rhsa:tst:20090329006"/>
       <criterion comment="freetype is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060500002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="freetype-demos is earlier than 0:2.1.9-10.el4.7" test_ref="oval:com.redhat.rhsa:tst:20090329007"/>
       <criterion comment="freetype-demos is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060500008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="freetype-devel is earlier than 0:2.1.9-10.el4.7" test_ref="oval:com.redhat.rhsa:tst:20090329009"/>
       <criterion comment="freetype-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060500004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="freetype-utils is earlier than 0:2.1.9-10.el4.7" test_ref="oval:com.redhat.rhsa:tst:20090329010"/>
       <criterion comment="freetype-utils is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060500010"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20090337" version="641">
   <metadata>
    <title>RHSA-2009:0337: php security update (Moderate)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
    </affected>
    <reference ref_id="RHSA-2009:0337" ref_url="https://access.redhat.com/errata/RHSA-2009:0337" source="RHSA"/>
    <reference ref_id="CVE-2008-3658" ref_url="https://access.redhat.com/security/cve/CVE-2008-3658" source="CVE"/>
    <reference ref_id="CVE-2008-3660" ref_url="https://access.redhat.com/security/cve/CVE-2008-3660" source="CVE"/>
    <reference ref_id="CVE-2008-5498" ref_url="https://access.redhat.com/security/cve/CVE-2008-5498" source="CVE"/>
    <reference ref_id="CVE-2008-5557" ref_url="https://access.redhat.com/security/cve/CVE-2008-5557" source="CVE"/>
    <reference ref_id="CVE-2009-0754" ref_url="https://access.redhat.com/security/cve/CVE-2009-0754" source="CVE"/>
    <description>PHP is an HTML-embedded scripting language commonly used with the Apache
HTTP Web server.

A heap-based buffer overflow flaw was found in PHP's mbstring extension. A
remote attacker able to pass arbitrary input to a PHP script using mbstring
conversion functions could cause the PHP interpreter to crash or,
possibly, execute arbitrary code. (CVE-2008-5557)

A flaw was found in the handling of the &quot;mbstring.func_overload&quot;
configuration setting. A value set for one virtual host, or in a user's
.htaccess file, was incorrectly applied to other virtual hosts on the same
server, causing the handling of multibyte character strings to not work
correctly. (CVE-2009-0754)

A buffer overflow flaw was found in PHP's imageloadfont function.  If a PHP
script allowed a remote attacker to load a carefully crafted font file, it
could cause the PHP interpreter to crash or, possibly, execute arbitrary
code. (CVE-2008-3658)

A flaw was found in the way PHP handled certain file extensions when
running in FastCGI mode. If the PHP interpreter was being executed via
FastCGI, a remote attacker could create a request which would cause the PHP
interpreter to crash. (CVE-2008-3660)

A memory disclosure flaw was found in the PHP gd extension's imagerotate
function. A remote attacker able to pass arbitrary values as the
&quot;background color&quot; argument of the function could, possibly, view portions
of the PHP interpreter's memory. (CVE-2008-5498)

All php users are advised to upgrade to these updated packages, which
contain backported patches to resolve these issues. The httpd web server
must be restarted for the changes to take effect.</description>
    <advisory from="secalert@redhat.com">
     <severity>Moderate</severity>
     <rights>Copyright 2009 Red Hat, Inc.</rights>
     <issued date="2009-04-06"/>
     <updated date="2009-04-06"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2008-3658" impact="low" public="20080807">CVE-2008-3658</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2008-3660" impact="low" public="20080806">CVE-2008-3660</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2008-5498" impact="low" public="20081224">CVE-2008-5498</cve>
     <cve cwe="CWE-122" href="https://access.redhat.com/security/cve/CVE-2008-5557" public="20080805">CVE-2008-5557</cve>
     <cve cvss2="2.1/AV:L/AC:L/Au:N/C:N/I:P/A:N" href="https://access.redhat.com/security/cve/CVE-2009-0754" public="20040227">CVE-2009-0754</cve>
     <bugzilla href="https://bugzilla.redhat.com/459529" id="459529">CVE-2008-3658 php: buffer overflow in the imageloadfont function in gd extension</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/459572" id="459572">CVE-2008-3660 php: FastCGI module DoS via multiple dots preceding the extension</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/478425" id="478425">CVE-2008-5498 php: libgd imagerotate() array index error memory disclosure</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/478848" id="478848">CVE-2008-5557 php: Heap-based buffer overflow in the mbstring extension via crafted string containing a HTML entity (arb code execution)</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/479272" id="479272">CVE-2009-0754 PHP mbstring.func_overload web server denial of service</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="php-pgsql is earlier than 0:4.3.2-51.ent" test_ref="oval:com.redhat.rhsa:tst:20090337001"/>
       <criterion comment="php-pgsql is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276012"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-ldap is earlier than 0:4.3.2-51.ent" test_ref="oval:com.redhat.rhsa:tst:20090337003"/>
       <criterion comment="php-ldap is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-devel is earlier than 0:4.3.2-51.ent" test_ref="oval:com.redhat.rhsa:tst:20090337005"/>
       <criterion comment="php-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-imap is earlier than 0:4.3.2-51.ent" test_ref="oval:com.redhat.rhsa:tst:20090337007"/>
       <criterion comment="php-imap is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276010"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-mysql is earlier than 0:4.3.2-51.ent" test_ref="oval:com.redhat.rhsa:tst:20090337009"/>
       <criterion comment="php-mysql is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276014"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php is earlier than 0:4.3.2-51.ent" test_ref="oval:com.redhat.rhsa:tst:20090337011"/>
       <criterion comment="php is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-odbc is earlier than 0:4.3.2-51.ent" test_ref="oval:com.redhat.rhsa:tst:20090337013"/>
       <criterion comment="php-odbc is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276004"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="php-pear is earlier than 0:4.3.9-3.22.15" test_ref="oval:com.redhat.rhsa:tst:20090337016"/>
       <criterion comment="php-pear is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276028"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-ncurses is earlier than 0:4.3.9-3.22.15" test_ref="oval:com.redhat.rhsa:tst:20090337018"/>
       <criterion comment="php-ncurses is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276026"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-snmp is earlier than 0:4.3.9-3.22.15" test_ref="oval:com.redhat.rhsa:tst:20090337020"/>
       <criterion comment="php-snmp is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276024"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-xmlrpc is earlier than 0:4.3.9-3.22.15" test_ref="oval:com.redhat.rhsa:tst:20090337022"/>
       <criterion comment="php-xmlrpc is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276019"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-devel is earlier than 0:4.3.9-3.22.15" test_ref="oval:com.redhat.rhsa:tst:20090337024"/>
       <criterion comment="php-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php is earlier than 0:4.3.9-3.22.15" test_ref="oval:com.redhat.rhsa:tst:20090337025"/>
       <criterion comment="php is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-mbstring is earlier than 0:4.3.9-3.22.15" test_ref="oval:com.redhat.rhsa:tst:20090337026"/>
       <criterion comment="php-mbstring is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276030"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-domxml is earlier than 0:4.3.9-3.22.15" test_ref="oval:com.redhat.rhsa:tst:20090337028"/>
       <criterion comment="php-domxml is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276032"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-pgsql is earlier than 0:4.3.9-3.22.15" test_ref="oval:com.redhat.rhsa:tst:20090337030"/>
       <criterion comment="php-pgsql is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276012"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-mysql is earlier than 0:4.3.9-3.22.15" test_ref="oval:com.redhat.rhsa:tst:20090337031"/>
       <criterion comment="php-mysql is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276014"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-imap is earlier than 0:4.3.9-3.22.15" test_ref="oval:com.redhat.rhsa:tst:20090337032"/>
       <criterion comment="php-imap is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276010"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-odbc is earlier than 0:4.3.9-3.22.15" test_ref="oval:com.redhat.rhsa:tst:20090337033"/>
       <criterion comment="php-odbc is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-gd is earlier than 0:4.3.9-3.22.15" test_ref="oval:com.redhat.rhsa:tst:20090337034"/>
       <criterion comment="php-gd is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276035"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-ldap is earlier than 0:4.3.9-3.22.15" test_ref="oval:com.redhat.rhsa:tst:20090337036"/>
       <criterion comment="php-ldap is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276006"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20090340" version="633">
   <metadata>
    <title>RHSA-2009:0340: libpng security update (Moderate)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
    </affected>
    <reference ref_id="RHSA-2009:0340" ref_url="https://access.redhat.com/errata/RHSA-2009:0340" source="RHSA"/>
    <reference ref_id="CVE-2009-0040" ref_url="https://access.redhat.com/security/cve/CVE-2009-0040" source="CVE"/>
    <description>The libpng packages contain a library of functions for creating and
manipulating PNG (Portable Network Graphics) image format files.

A flaw was discovered in libpng that could result in libpng trying to
free() random memory if certain, unlikely error conditions occurred. If a
carefully-crafted PNG file was loaded by an application linked against
libpng, it could cause the application to crash or, potentially, execute
arbitrary code with the privileges of the user running the application.
(CVE-2009-0040)

Users of libpng and libpng10 should upgrade to these updated packages,
which contain backported patches to correct these issues. All running
applications using libpng or libpng10 must be restarted for the update to
take effect.</description>
    <advisory from="secalert@redhat.com">
     <severity>Moderate</severity>
     <rights>Copyright 2009 Red Hat, Inc.</rights>
     <issued date="2009-03-04"/>
     <updated date="2009-03-04"/>
     <cve cvss2="6.8/AV:N/AC:M/Au:N/C:P/I:P/A:P" href="https://access.redhat.com/security/cve/CVE-2009-0040" public="20090219">CVE-2009-0040</cve>
     <bugzilla href="https://bugzilla.redhat.com/486355" id="486355">CVE-2009-0040 libpng arbitrary free() flaw</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="AND">
    <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
    <criteria operator="OR">
     <criteria operator="AND">
      <criterion comment="libpng-devel is earlier than 2:1.2.2-29" test_ref="oval:com.redhat.rhsa:tst:20090340001"/>
      <criterion comment="libpng-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070356002"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="libpng is earlier than 2:1.2.2-29" test_ref="oval:com.redhat.rhsa:tst:20090340003"/>
      <criterion comment="libpng is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070356004"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="libpng10 is earlier than 0:1.0.13-20" test_ref="oval:com.redhat.rhsa:tst:20090340005"/>
      <criterion comment="libpng10 is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070356008"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="libpng10-devel is earlier than 0:1.0.13-20" test_ref="oval:com.redhat.rhsa:tst:20090340007"/>
      <criterion comment="libpng10-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070356006"/>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20090341" version="635">
   <metadata>
    <title>RHSA-2009:0341: curl security update (Moderate)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
     <platform>Red Hat Enterprise Linux 5</platform>
    </affected>
    <reference ref_id="RHSA-2009:0341" ref_url="https://access.redhat.com/errata/RHSA-2009:0341" source="RHSA"/>
    <reference ref_id="CVE-2009-0037" ref_url="https://access.redhat.com/security/cve/CVE-2009-0037" source="CVE"/>
    <description>cURL is a tool for getting files from FTP, HTTP, Gopher, Telnet, and Dict
servers, using any of the supported protocols. cURL is designed to work
without user interaction or any kind of interactivity.

David Kierznowski discovered a flaw in libcurl where it would not
differentiate between different target URLs when handling automatic
redirects. This caused libcurl to follow any new URL that it understood,
including the &quot;file://&quot; URL type. This could allow a remote server to force
a local libcurl-using application to read a local file instead of the
remote one, possibly exposing local files that were not meant to be
exposed. (CVE-2009-0037)

Note: Applications using libcurl that are expected to follow redirects to
&quot;file://&quot; protocol must now explicitly call curl_easy_setopt(3) and set the
newly introduced CURLOPT_REDIR_PROTOCOLS option as required.

cURL users should upgrade to these updated packages, which contain
backported patches to correct these issues. All running applications using
libcurl must be restarted for the update to take effect.</description>
    <advisory from="secalert@redhat.com">
     <severity>Moderate</severity>
     <rights>Copyright 2009 Red Hat, Inc.</rights>
     <issued date="2009-03-19"/>
     <updated date="2009-03-19"/>
     <cve cvss2="4.3/AV:N/AC:M/Au:N/C:P/I:N/A:N" href="https://access.redhat.com/security/cve/CVE-2009-0037" public="20090303">CVE-2009-0037</cve>
     <bugzilla href="https://bugzilla.redhat.com/485271" id="485271">CVE-2009-0037 curl: local file access via unsafe redirects</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:5</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="curl-devel is earlier than 0:7.10.6-9.rhel3" test_ref="oval:com.redhat.rhsa:tst:20090341001"/>
       <criterion comment="curl-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20090341002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="curl is earlier than 0:7.10.6-9.rhel3" test_ref="oval:com.redhat.rhsa:tst:20090341003"/>
       <criterion comment="curl is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20090341004"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="curl-devel is earlier than 0:7.12.1-11.1.el4_7.1" test_ref="oval:com.redhat.rhsa:tst:20090341006"/>
       <criterion comment="curl-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20090341002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="curl is earlier than 0:7.12.1-11.1.el4_7.1" test_ref="oval:com.redhat.rhsa:tst:20090341007"/>
       <criterion comment="curl is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20090341004"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 5 is installed" test_ref="oval:com.redhat.rhsa:tst:20070066013"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="curl is earlier than 0:7.15.5-2.1.el5_3.4" test_ref="oval:com.redhat.rhsa:tst:20090341009"/>
       <criterion comment="curl is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20090341010"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="curl-devel is earlier than 0:7.15.5-2.1.el5_3.4" test_ref="oval:com.redhat.rhsa:tst:20090341011"/>
       <criterion comment="curl-devel is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20090341012"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20090345" version="641">
   <metadata>
    <title>RHSA-2009:0345: ghostscript security update (Moderate)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
     <platform>Red Hat Enterprise Linux 5</platform>
    </affected>
    <reference ref_id="RHSA-2009:0345" ref_url="https://access.redhat.com/errata/RHSA-2009:0345" source="RHSA"/>
    <reference ref_id="CVE-2009-0583" ref_url="https://access.redhat.com/security/cve/CVE-2009-0583" source="CVE"/>
    <reference ref_id="CVE-2009-0584" ref_url="https://access.redhat.com/security/cve/CVE-2009-0584" source="CVE"/>
    <description>Ghostscript is a set of software that provides a PostScript(TM)
interpreter, a set of C procedures (the Ghostscript library, which
implements the graphics capabilities in the PostScript language) and
an interpreter for Portable Document Format (PDF) files. 

Multiple integer overflow flaws which could lead to heap-based buffer
overflows, as well as multiple insufficient input validation flaws, were
found in Ghostscript's International Color Consortium Format library
(icclib). Using specially-crafted ICC profiles, an attacker could create a
malicious PostScript or PDF file with embedded images which could cause
Ghostscript to crash, or, potentially, execute arbitrary code when opened
by the victim. (CVE-2009-0583, CVE-2009-0584)

All users of ghostscript are advised to upgrade to these updated packages,
which contain a backported patch to correct these issues.</description>
    <advisory from="secalert@redhat.com">
     <severity>Moderate</severity>
     <rights>Copyright 2009 Red Hat, Inc.</rights>
     <issued date="2009-03-19"/>
     <updated date="2009-03-19"/>
     <cve cvss2="6.8/AV:N/AC:M/Au:N/C:P/I:P/A:P" cwe="CWE-190" href="https://access.redhat.com/security/cve/CVE-2009-0583" public="20090319">CVE-2009-0583</cve>
     <cve cvss2="6.8/AV:N/AC:M/Au:N/C:P/I:P/A:P" href="https://access.redhat.com/security/cve/CVE-2009-0584" public="20090319">CVE-2009-0584</cve>
     <bugzilla href="https://bugzilla.redhat.com/487742" id="487742">CVE-2009-0583 ghostscript, argyllcms: Multiple integer overflows in the International Color Consortium Format Library</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/487744" id="487744">CVE-2009-0584 ghostscript, argyllcms: Multiple insufficient upper-bounds checks on certain sizes in the International Color Consortium Format Library</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:5</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="ghostscript-devel is earlier than 0:7.05-32.1.17" test_ref="oval:com.redhat.rhsa:tst:20090345001"/>
       <criterion comment="ghostscript-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20080155006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="hpijs is earlier than 0:1.3-32.1.17" test_ref="oval:com.redhat.rhsa:tst:20090345003"/>
       <criterion comment="hpijs is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20080155004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="ghostscript is earlier than 0:7.05-32.1.17" test_ref="oval:com.redhat.rhsa:tst:20090345005"/>
       <criterion comment="ghostscript is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20080155002"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="ghostscript-gtk is earlier than 0:7.07-33.2.el4_7.5" test_ref="oval:com.redhat.rhsa:tst:20090345008"/>
       <criterion comment="ghostscript-gtk is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20080155011"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="ghostscript is earlier than 0:7.07-33.2.el4_7.5" test_ref="oval:com.redhat.rhsa:tst:20090345010"/>
       <criterion comment="ghostscript is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20080155002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="ghostscript-devel is earlier than 0:7.07-33.2.el4_7.5" test_ref="oval:com.redhat.rhsa:tst:20090345011"/>
       <criterion comment="ghostscript-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20080155006"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 5 is installed" test_ref="oval:com.redhat.rhsa:tst:20070066013"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="ghostscript-devel is earlier than 0:8.15.2-9.4.el5_3.4" test_ref="oval:com.redhat.rhsa:tst:20090345013"/>
       <criterion comment="ghostscript-devel is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20080155018"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="ghostscript-gtk is earlier than 0:8.15.2-9.4.el5_3.4" test_ref="oval:com.redhat.rhsa:tst:20090345015"/>
       <criterion comment="ghostscript-gtk is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20080155016"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="ghostscript is earlier than 0:8.15.2-9.4.el5_3.4" test_ref="oval:com.redhat.rhsa:tst:20090345017"/>
       <criterion comment="ghostscript is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20080155014"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20090358" version="639">
   <metadata>
    <title>RHSA-2009:0358: evolution security update (Moderate)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
    </affected>
    <reference ref_id="RHSA-2009:0358" ref_url="https://access.redhat.com/errata/RHSA-2009:0358" source="RHSA"/>
    <reference ref_id="CVE-2009-0582" ref_url="https://access.redhat.com/security/cve/CVE-2009-0582" source="CVE"/>
    <reference ref_id="CVE-2009-0587" ref_url="https://access.redhat.com/security/cve/CVE-2009-0587" source="CVE"/>
    <description>Evolution is the integrated collection of e-mail, calendaring, contact
management, communications, and personal information management (PIM) tools
for the GNOME desktop environment.

It was discovered that evolution did not properly validate NTLM (NT LAN
Manager) authentication challenge packets. A malicious server using NTLM
authentication could cause evolution to disclose portions of its memory or
crash during user authentication. (CVE-2009-0582)

An integer overflow flaw which could cause heap-based buffer overflow was
found in the Base64 encoding routine used by evolution. This could cause
evolution to crash, or, possibly, execute an arbitrary code when large
untrusted data blocks were Base64-encoded. (CVE-2009-0587)

All users of evolution are advised to upgrade to these updated packages,
which contain backported patches to correct these issues. All running
instances of evolution must be restarted for the update to take effect.</description>
    <advisory from="secalert@redhat.com">
     <severity>Moderate</severity>
     <rights>Copyright 2009 Red Hat, Inc.</rights>
     <issued date="2009-03-16"/>
     <updated date="2009-03-16"/>
     <cve cvss2="5.8/AV:N/AC:M/Au:N/C:P/I:N/A:P" href="https://access.redhat.com/security/cve/CVE-2009-0582" public="20090312">CVE-2009-0582</cve>
     <cve cvss2="5.1/AV:N/AC:H/Au:N/C:P/I:P/A:P" cwe="CWE-190" href="https://access.redhat.com/security/cve/CVE-2009-0587" impact="low" public="20090312">CVE-2009-0587</cve>
     <bugzilla href="https://bugzilla.redhat.com/487685" id="487685">CVE-2009-0582 evolution-data-server: insufficient checking of NTLM authentication challenge packets</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/488226" id="488226">CVE-2009-0587 evolution-data-server: integer overflow in base64 encoding functions</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="AND">
    <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
    <criteria operator="OR">
     <criteria operator="AND">
      <criterion comment="evolution is earlier than 0:1.4.5-25.el3" test_ref="oval:com.redhat.rhsa:tst:20090358001"/>
      <criterion comment="evolution is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070353004"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="evolution-devel is earlier than 0:1.4.5-25.el3" test_ref="oval:com.redhat.rhsa:tst:20090358003"/>
      <criterion comment="evolution-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070353002"/>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20090398" version="637">
   <metadata>
    <title>RHSA-2009:0398: seamonkey security update (Critical)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
    </affected>
    <reference ref_id="RHSA-2009:0398" ref_url="https://access.redhat.com/errata/RHSA-2009:0398" source="RHSA"/>
    <reference ref_id="CVE-2009-1044" ref_url="https://access.redhat.com/security/cve/CVE-2009-1044" source="CVE"/>
    <reference ref_id="CVE-2009-1169" ref_url="https://access.redhat.com/security/cve/CVE-2009-1169" source="CVE"/>
    <description>SeaMonkey is an open source Web browser, email and newsgroup client, IRC
chat client, and HTML editor.

A memory corruption flaw was discovered in the way SeaMonkey handles XML
files containing an XSLT transform. A remote attacker could use this flaw
to crash SeaMonkey or, potentially, execute arbitrary code as the user
running SeaMonkey. (CVE-2009-1169)

A flaw was discovered in the way SeaMonkey handles certain XUL garbage
collection events. A remote attacker could use this flaw to crash SeaMonkey
or, potentially, execute arbitrary code as the user running SeaMonkey.
(CVE-2009-1044)

All SeaMonkey users should upgrade to these updated packages, which correct
these issues. After installing the update, SeaMonkey must be restarted for
the changes to take effect.</description>
    <advisory from="secalert@redhat.com">
     <severity>Critical</severity>
     <rights>Copyright 2009 Red Hat, Inc.</rights>
     <issued date="2009-03-27"/>
     <updated date="2009-03-27"/>
     <cve cvss2="6.8/AV:N/AC:M/Au:N/C:P/I:P/A:P" href="https://access.redhat.com/security/cve/CVE-2009-1044" public="20090327">CVE-2009-1044</cve>
     <cve cvss2="6.8/AV:N/AC:M/Au:N/C:P/I:P/A:P" href="https://access.redhat.com/security/cve/CVE-2009-1169" public="20090325">CVE-2009-1169</cve>
     <bugzilla href="https://bugzilla.redhat.com/492211" id="492211">CVE-2009-1169 Firefox XSLT memory corruption issue</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/492212" id="492212">CVE-2009-1044 Firefox XUL garbage collection issue (cansecwest pwn2own)</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.36.el3" test_ref="oval:com.redhat.rhsa:tst:20090398001"/>
       <criterion comment="seamonkey-mail is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578020"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.36.el3" test_ref="oval:com.redhat.rhsa:tst:20090398003"/>
       <criterion comment="seamonkey-nspr is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578010"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.36.el3" test_ref="oval:com.redhat.rhsa:tst:20090398005"/>
       <criterion comment="seamonkey-chat is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.36.el3" test_ref="oval:com.redhat.rhsa:tst:20090398007"/>
       <criterion comment="seamonkey-nss is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578016"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.36.el3" test_ref="oval:com.redhat.rhsa:tst:20090398009"/>
       <criterion comment="seamonkey-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578014"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.36.el3" test_ref="oval:com.redhat.rhsa:tst:20090398011"/>
       <criterion comment="seamonkey-nss-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578012"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.36.el3" test_ref="oval:com.redhat.rhsa:tst:20090398013"/>
       <criterion comment="seamonkey-dom-inspector is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.36.el3" test_ref="oval:com.redhat.rhsa:tst:20090398015"/>
       <criterion comment="seamonkey-nspr-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey is earlier than 0:1.0.9-0.36.el3" test_ref="oval:com.redhat.rhsa:tst:20090398017"/>
       <criterion comment="seamonkey is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578018"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.36.el3" test_ref="oval:com.redhat.rhsa:tst:20090398019"/>
       <criterion comment="seamonkey-js-debugger is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578008"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-40.el4" test_ref="oval:com.redhat.rhsa:tst:20090398022"/>
       <criterion comment="seamonkey-js-debugger is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-devel is earlier than 0:1.0.9-40.el4" test_ref="oval:com.redhat.rhsa:tst:20090398023"/>
       <criterion comment="seamonkey-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578014"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-40.el4" test_ref="oval:com.redhat.rhsa:tst:20090398024"/>
       <criterion comment="seamonkey-dom-inspector is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey is earlier than 0:1.0.9-40.el4" test_ref="oval:com.redhat.rhsa:tst:20090398025"/>
       <criterion comment="seamonkey is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578018"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-mail is earlier than 0:1.0.9-40.el4" test_ref="oval:com.redhat.rhsa:tst:20090398026"/>
       <criterion comment="seamonkey-mail is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578020"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-chat is earlier than 0:1.0.9-40.el4" test_ref="oval:com.redhat.rhsa:tst:20090398027"/>
       <criterion comment="seamonkey-chat is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578006"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20090410" version="632">
   <metadata>
    <title>RHSA-2009:0410: krb5 security update (Critical)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
    </affected>
    <reference ref_id="RHSA-2009:0410" ref_url="https://access.redhat.com/errata/RHSA-2009:0410" source="RHSA"/>
    <reference ref_id="CVE-2009-0846" ref_url="https://access.redhat.com/security/cve/CVE-2009-0846" source="CVE"/>
    <description>Kerberos is a network authentication system which allows clients and
servers to authenticate to each other using symmetric encryption and a
trusted third party, the Key Distribution Center (KDC).

An input validation flaw was found in the ASN.1 (Abstract Syntax Notation
One) decoder used by MIT Kerberos. A remote attacker could use this flaw to
crash a network service using the MIT Kerberos library, such as kadmind or
krb5kdc, by causing it to dereference or free an uninitialized pointer or,
possibly, execute arbitrary code with the privileges of the user running
the service. (CVE-2009-0846)

All krb5 users should upgrade to these updated packages, which contain a
backported patch to correct this issue. All running services using the MIT
Kerberos libraries must be restarted for the update to take effect.</description>
    <advisory from="secalert@redhat.com">
     <severity>Critical</severity>
     <rights>Copyright 2009 Red Hat, Inc.</rights>
     <issued date="2009-04-07"/>
     <updated date="2009-04-07"/>
     <cve cvss2="9.3/AV:N/AC:M/Au:N/C:C/I:C/A:C" cwe="CWE-456 CWE-416" href="https://access.redhat.com/security/cve/CVE-2009-0846" public="20090407">CVE-2009-0846</cve>
     <bugzilla href="https://bugzilla.redhat.com/491036" id="491036">CVE-2009-0846 krb5: ASN.1 decoder can free uninitialized pointer when decoding an invalid encoding (MITKRB5-SA-2009-002)</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="AND">
    <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
    <criteria operator="OR">
     <criteria operator="AND">
      <criterion comment="krb5-workstation is earlier than 0:1.2.7-70" test_ref="oval:com.redhat.rhsa:tst:20090410001"/>
      <criterion comment="krb5-workstation is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070095008"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="krb5-libs is earlier than 0:1.2.7-70" test_ref="oval:com.redhat.rhsa:tst:20090410003"/>
      <criterion comment="krb5-libs is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070095006"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="krb5-server is earlier than 0:1.2.7-70" test_ref="oval:com.redhat.rhsa:tst:20090410005"/>
      <criterion comment="krb5-server is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070095002"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="krb5-devel is earlier than 0:1.2.7-70" test_ref="oval:com.redhat.rhsa:tst:20090410007"/>
      <criterion comment="krb5-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070095004"/>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20090420" version="644">
   <metadata>
    <title>RHSA-2009:0420: ghostscript security update (Moderate)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
    </affected>
    <reference ref_id="RHSA-2009:0420" ref_url="https://access.redhat.com/errata/RHSA-2009:0420" source="RHSA"/>
    <reference ref_id="CVE-2007-6725" ref_url="https://access.redhat.com/security/cve/CVE-2007-6725" source="CVE"/>
    <reference ref_id="CVE-2009-0792" ref_url="https://access.redhat.com/security/cve/CVE-2009-0792" source="CVE"/>
    <description>Ghostscript is a set of software that provides a PostScript interpreter, a
set of C procedures (the Ghostscript library, which implements the graphics
capabilities in the PostScript language) and an interpreter for Portable
Document Format (PDF) files.

It was discovered that the Red Hat Security Advisory RHSA-2009:0345 did not
address all possible integer overflow flaws in Ghostscript's International
Color Consortium Format library (icclib). Using specially-crafted ICC
profiles, an attacker could create a malicious PostScript or PDF file with
embedded images that could cause Ghostscript to crash or, potentially,
execute arbitrary code when opened. (CVE-2009-0792)

A missing boundary check was found in Ghostscript's CCITTFax decoding
filter. An attacker could create a specially-crafted PostScript or PDF file
that could cause Ghostscript to crash or, potentially, execute arbitrary
code when opened. (CVE-2007-6725)

Users of ghostscript are advised to upgrade to these updated packages,
which contain backported patches to correct these issues.</description>
    <advisory from="secalert@redhat.com">
     <severity>Moderate</severity>
     <rights>Copyright 2009 Red Hat, Inc.</rights>
     <issued date="2009-04-14"/>
     <updated date="2009-04-14"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-6725" public="20070219">CVE-2007-6725</cve>
     <cve cvss2="6.8/AV:N/AC:M/Au:N/C:P/I:P/A:P" href="https://access.redhat.com/security/cve/CVE-2009-0792" public="20090408">CVE-2009-0792</cve>
     <bugzilla href="https://bugzilla.redhat.com/491853" id="491853">CVE-2009-0792 ghostscript, argyllcms: Incomplete fix for CVE-2009-0583</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/493442" id="493442">CVE-2007-6725 ghostscript: DoS (crash) in CCITTFax decoding filter</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="ghostscript is earlier than 0:7.05-32.1.20" test_ref="oval:com.redhat.rhsa:tst:20090420001"/>
       <criterion comment="ghostscript is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20080155002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="hpijs is earlier than 0:1.3-32.1.20" test_ref="oval:com.redhat.rhsa:tst:20090420003"/>
       <criterion comment="hpijs is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20080155004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="ghostscript-devel is earlier than 0:7.05-32.1.20" test_ref="oval:com.redhat.rhsa:tst:20090420005"/>
       <criterion comment="ghostscript-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20080155006"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="ghostscript-devel is earlier than 0:7.07-33.2.el4_7.8" test_ref="oval:com.redhat.rhsa:tst:20090420008"/>
       <criterion comment="ghostscript-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20080155006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="ghostscript is earlier than 0:7.07-33.2.el4_7.8" test_ref="oval:com.redhat.rhsa:tst:20090420009"/>
       <criterion comment="ghostscript is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20080155002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="ghostscript-gtk is earlier than 0:7.07-33.2.el4_7.8" test_ref="oval:com.redhat.rhsa:tst:20090420010"/>
       <criterion comment="ghostscript-gtk is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20080155011"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20090428" version="637">
   <metadata>
    <title>RHSA-2009:0428: cups security update (Moderate)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
    </affected>
    <reference ref_id="RHSA-2009:0428" ref_url="https://access.redhat.com/errata/RHSA-2009:0428" source="RHSA"/>
    <reference ref_id="CVE-2009-0163" ref_url="https://access.redhat.com/security/cve/CVE-2009-0163" source="CVE"/>
    <description>The Common UNIX® Printing System (CUPS) provides a portable printing layer
for UNIX operating systems.

An integer overflow flaw, leading to a heap-based buffer overflow, was
discovered in the Tagged Image File Format (TIFF) decoding routines used by
the CUPS image-converting filters, &quot;imagetops&quot; and &quot;imagetoraster&quot;. An
attacker could create a malicious TIFF file that could, potentially,
execute arbitrary code as the &quot;lp&quot; user if the file was printed.
(CVE-2009-0163)

Red Hat would like to thank Aaron Sigel of the Apple Product Security team
for responsibly reporting this flaw.

Users of cups are advised to upgrade to these updated packages, which
contain a backported patch to correct this issue. After installing the
update, the cupsd daemon will be restarted automatically.</description>
    <advisory from="secalert@redhat.com">
     <severity>Moderate</severity>
     <rights>Copyright 2009 Red Hat, Inc.</rights>
     <issued date="2009-04-16"/>
     <updated date="2009-04-16"/>
     <cve cvss2="5.8/AV:A/AC:L/Au:N/C:P/I:P/A:P" cwe="CWE-190" href="https://access.redhat.com/security/cve/CVE-2009-0163" public="20090416">CVE-2009-0163</cve>
     <bugzilla href="https://bugzilla.redhat.com/490596" id="490596">CVE-2009-0163 cups: Integer overflow in the TIFF image filter</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/491864" id="491864">Multiple PDF flaws</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="AND">
    <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
    <criteria operator="OR">
     <criteria operator="AND">
      <criterion comment="cups-devel is earlier than 1:1.1.17-13.3.58" test_ref="oval:com.redhat.rhsa:tst:20090428001"/>
      <criterion comment="cups-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060163002"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="cups-libs is earlier than 1:1.1.17-13.3.58" test_ref="oval:com.redhat.rhsa:tst:20090428003"/>
      <criterion comment="cups-libs is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060163004"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="cups is earlier than 1:1.1.17-13.3.58" test_ref="oval:com.redhat.rhsa:tst:20090428005"/>
      <criterion comment="cups is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060163006"/>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20090430" version="637">
   <metadata>
    <title>RHSA-2009:0430: xpdf security update (Important)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
    </affected>
    <reference ref_id="RHSA-2009:0430" ref_url="https://access.redhat.com/errata/RHSA-2009:0430" source="RHSA"/>
    <reference ref_id="CVE-2009-0146" ref_url="https://access.redhat.com/security/cve/CVE-2009-0146" source="CVE"/>
    <reference ref_id="CVE-2009-0147" ref_url="https://access.redhat.com/security/cve/CVE-2009-0147" source="CVE"/>
    <reference ref_id="CVE-2009-0166" ref_url="https://access.redhat.com/security/cve/CVE-2009-0166" source="CVE"/>
    <reference ref_id="CVE-2009-0195" ref_url="https://access.redhat.com/security/cve/CVE-2009-0195" source="CVE"/>
    <reference ref_id="CVE-2009-0799" ref_url="https://access.redhat.com/security/cve/CVE-2009-0799" source="CVE"/>
    <reference ref_id="CVE-2009-0800" ref_url="https://access.redhat.com/security/cve/CVE-2009-0800" source="CVE"/>
    <reference ref_id="CVE-2009-1179" ref_url="https://access.redhat.com/security/cve/CVE-2009-1179" source="CVE"/>
    <reference ref_id="CVE-2009-1180" ref_url="https://access.redhat.com/security/cve/CVE-2009-1180" source="CVE"/>
    <reference ref_id="CVE-2009-1181" ref_url="https://access.redhat.com/security/cve/CVE-2009-1181" source="CVE"/>
    <reference ref_id="CVE-2009-1182" ref_url="https://access.redhat.com/security/cve/CVE-2009-1182" source="CVE"/>
    <reference ref_id="CVE-2009-1183" ref_url="https://access.redhat.com/security/cve/CVE-2009-1183" source="CVE"/>
    <description>Xpdf is an X Window System based viewer for Portable Document Format (PDF)
files.

Multiple integer overflow flaws were found in Xpdf's JBIG2 decoder. An
attacker could create a malicious PDF file that would cause Xpdf to crash
or, potentially, execute arbitrary code when opened. (CVE-2009-0147,
CVE-2009-1179)

Multiple buffer overflow flaws were found in Xpdf's JBIG2 decoder. An
attacker could create a malicious PDF file that would cause Xpdf to crash
or, potentially, execute arbitrary code when opened. (CVE-2009-0146,
CVE-2009-1182)

Multiple flaws were found in Xpdf's JBIG2 decoder that could lead to the
freeing of arbitrary memory. An attacker could create a malicious PDF file
that would cause Xpdf to crash or, potentially, execute arbitrary code when
opened. (CVE-2009-0166, CVE-2009-1180)

Multiple input validation flaws were found in Xpdf's JBIG2 decoder. An
attacker could create a malicious PDF file that would cause Xpdf to crash
or, potentially, execute arbitrary code when opened. (CVE-2009-0800)

Multiple denial of service flaws were found in Xpdf's JBIG2 decoder. An
attacker could create a malicious PDF that would cause Xpdf to crash when
opened. (CVE-2009-0799, CVE-2009-1181, CVE-2009-1183)

Red Hat would like to thank Braden Thomas and Drew Yao of the Apple Product
Security team, and Will Dormann of the CERT/CC for responsibly reporting
these flaws.

Users are advised to upgrade to this updated package, which contains
backported patches to correct these issues.</description>
    <advisory from="secalert@redhat.com">
     <severity>Important</severity>
     <rights>Copyright 2009 Red Hat, Inc.</rights>
     <issued date="2009-04-16"/>
     <updated date="2009-04-16"/>
     <cve cvss2="6.8/AV:N/AC:M/Au:N/C:P/I:P/A:P" href="https://access.redhat.com/security/cve/CVE-2009-0146" public="20090416">CVE-2009-0146</cve>
     <cve cvss2="6.8/AV:N/AC:M/Au:N/C:P/I:P/A:P" cwe="CWE-190" href="https://access.redhat.com/security/cve/CVE-2009-0147" public="20090416">CVE-2009-0147</cve>
     <cve cvss2="4.3/AV:N/AC:M/Au:N/C:N/I:N/A:P" href="https://access.redhat.com/security/cve/CVE-2009-0166" impact="low" public="20090416">CVE-2009-0166</cve>
     <cve cvss2="6.8/AV:N/AC:M/Au:N/C:P/I:P/A:P" href="https://access.redhat.com/security/cve/CVE-2009-0195" public="20090416">CVE-2009-0195</cve>
     <cve cvss2="4.3/AV:N/AC:M/Au:N/C:N/I:N/A:P" href="https://access.redhat.com/security/cve/CVE-2009-0799" impact="low" public="20090416">CVE-2009-0799</cve>
     <cve cvss2="6.8/AV:N/AC:M/Au:N/C:P/I:P/A:P" cwe="CWE-20" href="https://access.redhat.com/security/cve/CVE-2009-0800" public="20090416">CVE-2009-0800</cve>
     <cve cvss2="6.8/AV:N/AC:M/Au:N/C:P/I:P/A:P" cwe="CWE-190" href="https://access.redhat.com/security/cve/CVE-2009-1179" public="20090416">CVE-2009-1179</cve>
     <cve cvss2="6.8/AV:N/AC:M/Au:N/C:P/I:P/A:P" href="https://access.redhat.com/security/cve/CVE-2009-1180" public="20090416">CVE-2009-1180</cve>
     <cve cvss2="4.3/AV:N/AC:M/Au:N/C:N/I:N/A:P" cwe="CWE-476" href="https://access.redhat.com/security/cve/CVE-2009-1181" impact="low" public="20090416">CVE-2009-1181</cve>
     <cve cvss2="6.8/AV:N/AC:M/Au:N/C:P/I:P/A:P" href="https://access.redhat.com/security/cve/CVE-2009-1182" public="20090416">CVE-2009-1182</cve>
     <cve cvss2="4.3/AV:N/AC:M/Au:N/C:N/I:N/A:P" cwe="CWE-835" href="https://access.redhat.com/security/cve/CVE-2009-1183" impact="low" public="20090416">CVE-2009-1183</cve>
     <bugzilla href="https://bugzilla.redhat.com/490612" id="490612">CVE-2009-0146 xpdf: Multiple buffer overflows in JBIG2 decoder (setBitmap, readSymbolDictSeg) (CVE-2009-0195)</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/490614" id="490614">CVE-2009-0147 xpdf: Multiple integer overflows in JBIG2 decoder</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/490625" id="490625">CVE-2009-0166 xpdf: Freeing of potentially uninitialized memory in JBIG2 decoder</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/491864" id="491864">Multiple PDF flaws</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/495886" id="495886">CVE-2009-0799 PDF JBIG2 decoder OOB read</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/495887" id="495887">CVE-2009-0800 PDF JBIG2 multiple input validation flaws</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/495889" id="495889">CVE-2009-1179 PDF JBIG2 integer overflow</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/495892" id="495892">CVE-2009-1180 PDF JBIG2 invalid free()</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/495894" id="495894">CVE-2009-1181 PDF JBIG2 NULL dereference</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/495896" id="495896">CVE-2009-1182 PDF JBIG2 MMR decoder buffer overflows</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/495899" id="495899">CVE-2009-1183 PDF JBIG2 MMR infinite loop DoS</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criterion comment="xpdf is earlier than 1:2.02-14.el3" test_ref="oval:com.redhat.rhsa:tst:20090430001"/>
     <criterion comment="xpdf is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070735002"/>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criterion comment="xpdf is earlier than 1:3.00-20.el4" test_ref="oval:com.redhat.rhsa:tst:20090430004"/>
     <criterion comment="xpdf is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070735002"/>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20090437" version="633">
   <metadata>
    <title>RHSA-2009:0437: seamonkey security update (Critical)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
    </affected>
    <reference ref_id="RHSA-2009:0437" ref_url="https://access.redhat.com/errata/RHSA-2009:0437" source="RHSA"/>
    <reference ref_id="CVE-2009-0652" ref_url="https://access.redhat.com/security/cve/CVE-2009-0652" source="CVE"/>
    <reference ref_id="CVE-2009-1303" ref_url="https://access.redhat.com/security/cve/CVE-2009-1303" source="CVE"/>
    <reference ref_id="CVE-2009-1305" ref_url="https://access.redhat.com/security/cve/CVE-2009-1305" source="CVE"/>
    <reference ref_id="CVE-2009-1306" ref_url="https://access.redhat.com/security/cve/CVE-2009-1306" source="CVE"/>
    <reference ref_id="CVE-2009-1307" ref_url="https://access.redhat.com/security/cve/CVE-2009-1307" source="CVE"/>
    <reference ref_id="CVE-2009-1309" ref_url="https://access.redhat.com/security/cve/CVE-2009-1309" source="CVE"/>
    <reference ref_id="CVE-2009-1311" ref_url="https://access.redhat.com/security/cve/CVE-2009-1311" source="CVE"/>
    <reference ref_id="CVE-2009-1312" ref_url="https://access.redhat.com/security/cve/CVE-2009-1312" source="CVE"/>
    <description>SeaMonkey is an open source Web browser, email and newsgroup client, IRC
chat client, and HTML editor.

Several flaws were found in the processing of malformed web content. A web
page containing malicious content could cause SeaMonkey to crash or,
potentially, execute arbitrary code as the user running SeaMonkey.
(CVE-2009-1303, CVE-2009-1305)

Several flaws were found in the way malformed web content was processed. A
web page containing malicious content could execute arbitrary JavaScript in
the context of the site, possibly presenting misleading data to a user, or
stealing sensitive information such as login credentials. (CVE-2009-0652,
CVE-2009-1306, CVE-2009-1307, CVE-2009-1309, CVE-2009-1312)

A flaw was found in the way SeaMonkey saved certain web pages to a local
file. If a user saved the inner frame of a web page containing POST data,
the POST data could be revealed to the inner frame, possibly surrendering
sensitive information such as login credentials. (CVE-2009-1311)

All SeaMonkey users should upgrade to these updated packages, which correct
these issues. After installing the update, SeaMonkey must be restarted for
the changes to take effect.</description>
    <advisory from="secalert@redhat.com">
     <severity>Critical</severity>
     <rights>Copyright 2009 Red Hat, Inc.</rights>
     <issued date="2009-04-21"/>
     <updated date="2009-04-21"/>
     <cve cvss2="4.3/AV:N/AC:M/Au:N/C:P/I:N/A:N" href="https://access.redhat.com/security/cve/CVE-2009-0652" impact="moderate" public="20090216">CVE-2009-0652</cve>
     <cve cvss2="6.8/AV:N/AC:M/Au:N/C:P/I:P/A:P" href="https://access.redhat.com/security/cve/CVE-2009-1303" public="20090421">CVE-2009-1303</cve>
     <cve cvss2="6.8/AV:N/AC:M/Au:N/C:P/I:P/A:P" href="https://access.redhat.com/security/cve/CVE-2009-1305" public="20090421">CVE-2009-1305</cve>
     <cve cvss2="4.3/AV:N/AC:M/Au:N/C:N/I:P/A:N" href="https://access.redhat.com/security/cve/CVE-2009-1306" impact="moderate" public="20090421">CVE-2009-1306</cve>
     <cve cvss2="5.8/AV:N/AC:M/Au:N/C:P/I:P/A:N" href="https://access.redhat.com/security/cve/CVE-2009-1307" impact="important" public="20090421">CVE-2009-1307</cve>
     <cve cvss2="4.3/AV:N/AC:M/Au:N/C:N/I:P/A:N" href="https://access.redhat.com/security/cve/CVE-2009-1309" impact="moderate" public="20090421">CVE-2009-1309</cve>
     <cve cvss2="4.3/AV:N/AC:M/Au:N/C:P/I:N/A:N" href="https://access.redhat.com/security/cve/CVE-2009-1311" impact="low" public="20090421">CVE-2009-1311</cve>
     <cve cvss2="4.3/AV:N/AC:M/Au:N/C:N/I:P/A:N" href="https://access.redhat.com/security/cve/CVE-2009-1312" impact="moderate" public="20090421">CVE-2009-1312</cve>
     <bugzilla href="https://bugzilla.redhat.com/486704" id="486704">CVE-2009-0652 firefox: does not properly prevent the literal rendering of homoglyph characters in IDN domain names (spoof URLs and conduct phishing attacks)</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/496253" id="496253">CVE-2009-1303 Firefox 2 and 3 Layout engine crash</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/496256" id="496256">CVE-2009-1305 Firefox 2 and 3 JavaScript engine crash</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/496262" id="496262">CVE-2009-1306 Firefox jar: scheme ignores the content-disposition: header on the inner URI</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/496263" id="496263">CVE-2009-1307 Firefox Same-origin violations when Adobe Flash loaded via view-source: protocol</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/496267" id="496267">CVE-2009-1309 Firefox Same-origin violations in XMLHttpRequest and XPCNativeWrapper.toString</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/496271" id="496271">CVE-2009-1311 Firefox POST data sent to wrong site when saving web page with embedded frame</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/496274" id="496274">CVE-2009-1312 Firefox allows Refresh header to redirect to javascript: URIs</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.37.el3" test_ref="oval:com.redhat.rhsa:tst:20090437001"/>
       <criterion comment="seamonkey-nss-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578012"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.37.el3" test_ref="oval:com.redhat.rhsa:tst:20090437003"/>
       <criterion comment="seamonkey-nspr-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey is earlier than 0:1.0.9-0.37.el3" test_ref="oval:com.redhat.rhsa:tst:20090437005"/>
       <criterion comment="seamonkey is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578018"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.37.el3" test_ref="oval:com.redhat.rhsa:tst:20090437007"/>
       <criterion comment="seamonkey-mail is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578020"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.37.el3" test_ref="oval:com.redhat.rhsa:tst:20090437009"/>
       <criterion comment="seamonkey-nss is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578016"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.37.el3" test_ref="oval:com.redhat.rhsa:tst:20090437011"/>
       <criterion comment="seamonkey-js-debugger is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.37.el3" test_ref="oval:com.redhat.rhsa:tst:20090437013"/>
       <criterion comment="seamonkey-dom-inspector is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.37.el3" test_ref="oval:com.redhat.rhsa:tst:20090437015"/>
       <criterion comment="seamonkey-chat is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.37.el3" test_ref="oval:com.redhat.rhsa:tst:20090437017"/>
       <criterion comment="seamonkey-nspr is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578010"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.37.el3" test_ref="oval:com.redhat.rhsa:tst:20090437019"/>
       <criterion comment="seamonkey-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578014"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="seamonkey-chat is earlier than 0:1.0.9-41.el4" test_ref="oval:com.redhat.rhsa:tst:20090437022"/>
       <criterion comment="seamonkey-chat is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-devel is earlier than 0:1.0.9-41.el4" test_ref="oval:com.redhat.rhsa:tst:20090437023"/>
       <criterion comment="seamonkey-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578014"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-41.el4" test_ref="oval:com.redhat.rhsa:tst:20090437024"/>
       <criterion comment="seamonkey-dom-inspector is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-41.el4" test_ref="oval:com.redhat.rhsa:tst:20090437025"/>
       <criterion comment="seamonkey-js-debugger is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey is earlier than 0:1.0.9-41.el4" test_ref="oval:com.redhat.rhsa:tst:20090437026"/>
       <criterion comment="seamonkey is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578018"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-mail is earlier than 0:1.0.9-41.el4" test_ref="oval:com.redhat.rhsa:tst:20090437027"/>
       <criterion comment="seamonkey-mail is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578020"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20090474" version="635">
   <metadata>
    <title>RHSA-2009:0474: acpid security update (Moderate)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
     <platform>Red Hat Enterprise Linux 5</platform>
    </affected>
    <reference ref_id="RHSA-2009:0474" ref_url="https://access.redhat.com/errata/RHSA-2009:0474" source="RHSA"/>
    <reference ref_id="CVE-2009-0798" ref_url="https://access.redhat.com/security/cve/CVE-2009-0798" source="CVE"/>
    <description>acpid is a daemon that dispatches ACPI (Advanced Configuration and Power
Interface) events to user-space programs.

Anthony de Almeida Lopes of Outpost24 AB reported a denial of service flaw
in the acpid daemon's error handling. If an attacker could exhaust the
sockets open to acpid, the daemon would enter an infinite loop, consuming
most CPU resources and preventing acpid from communicating with legitimate
processes. (CVE-2009-0798)

Users are advised to upgrade to this updated package, which contains a
backported patch to correct this issue.</description>
    <advisory from="secalert@redhat.com">
     <severity>Moderate</severity>
     <rights>Copyright 2009 Red Hat, Inc.</rights>
     <issued date="2009-05-07"/>
     <updated date="2009-05-07"/>
     <cve cvss2="2.1/AV:L/AC:L/AU:N/C:N/I:N/A:P" href="https://access.redhat.com/security/cve/CVE-2009-0798" public="20090421">CVE-2009-0798</cve>
     <bugzilla href="https://bugzilla.redhat.com/494443" id="494443">CVE-2009-0798 acpid: too many open files DoS</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:5</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criterion comment="acpid is earlier than 0:1.0.2-4" test_ref="oval:com.redhat.rhsa:tst:20090474001"/>
     <criterion comment="acpid is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20090474002"/>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criterion comment="acpid is earlier than 0:1.0.3-2.el4_7.1" test_ref="oval:com.redhat.rhsa:tst:20090474004"/>
     <criterion comment="acpid is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20090474002"/>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 5 is installed" test_ref="oval:com.redhat.rhsa:tst:20070066013"/>
     <criterion comment="acpid is earlier than 0:1.0.4-7.el5_3.1" test_ref="oval:com.redhat.rhsa:tst:20090474006"/>
     <criterion comment="acpid is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20090474007"/>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20090476" version="635">
   <metadata>
    <title>RHSA-2009:0476: pango security update (Important)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
     <platform>Red Hat Enterprise Linux 5</platform>
    </affected>
    <reference ref_id="RHSA-2009:0476" ref_url="https://access.redhat.com/errata/RHSA-2009:0476" source="RHSA"/>
    <reference ref_id="CVE-2009-1194" ref_url="https://access.redhat.com/security/cve/CVE-2009-1194" source="CVE"/>
    <description>Pango is a library used for the layout and rendering of internationalized
text.

Will Drewry discovered an integer overflow flaw in Pango's
pango_glyph_string_set_size() function. If an attacker is able to pass an
arbitrarily long string to Pango, it may be possible to execute arbitrary
code with the permissions of the application calling Pango. (CVE-2009-1194)

pango and evolution28-pango users are advised to upgrade to these updated
packages, which contain a backported patch to resolve this issue. After
installing this update, you must restart your system or restart the X
server for the update to take effect. Note: Restarting the X server closes
all open applications and logs you out of your session.</description>
    <advisory from="secalert@redhat.com">
     <severity>Important</severity>
     <rights>Copyright 2009 Red Hat, Inc.</rights>
     <issued date="2009-05-08"/>
     <updated date="2009-05-08"/>
     <cve cvss2="5.1/AV:N/AC:H/Au:N/C:P/I:P/A:P" cwe="CWE-190" href="https://access.redhat.com/security/cve/CVE-2009-1194" public="20090507">CVE-2009-1194</cve>
     <bugzilla href="https://bugzilla.redhat.com/496887" id="496887">CVE-2009-1194 pango: pango_glyph_string_set_size integer overflow</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:5</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="pango-devel is earlier than 0:1.2.5-8" test_ref="oval:com.redhat.rhsa:tst:20090476001"/>
       <criterion comment="pango-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20090476002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="pango is earlier than 0:1.2.5-8" test_ref="oval:com.redhat.rhsa:tst:20090476003"/>
       <criterion comment="pango is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20090476004"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="pango is earlier than 0:1.6.0-14.4_7" test_ref="oval:com.redhat.rhsa:tst:20090476006"/>
       <criterion comment="pango is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20090476004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="pango-devel is earlier than 0:1.6.0-14.4_7" test_ref="oval:com.redhat.rhsa:tst:20090476007"/>
       <criterion comment="pango-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20090476002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="evolution28-pango-devel is earlier than 0:1.14.9-11.el4_7" test_ref="oval:com.redhat.rhsa:tst:20090476008"/>
       <criterion comment="evolution28-pango-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20090476009"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="evolution28-pango is earlier than 0:1.14.9-11.el4_7" test_ref="oval:com.redhat.rhsa:tst:20090476010"/>
       <criterion comment="evolution28-pango is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20090476011"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 5 is installed" test_ref="oval:com.redhat.rhsa:tst:20070066013"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="pango is earlier than 0:1.14.9-5.el5_3" test_ref="oval:com.redhat.rhsa:tst:20090476013"/>
       <criterion comment="pango is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20090476014"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="pango-devel is earlier than 0:1.14.9-5.el5_3" test_ref="oval:com.redhat.rhsa:tst:20090476015"/>
       <criterion comment="pango-devel is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20090476016"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20091059" version="639">
   <metadata>
    <title>RHSA-2009:1059: pidgin security update (Important)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
    </affected>
    <reference ref_id="RHSA-2009:1059" ref_url="https://access.redhat.com/errata/RHSA-2009:1059" source="RHSA"/>
    <reference ref_id="CVE-2009-1373" ref_url="https://access.redhat.com/security/cve/CVE-2009-1373" source="CVE"/>
    <reference ref_id="CVE-2009-1376" ref_url="https://access.redhat.com/security/cve/CVE-2009-1376" source="CVE"/>
    <description>Pidgin is an instant messaging program which can log in to multiple
accounts on multiple instant messaging networks simultaneously.

A buffer overflow flaw was found in the way Pidgin initiates file transfers
when using the Extensible Messaging and Presence Protocol (XMPP). If a
Pidgin client initiates a file transfer, and the remote target sends a
malformed response, it could cause Pidgin to crash or, potentially, execute
arbitrary code with the permissions of the user running Pidgin. This flaw
only affects accounts using XMPP, such as Jabber and Google Talk.
(CVE-2009-1373)

It was discovered that on 32-bit platforms, the Red Hat Security Advisory
RHSA-2008:0584 provided an incomplete fix for the integer overflow flaw
affecting Pidgin's MSN protocol handler. If a Pidgin client receives a
specially-crafted MSN message, it may be possible to execute arbitrary code
with the permissions of the user running Pidgin. (CVE-2009-1376)

Note: By default, when using an MSN account, only users on your buddy list
can send you messages. This prevents arbitrary MSN users from exploiting
this flaw.

All Pidgin users should upgrade to this update package, which contains
backported patches to resolve these issues. Pidgin must be restarted for
this update to take effect.</description>
    <advisory from="secalert@redhat.com">
     <severity>Important</severity>
     <rights>Copyright 2009 Red Hat, Inc.</rights>
     <issued date="2009-05-22"/>
     <updated date="2009-05-22"/>
     <cve cvss2="6/AV:N/AC:M/Au:S/C:P/I:P/A:P" href="https://access.redhat.com/security/cve/CVE-2009-1373" impact="moderate" public="20090502">CVE-2009-1373</cve>
     <cve cvss2="6/AV:N/AC:M/Au:S/C:P/I:P/A:P" href="https://access.redhat.com/security/cve/CVE-2009-1376" public="20090502">CVE-2009-1376</cve>
     <bugzilla href="https://bugzilla.redhat.com/500488" id="500488">CVE-2009-1373 pidgin file transfer buffer overflow</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/500493" id="500493">CVE-2009-1376 pidgin incomplete fix for CVE-2008-2927</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="AND">
    <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
    <criterion comment="pidgin is earlier than 0:1.5.1-3.el3" test_ref="oval:com.redhat.rhsa:tst:20091059001"/>
    <criterion comment="pidgin is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20080584002"/>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20091066" version="640">
   <metadata>
    <title>RHSA-2009:1066: squirrelmail security update (Important)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
     <platform>Red Hat Enterprise Linux 5</platform>
    </affected>
    <reference ref_id="RHSA-2009:1066" ref_url="https://access.redhat.com/errata/RHSA-2009:1066" source="RHSA"/>
    <reference ref_id="CVE-2009-1578" ref_url="https://access.redhat.com/security/cve/CVE-2009-1578" source="CVE"/>
    <reference ref_id="CVE-2009-1579" ref_url="https://access.redhat.com/security/cve/CVE-2009-1579" source="CVE"/>
    <reference ref_id="CVE-2009-1581" ref_url="https://access.redhat.com/security/cve/CVE-2009-1581" source="CVE"/>
    <description>SquirrelMail is a standards-based webmail package written in PHP.

A server-side code injection flaw was found in the SquirrelMail
&quot;map_yp_alias&quot; function. If SquirrelMail was configured to retrieve a
user's IMAP server address from a Network Information Service (NIS) server
via the &quot;map_yp_alias&quot; function, an unauthenticated, remote attacker using
a specially-crafted username could use this flaw to execute arbitrary code
with the privileges of the web server. (CVE-2009-1579)

Multiple cross-site scripting (XSS) flaws were found in SquirrelMail. An
attacker could construct a carefully crafted URL, which once visited by an 
unsuspecting user, could cause the user's web browser to execute malicious
script in the context of the visited SquirrelMail web page. (CVE-2009-1578)

It was discovered that SquirrelMail did not properly sanitize Cascading
Style Sheets (CSS) directives used in HTML mail. A remote attacker could
send a specially-crafted email that could place mail content above
SquirrelMail's controls, possibly allowing phishing and cross-site
scripting attacks. (CVE-2009-1581)

Users of squirrelmail should upgrade to this updated package, which
contains backported patches to correct these issues.</description>
    <advisory from="secalert@redhat.com">
     <severity>Important</severity>
     <rights>Copyright 2009 Red Hat, Inc.</rights>
     <issued date="2009-05-26"/>
     <updated date="2009-05-26"/>
     <cve cvss2="4.3/AV:N/AC:M/Au:N/C:N/I:P/A:N" cwe="CWE-79" href="https://access.redhat.com/security/cve/CVE-2009-1578" impact="moderate" public="20090508">CVE-2009-1578</cve>
     <cve cvss2="7.5/AV:N/AC:L/Au:N/C:P/I:P/A:P" cwe="CWE-78" href="https://access.redhat.com/security/cve/CVE-2009-1579" public="20090510">CVE-2009-1579</cve>
     <cve cvss2="4.3/AV:N/AC:M/Au:N/C:N/I:P/A:N" href="https://access.redhat.com/security/cve/CVE-2009-1581" impact="low" public="20090512">CVE-2009-1581</cve>
     <bugzilla href="https://bugzilla.redhat.com/500356" id="500356">CVE-2009-1581 SquirrelMail: CSS positioning vulnerability</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/500360" id="500360">CVE-2009-1579 SquirrelMail: Server-side code injection in map_yp_alias username map</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/500363" id="500363">CVE-2009-1578 SquirrelMail: Multiple cross site scripting issues</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:5</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criterion comment="squirrelmail is earlier than 0:1.4.8-13.el3" test_ref="oval:com.redhat.rhsa:tst:20091066001"/>
     <criterion comment="squirrelmail is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060283002"/>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criterion comment="squirrelmail is earlier than 0:1.4.8-5.el4_8.5" test_ref="oval:com.redhat.rhsa:tst:20091066004"/>
     <criterion comment="squirrelmail is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060283002"/>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 5 is installed" test_ref="oval:com.redhat.rhsa:tst:20070066013"/>
     <criterion comment="squirrelmail is earlier than 0:1.4.8-5.el5_3.7" test_ref="oval:com.redhat.rhsa:tst:20091066006"/>
     <criterion comment="squirrelmail is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070358007"/>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20091083" version="649">
   <metadata>
    <title>RHSA-2009:1083: cups security update (Important)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
    </affected>
    <reference ref_id="RHSA-2009:1083" ref_url="https://access.redhat.com/errata/RHSA-2009:1083" source="RHSA"/>
    <reference ref_id="CVE-2009-0791" ref_url="https://access.redhat.com/security/cve/CVE-2009-0791" source="CVE"/>
    <reference ref_id="CVE-2009-0949" ref_url="https://access.redhat.com/security/cve/CVE-2009-0949" source="CVE"/>
    <reference ref_id="CVE-2009-1196" ref_url="https://access.redhat.com/security/cve/CVE-2009-1196" source="CVE"/>
    <description>The Common UNIX® Printing System (CUPS) provides a portable printing layer
for UNIX operating systems. The Internet Printing Protocol (IPP) allows
users to print and manage printing-related tasks over a network. The CUPS
&quot;pdftops&quot; filter converts Portable Document Format (PDF) files to
PostScript. &quot;pdftops&quot; is based on Xpdf and the CUPS imaging library.

A NULL pointer dereference flaw was found in the CUPS IPP routine, used for
processing incoming IPP requests for the CUPS scheduler. An attacker could
use this flaw to send specially-crafted IPP requests that would crash the
cupsd daemon. (CVE-2009-0949)

A use-after-free flaw was found in the CUPS scheduler directory services
routine, used to process data about available printers and printer classes.
An attacker could use this flaw to cause a denial of service (cupsd daemon
stop or crash). (CVE-2009-1196)

Multiple integer overflows flaws, leading to heap-based buffer overflows,
were found in the CUPS &quot;pdftops&quot; filter. An attacker could create a
malicious PDF file that would cause &quot;pdftops&quot; to crash or, potentially,
execute arbitrary code as the &quot;lp&quot; user if the file was printed.
(CVE-2009-0791)

Red Hat would like to thank Anibal Sacco from Core Security Technologies
for reporting the CVE-2009-0949 flaw, and Swen van Brussel for reporting
the CVE-2009-1196 flaw.

Users of cups are advised to upgrade to these updated packages, which
contain backported patches to correct these issues. After installing this
update, the cupsd daemon will be restarted automatically.</description>
    <advisory from="secalert@redhat.com">
     <severity>Important</severity>
     <rights>Copyright 2009 Red Hat, Inc.</rights>
     <issued date="2009-06-03"/>
     <updated date="2009-06-03"/>
     <cve cvss2="5.8/AV:A/AC:L/Au:N/C:P/I:P/A:P" cwe="CWE-190" href="https://access.redhat.com/security/cve/CVE-2009-0791" impact="moderate" public="20090519">CVE-2009-0791</cve>
     <cve cvss2="5/AV:N/AC:L/Au:N/C:N/I:N/A:P" cwe="CWE-476" href="https://access.redhat.com/security/cve/CVE-2009-0949" public="20090602">CVE-2009-0949</cve>
     <cve cvss2="3.3/AV:A/AC:L/Au:N/C:N/I:N/A:P" href="https://access.redhat.com/security/cve/CVE-2009-1196" public="20090602">CVE-2009-1196</cve>
     <bugzilla href="https://bugzilla.redhat.com/491840" id="491840">CVE-2009-0791 xpdf: multiple integer overflows</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/497135" id="497135">CVE-2009-1196 cups: DoS (stop, crash) by  renewing CUPS browse packets</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/500972" id="500972">CVE-2009-0949 cups: IPP_TAG_UNSUPPORTED handling NULL pointer dereference DoS</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="cups-devel is earlier than 1:1.1.17-13.3.62" test_ref="oval:com.redhat.rhsa:tst:20091083001"/>
       <criterion comment="cups-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060163002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="cups is earlier than 1:1.1.17-13.3.62" test_ref="oval:com.redhat.rhsa:tst:20091083003"/>
       <criterion comment="cups is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060163006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="cups-libs is earlier than 1:1.1.17-13.3.62" test_ref="oval:com.redhat.rhsa:tst:20091083005"/>
       <criterion comment="cups-libs is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060163004"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="cups-libs is earlier than 1:1.1.22-0.rc1.9.32.el4_8.3" test_ref="oval:com.redhat.rhsa:tst:20091083008"/>
       <criterion comment="cups-libs is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060163004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="cups is earlier than 1:1.1.22-0.rc1.9.32.el4_8.3" test_ref="oval:com.redhat.rhsa:tst:20091083009"/>
       <criterion comment="cups is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060163006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="cups-devel is earlier than 1:1.1.22-0.rc1.9.32.el4_8.3" test_ref="oval:com.redhat.rhsa:tst:20091083010"/>
       <criterion comment="cups-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060163002"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20091096" version="633">
   <metadata>
    <title>RHSA-2009:1096: seamonkey security update (Critical)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
    </affected>
    <reference ref_id="RHSA-2009:1096" ref_url="https://access.redhat.com/errata/RHSA-2009:1096" source="RHSA"/>
    <reference ref_id="CVE-2009-1392" ref_url="https://access.redhat.com/security/cve/CVE-2009-1392" source="CVE"/>
    <reference ref_id="CVE-2009-1833" ref_url="https://access.redhat.com/security/cve/CVE-2009-1833" source="CVE"/>
    <reference ref_id="CVE-2009-1835" ref_url="https://access.redhat.com/security/cve/CVE-2009-1835" source="CVE"/>
    <reference ref_id="CVE-2009-1838" ref_url="https://access.redhat.com/security/cve/CVE-2009-1838" source="CVE"/>
    <reference ref_id="CVE-2009-1841" ref_url="https://access.redhat.com/security/cve/CVE-2009-1841" source="CVE"/>
    <description>SeaMonkey is an open source Web browser, email and newsgroup client, IRC
chat client, and HTML editor.

Several flaws were found in the processing of malformed web content. A web
page containing malicious content could cause SeaMonkey to crash or,
potentially, execute arbitrary code as the user running SeaMonkey.
(CVE-2009-1392, CVE-2009-1833, CVE-2009-1838, CVE-2009-1841)

A flaw was found in the processing of malformed, local file content. If a
user loaded malicious, local content via the file:// URL, it was possible
for that content to access other local data. (CVE-2009-1835)

All SeaMonkey users should upgrade to these updated packages, which correct
these issues. After installing the update, SeaMonkey must be restarted for
the changes to take effect.</description>
    <advisory from="secalert@redhat.com">
     <severity>Critical</severity>
     <rights>Copyright 2009 Red Hat, Inc.</rights>
     <issued date="2009-06-11"/>
     <updated date="2009-06-11"/>
     <cve cvss2="6.8/AV:N/AC:M/Au:N/C:P/I:P/A:P" href="https://access.redhat.com/security/cve/CVE-2009-1392" public="20090611">CVE-2009-1392</cve>
     <cve cvss2="6.8/AV:N/AC:M/Au:N/C:P/I:P/A:P" href="https://access.redhat.com/security/cve/CVE-2009-1833" public="20090611">CVE-2009-1833</cve>
     <cve cvss2="2.6/AV:N/AC:H/Au:N/C:P/I:N/A:N" href="https://access.redhat.com/security/cve/CVE-2009-1835" impact="moderate" public="20090611">CVE-2009-1835</cve>
     <cve cvss2="6.8/AV:N/AC:M/Au:N/C:P/I:P/A:P" href="https://access.redhat.com/security/cve/CVE-2009-1838" public="20090611">CVE-2009-1838</cve>
     <cve cvss2="6.8/AV:N/AC:M/Au:N/C:P/I:P/A:P" href="https://access.redhat.com/security/cve/CVE-2009-1841" public="20090611">CVE-2009-1841</cve>
     <bugzilla href="https://bugzilla.redhat.com/503568" id="503568">CVE-2009-1392 Firefox browser engine crashes</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/503570" id="503570">CVE-2009-1833 Firefox JavaScript engine crashes</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/503576" id="503576">CVE-2009-1835 Firefox Arbitrary domain cookie access by local file: resources</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/503580" id="503580">CVE-2009-1838 Firefox arbitrary code execution flaw</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/503583" id="503583">CVE-2009-1841 Firefox JavaScript arbitrary code execution</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.38.el3" test_ref="oval:com.redhat.rhsa:tst:20091096001"/>
       <criterion comment="seamonkey-js-debugger is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.38.el3" test_ref="oval:com.redhat.rhsa:tst:20091096003"/>
       <criterion comment="seamonkey-nspr is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578010"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.38.el3" test_ref="oval:com.redhat.rhsa:tst:20091096005"/>
       <criterion comment="seamonkey-mail is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578020"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.38.el3" test_ref="oval:com.redhat.rhsa:tst:20091096007"/>
       <criterion comment="seamonkey-nss is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578016"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.38.el3" test_ref="oval:com.redhat.rhsa:tst:20091096009"/>
       <criterion comment="seamonkey-chat is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.38.el3" test_ref="oval:com.redhat.rhsa:tst:20091096011"/>
       <criterion comment="seamonkey-dom-inspector is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.38.el3" test_ref="oval:com.redhat.rhsa:tst:20091096013"/>
       <criterion comment="seamonkey-nspr-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.38.el3" test_ref="oval:com.redhat.rhsa:tst:20091096015"/>
       <criterion comment="seamonkey-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578014"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey is earlier than 0:1.0.9-0.38.el3" test_ref="oval:com.redhat.rhsa:tst:20091096017"/>
       <criterion comment="seamonkey is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578018"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.38.el3" test_ref="oval:com.redhat.rhsa:tst:20091096019"/>
       <criterion comment="seamonkey-nss-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578012"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="seamonkey is earlier than 0:1.0.9-43.el4_8" test_ref="oval:com.redhat.rhsa:tst:20091096022"/>
       <criterion comment="seamonkey is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578018"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-chat is earlier than 0:1.0.9-43.el4_8" test_ref="oval:com.redhat.rhsa:tst:20091096023"/>
       <criterion comment="seamonkey-chat is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-mail is earlier than 0:1.0.9-43.el4_8" test_ref="oval:com.redhat.rhsa:tst:20091096024"/>
       <criterion comment="seamonkey-mail is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578020"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-43.el4_8" test_ref="oval:com.redhat.rhsa:tst:20091096025"/>
       <criterion comment="seamonkey-js-debugger is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-devel is earlier than 0:1.0.9-43.el4_8" test_ref="oval:com.redhat.rhsa:tst:20091096026"/>
       <criterion comment="seamonkey-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578014"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-43.el4_8" test_ref="oval:com.redhat.rhsa:tst:20091096027"/>
       <criterion comment="seamonkey-dom-inspector is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578002"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20091100" version="633">
   <metadata>
    <title>RHSA-2009:1100: wireshark security update (Moderate)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
     <platform>Red Hat Enterprise Linux 5</platform>
    </affected>
    <reference ref_id="RHSA-2009:1100" ref_url="https://access.redhat.com/errata/RHSA-2009:1100" source="RHSA"/>
    <reference ref_id="CVE-2009-1210" ref_url="https://access.redhat.com/security/cve/CVE-2009-1210" source="CVE"/>
    <reference ref_id="CVE-2009-1268" ref_url="https://access.redhat.com/security/cve/CVE-2009-1268" source="CVE"/>
    <reference ref_id="CVE-2009-1269" ref_url="https://access.redhat.com/security/cve/CVE-2009-1269" source="CVE"/>
    <reference ref_id="CVE-2009-1829" ref_url="https://access.redhat.com/security/cve/CVE-2009-1829" source="CVE"/>
    <description>Wireshark is a program for monitoring network traffic. Wireshark was
previously known as Ethereal.

A format string flaw was found in Wireshark. If Wireshark read a malformed
packet off a network or opened a malicious dump file, it could crash or,
possibly, execute arbitrary code as the user running Wireshark. (CVE-2009-1210)

Several denial of service flaws were found in Wireshark. Wireshark could
crash or stop responding if it read a malformed packet off a network, or
opened a malicious dump file. (CVE-2009-1268, CVE-2009-1269, CVE-2009-1829)

Users of wireshark should upgrade to these updated packages, which contain
Wireshark version 1.0.8, and resolve these issues. All running instances of
Wireshark must be restarted for the update to take effect.</description>
    <advisory from="secalert@redhat.com">
     <severity>Moderate</severity>
     <rights>Copyright 2009 Red Hat, Inc.</rights>
     <issued date="2009-06-15"/>
     <updated date="2009-06-15"/>
     <cve cvss2="5.8/AV:A/AC:L/Au:N/C:P/I:P/A:P" href="https://access.redhat.com/security/cve/CVE-2009-1210" public="20090330">CVE-2009-1210</cve>
     <cve cvss2="3.3/AV:A/AC:L/Au:N/C:N/I:N/A:P" href="https://access.redhat.com/security/cve/CVE-2009-1268" impact="low" public="20090408">CVE-2009-1268</cve>
     <cve cvss2="3.3/AV:A/AC:L/Au:N/C:N/I:N/A:P" href="https://access.redhat.com/security/cve/CVE-2009-1269" impact="low" public="20090408">CVE-2009-1269</cve>
     <cve cvss2="3.3/AV:A/AC:L/Au:N/C:N/I:N/A:P" href="https://access.redhat.com/security/cve/CVE-2009-1829" impact="low" public="20090521">CVE-2009-1829</cve>
     <bugzilla href="https://bugzilla.redhat.com/493973" id="493973">CVE-2009-1210 wireshark: format string in PROFINET dissector</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/495119" id="495119">CVE-2009-1268 Wireshark CHAP dissector crash</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/495121" id="495121">CVE-2009-1269 Wireshark Tektronix .rf5 file crash</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/501929" id="501929">CVE-2009-1829 wireshark: PCNFSD dissector crash</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:5</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="wireshark-gnome is earlier than 0:1.0.8-EL3.1" test_ref="oval:com.redhat.rhsa:tst:20091100001"/>
       <criterion comment="wireshark-gnome is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060602004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="wireshark is earlier than 0:1.0.8-EL3.1" test_ref="oval:com.redhat.rhsa:tst:20091100003"/>
       <criterion comment="wireshark is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060602002"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="wireshark is earlier than 0:1.0.8-1.el4_8.1" test_ref="oval:com.redhat.rhsa:tst:20091100006"/>
       <criterion comment="wireshark is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060602002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="wireshark-gnome is earlier than 0:1.0.8-1.el4_8.1" test_ref="oval:com.redhat.rhsa:tst:20091100007"/>
       <criterion comment="wireshark-gnome is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060602004"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 5 is installed" test_ref="oval:com.redhat.rhsa:tst:20070066013"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="wireshark is earlier than 0:1.0.8-1.el5_3.1" test_ref="oval:com.redhat.rhsa:tst:20091100009"/>
       <criterion comment="wireshark is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070066012"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="wireshark-gnome is earlier than 0:1.0.8-1.el5_3.1" test_ref="oval:com.redhat.rhsa:tst:20091100011"/>
       <criterion comment="wireshark-gnome is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070066010"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20091101" version="635">
   <metadata>
    <title>RHSA-2009:1101: cscope security update (Moderate)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
    </affected>
    <reference ref_id="RHSA-2009:1101" ref_url="https://access.redhat.com/errata/RHSA-2009:1101" source="RHSA"/>
    <reference ref_id="CVE-2004-2541" ref_url="https://access.redhat.com/security/cve/CVE-2004-2541" source="CVE"/>
    <reference ref_id="CVE-2006-4262" ref_url="https://access.redhat.com/security/cve/CVE-2006-4262" source="CVE"/>
    <reference ref_id="CVE-2009-0148" ref_url="https://access.redhat.com/security/cve/CVE-2009-0148" source="CVE"/>
    <reference ref_id="CVE-2009-1577" ref_url="https://access.redhat.com/security/cve/CVE-2009-1577" source="CVE"/>
    <description>cscope is a mature, ncurses-based, C source-code tree browsing tool.

Multiple buffer overflow flaws were found in cscope. An attacker could
create a specially crafted source code file that could cause cscope to
crash or, possibly, execute arbitrary code when browsed with cscope.
(CVE-2004-2541, CVE-2006-4262, CVE-2009-0148, CVE-2009-1577)

All users of cscope are advised to upgrade to this updated package, which
contains backported patches to fix these issues. All running instances of
cscope must be restarted for this update to take effect.</description>
    <advisory from="secalert@redhat.com">
     <severity>Moderate</severity>
     <rights>Copyright 2009 Red Hat, Inc.</rights>
     <issued date="2009-06-15"/>
     <updated date="2009-06-15"/>
     <cve cvss2="5.1/AV:N/AC:H/Au:N/C:P/I:P/A:P" href="https://access.redhat.com/security/cve/CVE-2004-2541" public="20090430">CVE-2004-2541</cve>
     <cve cvss2="3.7/AV:L/AC:H/Au:N/C:P/I:P/A:P" href="https://access.redhat.com/security/cve/CVE-2006-4262" impact="low" public="20060820">CVE-2006-4262</cve>
     <cve cvss2="5.1/AV:N/AC:H/Au:N/C:P/I:P/A:P" href="https://access.redhat.com/security/cve/CVE-2009-0148" public="20090430">CVE-2009-0148</cve>
     <cve cvss2="6.8/AV:N/AC:M/Au:N/C:P/I:P/A:P" href="https://access.redhat.com/security/cve/CVE-2009-1577" public="20060422">CVE-2009-1577</cve>
     <bugzilla href="https://bugzilla.redhat.com/203645" id="203645">CVE-2006-4262 cscope: multiple buffer overflows</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/490667" id="490667">CVE-2004-2541, CVE-2009-0148 cscope: multiple buffer overflows</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/499174" id="499174">CVE-2009-1577 cscope: putstring buffer overflow</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criterion comment="cscope is earlier than 0:15.5-16.RHEL3" test_ref="oval:com.redhat.rhsa:tst:20091101001"/>
     <criterion comment="cscope is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20091101002"/>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criterion comment="cscope is earlier than 0:15.5-10.RHEL4.3" test_ref="oval:com.redhat.rhsa:tst:20091101004"/>
     <criterion comment="cscope is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20091101002"/>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20091108" version="637">
   <metadata>
    <title>RHSA-2009:1108: httpd security update (Moderate)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
    </affected>
    <reference ref_id="RHSA-2009:1108" ref_url="https://access.redhat.com/errata/RHSA-2009:1108" source="RHSA"/>
    <reference ref_id="CVE-2009-0023" ref_url="https://access.redhat.com/security/cve/CVE-2009-0023" source="CVE"/>
    <reference ref_id="CVE-2009-1955" ref_url="https://access.redhat.com/security/cve/CVE-2009-1955" source="CVE"/>
    <reference ref_id="CVE-2009-1956" ref_url="https://access.redhat.com/security/cve/CVE-2009-1956" source="CVE"/>
    <description>The Apache HTTP Server is a popular Web server. The httpd package shipped
with Red Hat Enterprise Linux 3 contains an embedded copy of the Apache
Portable Runtime (APR) utility library, a free library of C data structures
and routines, which includes interfaces to support XML parsing, LDAP
connections, database interfaces, URI parsing, and more.

An off-by-one overflow flaw was found in the way apr-util processed a
variable list of arguments. An attacker could provide a specially-crafted
string as input for the formatted output conversion routine, which could,
on big-endian platforms, potentially lead to the disclosure of sensitive
information or a denial of service (application crash). (CVE-2009-1956)

Note: The CVE-2009-1956 flaw only affects big-endian platforms, such as the
IBM S/390 and PowerPC. It does not affect users using the httpd package on
little-endian platforms, due to their different organization of byte
ordering used to represent particular data.

A denial of service flaw was found in the apr-util Extensible Markup
Language (XML) parser. A remote attacker could create a specially-crafted
XML document that would cause excessive memory consumption when processed
by the XML decoding engine. (CVE-2009-1955)

A heap-based underwrite flaw was found in the way apr-util created compiled
forms of particular search patterns. An attacker could formulate a
specially-crafted search keyword, that would overwrite arbitrary heap
memory locations when processed by the pattern preparation engine.
(CVE-2009-0023)

All httpd users should upgrade to these updated packages, which contain
backported patches to correct these issues. After installing the updated
packages, the httpd daemon must be restarted for the update to take effect.</description>
    <advisory from="secalert@redhat.com">
     <severity>Moderate</severity>
     <rights>Copyright 2009 Red Hat, Inc.</rights>
     <issued date="2009-06-16"/>
     <updated date="2009-06-16"/>
     <cve cvss2="4.3/AV:L/AC:L/Au:S/C:P/I:P/A:P" href="https://access.redhat.com/security/cve/CVE-2009-0023" public="20090603">CVE-2009-0023</cve>
     <cve cvss2="5.0/AV:N/AC:L/Au:N/C:N/I:N/A:P" href="https://access.redhat.com/security/cve/CVE-2009-1955" public="20090601">CVE-2009-1955</cve>
     <cve cvss2="4.3/AV:N/AC:M/Au:N/C:P/I:N/A:N" href="https://access.redhat.com/security/cve/CVE-2009-1956" public="20090424">CVE-2009-1956</cve>
     <bugzilla href="https://bugzilla.redhat.com/503928" id="503928">CVE-2009-0023 apr-util heap buffer underwrite</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/504390" id="504390">CVE-2009-1956 apr-util single NULL byte buffer overflow</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/504555" id="504555">CVE-2009-1955 apr-util billion laughs attack</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="AND">
    <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
    <criteria operator="OR">
     <criteria operator="AND">
      <criterion comment="httpd is earlier than 0:2.0.46-73.ent" test_ref="oval:com.redhat.rhsa:tst:20091108001"/>
      <criterion comment="httpd is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060159006"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="mod_ssl is earlier than 1:2.0.46-73.ent" test_ref="oval:com.redhat.rhsa:tst:20091108003"/>
      <criterion comment="mod_ssl is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060159002"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="httpd-devel is earlier than 0:2.0.46-73.ent" test_ref="oval:com.redhat.rhsa:tst:20091108005"/>
      <criterion comment="httpd-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060159004"/>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20091124" version="632">
   <metadata>
    <title>RHSA-2009:1124: net-snmp security update (Moderate)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
    </affected>
    <reference ref_id="RHSA-2009:1124" ref_url="https://access.redhat.com/errata/RHSA-2009:1124" source="RHSA"/>
    <reference ref_id="CVE-2009-1887" ref_url="https://access.redhat.com/security/cve/CVE-2009-1887" source="CVE"/>
    <description>The Simple Network Management Protocol (SNMP) is a protocol used for
network management.

A divide-by-zero flaw was discovered in the snmpd daemon. A remote attacker
could issue a specially-crafted GETBULK request that could crash the snmpd
daemon. (CVE-2009-1887)

Note: An attacker must have read access to the SNMP server in order to
exploit this flaw. In the default configuration, the community name
&quot;public&quot; grants read-only access. In production deployments, it is
recommended to change this default community name.

All net-snmp users should upgrade to these updated packages, which contain
a backported patch to correct this issue. After installing the update, the
snmpd and snmptrapd daemons will be restarted automatically.</description>
    <advisory from="secalert@redhat.com">
     <severity>Moderate</severity>
     <rights>Copyright 2009 Red Hat, Inc.</rights>
     <issued date="2009-06-25"/>
     <updated date="2009-06-25"/>
     <cve cvss2="4/AV:N/AC:L/Au:S/C:N/I:N/A:P" href="https://access.redhat.com/security/cve/CVE-2009-1887" public="20090625">CVE-2009-1887</cve>
     <bugzilla href="https://bugzilla.redhat.com/506903" id="506903">CVE-2009-1887 net-snmp: DoS (division by zero) via SNMP GetBulk requests</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="AND">
    <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
    <criteria operator="OR">
     <criteria operator="AND">
      <criterion comment="net-snmp is earlier than 0:5.0.9-2.30E.28" test_ref="oval:com.redhat.rhsa:tst:20091124001"/>
      <criterion comment="net-snmp is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20071045010"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="net-snmp-devel is earlier than 0:5.0.9-2.30E.28" test_ref="oval:com.redhat.rhsa:tst:20091124003"/>
      <criterion comment="net-snmp-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20071045004"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="net-snmp-utils is earlier than 0:5.0.9-2.30E.28" test_ref="oval:com.redhat.rhsa:tst:20091124005"/>
      <criterion comment="net-snmp-utils is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20071045002"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="net-snmp-libs is earlier than 0:5.0.9-2.30E.28" test_ref="oval:com.redhat.rhsa:tst:20091124007"/>
      <criterion comment="net-snmp-libs is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20071045006"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="net-snmp-perl is earlier than 0:5.0.9-2.30E.28" test_ref="oval:com.redhat.rhsa:tst:20091124009"/>
      <criterion comment="net-snmp-perl is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20071045008"/>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20091128" version="635">
   <metadata>
    <title>RHSA-2009:1128: kdelibs security update (Important)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
    </affected>
    <reference ref_id="RHSA-2009:1128" ref_url="https://access.redhat.com/errata/RHSA-2009:1128" source="RHSA"/>
    <reference ref_id="CVE-2009-1698" ref_url="https://access.redhat.com/security/cve/CVE-2009-1698" source="CVE"/>
    <description>The kdelibs packages provide libraries for the K Desktop Environment (KDE).

A flaw was found in the way the KDE CSS parser handled content for the
CSS &quot;style&quot; attribute. A remote attacker could create a specially-crafted
CSS equipped HTML page, which once visited by an unsuspecting user, could
cause a denial of service (Konqueror crash) or, potentially, execute
arbitrary code with the privileges of the user running Konqueror.
(CVE-2009-1698)

Users should upgrade to these updated packages, which contain a backported
patch to correct this issue. The desktop must be restarted (log out, then
log back in) for this update to take effect.</description>
    <advisory from="secalert@redhat.com">
     <severity>Important</severity>
     <rights>Copyright 2009 Red Hat, Inc.</rights>
     <issued date="2009-06-25"/>
     <updated date="2009-06-25"/>
     <cve cvss2="6.8/AV:N/AC:M/Au:N/C:P/I:P/A:P" href="https://access.redhat.com/security/cve/CVE-2009-1698" public="20090625">CVE-2009-1698</cve>
     <bugzilla href="https://bugzilla.redhat.com/506469" id="506469">CVE-2009-1698 kdelibs: KHTML CSS parser - incorrect handling CSS &quot;style&quot; attribute content (DoS, ACE)</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="AND">
    <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
    <criteria operator="OR">
     <criteria operator="AND">
      <criterion comment="kdelibs-devel is earlier than 6:3.1.3-6.13" test_ref="oval:com.redhat.rhsa:tst:20091128001"/>
      <criterion comment="kdelibs-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060720004"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="kdelibs is earlier than 6:3.1.3-6.13" test_ref="oval:com.redhat.rhsa:tst:20091128003"/>
      <criterion comment="kdelibs is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060720002"/>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20091134" version="635">
   <metadata>
    <title>RHSA-2009:1134: seamonkey security update (Important)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
    </affected>
    <reference ref_id="RHSA-2009:1134" ref_url="https://access.redhat.com/errata/RHSA-2009:1134" source="RHSA"/>
    <reference ref_id="CVE-2009-2210" ref_url="https://access.redhat.com/security/cve/CVE-2009-2210" source="CVE"/>
    <description>SeaMonkey is an open source Web browser, email and newsgroup client, IRC
chat client, and HTML editor.

A flaw was found in the way that SeaMonkey parsed malformed HTML mail
messages. If a user opened a specially-crafted HTML mail message, it could
cause SeaMonkey to crash or, possibly, to execute arbitrary code as the
user running SeaMonkey. (CVE-2009-2210)

All SeaMonkey users should upgrade to these updated packages, which correct
this issue. After installing the update, SeaMonkey must be restarted for
the changes to take effect.</description>
    <advisory from="secalert@redhat.com">
     <severity>Important</severity>
     <rights>Copyright 2009 Red Hat, Inc.</rights>
     <issued date="2009-06-30"/>
     <updated date="2009-06-30"/>
     <cve cvss2="6.8/AV:N/AC:M/Au:N/C:P/I:P/A:P" href="https://access.redhat.com/security/cve/CVE-2009-2210" public="20090622">CVE-2009-2210</cve>
     <bugzilla href="https://bugzilla.redhat.com/507812" id="507812">CVE-2009-2210 Thunderbird mail crash</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.39.el3" test_ref="oval:com.redhat.rhsa:tst:20091134001"/>
       <criterion comment="seamonkey-chat is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.39.el3" test_ref="oval:com.redhat.rhsa:tst:20091134003"/>
       <criterion comment="seamonkey-nspr-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey is earlier than 0:1.0.9-0.39.el3" test_ref="oval:com.redhat.rhsa:tst:20091134005"/>
       <criterion comment="seamonkey is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578018"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.39.el3" test_ref="oval:com.redhat.rhsa:tst:20091134007"/>
       <criterion comment="seamonkey-mail is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578020"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.39.el3" test_ref="oval:com.redhat.rhsa:tst:20091134009"/>
       <criterion comment="seamonkey-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578014"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.39.el3" test_ref="oval:com.redhat.rhsa:tst:20091134011"/>
       <criterion comment="seamonkey-nss-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578012"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.39.el3" test_ref="oval:com.redhat.rhsa:tst:20091134013"/>
       <criterion comment="seamonkey-nss is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578016"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.39.el3" test_ref="oval:com.redhat.rhsa:tst:20091134015"/>
       <criterion comment="seamonkey-js-debugger is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.39.el3" test_ref="oval:com.redhat.rhsa:tst:20091134017"/>
       <criterion comment="seamonkey-nspr is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578010"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.39.el3" test_ref="oval:com.redhat.rhsa:tst:20091134019"/>
       <criterion comment="seamonkey-dom-inspector is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578002"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="seamonkey-chat is earlier than 0:1.0.9-44.el4_8" test_ref="oval:com.redhat.rhsa:tst:20091134022"/>
       <criterion comment="seamonkey-chat is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey is earlier than 0:1.0.9-44.el4_8" test_ref="oval:com.redhat.rhsa:tst:20091134023"/>
       <criterion comment="seamonkey is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578018"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-mail is earlier than 0:1.0.9-44.el4_8" test_ref="oval:com.redhat.rhsa:tst:20091134024"/>
       <criterion comment="seamonkey-mail is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578020"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-devel is earlier than 0:1.0.9-44.el4_8" test_ref="oval:com.redhat.rhsa:tst:20091134025"/>
       <criterion comment="seamonkey-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578014"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-44.el4_8" test_ref="oval:com.redhat.rhsa:tst:20091134026"/>
       <criterion comment="seamonkey-js-debugger is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-44.el4_8" test_ref="oval:com.redhat.rhsa:tst:20091134027"/>
       <criterion comment="seamonkey-dom-inspector is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578002"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20091154" version="635">
   <metadata>
    <title>RHSA-2009:1154: dhcp security update (Critical)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
    </affected>
    <reference ref_id="RHSA-2009:1154" ref_url="https://access.redhat.com/errata/RHSA-2009:1154" source="RHSA"/>
    <reference ref_id="CVE-2009-0692" ref_url="https://access.redhat.com/security/cve/CVE-2009-0692" source="CVE"/>
    <reference ref_id="CVE-2009-1893" ref_url="https://access.redhat.com/security/cve/CVE-2009-1893" source="CVE"/>
    <description>The Dynamic Host Configuration Protocol (DHCP) is a protocol that allows
individual devices on an IP network to get their own network configuration
information, including an IP address, a subnet mask, and a broadcast
address.

The Mandriva Linux Engineering Team discovered a stack-based buffer
overflow flaw in the ISC DHCP client. If the DHCP client were to receive a
malicious DHCP response, it could crash or execute arbitrary code with the
permissions of the client (root). (CVE-2009-0692)

An insecure temporary file use flaw was discovered in the DHCP daemon's
init script (&quot;/etc/init.d/dhcpd&quot;). A local attacker could use this flaw to
overwrite an arbitrary file with the output of the &quot;dhcpd -t&quot; command via
a symbolic link attack, if a system administrator executed the DHCP init
script with the &quot;configtest&quot;, &quot;restart&quot;, or &quot;reload&quot; option.
(CVE-2009-1893)

Users of DHCP should upgrade to these updated packages, which contain
backported patches to correct these issues.</description>
    <advisory from="secalert@redhat.com">
     <severity>Critical</severity>
     <rights>Copyright 2009 Red Hat, Inc.</rights>
     <issued date="2009-07-14"/>
     <updated date="2009-07-14"/>
     <cve cvss2="8.3/AV:A/AC:L/Au:N/C:C/I:C/A:C" cwe="CWE-130 CWE-121" href="https://access.redhat.com/security/cve/CVE-2009-0692" public="20090714">CVE-2009-0692</cve>
     <cve cvss2="5.6/AV:L/AC:L/Au:N/C:N/I:P/A:C" cwe="CWE-377" href="https://access.redhat.com/security/cve/CVE-2009-1893" impact="moderate" public="20090714">CVE-2009-1893</cve>
     <bugzilla href="https://bugzilla.redhat.com/507717" id="507717">CVE-2009-0692 dhclient: stack overflow leads to arbitrary code execution as root</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/510024" id="510024">CVE-2009-1893 dhcp: insecure temporary file use in the dhcpd init script</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="AND">
    <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
    <criteria operator="OR">
     <criteria operator="AND">
      <criterion comment="dhclient is earlier than 7:3.0.1-10.2_EL3" test_ref="oval:com.redhat.rhsa:tst:20091154001"/>
      <criterion comment="dhclient is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20091154002"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="dhcp is earlier than 7:3.0.1-10.2_EL3" test_ref="oval:com.redhat.rhsa:tst:20091154003"/>
      <criterion comment="dhcp is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20091154004"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="dhcp-devel is earlier than 7:3.0.1-10.2_EL3" test_ref="oval:com.redhat.rhsa:tst:20091154005"/>
      <criterion comment="dhcp-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20091154006"/>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20091159" version="640">
   <metadata>
    <title>RHSA-2009:1159: libtiff security update (Moderate)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
     <platform>Red Hat Enterprise Linux 5</platform>
    </affected>
    <reference ref_id="RHSA-2009:1159" ref_url="https://access.redhat.com/errata/RHSA-2009:1159" source="RHSA"/>
    <reference ref_id="CVE-2009-2285" ref_url="https://access.redhat.com/security/cve/CVE-2009-2285" source="CVE"/>
    <reference ref_id="CVE-2009-2347" ref_url="https://access.redhat.com/security/cve/CVE-2009-2347" source="CVE"/>
    <description>The libtiff packages contain a library of functions for manipulating Tagged
Image File Format (TIFF) files.

Several integer overflow flaws, leading to heap-based buffer overflows,
were found in various libtiff color space conversion tools. An attacker
could create a specially-crafted TIFF file, which once opened by an
unsuspecting user, would cause the conversion tool to crash or,
potentially, execute arbitrary code with the privileges of the user running
the tool. (CVE-2009-2347)

A buffer underwrite flaw was found in libtiff's Lempel-Ziv-Welch (LZW)
compression algorithm decoder. An attacker could create a specially-crafted
LZW-encoded TIFF file, which once opened by an unsuspecting user, would
cause an application linked with libtiff to access an out-of-bounds memory
location, leading to a denial of service (application crash).
(CVE-2009-2285)

The CVE-2009-2347 flaws were discovered by Tielei Wang from ICST-ERCIS,
Peking University.

All libtiff users should upgrade to these updated packages, which contain
backported patches to correct these issues. After installing this update,
all applications linked with the libtiff library (such as Konqueror) must
be restarted for the update to take effect.</description>
    <advisory from="secalert@redhat.com">
     <severity>Moderate</severity>
     <rights>Copyright 2009 Red Hat, Inc.</rights>
     <issued date="2009-07-16"/>
     <updated date="2009-07-16"/>
     <cve cvss2="5.0/AV:N/AC:L/Au:N/C:N/I:N/A:P" href="https://access.redhat.com/security/cve/CVE-2009-2285" public="20090103">CVE-2009-2285</cve>
     <cve cvss2="6.4/AV:N/AC:L/Au:N/C:N/I:P/A:P" cwe="CWE-190" href="https://access.redhat.com/security/cve/CVE-2009-2347" public="20090713">CVE-2009-2347</cve>
     <bugzilla href="https://bugzilla.redhat.com/507465" id="507465">CVE-2009-2285 libtiff: LZWDecodeCompat underflow</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/510041" id="510041">CVE-2009-2347 libtiff: integer overflows in various inter-color spaces conversion tools (crash, ACE)</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:5</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="libtiff-devel is earlier than 0:3.5.7-33.el3" test_ref="oval:com.redhat.rhsa:tst:20091159001"/>
       <criterion comment="libtiff-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060425002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="libtiff is earlier than 0:3.5.7-33.el3" test_ref="oval:com.redhat.rhsa:tst:20091159003"/>
       <criterion comment="libtiff is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060425004"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="libtiff is earlier than 0:3.6.1-12.el4_8.4" test_ref="oval:com.redhat.rhsa:tst:20091159006"/>
       <criterion comment="libtiff is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060425004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="libtiff-devel is earlier than 0:3.6.1-12.el4_8.4" test_ref="oval:com.redhat.rhsa:tst:20091159007"/>
       <criterion comment="libtiff-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060425002"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 5 is installed" test_ref="oval:com.redhat.rhsa:tst:20070066013"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="libtiff-devel is earlier than 0:3.8.2-7.el5_3.4" test_ref="oval:com.redhat.rhsa:tst:20091159009"/>
       <criterion comment="libtiff-devel is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20091159010"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="libtiff is earlier than 0:3.8.2-7.el5_3.4" test_ref="oval:com.redhat.rhsa:tst:20091159011"/>
       <criterion comment="libtiff is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20091159012"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20091163" version="632">
   <metadata>
    <title>RHSA-2009:1163: seamonkey security update (Critical)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
    </affected>
    <reference ref_id="RHSA-2009:1163" ref_url="https://access.redhat.com/errata/RHSA-2009:1163" source="RHSA"/>
    <reference ref_id="CVE-2009-2462" ref_url="https://access.redhat.com/security/cve/CVE-2009-2462" source="CVE"/>
    <reference ref_id="CVE-2009-2463" ref_url="https://access.redhat.com/security/cve/CVE-2009-2463" source="CVE"/>
    <reference ref_id="CVE-2009-2466" ref_url="https://access.redhat.com/security/cve/CVE-2009-2466" source="CVE"/>
    <reference ref_id="CVE-2009-2470" ref_url="https://access.redhat.com/security/cve/CVE-2009-2470" source="CVE"/>
    <description>SeaMonkey is an open source Web browser, email and newsgroup client, IRC
chat client, and HTML editor.

Several flaws were found in the processing of malformed web content. A web
page containing malicious content could cause SeaMonkey to crash or,
potentially, execute arbitrary code as the user running SeaMonkey.
(CVE-2009-2462, CVE-2009-2463, CVE-2009-2466)

All SeaMonkey users should upgrade to these updated packages, which correct
these issues. After installing the update, SeaMonkey must be restarted for
the changes to take effect.</description>
    <advisory from="secalert@redhat.com">
     <severity>Critical</severity>
     <rights>Copyright 2009 Red Hat, Inc.</rights>
     <issued date="2009-07-21"/>
     <updated date="2009-07-21"/>
     <cve cvss2="6.8/AV:N/AC:M/Au:N/C:P/I:P/A:P" href="https://access.redhat.com/security/cve/CVE-2009-2462" public="20090721:2356">CVE-2009-2462</cve>
     <cve cvss2="6.8/AV:N/AC:M/Au:N/C:P/I:P/A:P" href="https://access.redhat.com/security/cve/CVE-2009-2463" public="20090721:2356">CVE-2009-2463</cve>
     <cve cvss2="6.8/AV:N/AC:M/Au:N/C:P/I:P/A:P" href="https://access.redhat.com/security/cve/CVE-2009-2466" public="20090721:2356">CVE-2009-2466</cve>
     <cve cvss2="4.3/AV:N/AC:M/Au:N/C:N/I:N/A:P" href="https://access.redhat.com/security/cve/CVE-2009-2470" impact="low" public="20090721">CVE-2009-2470</cve>
     <bugzilla href="https://bugzilla.redhat.com/512128" id="512128">CVE-2009-2462 Mozilla Browser engine crashes</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/512131" id="512131">CVE-2009-2463 Mozilla Base64 decoding crash</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/512136" id="512136">CVE-2009-2466 Mozilla JavaScript engine crashes</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.40.el3" test_ref="oval:com.redhat.rhsa:tst:20091163001"/>
       <criterion comment="seamonkey-nss is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578016"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.40.el3" test_ref="oval:com.redhat.rhsa:tst:20091163003"/>
       <criterion comment="seamonkey-chat is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.40.el3" test_ref="oval:com.redhat.rhsa:tst:20091163005"/>
       <criterion comment="seamonkey-nspr-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.40.el3" test_ref="oval:com.redhat.rhsa:tst:20091163007"/>
       <criterion comment="seamonkey-dom-inspector is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey is earlier than 0:1.0.9-0.40.el3" test_ref="oval:com.redhat.rhsa:tst:20091163009"/>
       <criterion comment="seamonkey is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578018"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.40.el3" test_ref="oval:com.redhat.rhsa:tst:20091163011"/>
       <criterion comment="seamonkey-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578014"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.40.el3" test_ref="oval:com.redhat.rhsa:tst:20091163013"/>
       <criterion comment="seamonkey-nss-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578012"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.40.el3" test_ref="oval:com.redhat.rhsa:tst:20091163015"/>
       <criterion comment="seamonkey-js-debugger is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.40.el3" test_ref="oval:com.redhat.rhsa:tst:20091163017"/>
       <criterion comment="seamonkey-nspr is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578010"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.40.el3" test_ref="oval:com.redhat.rhsa:tst:20091163019"/>
       <criterion comment="seamonkey-mail is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578020"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-45.el4_8" test_ref="oval:com.redhat.rhsa:tst:20091163022"/>
       <criterion comment="seamonkey-dom-inspector is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-devel is earlier than 0:1.0.9-45.el4_8" test_ref="oval:com.redhat.rhsa:tst:20091163023"/>
       <criterion comment="seamonkey-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578014"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey is earlier than 0:1.0.9-45.el4_8" test_ref="oval:com.redhat.rhsa:tst:20091163024"/>
       <criterion comment="seamonkey is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578018"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-45.el4_8" test_ref="oval:com.redhat.rhsa:tst:20091163025"/>
       <criterion comment="seamonkey-js-debugger is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-mail is earlier than 0:1.0.9-45.el4_8" test_ref="oval:com.redhat.rhsa:tst:20091163026"/>
       <criterion comment="seamonkey-mail is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578020"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-chat is earlier than 0:1.0.9-45.el4_8" test_ref="oval:com.redhat.rhsa:tst:20091163027"/>
       <criterion comment="seamonkey-chat is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578006"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20091178" version="641">
   <metadata>
    <title>RHSA-2009:1178: python security update (Moderate)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
    </affected>
    <reference ref_id="RHSA-2009:1178" ref_url="https://access.redhat.com/errata/RHSA-2009:1178" source="RHSA"/>
    <reference ref_id="CVE-2008-1679" ref_url="https://access.redhat.com/security/cve/CVE-2008-1679" source="CVE"/>
    <reference ref_id="CVE-2008-1887" ref_url="https://access.redhat.com/security/cve/CVE-2008-1887" source="CVE"/>
    <reference ref_id="CVE-2008-2315" ref_url="https://access.redhat.com/security/cve/CVE-2008-2315" source="CVE"/>
    <reference ref_id="CVE-2008-3142" ref_url="https://access.redhat.com/security/cve/CVE-2008-3142" source="CVE"/>
    <reference ref_id="CVE-2008-3143" ref_url="https://access.redhat.com/security/cve/CVE-2008-3143" source="CVE"/>
    <reference ref_id="CVE-2008-3144" ref_url="https://access.redhat.com/security/cve/CVE-2008-3144" source="CVE"/>
    <reference ref_id="CVE-2008-4864" ref_url="https://access.redhat.com/security/cve/CVE-2008-4864" source="CVE"/>
    <reference ref_id="CVE-2008-5031" ref_url="https://access.redhat.com/security/cve/CVE-2008-5031" source="CVE"/>
    <description>Python is an interpreted, interactive, object-oriented programming
language.

When the assert() system call was disabled, an input sanitization flaw was
revealed in the Python string object implementation that led to a buffer
overflow. The missing check for negative size values meant the Python
memory allocator could allocate less memory than expected. This could
result in arbitrary code execution with the Python interpreter's
privileges. (CVE-2008-1887)

Multiple buffer and integer overflow flaws were found in the Python Unicode
string processing and in the Python Unicode and string object
implementations. An attacker could use these flaws to cause a denial of
service (Python application crash). (CVE-2008-3142, CVE-2008-5031)

Multiple integer overflow flaws were found in the Python imageop module. If
a Python application used the imageop module to process untrusted images,
it could cause the application to crash or, potentially, execute arbitrary
code with the Python interpreter's privileges. (CVE-2008-1679,
CVE-2008-4864)

Multiple integer underflow and overflow flaws were found in the Python
snprintf() wrapper implementation. An attacker could use these flaws to
cause a denial of service (memory corruption). (CVE-2008-3144)

Multiple integer overflow flaws were found in various Python modules. An
attacker could use these flaws to cause a denial of service (Python
application crash). (CVE-2008-2315, CVE-2008-3143)

Red Hat would like to thank David Remahl of the Apple Product Security team
for responsibly reporting the CVE-2008-1679 and CVE-2008-2315 issues.

All Python users should upgrade to these updated packages, which contain
backported patches to correct these issues.</description>
    <advisory from="secalert@redhat.com">
     <severity>Moderate</severity>
     <rights>Copyright 2009 Red Hat, Inc.</rights>
     <issued date="2009-07-27"/>
     <updated date="2009-07-27"/>
     <cve cwe="CWE-190" href="https://access.redhat.com/security/cve/CVE-2008-1679" impact="low" public="20080329">CVE-2008-1679</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2008-1887" public="20080408">CVE-2008-1887</cve>
     <cve cwe="CWE-190" href="https://access.redhat.com/security/cve/CVE-2008-2315" impact="low" public="20080731">CVE-2008-2315</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2008-3142" impact="low" public="20080411">CVE-2008-3142</cve>
     <cve cwe="CWE-190" href="https://access.redhat.com/security/cve/CVE-2008-3143" impact="low" public="20080214">CVE-2008-3143</cve>
     <cve cwe="CWE-190" href="https://access.redhat.com/security/cve/CVE-2008-3144" impact="low" public="20080602">CVE-2008-3144</cve>
     <cve cwe="CWE-190" href="https://access.redhat.com/security/cve/CVE-2008-4864" impact="low" public="20081019">CVE-2008-4864</cve>
     <cve cwe="CWE-190" href="https://access.redhat.com/security/cve/CVE-2008-5031" impact="low" public="20081019">CVE-2008-5031</cve>
     <bugzilla href="https://bugzilla.redhat.com/441306" id="441306">CVE-2008-1679 python: imageop module integer overflows</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/443810" id="443810">CVE-2008-1887 python: PyString_FromStringAndSize does not check for negative size values</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/454990" id="454990">CVE-2008-3142 python: Multiple buffer overflows in unicode processing</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/455008" id="455008">CVE-2008-2315 python: Multiple integer overflows in python core</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/455013" id="455013">CVE-2008-3143 python: Multiple integer overflows discovered by Google</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/455018" id="455018">CVE-2008-3144 python: Potential integer underflow and overflow in the PyOS_vsnprintf C API function</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/469656" id="469656">CVE-2008-4864 python: imageop module multiple integer overflows</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/470915" id="470915">CVE-2008-5031 python: stringobject, unicodeobject integer overflows</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="AND">
    <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
    <criteria operator="OR">
     <criteria operator="AND">
      <criterion comment="tkinter is earlier than 0:2.2.3-6.11" test_ref="oval:com.redhat.rhsa:tst:20091178001"/>
      <criterion comment="tkinter is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060197008"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="python is earlier than 0:2.2.3-6.11" test_ref="oval:com.redhat.rhsa:tst:20091178003"/>
      <criterion comment="python is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060197006"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="python-tools is earlier than 0:2.2.3-6.11" test_ref="oval:com.redhat.rhsa:tst:20091178005"/>
      <criterion comment="python-tools is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060197002"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="python-devel is earlier than 0:2.2.3-6.11" test_ref="oval:com.redhat.rhsa:tst:20091178007"/>
      <criterion comment="python-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060197004"/>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20091181" version="636">
   <metadata>
    <title>RHSA-2009:1181: bind security and bug fix update (Important)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
    </affected>
    <reference ref_id="RHSA-2009:1181" ref_url="https://access.redhat.com/errata/RHSA-2009:1181" source="RHSA"/>
    <reference ref_id="CVE-2009-0696" ref_url="https://access.redhat.com/security/cve/CVE-2009-0696" source="CVE"/>
    <description>The Berkeley Internet Name Domain (BIND) is an implementation of the Domain
Name System (DNS) protocols. BIND includes a DNS server (named); a resolver
library (routines for applications to use when interfacing with DNS); and
tools for verifying that the DNS server is operating correctly.

A flaw was found in the way BIND handles dynamic update message packets
containing the &quot;ANY&quot; record type. A remote attacker could use this flaw to
send a specially-crafted dynamic update packet that could cause named to
exit with an assertion failure. (CVE-2009-0696)

Note: even if named is not configured for dynamic updates, receiving such
a specially-crafted dynamic update packet could still cause named to exit
unexpectedly.

This update also fixes the following bug:

* the following message could have been logged: &quot;internal_accept: fcntl()
failed: Too many open files&quot;. With these updated packages, timeout queries
are aborted in order to reduce the number of open UDP sockets, and when the
accept() function returns an EMFILE error value, that situation is now
handled gracefully, thus resolving the issue. (BZ#498164)

All BIND users are advised to upgrade to these updated packages, which
contain backported patches to resolve these issues. After installing the
update, the BIND daemon (named) will be restarted automatically.</description>
    <advisory from="secalert@redhat.com">
     <severity>Important</severity>
     <rights>Copyright 2009 Red Hat, Inc.</rights>
     <issued date="2009-07-29"/>
     <updated date="2009-07-29"/>
     <cve cvss2="5.0/AV:N/AC:L/Au:N/C:N/I:N/A:P" href="https://access.redhat.com/security/cve/CVE-2009-0696" public="20090728">CVE-2009-0696</cve>
     <bugzilla href="https://bugzilla.redhat.com/498164" id="498164">bind-9.2.4-22.el3 and too many open files</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/514292" id="514292">CVE-2009-0696 bind: DoS (assertion failure) via nsupdate packets</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="AND">
    <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
    <criteria operator="OR">
     <criteria operator="AND">
      <criterion comment="bind-libs is earlier than 20:9.2.4-25.el3" test_ref="oval:com.redhat.rhsa:tst:20091181001"/>
      <criterion comment="bind-libs is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070044002"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="bind-utils is earlier than 20:9.2.4-25.el3" test_ref="oval:com.redhat.rhsa:tst:20091181003"/>
      <criterion comment="bind-utils is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070044004"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="bind is earlier than 20:9.2.4-25.el3" test_ref="oval:com.redhat.rhsa:tst:20091181005"/>
      <criterion comment="bind is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070044010"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="bind-chroot is earlier than 20:9.2.4-25.el3" test_ref="oval:com.redhat.rhsa:tst:20091181007"/>
      <criterion comment="bind-chroot is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070044006"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="bind-devel is earlier than 20:9.2.4-25.el3" test_ref="oval:com.redhat.rhsa:tst:20091181009"/>
      <criterion comment="bind-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070044008"/>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20091185" version="637">
   <metadata>
    <title>RHSA-2009:1185: seamonkey security update (Critical)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
    </affected>
    <reference ref_id="RHSA-2009:1185" ref_url="https://access.redhat.com/errata/RHSA-2009:1185" source="RHSA"/>
    <reference ref_id="CVE-2009-2404" ref_url="https://access.redhat.com/security/cve/CVE-2009-2404" source="CVE"/>
    <description>SeaMonkey is an open source Web browser, email and newsgroup client, IRC
chat client, and HTML editor.

Moxie Marlinspike reported a heap overflow flaw in a regular expression
parser in the NSS library (provided by SeaMonkey) used to match common
names in certificates. A malicious website could present a
carefully-crafted certificate in such a way as to trigger the heap
overflow, leading to a crash or, possibly, arbitrary code execution with
the permissions of the user running SeaMonkey. (CVE-2009-2404)

Note: in order to exploit this issue without further user interaction, the
carefully-crafted certificate would need to be signed by a Certificate
Authority trusted by SeaMonkey, otherwise SeaMonkey presents the victim
with a warning that the certificate is untrusted. Only if the user then
accepts the certificate will the overflow take place.

All SeaMonkey users should upgrade to these updated packages, which contain
a backported patch to correct this issue. After installing the updated
packages, SeaMonkey must be restarted for the update to take effect.</description>
    <advisory from="secalert@redhat.com">
     <severity>Critical</severity>
     <rights>Copyright 2009 Red Hat, Inc.</rights>
     <issued date="2009-07-30"/>
     <updated date="2009-07-30"/>
     <cve cvss2="6.8/AV:N/AC:M/Au:N/C:P/I:P/A:P" href="https://access.redhat.com/security/cve/CVE-2009-2404" public="20090729">CVE-2009-2404</cve>
     <bugzilla href="https://bugzilla.redhat.com/512912" id="512912">CVE-2009-2404 nss regexp heap overflow</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="AND">
    <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
    <criteria operator="OR">
     <criteria operator="AND">
      <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.41.el3" test_ref="oval:com.redhat.rhsa:tst:20091185001"/>
      <criterion comment="seamonkey-nspr-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578004"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="seamonkey is earlier than 0:1.0.9-0.41.el3" test_ref="oval:com.redhat.rhsa:tst:20091185003"/>
      <criterion comment="seamonkey is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578018"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.41.el3" test_ref="oval:com.redhat.rhsa:tst:20091185005"/>
      <criterion comment="seamonkey-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578014"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.41.el3" test_ref="oval:com.redhat.rhsa:tst:20091185007"/>
      <criterion comment="seamonkey-mail is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578020"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.41.el3" test_ref="oval:com.redhat.rhsa:tst:20091185009"/>
      <criterion comment="seamonkey-nss-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578012"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.41.el3" test_ref="oval:com.redhat.rhsa:tst:20091185011"/>
      <criterion comment="seamonkey-nss is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578016"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.41.el3" test_ref="oval:com.redhat.rhsa:tst:20091185013"/>
      <criterion comment="seamonkey-js-debugger is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578008"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.41.el3" test_ref="oval:com.redhat.rhsa:tst:20091185015"/>
      <criterion comment="seamonkey-nspr is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578010"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.41.el3" test_ref="oval:com.redhat.rhsa:tst:20091185017"/>
      <criterion comment="seamonkey-dom-inspector is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578002"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.41.el3" test_ref="oval:com.redhat.rhsa:tst:20091185019"/>
      <criterion comment="seamonkey-chat is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578006"/>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20091205" version="641">
   <metadata>
    <title>RHSA-2009:1205: httpd security and bug fix update (Moderate)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
    </affected>
    <reference ref_id="RHSA-2009:1205" ref_url="https://access.redhat.com/errata/RHSA-2009:1205" source="RHSA"/>
    <reference ref_id="CVE-2009-1891" ref_url="https://access.redhat.com/security/cve/CVE-2009-1891" source="CVE"/>
    <reference ref_id="CVE-2009-2412" ref_url="https://access.redhat.com/security/cve/CVE-2009-2412" source="CVE"/>
    <description>The Apache HTTP Server is a popular Web server. The httpd package shipped
with Red Hat Enterprise Linux 3 contains embedded copies of the Apache
Portable Runtime (APR) libraries, which provide a free library of C data
structures and routines, and also additional utility interfaces to support
XML parsing, LDAP, database interfaces, URI parsing, and more.

Multiple integer overflow flaws, leading to heap-based buffer overflows,
were found in the way the Apache Portable Runtime (APR) manages memory pool
and relocatable memory allocations. An attacker could use these flaws to
issue a specially-crafted request for memory allocation, which would lead
to a denial of service (application crash) or, potentially, execute
arbitrary code with the privileges of an application using the APR
libraries. (CVE-2009-2412)

A denial of service flaw was found in the Apache mod_deflate module. This
module continued to compress large files until compression was complete,
even if the network connection that requested the content was closed
before compression completed. This would cause mod_deflate to consume
large amounts of CPU if mod_deflate was enabled for a large file.
(CVE-2009-1891)

This update also fixes the following bug:

* in some cases the Content-Length header was dropped from HEAD responses.
This resulted in certain sites not working correctly with mod_proxy, such
as www.windowsupdate.com. (BZ#506016)

All httpd users should upgrade to these updated packages, which contain
backported patches to correct these issues. After installing the updated
packages, the httpd daemon must be restarted for the update to take effect.</description>
    <advisory from="secalert@redhat.com">
     <severity>Moderate</severity>
     <rights>Copyright 2009 Red Hat, Inc.</rights>
     <issued date="2009-08-10"/>
     <updated date="2009-08-10"/>
     <cve cvss2="2.6/AV:N/AC:H/Au:N/C:N/I:N/A:P" href="https://access.redhat.com/security/cve/CVE-2009-1891" impact="low" public="20090626">CVE-2009-1891</cve>
     <cve cvss2="6.8/AV:N/AC:M/Au:N/C:P/I:P/A:P" cwe="CWE-190" href="https://access.redhat.com/security/cve/CVE-2009-2412" public="20090804">CVE-2009-2412</cve>
     <bugzilla href="https://bugzilla.redhat.com/506016" id="506016">windowsupdate.microsoft.com does not work with mod_proxy</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/509125" id="509125">CVE-2009-1891 httpd: possible temporary DoS (CPU consumption) in mod_deflate</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/515698" id="515698">CVE-2009-2412 apr, apr-util: Integer overflows in memory pool (apr) and relocatable memory (apr-util) management</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="AND">
    <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
    <criteria operator="OR">
     <criteria operator="AND">
      <criterion comment="httpd-devel is earlier than 0:2.0.46-75.ent" test_ref="oval:com.redhat.rhsa:tst:20091205001"/>
      <criterion comment="httpd-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060159004"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="httpd is earlier than 0:2.0.46-75.ent" test_ref="oval:com.redhat.rhsa:tst:20091205003"/>
      <criterion comment="httpd is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060159006"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="mod_ssl is earlier than 1:2.0.46-75.ent" test_ref="oval:com.redhat.rhsa:tst:20091205005"/>
      <criterion comment="mod_ssl is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060159002"/>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20091206" version="646">
   <metadata>
    <title>RHSA-2009:1206: libxml and libxml2 security update (Moderate)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
     <platform>Red Hat Enterprise Linux 5</platform>
    </affected>
    <reference ref_id="RHSA-2009:1206" ref_url="https://access.redhat.com/errata/RHSA-2009:1206" source="RHSA"/>
    <reference ref_id="CVE-2009-2414" ref_url="https://access.redhat.com/security/cve/CVE-2009-2414" source="CVE"/>
    <reference ref_id="CVE-2009-2416" ref_url="https://access.redhat.com/security/cve/CVE-2009-2416" source="CVE"/>
    <description>libxml is a library for parsing and manipulating XML files. A Document Type
Definition (DTD) defines the legal syntax (and also which elements can be
used) for certain types of files, such as XML files.

A stack overflow flaw was found in the way libxml processes the root XML
document element definition in a DTD. A remote attacker could provide a
specially-crafted XML file, which once opened by a local, unsuspecting
user, would lead to denial of service (application crash). (CVE-2009-2414)

Multiple use-after-free flaws were found in the way libxml parses the
Notation and Enumeration attribute types. A remote attacker could provide
a specially-crafted XML file, which once opened by a local, unsuspecting
user, would lead to denial of service (application crash). (CVE-2009-2416)

Users should upgrade to these updated packages, which contain backported
patches to resolve these issues. For Red Hat Enterprise Linux 3, they
contain backported patches for the libxml and libxml2 packages. For Red Hat
Enterprise Linux 4 and 5, they contain backported patches for the libxml2
packages. The desktop must be restarted (log out, then log back in) for
this update to take effect.</description>
    <advisory from="secalert@redhat.com">
     <severity>Moderate</severity>
     <rights>Copyright 2009 Red Hat, Inc.</rights>
     <issued date="2009-08-10"/>
     <updated date="2009-08-10"/>
     <cve cvss2="4.3/AV:N/AC:M/Au:N/C:N/I:N/A:P" href="https://access.redhat.com/security/cve/CVE-2009-2414" public="20090810">CVE-2009-2414</cve>
     <cve cvss2="4.3/AV:N/AC:M/Au:N/C:N/I:N/A:P" cwe="CWE-416" href="https://access.redhat.com/security/cve/CVE-2009-2416" impact="low" public="20090810">CVE-2009-2416</cve>
     <bugzilla href="https://bugzilla.redhat.com/515195" id="515195">CVE-2009-2414 libxml, libxml2, mingw32-libxml2: Stack overflow by parsing root XML element DTD definition</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/515205" id="515205">CVE-2009-2416 libxml, libxml2, mingw32-libxml2: Pointer use-after-free flaws by parsing Notation and Enumeration attribute types</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:5</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="libxml is earlier than 1:1.8.17-9.3" test_ref="oval:com.redhat.rhsa:tst:20091206001"/>
       <criterion comment="libxml is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20091206002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="libxml-devel is earlier than 1:1.8.17-9.3" test_ref="oval:com.redhat.rhsa:tst:20091206003"/>
       <criterion comment="libxml-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20091206004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="libxml2 is earlier than 0:2.5.10-15" test_ref="oval:com.redhat.rhsa:tst:20091206005"/>
       <criterion comment="libxml2 is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20080032006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="libxml2-python is earlier than 0:2.5.10-15" test_ref="oval:com.redhat.rhsa:tst:20091206007"/>
       <criterion comment="libxml2-python is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20080032004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="libxml2-devel is earlier than 0:2.5.10-15" test_ref="oval:com.redhat.rhsa:tst:20091206009"/>
       <criterion comment="libxml2-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20080032002"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="libxml2 is earlier than 0:2.6.16-12.7" test_ref="oval:com.redhat.rhsa:tst:20091206012"/>
       <criterion comment="libxml2 is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20080032006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="libxml2-python is earlier than 0:2.6.16-12.7" test_ref="oval:com.redhat.rhsa:tst:20091206013"/>
       <criterion comment="libxml2-python is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20080032004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="libxml2-devel is earlier than 0:2.6.16-12.7" test_ref="oval:com.redhat.rhsa:tst:20091206014"/>
       <criterion comment="libxml2-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20080032002"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 5 is installed" test_ref="oval:com.redhat.rhsa:tst:20070066013"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="libxml2 is earlier than 0:2.6.26-2.1.2.8" test_ref="oval:com.redhat.rhsa:tst:20091206016"/>
       <criterion comment="libxml2 is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20080032017"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="libxml2-devel is earlier than 0:2.6.26-2.1.2.8" test_ref="oval:com.redhat.rhsa:tst:20091206018"/>
       <criterion comment="libxml2-devel is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20080032013"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="libxml2-python is earlier than 0:2.6.26-2.1.2.8" test_ref="oval:com.redhat.rhsa:tst:20091206020"/>
       <criterion comment="libxml2-python is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20080032015"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20091209" version="638">
   <metadata>
    <title>RHSA-2009:1209: curl security update (Moderate)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
     <platform>Red Hat Enterprise Linux 5</platform>
    </affected>
    <reference ref_id="RHSA-2009:1209" ref_url="https://access.redhat.com/errata/RHSA-2009:1209" source="RHSA"/>
    <reference ref_id="CVE-2009-2417" ref_url="https://access.redhat.com/security/cve/CVE-2009-2417" source="CVE"/>
    <description>cURL is a tool for getting files from FTP, HTTP, Gopher, Telnet, and Dict
servers, using any of the supported protocols. cURL is designed to work
without user interaction or any kind of interactivity.

Scott Cantor reported that cURL is affected by the previously published
&quot;null prefix attack&quot;, caused by incorrect handling of NULL characters in
X.509 certificates. If an attacker is able to get a carefully-crafted
certificate signed by a trusted Certificate Authority, the attacker could
use the certificate during a man-in-the-middle attack and potentially
confuse cURL into accepting it by mistake. (CVE-2009-2417)

cURL users should upgrade to these updated packages, which contain a
backported patch to correct these issues. All running applications using
libcurl must be restarted for the update to take effect.</description>
    <advisory from="secalert@redhat.com">
     <severity>Moderate</severity>
     <rights>Copyright 2009 Red Hat, Inc.</rights>
     <issued date="2009-08-13"/>
     <updated date="2009-08-13"/>
     <cve cvss2="4/AV:N/AC:H/Au:N/C:P/I:P/A:N" href="https://access.redhat.com/security/cve/CVE-2009-2417" public="20090812">CVE-2009-2417</cve>
     <bugzilla href="https://bugzilla.redhat.com/516181" id="516181">CVE-2009-2417 curl: incorrect verification of SSL certificate with NUL in name</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:5</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="curl-devel is earlier than 0:7.10.6-10.rhel3" test_ref="oval:com.redhat.rhsa:tst:20091209001"/>
       <criterion comment="curl-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20090341002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="curl is earlier than 0:7.10.6-10.rhel3" test_ref="oval:com.redhat.rhsa:tst:20091209003"/>
       <criterion comment="curl is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20090341004"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="curl-devel is earlier than 0:7.12.1-11.1.el4_8.1" test_ref="oval:com.redhat.rhsa:tst:20091209006"/>
       <criterion comment="curl-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20090341002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="curl is earlier than 0:7.12.1-11.1.el4_8.1" test_ref="oval:com.redhat.rhsa:tst:20091209007"/>
       <criterion comment="curl is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20090341004"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 5 is installed" test_ref="oval:com.redhat.rhsa:tst:20070066013"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="curl is earlier than 0:7.15.5-2.1.el5_3.5" test_ref="oval:com.redhat.rhsa:tst:20091209009"/>
       <criterion comment="curl is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20090341010"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="curl-devel is earlier than 0:7.15.5-2.1.el5_3.5" test_ref="oval:com.redhat.rhsa:tst:20091209011"/>
       <criterion comment="curl-devel is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20090341012"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20091218" version="638">
   <metadata>
    <title>RHSA-2009:1218: pidgin security update (Critical)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
     <platform>Red Hat Enterprise Linux 5</platform>
    </affected>
    <reference ref_id="RHSA-2009:1218" ref_url="https://access.redhat.com/errata/RHSA-2009:1218" source="RHSA"/>
    <reference ref_id="CVE-2009-2694" ref_url="https://access.redhat.com/security/cve/CVE-2009-2694" source="CVE"/>
    <description>Pidgin is an instant messaging program which can log in to multiple
accounts on multiple instant messaging networks simultaneously.

Federico Muttis of Core Security Technologies discovered a flaw in Pidgin's
MSN protocol handler. If a user received a malicious MSN message, it was
possible to execute arbitrary code with the permissions of the user running
Pidgin. (CVE-2009-2694)

Note: Users can change their privacy settings to only allow messages from
users on their buddy list to limit the impact of this flaw.

These packages upgrade Pidgin to version 2.5.9. Refer to the Pidgin release
notes for a full list of changes: http://developer.pidgin.im/wiki/ChangeLog

All Pidgin users should upgrade to these updated packages, which resolve
this issue. Pidgin must be restarted for this update to take effect.</description>
    <advisory from="secalert@redhat.com">
     <severity>Critical</severity>
     <rights>Copyright 2009 Red Hat, Inc.</rights>
     <issued date="2009-08-18"/>
     <updated date="2009-08-18"/>
     <cve cvss2="7.5/AV:N/AC:L/Au:N/C:P/I:P/A:P" cwe="CWE-228 CWE-119" href="https://access.redhat.com/security/cve/CVE-2009-2694" public="20090818">CVE-2009-2694</cve>
     <bugzilla href="https://bugzilla.redhat.com/514957" id="514957">CVE-2009-2694 pidgin: insufficient input validation in msn_slplink_process_msg()</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
      <cpe>cpe:/a:redhat:rhel_productivity:5</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:5</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criterion comment="pidgin is earlier than 0:1.5.1-4.el3" test_ref="oval:com.redhat.rhsa:tst:20091218001"/>
     <criterion comment="pidgin is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20080584002"/>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="finch is earlier than 0:2.5.9-1.el4" test_ref="oval:com.redhat.rhsa:tst:20091218004"/>
       <criterion comment="finch is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20091218005"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="libpurple-perl is earlier than 0:2.5.9-1.el4" test_ref="oval:com.redhat.rhsa:tst:20091218006"/>
       <criterion comment="libpurple-perl is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20091218007"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="libpurple is earlier than 0:2.5.9-1.el4" test_ref="oval:com.redhat.rhsa:tst:20091218008"/>
       <criterion comment="libpurple is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20091218009"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="pidgin is earlier than 0:2.5.9-1.el4" test_ref="oval:com.redhat.rhsa:tst:20091218010"/>
       <criterion comment="pidgin is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20080584002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="pidgin-perl is earlier than 0:2.5.9-1.el4" test_ref="oval:com.redhat.rhsa:tst:20091218011"/>
       <criterion comment="pidgin-perl is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20091218012"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="pidgin-devel is earlier than 0:2.5.9-1.el4" test_ref="oval:com.redhat.rhsa:tst:20091218013"/>
       <criterion comment="pidgin-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20091218014"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="finch-devel is earlier than 0:2.5.9-1.el4" test_ref="oval:com.redhat.rhsa:tst:20091218015"/>
       <criterion comment="finch-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20091218016"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="libpurple-devel is earlier than 0:2.5.9-1.el4" test_ref="oval:com.redhat.rhsa:tst:20091218017"/>
       <criterion comment="libpurple-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20091218018"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="libpurple-tcl is earlier than 0:2.5.9-1.el4" test_ref="oval:com.redhat.rhsa:tst:20091218019"/>
       <criterion comment="libpurple-tcl is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20091218020"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 5 is installed" test_ref="oval:com.redhat.rhsa:tst:20070066013"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="libpurple is earlier than 0:2.5.9-1.el5" test_ref="oval:com.redhat.rhsa:tst:20091218022"/>
       <criterion comment="libpurple is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20080584009"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="pidgin is earlier than 0:2.5.9-1.el5" test_ref="oval:com.redhat.rhsa:tst:20091218024"/>
       <criterion comment="pidgin is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20080584013"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="pidgin-perl is earlier than 0:2.5.9-1.el5" test_ref="oval:com.redhat.rhsa:tst:20091218026"/>
       <criterion comment="pidgin-perl is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20080584019"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="pidgin-devel is earlier than 0:2.5.9-1.el5" test_ref="oval:com.redhat.rhsa:tst:20091218028"/>
       <criterion comment="pidgin-devel is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20080584021"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="libpurple-devel is earlier than 0:2.5.9-1.el5" test_ref="oval:com.redhat.rhsa:tst:20091218030"/>
       <criterion comment="libpurple-devel is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20080584023"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="finch-devel is earlier than 0:2.5.9-1.el5" test_ref="oval:com.redhat.rhsa:tst:20091218032"/>
       <criterion comment="finch-devel is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20080584011"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="libpurple-tcl is earlier than 0:2.5.9-1.el5" test_ref="oval:com.redhat.rhsa:tst:20091218034"/>
       <criterion comment="libpurple-tcl is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20080584015"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="finch is earlier than 0:2.5.9-1.el5" test_ref="oval:com.redhat.rhsa:tst:20091218036"/>
       <criterion comment="finch is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20080584007"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="libpurple-perl is earlier than 0:2.5.9-1.el5" test_ref="oval:com.redhat.rhsa:tst:20091218038"/>
       <criterion comment="libpurple-perl is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20080584017"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20091219" version="635">
   <metadata>
    <title>RHSA-2009:1219: libvorbis security update (Important)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
     <platform>Red Hat Enterprise Linux 5</platform>
    </affected>
    <reference ref_id="RHSA-2009:1219" ref_url="https://access.redhat.com/errata/RHSA-2009:1219" source="RHSA"/>
    <reference ref_id="CVE-2009-2663" ref_url="https://access.redhat.com/security/cve/CVE-2009-2663" source="CVE"/>
    <description>The libvorbis packages contain runtime libraries for use in programs that
support Ogg Vorbis. Ogg Vorbis is a fully open, non-proprietary, patent-and
royalty-free, general-purpose compressed audio format.

An insufficient input validation flaw was found in the way libvorbis
processes the codec file headers (static mode headers and encoding books)
of the Ogg Vorbis audio file format (Ogg). A remote attacker could provide
a specially-crafted Ogg file that would cause a denial of service (memory
corruption and application crash) or, potentially, execute arbitrary code
with the privileges of an application using the libvorbis library when
opened by a victim. (CVE-2009-2663)

Users of libvorbis should upgrade to these updated packages, which contain
a backported patch to correct this issue. The desktop must be restarted
(log out, then log back in) for this update to take effect.</description>
    <advisory from="secalert@redhat.com">
     <severity>Important</severity>
     <rights>Copyright 2009 Red Hat, Inc.</rights>
     <issued date="2009-08-18"/>
     <updated date="2009-08-18"/>
     <cve cvss2="6.8/AV:N/AC:M/Au:N/C:P/I:P/A:P" href="https://access.redhat.com/security/cve/CVE-2009-2663" public="20090624">CVE-2009-2663</cve>
     <bugzilla href="https://bugzilla.redhat.com/516259" id="516259">CVE-2009-2663 libvorbis: Improper codec headers processing (DoS, ACE)</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:5</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="libvorbis is earlier than 1:1.0-11.el3" test_ref="oval:com.redhat.rhsa:tst:20091219001"/>
       <criterion comment="libvorbis is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070845002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="libvorbis-devel is earlier than 1:1.0-11.el3" test_ref="oval:com.redhat.rhsa:tst:20091219003"/>
       <criterion comment="libvorbis-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070845004"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="libvorbis is earlier than 1:1.1.0-3.el4_8.2" test_ref="oval:com.redhat.rhsa:tst:20091219006"/>
       <criterion comment="libvorbis is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070845002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="libvorbis-devel is earlier than 1:1.1.0-3.el4_8.2" test_ref="oval:com.redhat.rhsa:tst:20091219007"/>
       <criterion comment="libvorbis-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070845004"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 5 is installed" test_ref="oval:com.redhat.rhsa:tst:20070066013"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="libvorbis-devel is earlier than 1:1.1.2-3.el5_3.3" test_ref="oval:com.redhat.rhsa:tst:20091219009"/>
       <criterion comment="libvorbis-devel is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070845012"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="libvorbis is earlier than 1:1.1.2-3.el5_3.3" test_ref="oval:com.redhat.rhsa:tst:20091219011"/>
       <criterion comment="libvorbis is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070845010"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20091233" version="641">
   <metadata>
    <title>RHSA-2009:1233: kernel security update (Important)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
    </affected>
    <reference ref_id="RHSA-2009:1233" ref_url="https://access.redhat.com/errata/RHSA-2009:1233" source="RHSA"/>
    <reference ref_id="CVE-2009-2692" ref_url="https://access.redhat.com/security/cve/CVE-2009-2692" source="CVE"/>
    <reference ref_id="CVE-2009-2698" ref_url="https://access.redhat.com/security/cve/CVE-2009-2698" source="CVE"/>
    <description>The kernel packages contain the Linux kernel, the core of any Linux
operating system.

These updated packages fix the following security issues:

* a flaw was found in the SOCKOPS_WRAP macro in the Linux kernel. This
macro did not initialize the sendpage operation in the proto_ops structure
correctly. A local, unprivileged user could use this flaw to cause a local
denial of service or escalate their privileges. (CVE-2009-2692, Important)

* a flaw was found in the udp_sendmsg() implementation in the Linux kernel
when using the MSG_MORE flag on UDP sockets. A local, unprivileged user
could use this flaw to cause a local denial of service or escalate their
privileges. (CVE-2009-2698, Important)

Red Hat would like to thank Tavis Ormandy and Julien Tinnes of the Google
Security Team for responsibly reporting these flaws.

All Red Hat Enterprise Linux 3 users should upgrade to these updated
packages, which contain backported patches to resolve these issues. The
system must be rebooted for this update to take effect.</description>
    <advisory from="secalert@redhat.com">
     <severity>Important</severity>
     <rights>Copyright 2009 Red Hat, Inc.</rights>
     <issued date="2009-08-27"/>
     <updated date="2009-08-27"/>
     <cve cvss2="7.2/AV:L/AC:L/Au:N/C:C/I:C/A:C" cwe="CWE-456 CWE-476" href="https://access.redhat.com/security/cve/CVE-2009-2692" public="20090813">CVE-2009-2692</cve>
     <cve cvss2="7.2/AV:L/AC:L/Au:N/C:C/I:C/A:C" cwe="CWE-476" href="https://access.redhat.com/security/cve/CVE-2009-2698" public="20090824">CVE-2009-2698</cve>
     <bugzilla href="https://bugzilla.redhat.com/516949" id="516949">CVE-2009-2692 kernel: uninit op in SOCKOPS_WRAP() leads to privesc</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/518034" id="518034">CVE-2009-2698 kernel: udp socket NULL ptr dereference</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="AND">
    <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
    <criteria operator="OR">
     <criteria operator="AND">
      <criterion comment="kernel-smp is earlier than 0:2.4.21-60.EL" test_ref="oval:com.redhat.rhsa:tst:20091233001"/>
      <criterion comment="kernel-smp is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060140008"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-60.EL" test_ref="oval:com.redhat.rhsa:tst:20091233003"/>
      <criterion comment="kernel-smp-unsupported is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060140004"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="kernel is earlier than 0:2.4.21-60.EL" test_ref="oval:com.redhat.rhsa:tst:20091233005"/>
      <criterion comment="kernel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060140010"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="kernel-unsupported is earlier than 0:2.4.21-60.EL" test_ref="oval:com.redhat.rhsa:tst:20091233007"/>
      <criterion comment="kernel-unsupported is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060140002"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="kernel-doc is earlier than 0:2.4.21-60.EL" test_ref="oval:com.redhat.rhsa:tst:20091233009"/>
      <criterion comment="kernel-doc is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060140006"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="kernel-BOOT is earlier than 0:2.4.21-60.EL" test_ref="oval:com.redhat.rhsa:tst:20091233011"/>
      <criterion comment="kernel-BOOT is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060140016"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="kernel-source is earlier than 0:2.4.21-60.EL" test_ref="oval:com.redhat.rhsa:tst:20091233013"/>
      <criterion comment="kernel-source is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060140012"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-60.EL" test_ref="oval:com.redhat.rhsa:tst:20091233015"/>
      <criterion comment="kernel-hugemem-unsupported is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060140014"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="kernel-hugemem is earlier than 0:2.4.21-60.EL" test_ref="oval:com.redhat.rhsa:tst:20091233017"/>
      <criterion comment="kernel-hugemem is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060140018"/>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20091426" version="637">
   <metadata>
    <title>RHSA-2009:1426: openoffice.org security update (Important)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
     <platform>Red Hat Enterprise Linux 5</platform>
    </affected>
    <reference ref_id="RHSA-2009:1426" ref_url="https://access.redhat.com/errata/RHSA-2009:1426" source="RHSA"/>
    <reference ref_id="CVE-2009-0200" ref_url="https://access.redhat.com/security/cve/CVE-2009-0200" source="CVE"/>
    <reference ref_id="CVE-2009-0201" ref_url="https://access.redhat.com/security/cve/CVE-2009-0201" source="CVE"/>
    <description>OpenOffice.org is an office productivity suite that includes desktop
applications, such as a word processor, spreadsheet, presentation manager,
formula editor, and a drawing program.

An integer underflow flaw and a boundary error flaw, both possibly leading
to a heap-based buffer overflow, were found in the way OpenOffice.org
parses certain records in Microsoft Word documents. An attacker could
create a specially-crafted Microsoft Word document, which once opened by an
unsuspecting user, could cause OpenOffice.org to crash or, potentially,
execute arbitrary code with the permissions of the user running
OpenOffice.org. (CVE-2009-0200, CVE-2009-0201)

All users of OpenOffice.org are advised to upgrade to these updated
packages, which contain backported patches to correct these issues. All
running instances of OpenOffice.org applications must be restarted for
this update to take effect.</description>
    <advisory from="secalert@redhat.com">
     <severity>Important</severity>
     <rights>Copyright 2009 Red Hat, Inc.</rights>
     <issued date="2009-09-04"/>
     <updated date="2009-09-04"/>
     <cve cvss2="6.8/AV:N/AC:M/Au:N/C:P/I:P/A:P" cwe="CWE-190" href="https://access.redhat.com/security/cve/CVE-2009-0200" public="20090901">CVE-2009-0200</cve>
     <cve cvss2="6.8/AV:N/AC:M/Au:N/C:P/I:P/A:P" href="https://access.redhat.com/security/cve/CVE-2009-0201" public="20090901">CVE-2009-0201</cve>
     <bugzilla href="https://bugzilla.redhat.com/500993" id="500993">CVE-2009-0200 OpenOffice.org Word document Integer Underflow</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/502194" id="502194">CVE-2009-0201 OpenOffice.org Word document buffer overflow</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
      <cpe>cpe:/a:redhat:rhel_productivity:5</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:5</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="openoffice.org-i18n is earlier than 0:1.1.2-44.2.0.EL3" test_ref="oval:com.redhat.rhsa:tst:20091426001"/>
       <criterion comment="openoffice.org-i18n is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060573002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org is earlier than 0:1.1.2-44.2.0.EL3" test_ref="oval:com.redhat.rhsa:tst:20091426003"/>
       <criterion comment="openoffice.org is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060573006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-libs is earlier than 0:1.1.2-44.2.0.EL3" test_ref="oval:com.redhat.rhsa:tst:20091426005"/>
       <criterion comment="openoffice.org-libs is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060573004"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="openoffice.org is earlier than 0:1.1.5-10.6.0.7.EL4.1" test_ref="oval:com.redhat.rhsa:tst:20091426008"/>
       <criterion comment="openoffice.org is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060573006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-i18n is earlier than 0:1.1.5-10.6.0.7.EL4.1" test_ref="oval:com.redhat.rhsa:tst:20091426009"/>
       <criterion comment="openoffice.org-i18n is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060573002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-libs is earlier than 0:1.1.5-10.6.0.7.EL4.1" test_ref="oval:com.redhat.rhsa:tst:20091426010"/>
       <criterion comment="openoffice.org-libs is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060573004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-kde is earlier than 0:1.1.5-10.6.0.7.EL4.1" test_ref="oval:com.redhat.rhsa:tst:20091426011"/>
       <criterion comment="openoffice.org-kde is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060573011"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-testtools is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:com.redhat.rhsa:tst:20091426013"/>
       <criterion comment="openoffice.org2-testtools is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406116"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-ar is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:com.redhat.rhsa:tst:20091426015"/>
       <criterion comment="openoffice.org2-langpack-ar is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406058"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-xsltfilter is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:com.redhat.rhsa:tst:20091426017"/>
       <criterion comment="openoffice.org2-xsltfilter is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406062"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-zu_ZA is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:com.redhat.rhsa:tst:20091426019"/>
       <criterion comment="openoffice.org2-langpack-zu_ZA is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406112"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-math is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:com.redhat.rhsa:tst:20091426021"/>
       <criterion comment="openoffice.org2-math is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406070"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-fr is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:com.redhat.rhsa:tst:20091426023"/>
       <criterion comment="openoffice.org2-langpack-fr is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406124"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-bn is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:com.redhat.rhsa:tst:20091426025"/>
       <criterion comment="openoffice.org2-langpack-bn is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406068"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-nn_NO is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:com.redhat.rhsa:tst:20091426027"/>
       <criterion comment="openoffice.org2-langpack-nn_NO is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406126"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-ja_JP is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:com.redhat.rhsa:tst:20091426029"/>
       <criterion comment="openoffice.org2-langpack-ja_JP is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406076"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-ko_KR is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:com.redhat.rhsa:tst:20091426031"/>
       <criterion comment="openoffice.org2-langpack-ko_KR is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406090"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-graphicfilter is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:com.redhat.rhsa:tst:20091426033"/>
       <criterion comment="openoffice.org2-graphicfilter is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406040"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-th_TH is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:com.redhat.rhsa:tst:20091426035"/>
       <criterion comment="openoffice.org2-langpack-th_TH is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406028"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-it is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:com.redhat.rhsa:tst:20091426037"/>
       <criterion comment="openoffice.org2-langpack-it is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406094"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-zh_TW is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:com.redhat.rhsa:tst:20091426039"/>
       <criterion comment="openoffice.org2-langpack-zh_TW is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406084"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-tr_TR is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:com.redhat.rhsa:tst:20091426041"/>
       <criterion comment="openoffice.org2-langpack-tr_TR is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406022"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-emailmerge is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:com.redhat.rhsa:tst:20091426043"/>
       <criterion comment="openoffice.org2-emailmerge is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406106"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-de is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:com.redhat.rhsa:tst:20091426045"/>
       <criterion comment="openoffice.org2-langpack-de is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406016"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-hu_HU is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:com.redhat.rhsa:tst:20091426047"/>
       <criterion comment="openoffice.org2-langpack-hu_HU is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406026"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-da_DK is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:com.redhat.rhsa:tst:20091426049"/>
       <criterion comment="openoffice.org2-langpack-da_DK is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406100"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-pa_IN is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:com.redhat.rhsa:tst:20091426051"/>
       <criterion comment="openoffice.org2-langpack-pa_IN is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406096"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-gl_ES is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:com.redhat.rhsa:tst:20091426053"/>
       <criterion comment="openoffice.org2-langpack-gl_ES is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406118"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-ta_IN is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:com.redhat.rhsa:tst:20091426055"/>
       <criterion comment="openoffice.org2-langpack-ta_IN is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406098"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-base is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:com.redhat.rhsa:tst:20091426057"/>
       <criterion comment="openoffice.org2-base is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406102"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-sv is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:com.redhat.rhsa:tst:20091426059"/>
       <criterion comment="openoffice.org2-langpack-sv is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406120"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-pt_BR is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:com.redhat.rhsa:tst:20091426061"/>
       <criterion comment="openoffice.org2-langpack-pt_BR is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406108"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-af_ZA is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:com.redhat.rhsa:tst:20091426063"/>
       <criterion comment="openoffice.org2-langpack-af_ZA is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406110"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-draw is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:com.redhat.rhsa:tst:20091426065"/>
       <criterion comment="openoffice.org2-draw is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406122"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-nl is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:com.redhat.rhsa:tst:20091426067"/>
       <criterion comment="openoffice.org2-langpack-nl is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406044"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-sl_SI is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:com.redhat.rhsa:tst:20091426069"/>
       <criterion comment="openoffice.org2-langpack-sl_SI is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406046"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-javafilter is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:com.redhat.rhsa:tst:20091426071"/>
       <criterion comment="openoffice.org2-javafilter is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406128"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-lt_LT is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:com.redhat.rhsa:tst:20091426073"/>
       <criterion comment="openoffice.org2-langpack-lt_LT is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406086"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-pl_PL is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:com.redhat.rhsa:tst:20091426075"/>
       <criterion comment="openoffice.org2-langpack-pl_PL is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406082"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-bg_BG is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:com.redhat.rhsa:tst:20091426077"/>
       <criterion comment="openoffice.org2-langpack-bg_BG is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406014"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-he_IL is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:com.redhat.rhsa:tst:20091426079"/>
       <criterion comment="openoffice.org2-langpack-he_IL is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406066"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-calc is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:com.redhat.rhsa:tst:20091426081"/>
       <criterion comment="openoffice.org2-calc is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406050"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-sk_SK is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:com.redhat.rhsa:tst:20091426083"/>
       <criterion comment="openoffice.org2-langpack-sk_SK is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406078"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-fi_FI is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:com.redhat.rhsa:tst:20091426085"/>
       <criterion comment="openoffice.org2-langpack-fi_FI is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406024"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-hr_HR is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:com.redhat.rhsa:tst:20091426087"/>
       <criterion comment="openoffice.org2-langpack-hr_HR is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406080"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-pt_PT is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:com.redhat.rhsa:tst:20091426089"/>
       <criterion comment="openoffice.org2-langpack-pt_PT is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406020"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-sr_CS is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:com.redhat.rhsa:tst:20091426091"/>
       <criterion comment="openoffice.org2-langpack-sr_CS is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406052"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-et_EE is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:com.redhat.rhsa:tst:20091426093"/>
       <criterion comment="openoffice.org2-langpack-et_EE is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406018"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-core is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:com.redhat.rhsa:tst:20091426095"/>
       <criterion comment="openoffice.org2-core is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406034"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-cy_GB is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:com.redhat.rhsa:tst:20091426097"/>
       <criterion comment="openoffice.org2-langpack-cy_GB is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406072"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-ca_ES is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:com.redhat.rhsa:tst:20091426099"/>
       <criterion comment="openoffice.org2-langpack-ca_ES is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406030"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-writer is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:com.redhat.rhsa:tst:20091426101"/>
       <criterion comment="openoffice.org2-writer is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406074"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-eu_ES is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:com.redhat.rhsa:tst:20091426103"/>
       <criterion comment="openoffice.org2-langpack-eu_ES is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406036"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-hi_IN is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:com.redhat.rhsa:tst:20091426105"/>
       <criterion comment="openoffice.org2-langpack-hi_IN is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406038"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-el_GR is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:com.redhat.rhsa:tst:20091426107"/>
       <criterion comment="openoffice.org2-langpack-el_GR is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406048"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-zh_CN is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:com.redhat.rhsa:tst:20091426109"/>
       <criterion comment="openoffice.org2-langpack-zh_CN is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406042"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-cs_CZ is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:com.redhat.rhsa:tst:20091426111"/>
       <criterion comment="openoffice.org2-langpack-cs_CZ is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406054"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-ms_MY is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:com.redhat.rhsa:tst:20091426113"/>
       <criterion comment="openoffice.org2-langpack-ms_MY is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406056"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-impress is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:com.redhat.rhsa:tst:20091426115"/>
       <criterion comment="openoffice.org2-impress is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406088"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-nb_NO is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:com.redhat.rhsa:tst:20091426117"/>
       <criterion comment="openoffice.org2-langpack-nb_NO is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406092"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-es is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:com.redhat.rhsa:tst:20091426119"/>
       <criterion comment="openoffice.org2-langpack-es is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406104"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-pyuno is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:com.redhat.rhsa:tst:20091426121"/>
       <criterion comment="openoffice.org2-pyuno is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406032"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-ga_IE is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:com.redhat.rhsa:tst:20091426123"/>
       <criterion comment="openoffice.org2-langpack-ga_IE is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406114"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-ru is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:com.redhat.rhsa:tst:20091426125"/>
       <criterion comment="openoffice.org2-langpack-ru is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406060"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-gu_IN is earlier than 1:2.0.4-5.7.0.6.0.1" test_ref="oval:com.redhat.rhsa:tst:20091426127"/>
       <criterion comment="openoffice.org2-langpack-gu_IN is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406064"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 5 is installed" test_ref="oval:com.redhat.rhsa:tst:20070066013"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-nr_ZA is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:com.redhat.rhsa:tst:20091426130"/>
       <criterion comment="openoffice.org-langpack-nr_ZA is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406139"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-it is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:com.redhat.rhsa:tst:20091426132"/>
       <criterion comment="openoffice.org-langpack-it is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406197"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-base is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:com.redhat.rhsa:tst:20091426134"/>
       <criterion comment="openoffice.org-base is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406181"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-pt_PT is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:com.redhat.rhsa:tst:20091426136"/>
       <criterion comment="openoffice.org-langpack-pt_PT is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406203"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-emailmerge is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:com.redhat.rhsa:tst:20091426138"/>
       <criterion comment="openoffice.org-emailmerge is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406201"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-ve_ZA is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:com.redhat.rhsa:tst:20091426140"/>
       <criterion comment="openoffice.org-langpack-ve_ZA is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406141"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-ur is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:com.redhat.rhsa:tst:20091426142"/>
       <criterion comment="openoffice.org-langpack-ur is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406237"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-tr_TR is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:com.redhat.rhsa:tst:20091426144"/>
       <criterion comment="openoffice.org-langpack-tr_TR is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406145"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-te_IN is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:com.redhat.rhsa:tst:20091426146"/>
       <criterion comment="openoffice.org-langpack-te_IN is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406195"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-he_IL is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:com.redhat.rhsa:tst:20091426148"/>
       <criterion comment="openoffice.org-langpack-he_IL is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406243"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-sl_SI is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:com.redhat.rhsa:tst:20091426150"/>
       <criterion comment="openoffice.org-langpack-sl_SI is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406267"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-ms_MY is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:com.redhat.rhsa:tst:20091426152"/>
       <criterion comment="openoffice.org-langpack-ms_MY is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406171"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-nn_NO is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:com.redhat.rhsa:tst:20091426154"/>
       <criterion comment="openoffice.org-langpack-nn_NO is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406225"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-writer is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:com.redhat.rhsa:tst:20091426156"/>
       <criterion comment="openoffice.org-writer is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406147"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-kn_IN is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:com.redhat.rhsa:tst:20091426158"/>
       <criterion comment="openoffice.org-langpack-kn_IN is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406271"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-javafilter is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:com.redhat.rhsa:tst:20091426160"/>
       <criterion comment="openoffice.org-javafilter is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406269"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-es is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:com.redhat.rhsa:tst:20091426162"/>
       <criterion comment="openoffice.org-langpack-es is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406259"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-af_ZA is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:com.redhat.rhsa:tst:20091426164"/>
       <criterion comment="openoffice.org-langpack-af_ZA is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406247"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-graphicfilter is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:com.redhat.rhsa:tst:20091426166"/>
       <criterion comment="openoffice.org-graphicfilter is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406143"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-xsltfilter is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:com.redhat.rhsa:tst:20091426168"/>
       <criterion comment="openoffice.org-xsltfilter is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406179"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-bn is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:com.redhat.rhsa:tst:20091426170"/>
       <criterion comment="openoffice.org-langpack-bn is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406211"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-et_EE is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:com.redhat.rhsa:tst:20091426172"/>
       <criterion comment="openoffice.org-langpack-et_EE is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406199"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-ml_IN is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:com.redhat.rhsa:tst:20091426174"/>
       <criterion comment="openoffice.org-langpack-ml_IN is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406231"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-ar is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:com.redhat.rhsa:tst:20091426176"/>
       <criterion comment="openoffice.org-langpack-ar is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406217"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-zh_TW is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:com.redhat.rhsa:tst:20091426178"/>
       <criterion comment="openoffice.org-langpack-zh_TW is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406219"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-nl is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:com.redhat.rhsa:tst:20091426180"/>
       <criterion comment="openoffice.org-langpack-nl is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406207"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-xh_ZA is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:com.redhat.rhsa:tst:20091426182"/>
       <criterion comment="openoffice.org-langpack-xh_ZA is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406183"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-st_ZA is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:com.redhat.rhsa:tst:20091426184"/>
       <criterion comment="openoffice.org-langpack-st_ZA is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406273"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-pyuno is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:com.redhat.rhsa:tst:20091426186"/>
       <criterion comment="openoffice.org-pyuno is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406239"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-ta_IN is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:com.redhat.rhsa:tst:20091426188"/>
       <criterion comment="openoffice.org-langpack-ta_IN is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406227"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-cs_CZ is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:com.redhat.rhsa:tst:20091426190"/>
       <criterion comment="openoffice.org-langpack-cs_CZ is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406137"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-sr_CS is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:com.redhat.rhsa:tst:20091426192"/>
       <criterion comment="openoffice.org-langpack-sr_CS is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406233"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-ca_ES is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:com.redhat.rhsa:tst:20091426194"/>
       <criterion comment="openoffice.org-langpack-ca_ES is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406165"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-or_IN is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:com.redhat.rhsa:tst:20091426196"/>
       <criterion comment="openoffice.org-langpack-or_IN is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406251"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-sk_SK is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:com.redhat.rhsa:tst:20091426198"/>
       <criterion comment="openoffice.org-langpack-sk_SK is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406131"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-hi_IN is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:com.redhat.rhsa:tst:20091426200"/>
       <criterion comment="openoffice.org-langpack-hi_IN is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406135"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-impress is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:com.redhat.rhsa:tst:20091426202"/>
       <criterion comment="openoffice.org-impress is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406261"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-hr_HR is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:com.redhat.rhsa:tst:20091426204"/>
       <criterion comment="openoffice.org-langpack-hr_HR is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406163"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-tn_ZA is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:com.redhat.rhsa:tst:20091426206"/>
       <criterion comment="openoffice.org-langpack-tn_ZA is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406191"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-ko_KR is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:com.redhat.rhsa:tst:20091426208"/>
       <criterion comment="openoffice.org-langpack-ko_KR is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406173"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-ja_JP is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:com.redhat.rhsa:tst:20091426210"/>
       <criterion comment="openoffice.org-langpack-ja_JP is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406189"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-ru is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:com.redhat.rhsa:tst:20091426212"/>
       <criterion comment="openoffice.org-langpack-ru is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406275"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-bg_BG is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:com.redhat.rhsa:tst:20091426214"/>
       <criterion comment="openoffice.org-langpack-bg_BG is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406241"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-ts_ZA is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:com.redhat.rhsa:tst:20091426216"/>
       <criterion comment="openoffice.org-langpack-ts_ZA is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406253"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-as_IN is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:com.redhat.rhsa:tst:20091426218"/>
       <criterion comment="openoffice.org-langpack-as_IN is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406213"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-fr is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:com.redhat.rhsa:tst:20091426220"/>
       <criterion comment="openoffice.org-langpack-fr is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406175"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-sdk-doc is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:com.redhat.rhsa:tst:20091426222"/>
       <criterion comment="openoffice.org-sdk-doc is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20080939277"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-lt_LT is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:com.redhat.rhsa:tst:20091426224"/>
       <criterion comment="openoffice.org-langpack-lt_LT is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406185"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-fi_FI is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:com.redhat.rhsa:tst:20091426226"/>
       <criterion comment="openoffice.org-langpack-fi_FI is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406255"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-de is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:com.redhat.rhsa:tst:20091426228"/>
       <criterion comment="openoffice.org-langpack-de is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406221"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-draw is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:com.redhat.rhsa:tst:20091426230"/>
       <criterion comment="openoffice.org-draw is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406205"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-da_DK is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:com.redhat.rhsa:tst:20091426232"/>
       <criterion comment="openoffice.org-langpack-da_DK is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406229"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-pt_BR is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:com.redhat.rhsa:tst:20091426234"/>
       <criterion comment="openoffice.org-langpack-pt_BR is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406133"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-nso_ZA is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:com.redhat.rhsa:tst:20091426236"/>
       <criterion comment="openoffice.org-langpack-nso_ZA is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406187"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-math is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:com.redhat.rhsa:tst:20091426238"/>
       <criterion comment="openoffice.org-math is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406167"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-sv is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:com.redhat.rhsa:tst:20091426240"/>
       <criterion comment="openoffice.org-langpack-sv is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406263"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-el_GR is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:com.redhat.rhsa:tst:20091426242"/>
       <criterion comment="openoffice.org-langpack-el_GR is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406245"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-gl_ES is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:com.redhat.rhsa:tst:20091426244"/>
       <criterion comment="openoffice.org-langpack-gl_ES is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406153"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-ss_ZA is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:com.redhat.rhsa:tst:20091426246"/>
       <criterion comment="openoffice.org-langpack-ss_ZA is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406151"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-sdk is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:com.redhat.rhsa:tst:20091426248"/>
       <criterion comment="openoffice.org-sdk is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20080939171"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-eu_ES is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:com.redhat.rhsa:tst:20091426250"/>
       <criterion comment="openoffice.org-langpack-eu_ES is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406257"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-cy_GB is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:com.redhat.rhsa:tst:20091426252"/>
       <criterion comment="openoffice.org-langpack-cy_GB is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406177"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-core is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:com.redhat.rhsa:tst:20091426254"/>
       <criterion comment="openoffice.org-core is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406249"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-ga_IE is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:com.redhat.rhsa:tst:20091426256"/>
       <criterion comment="openoffice.org-langpack-ga_IE is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406157"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-th_TH is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:com.redhat.rhsa:tst:20091426258"/>
       <criterion comment="openoffice.org-langpack-th_TH is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406235"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-pa_IN is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:com.redhat.rhsa:tst:20091426260"/>
       <criterion comment="openoffice.org-langpack-pa_IN is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406215"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-testtools is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:com.redhat.rhsa:tst:20091426262"/>
       <criterion comment="openoffice.org-testtools is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406159"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-headless is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:com.redhat.rhsa:tst:20091426264"/>
       <criterion comment="openoffice.org-headless is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20080939135"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-mr_IN is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:com.redhat.rhsa:tst:20091426266"/>
       <criterion comment="openoffice.org-langpack-mr_IN is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406193"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-hu_HU is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:com.redhat.rhsa:tst:20091426268"/>
       <criterion comment="openoffice.org-langpack-hu_HU is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406161"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-nb_NO is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:com.redhat.rhsa:tst:20091426270"/>
       <criterion comment="openoffice.org-langpack-nb_NO is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406149"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-zu_ZA is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:com.redhat.rhsa:tst:20091426272"/>
       <criterion comment="openoffice.org-langpack-zu_ZA is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406209"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-gu_IN is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:com.redhat.rhsa:tst:20091426274"/>
       <criterion comment="openoffice.org-langpack-gu_IN is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406169"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-calc is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:com.redhat.rhsa:tst:20091426276"/>
       <criterion comment="openoffice.org-calc is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406265"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-pl_PL is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:com.redhat.rhsa:tst:20091426278"/>
       <criterion comment="openoffice.org-langpack-pl_PL is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406223"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-zh_CN is earlier than 1:2.3.0-6.11.el5_4.1" test_ref="oval:com.redhat.rhsa:tst:20091426280"/>
       <criterion comment="openoffice.org-langpack-zh_CN is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406155"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20091427" version="646">
   <metadata>
    <title>RHSA-2009:1427: fetchmail security update (Moderate)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
     <platform>Red Hat Enterprise Linux 5</platform>
    </affected>
    <reference ref_id="RHSA-2009:1427" ref_url="https://access.redhat.com/errata/RHSA-2009:1427" source="RHSA"/>
    <reference ref_id="CVE-2007-4565" ref_url="https://access.redhat.com/security/cve/CVE-2007-4565" source="CVE"/>
    <reference ref_id="CVE-2008-2711" ref_url="https://access.redhat.com/security/cve/CVE-2008-2711" source="CVE"/>
    <reference ref_id="CVE-2009-2666" ref_url="https://access.redhat.com/security/cve/CVE-2009-2666" source="CVE"/>
    <description>Fetchmail is a remote mail retrieval and forwarding utility intended for
use over on-demand TCP/IP links, such as SLIP and PPP connections.

It was discovered that fetchmail is affected by the previously published
&quot;null prefix attack&quot;, caused by incorrect handling of NULL characters in
X.509 certificates. If an attacker is able to get a carefully-crafted
certificate signed by a trusted Certificate Authority, the attacker could
use the certificate during a man-in-the-middle attack and potentially
confuse fetchmail into accepting it by mistake. (CVE-2009-2666)

A flaw was found in the way fetchmail handles rejections from a remote SMTP
server when sending warning mail to the postmaster. If fetchmail sent a
warning mail to the postmaster of an SMTP server and that SMTP server
rejected it, fetchmail could crash. (CVE-2007-4565)

A flaw was found in fetchmail. When fetchmail is run in double verbose
mode (&quot;-v -v&quot;), it could crash upon receiving certain, malformed mail
messages with long headers. A remote attacker could use this flaw to cause
a denial of service if fetchmail was also running in daemon mode (&quot;-d&quot;).
(CVE-2008-2711)

Note: when using SSL-enabled services, it is recommended that the fetchmail
&quot;--sslcertck&quot; option be used to enforce strict SSL certificate checking.

All fetchmail users should upgrade to this updated package, which contains
backported patches to correct these issues. If fetchmail is running in
daemon mode, it must be restarted for this update to take effect (use the
&quot;fetchmail --quit&quot; command to stop the fetchmail process).</description>
    <advisory from="secalert@redhat.com">
     <severity>Moderate</severity>
     <rights>Copyright 2009 Red Hat, Inc.</rights>
     <issued date="2009-09-08"/>
     <updated date="2009-09-08"/>
     <cve cvss2="2.6/AV:N/AC:H/Au:N/C:N/I:N/A:P" cwe="CWE-476" href="https://access.redhat.com/security/cve/CVE-2007-4565" impact="low" public="20070828">CVE-2007-4565</cve>
     <cve cvss2="2.6/AV:N/AC:H/Au:N/C:N/I:N/A:P" href="https://access.redhat.com/security/cve/CVE-2008-2711" impact="low" public="20080613">CVE-2008-2711</cve>
     <cve cvss2="4.3/AV:N/AC:M/Au:N/C:N/I:P/A:N" href="https://access.redhat.com/security/cve/CVE-2009-2666" public="20090805">CVE-2009-2666</cve>
     <bugzilla href="https://bugzilla.redhat.com/260601" id="260601">CVE-2007-4565 Fetchmail NULL pointer dereference</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/451758" id="451758">CVE-2008-2711 fetchmail: Crash in large log messages in verbose mode</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/515804" id="515804">CVE-2009-2666 fetchmail: SSL null terminator bypass</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:5</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criterion comment="fetchmail is earlier than 0:6.2.0-3.el3.5" test_ref="oval:com.redhat.rhsa:tst:20091427001"/>
     <criterion comment="fetchmail is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070018002"/>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criterion comment="fetchmail is earlier than 0:6.2.5-6.0.1.el4_8.1" test_ref="oval:com.redhat.rhsa:tst:20091427004"/>
     <criterion comment="fetchmail is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070018002"/>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 5 is installed" test_ref="oval:com.redhat.rhsa:tst:20070066013"/>
     <criterion comment="fetchmail is earlier than 0:6.3.6-1.1.el5_3.1" test_ref="oval:com.redhat.rhsa:tst:20091427006"/>
     <criterion comment="fetchmail is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070385007"/>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20091432" version="633">
   <metadata>
    <title>RHSA-2009:1432: seamonkey security update (Critical)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
    </affected>
    <reference ref_id="RHSA-2009:1432" ref_url="https://access.redhat.com/errata/RHSA-2009:1432" source="RHSA"/>
    <reference ref_id="CVE-2009-2408" ref_url="https://access.redhat.com/security/cve/CVE-2009-2408" source="CVE"/>
    <reference ref_id="CVE-2009-2409" ref_url="https://access.redhat.com/security/cve/CVE-2009-2409" source="CVE"/>
    <reference ref_id="CVE-2009-2654" ref_url="https://access.redhat.com/security/cve/CVE-2009-2654" source="CVE"/>
    <reference ref_id="CVE-2009-3072" ref_url="https://access.redhat.com/security/cve/CVE-2009-3072" source="CVE"/>
    <reference ref_id="CVE-2009-3075" ref_url="https://access.redhat.com/security/cve/CVE-2009-3075" source="CVE"/>
    <reference ref_id="CVE-2009-3076" ref_url="https://access.redhat.com/security/cve/CVE-2009-3076" source="CVE"/>
    <reference ref_id="CVE-2009-3077" ref_url="https://access.redhat.com/security/cve/CVE-2009-3077" source="CVE"/>
    <description>SeaMonkey is an open source Web browser, email and newsgroup client, IRC
chat client, and HTML editor.

Several flaws were found in the processing of malformed web content. A web
page containing malicious content could cause SeaMonkey to crash or,
potentially, execute arbitrary code with the privileges of the user running
SeaMonkey. (CVE-2009-3072, CVE-2009-3075)

A use-after-free flaw was found in SeaMonkey. An attacker could use this
flaw to crash SeaMonkey or, potentially, execute arbitrary code with the
privileges of the user running SeaMonkey. (CVE-2009-3077)

Dan Kaminsky discovered flaws in the way browsers such as SeaMonkey handle
NULL characters in a certificate. If an attacker is able to get a
carefully-crafted certificate signed by a Certificate Authority trusted by
SeaMonkey, the attacker could use the certificate during a
man-in-the-middle attack and potentially confuse SeaMonkey into accepting
it by mistake. (CVE-2009-2408)

Descriptions in the dialogs when adding and removing PKCS #11 modules were
not informative. An attacker able to trick a user into installing a
malicious PKCS #11 module could use this flaw to install their own
Certificate Authority certificates on a user's machine, making it possible
to trick the user into believing they are viewing a trusted site or,
potentially, execute arbitrary code with the privileges of the user running
SeaMonkey. (CVE-2009-3076)

A flaw was found in the way SeaMonkey displays the address bar when
window.open() is called in a certain way. An attacker could use this flaw
to conceal a malicious URL, possibly tricking a user into believing they
are viewing a trusted site. (CVE-2009-2654)

Dan Kaminsky found that browsers still accept certificates with MD2 hash
signatures, even though MD2 is no longer considered a cryptographically
strong algorithm. This could make it easier for an attacker to create a
malicious certificate that would be treated as trusted by a browser. NSS
(provided by SeaMonkey) now disables the use of MD2 and MD4 algorithms
inside signatures by default. (CVE-2009-2409)

All SeaMonkey users should upgrade to these updated packages, which correct
these issues. After installing the update, SeaMonkey must be restarted for
the changes to take effect.</description>
    <advisory from="secalert@redhat.com">
     <severity>Critical</severity>
     <rights>Copyright 2009 Red Hat, Inc.</rights>
     <issued date="2009-09-09"/>
     <updated date="2009-09-09"/>
     <cve cvss2="4.3/AV:N/AC:M/Au:N/C:N/I:P/A:N" href="https://access.redhat.com/security/cve/CVE-2009-2408" impact="important" public="20090729">CVE-2009-2408</cve>
     <cve cvss2="2.6/AV:N/AC:H/Au:N/C:N/I:P/A:N" href="https://access.redhat.com/security/cve/CVE-2009-2409" impact="moderate" public="20090729">CVE-2009-2409</cve>
     <cve cvss2="4.3/AV:N/AC:M/Au:N/C:N/I:P/A:N" href="https://access.redhat.com/security/cve/CVE-2009-2654" impact="moderate" public="20090724">CVE-2009-2654</cve>
     <cve cvss2="6.8/AV:N/AC:M/Au:N/C:P/I:P/A:P" href="https://access.redhat.com/security/cve/CVE-2009-3072" public="20090909">CVE-2009-3072</cve>
     <cve cvss2="6.8/AV:N/AC:M/Au:N/C:P/I:P/A:P" href="https://access.redhat.com/security/cve/CVE-2009-3075" public="20090909">CVE-2009-3075</cve>
     <cve cvss2="4.3/AV:N/AC:M/Au:N/C:N/I:P/A:N" href="https://access.redhat.com/security/cve/CVE-2009-3076" impact="moderate" public="20090909">CVE-2009-3076</cve>
     <cve cvss2="6.8/AV:N/AC:M/Au:N/C:P/I:P/A:P" href="https://access.redhat.com/security/cve/CVE-2009-3077" public="20090909">CVE-2009-3077</cve>
     <bugzilla href="https://bugzilla.redhat.com/510197" id="510197">CVE-2009-2409 deprecate MD2 in SSL cert validation (Kaminsky)</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/510251" id="510251">CVE-2009-2408 firefox/nss: doesn't handle NULL in Common Name properly</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/521311" id="521311">CVE-2009-2654 firefox: URL bar spoofing vulnerability</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/521688" id="521688">CVE-2009-3072 Firefox 3.5.3 3.0.14 browser engine crashes</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/521691" id="521691">CVE-2009-3075 Firefox 3.5.2 3.0.14 JavaScript engine crashes</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/521692" id="521692">CVE-2009-3076 Firefox 3.0.14 Insufficient warning for PKCS11 module installation and removal</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/521693" id="521693">CVE-2009-3077 Firefox 3.5.3 3.0.14 TreeColumns dangling pointer vulnerability</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="AND">
    <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
    <criteria operator="OR">
     <criteria operator="AND">
      <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.45.el3" test_ref="oval:com.redhat.rhsa:tst:20091432001"/>
      <criterion comment="seamonkey-js-debugger is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578008"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.45.el3" test_ref="oval:com.redhat.rhsa:tst:20091432003"/>
      <criterion comment="seamonkey-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578014"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.45.el3" test_ref="oval:com.redhat.rhsa:tst:20091432005"/>
      <criterion comment="seamonkey-nspr is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578010"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.45.el3" test_ref="oval:com.redhat.rhsa:tst:20091432007"/>
      <criterion comment="seamonkey-dom-inspector is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578002"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.45.el3" test_ref="oval:com.redhat.rhsa:tst:20091432009"/>
      <criterion comment="seamonkey-chat is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578006"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.45.el3" test_ref="oval:com.redhat.rhsa:tst:20091432011"/>
      <criterion comment="seamonkey-nspr-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578004"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.45.el3" test_ref="oval:com.redhat.rhsa:tst:20091432013"/>
      <criterion comment="seamonkey-mail is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578020"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="seamonkey is earlier than 0:1.0.9-0.45.el3" test_ref="oval:com.redhat.rhsa:tst:20091432015"/>
      <criterion comment="seamonkey is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578018"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.45.el3" test_ref="oval:com.redhat.rhsa:tst:20091432017"/>
      <criterion comment="seamonkey-nss-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578012"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.45.el3" test_ref="oval:com.redhat.rhsa:tst:20091432019"/>
      <criterion comment="seamonkey-nss is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578016"/>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20091463" version="639">
   <metadata>
    <title>RHSA-2009:1463: newt security update (Moderate)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
     <platform>Red Hat Enterprise Linux 5</platform>
    </affected>
    <reference ref_id="RHSA-2009:1463" ref_url="https://access.redhat.com/errata/RHSA-2009:1463" source="RHSA"/>
    <reference ref_id="CVE-2009-2905" ref_url="https://access.redhat.com/security/cve/CVE-2009-2905" source="CVE"/>
    <description>Newt is a programming library for color text mode, widget-based user
interfaces. Newt can be used to add stacked windows, entry widgets,
checkboxes, radio buttons, labels, plain text fields, scrollbars, and so
on, to text mode user interfaces.

A heap-based buffer overflow flaw was found in the way newt processes
content that is to be displayed in a text dialog box. A local attacker
could issue a specially-crafted text dialog box display request (direct or
via a custom application), leading to a denial of service (application
crash) or, potentially, arbitrary code execution with the privileges of the
user running the application using the newt library. (CVE-2009-2905)

Users of newt should upgrade to these updated packages, which contain a
backported patch to correct this issue. After installing the updated
packages, all applications using the newt library must be restarted for the
update to take effect.</description>
    <advisory from="secalert@redhat.com">
     <severity>Moderate</severity>
     <rights>Copyright 2009 Red Hat, Inc.</rights>
     <issued date="2009-09-24"/>
     <updated date="2009-09-24"/>
     <cve cvss2="4.6/AV:L/AC:L/Au:N/C:P/I:P/A:P" href="https://access.redhat.com/security/cve/CVE-2009-2905" public="20090924">CVE-2009-2905</cve>
     <bugzilla href="https://bugzilla.redhat.com/523955" id="523955">CVE-2009-2905 newt: heap-overflow in textbox when text reflowing</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:5</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="newt-devel is earlier than 0:0.51.5-2.el3" test_ref="oval:com.redhat.rhsa:tst:20091463001"/>
       <criterion comment="newt-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20091463002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="newt is earlier than 0:0.51.5-2.el3" test_ref="oval:com.redhat.rhsa:tst:20091463003"/>
       <criterion comment="newt is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20091463004"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="newt-devel is earlier than 0:0.51.6-10.el4_8.1" test_ref="oval:com.redhat.rhsa:tst:20091463006"/>
       <criterion comment="newt-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20091463002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="newt is earlier than 0:0.51.6-10.el4_8.1" test_ref="oval:com.redhat.rhsa:tst:20091463007"/>
       <criterion comment="newt is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20091463004"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 5 is installed" test_ref="oval:com.redhat.rhsa:tst:20070066013"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="newt-devel is earlier than 0:0.52.2-12.el5_4.1" test_ref="oval:com.redhat.rhsa:tst:20091463009"/>
       <criterion comment="newt-devel is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20091463010"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="newt is earlier than 0:0.52.2-12.el5_4.1" test_ref="oval:com.redhat.rhsa:tst:20091463011"/>
       <criterion comment="newt is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20091463012"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20091485" version="633">
   <metadata>
    <title>RHSA-2009:1485: postgresql security update (Moderate)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
    </affected>
    <reference ref_id="RHSA-2009:1485" ref_url="https://access.redhat.com/errata/RHSA-2009:1485" source="RHSA"/>
    <reference ref_id="CVE-2009-3230" ref_url="https://access.redhat.com/security/cve/CVE-2009-3230" source="CVE"/>
    <description>PostgreSQL is an advanced object-relational database management system
(DBMS).

It was discovered that the upstream patch for CVE-2007-6600 included in the
Red Hat Security Advisory RHSA-2008:0039 did not include protection against
misuse of the RESET ROLE and RESET SESSION AUTHORIZATION commands. An
authenticated user could use this flaw to install malicious code that would
later execute with superuser privileges. (CVE-2009-3230)

All PostgreSQL users should upgrade to these updated packages, which
contain a backported patch to correct this issue. If you are running a
PostgreSQL server, the postgresql service must be restarted for this update
to take effect.</description>
    <advisory from="secalert@redhat.com">
     <severity>Moderate</severity>
     <rights>Copyright 2009 Red Hat, Inc.</rights>
     <issued date="2009-10-07"/>
     <updated date="2009-10-07"/>
     <cve cvss2="6.5/AV:N/AC:L/Au:S/C:P/I:P/A:P" href="https://access.redhat.com/security/cve/CVE-2009-3230" public="20090909">CVE-2009-3230</cve>
     <bugzilla href="https://bugzilla.redhat.com/522085" id="522085">CVE-2009-3230 postgresql: SQL privilege escalation, incomplete fix for CVE-2007-6600</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="AND">
    <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
    <criteria operator="OR">
     <criteria operator="AND">
      <criterion comment="rh-postgresql-server is earlier than 0:7.3.21-2" test_ref="oval:com.redhat.rhsa:tst:20091485001"/>
      <criterion comment="rh-postgresql-server is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060526006"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="rh-postgresql-test is earlier than 0:7.3.21-2" test_ref="oval:com.redhat.rhsa:tst:20091485003"/>
      <criterion comment="rh-postgresql-test is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060526004"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="rh-postgresql-docs is earlier than 0:7.3.21-2" test_ref="oval:com.redhat.rhsa:tst:20091485005"/>
      <criterion comment="rh-postgresql-docs is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060526010"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="rh-postgresql-python is earlier than 0:7.3.21-2" test_ref="oval:com.redhat.rhsa:tst:20091485007"/>
      <criterion comment="rh-postgresql-python is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060526014"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="rh-postgresql-contrib is earlier than 0:7.3.21-2" test_ref="oval:com.redhat.rhsa:tst:20091485009"/>
      <criterion comment="rh-postgresql-contrib is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060526002"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="rh-postgresql-devel is earlier than 0:7.3.21-2" test_ref="oval:com.redhat.rhsa:tst:20091485011"/>
      <criterion comment="rh-postgresql-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060526018"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="rh-postgresql is earlier than 0:7.3.21-2" test_ref="oval:com.redhat.rhsa:tst:20091485013"/>
      <criterion comment="rh-postgresql is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060526022"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="rh-postgresql-libs is earlier than 0:7.3.21-2" test_ref="oval:com.redhat.rhsa:tst:20091485015"/>
      <criterion comment="rh-postgresql-libs is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060526008"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="rh-postgresql-jdbc is earlier than 0:7.3.21-2" test_ref="oval:com.redhat.rhsa:tst:20091485017"/>
      <criterion comment="rh-postgresql-jdbc is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060526012"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="rh-postgresql-pl is earlier than 0:7.3.21-2" test_ref="oval:com.redhat.rhsa:tst:20091485019"/>
      <criterion comment="rh-postgresql-pl is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060526016"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="rh-postgresql-tcl is earlier than 0:7.3.21-2" test_ref="oval:com.redhat.rhsa:tst:20091485021"/>
      <criterion comment="rh-postgresql-tcl is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060526020"/>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20091490" version="638">
   <metadata>
    <title>RHSA-2009:1490: squirrelmail security update (Moderate)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
     <platform>Red Hat Enterprise Linux 5</platform>
    </affected>
    <reference ref_id="RHSA-2009:1490" ref_url="https://access.redhat.com/errata/RHSA-2009:1490" source="RHSA"/>
    <reference ref_id="CVE-2009-2964" ref_url="https://access.redhat.com/security/cve/CVE-2009-2964" source="CVE"/>
    <description>SquirrelMail is a standards-based webmail package written in PHP.

Form submissions in SquirrelMail did not implement protection against
Cross-Site Request Forgery (CSRF) attacks. If a remote attacker tricked a
user into visiting a malicious web page, the attacker could hijack that
user's authentication, inject malicious content into that user's
preferences, or possibly send mail without that user's permission.
(CVE-2009-2964)

Users of SquirrelMail should upgrade to this updated package, which
contains a backported patch to correct these issues.</description>
    <advisory from="secalert@redhat.com">
     <severity>Moderate</severity>
     <rights>Copyright 2009 Red Hat, Inc.</rights>
     <issued date="2009-10-08"/>
     <updated date="2009-10-08"/>
     <cve cvss2="4.3/AV:N/AC:M/Au:N/C:N/I:P/A:N" cwe="CWE-352" href="https://access.redhat.com/security/cve/CVE-2009-2964" public="20090812">CVE-2009-2964</cve>
     <bugzilla href="https://bugzilla.redhat.com/517312" id="517312">CVE-2009-2964 squirrelmail: CSRF issues in all forms</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:5</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criterion comment="squirrelmail is earlier than 0:1.4.8-16.el3" test_ref="oval:com.redhat.rhsa:tst:20091490001"/>
     <criterion comment="squirrelmail is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060283002"/>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criterion comment="squirrelmail is earlier than 0:1.4.8-5.el4_8.8" test_ref="oval:com.redhat.rhsa:tst:20091490004"/>
     <criterion comment="squirrelmail is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060283002"/>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 5 is installed" test_ref="oval:com.redhat.rhsa:tst:20070066013"/>
     <criterion comment="squirrelmail is earlier than 0:1.4.8-5.el5_4.10" test_ref="oval:com.redhat.rhsa:tst:20091490006"/>
     <criterion comment="squirrelmail is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070358007"/>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20091500" version="635">
   <metadata>
    <title>RHSA-2009:1500: xpdf security update (Important)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
    </affected>
    <reference ref_id="RHSA-2009:1500" ref_url="https://access.redhat.com/errata/RHSA-2009:1500" source="RHSA"/>
    <reference ref_id="CVE-2009-0791" ref_url="https://access.redhat.com/security/cve/CVE-2009-0791" source="CVE"/>
    <reference ref_id="CVE-2009-3604" ref_url="https://access.redhat.com/security/cve/CVE-2009-3604" source="CVE"/>
    <reference ref_id="CVE-2009-3606" ref_url="https://access.redhat.com/security/cve/CVE-2009-3606" source="CVE"/>
    <reference ref_id="CVE-2009-3609" ref_url="https://access.redhat.com/security/cve/CVE-2009-3609" source="CVE"/>
    <description>Xpdf is an X Window System based viewer for Portable Document Format (PDF)
files.

Multiple integer overflow flaws were found in Xpdf. An attacker could
create a malicious PDF file that would cause Xpdf to crash or, potentially,
execute arbitrary code when opened. (CVE-2009-0791, CVE-2009-3604,
CVE-2009-3606, CVE-2009-3609)

Red Hat would like to thank Adam Zabrocki for reporting the CVE-2009-3604
issue.

Users are advised to upgrade to this updated package, which contains a
backported patch to correct these issues.</description>
    <advisory from="secalert@redhat.com">
     <severity>Important</severity>
     <rights>Copyright 2009 Red Hat, Inc.</rights>
     <issued date="2009-10-15"/>
     <updated date="2009-10-15"/>
     <cve cvss2="5.8/AV:A/AC:L/Au:N/C:P/I:P/A:P" cwe="CWE-190" href="https://access.redhat.com/security/cve/CVE-2009-0791" impact="moderate" public="20090519">CVE-2009-0791</cve>
     <cve cvss2="6.8/AV:N/AC:M/Au:N/C:P/I:P/A:P" cwe="CWE-190" href="https://access.redhat.com/security/cve/CVE-2009-3604" public="20091014">CVE-2009-3604</cve>
     <cve cvss2="3.7/AV:L/AC:H/Au:N/C:P/I:P/A:P" cwe="CWE-190" href="https://access.redhat.com/security/cve/CVE-2009-3606" impact="moderate" public="20091014">CVE-2009-3606</cve>
     <cve cvss2="2.1/AV:L/AC:L/Au:N/C:N/I:N/A:P" cwe="CWE-190" href="https://access.redhat.com/security/cve/CVE-2009-3609" impact="low" public="20091014">CVE-2009-3609</cve>
     <bugzilla href="https://bugzilla.redhat.com/491840" id="491840">CVE-2009-0791 xpdf: multiple integer overflows</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/526877" id="526877">CVE-2009-3606 xpdf/poppler: PSOutputDev::doImageL1Sep integer overflow</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/526893" id="526893">CVE-2009-3609 xpdf/poppler: ImageStream::ImageStream integer overflow</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/526911" id="526911">CVE-2009-3604 xpdf/poppler: Splash::drawImage integer overflow and missing allocation return value check</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="AND">
    <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
    <criterion comment="xpdf is earlier than 1:2.02-17.el3" test_ref="oval:com.redhat.rhsa:tst:20091500001"/>
    <criterion comment="xpdf is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070735002"/>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20091526" version="635">
   <metadata>
    <title>RHSA-2009:1526: Red Hat Enterprise Linux 3 - 1-Year End Of Life Notice (Low)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
    </affected>
    <reference ref_id="RHSA-2009:1526" ref_url="https://access.redhat.com/errata/RHSA-2009:1526" source="RHSA"/>
    <description>In accordance with the Red Hat Enterprise Linux Errata Support Policy, the
regular 7 year life-cycle of Red Hat Enterprise Linux 3 will end on October
31, 2010.

After this date, Red Hat will discontinue the regular subscription services
for Red Hat Enterprise Linux 3. Therefore, new bug fix, enhancement, and
security errata updates, as well as technical support services will no
longer be available for the following products:

* Red Hat Enterprise Linux AS 3
* Red Hat Enterprise Linux ES 3
* Red Hat Enterprise Linux WS 3
* Red Hat Enterprise Linux Extras 3
* Red Hat Desktop 3
* Red Hat Global File System 3
* Red Hat Cluster Suite 3

Customers still running production workloads on Red Hat Enterprise
Linux 3 are advised to begin planning the upgrade to Red Hat Enterprise
Linux 5. Active subscribers of Red Hat Enterprise Linux already have access
to all currently maintained versions of Red Hat Enterprise Linux, as part
of their subscription without additional fees.

For customers who are unable to migrate off Red Hat Enterprise Linux 3
before its end-of-life date, Red Hat may offer a limited, optional
extension program. For more information, contact your Red Hat sales
representative or channel partner.

Details of the Red Hat Enterprise Linux life-cycle can be found on the Red
Hat website: http://www.redhat.com/security/updates/errata/</description>
    <advisory from="secalert@redhat.com">
     <severity>Low</severity>
     <rights>Copyright 2009 Red Hat, Inc.</rights>
     <issued date="2009-11-09"/>
     <updated date="2009-11-09"/>
     <bugzilla href="https://bugzilla.redhat.com/531220" id="531220">Send Out RHEL 3 1-Year EOL Notice</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="AND">
    <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
    <criteria operator="OR">
     <criteria operator="AND">
      <criterion comment="redhat-release is earlier than 0:3Desktop-13.9.7" test_ref="oval:com.redhat.rhsa:tst:20091526001"/>
      <criterion comment="redhat-release is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20091526002"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="redhat-release is earlier than 0:3WS-13.9.7" test_ref="oval:com.redhat.rhsa:tst:20091526003"/>
      <criterion comment="redhat-release is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20091526002"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="redhat-release is earlier than 0:3ES-13.9.7" test_ref="oval:com.redhat.rhsa:tst:20091526004"/>
      <criterion comment="redhat-release is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20091526002"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="redhat-release is earlier than 0:3AS-13.9.7" test_ref="oval:com.redhat.rhsa:tst:20091526005"/>
      <criterion comment="redhat-release is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20091526002"/>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20091528" version="635">
   <metadata>
    <title>RHSA-2009:1528: samba security and bug fix update (Moderate)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
    </affected>
    <reference ref_id="RHSA-2009:1528" ref_url="https://access.redhat.com/errata/RHSA-2009:1528" source="RHSA"/>
    <reference ref_id="CVE-2009-2906" ref_url="https://access.redhat.com/security/cve/CVE-2009-2906" source="CVE"/>
    <description>Samba is a suite of programs used by machines to share files, printers, and
other information.

A denial of service flaw was found in the Samba smbd daemon. An
authenticated, remote user could send a specially-crafted response that
would cause an smbd child process to enter an infinite loop. An
authenticated, remote user could use this flaw to exhaust system resources
by opening multiple CIFS sessions. (CVE-2009-2906)

This update also fixes the following bug:

* the RHSA-2007:0354 update added code to escape input passed to scripts
that are run by Samba. This code was missing &quot;c&quot; from the list of valid
characters, causing it to be escaped. With this update, the previous patch
has been updated to include &quot;c&quot; in the list of valid characters.
(BZ#242754)

Users of Samba should upgrade to these updated packages, which contain a
backported patch to correct this issue. After installing this update,
the smb service will be restarted automatically.</description>
    <advisory from="secalert@redhat.com">
     <severity>Moderate</severity>
     <rights>Copyright 2009 Red Hat, Inc.</rights>
     <issued date="2009-10-27"/>
     <updated date="2009-10-27"/>
     <cve cvss2="2.3/AV:A/AC:M/Au:S/C:N/I:N/A:P" cwe="CWE-835" href="https://access.redhat.com/security/cve/CVE-2009-2906" public="20091001">CVE-2009-2906</cve>
     <bugzilla href="https://bugzilla.redhat.com/242754" id="242754">Missing character bug in latest security patches</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/526645" id="526645">CVE-2009-2906 samba: infinite loop flaw in smbd on unexpected oplock break notification reply</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="AND">
    <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
    <criteria operator="OR">
     <criteria operator="AND">
      <criterion comment="samba-swat is earlier than 0:3.0.9-1.3E.16" test_ref="oval:com.redhat.rhsa:tst:20091528001"/>
      <criterion comment="samba-swat is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060591006"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="samba-client is earlier than 0:3.0.9-1.3E.16" test_ref="oval:com.redhat.rhsa:tst:20091528003"/>
      <criterion comment="samba-client is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060591008"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="samba-common is earlier than 0:3.0.9-1.3E.16" test_ref="oval:com.redhat.rhsa:tst:20091528005"/>
      <criterion comment="samba-common is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060591002"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="samba is earlier than 0:3.0.9-1.3E.16" test_ref="oval:com.redhat.rhsa:tst:20091528007"/>
      <criterion comment="samba is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060591004"/>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20091531" version="636">
   <metadata>
    <title>RHSA-2009:1531: seamonkey security update (Critical)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
    </affected>
    <reference ref_id="RHSA-2009:1531" ref_url="https://access.redhat.com/errata/RHSA-2009:1531" source="RHSA"/>
    <reference ref_id="CVE-2009-0689" ref_url="https://access.redhat.com/security/cve/CVE-2009-0689" source="CVE"/>
    <reference ref_id="CVE-2009-1563" ref_url="https://access.redhat.com/security/cve/CVE-2009-1563" source="CVE"/>
    <reference ref_id="CVE-2009-3274" ref_url="https://access.redhat.com/security/cve/CVE-2009-3274" source="CVE"/>
    <reference ref_id="CVE-2009-3375" ref_url="https://access.redhat.com/security/cve/CVE-2009-3375" source="CVE"/>
    <reference ref_id="CVE-2009-3376" ref_url="https://access.redhat.com/security/cve/CVE-2009-3376" source="CVE"/>
    <reference ref_id="CVE-2009-3380" ref_url="https://access.redhat.com/security/cve/CVE-2009-3380" source="CVE"/>
    <reference ref_id="CVE-2009-3384" ref_url="https://access.redhat.com/security/cve/CVE-2009-3384" source="CVE"/>
    <reference ref_id="CVE-2009-3385" ref_url="https://access.redhat.com/security/cve/CVE-2009-3385" source="CVE"/>
    <description>SeaMonkey is an open source Web browser, email and newsgroup client, IRC
chat client, and HTML editor.

A flaw was found in the way SeaMonkey creates temporary file names for
downloaded files. If a local attacker knows the name of a file SeaMonkey is
going to download, they can replace the contents of that file with
arbitrary contents. (CVE-2009-3274)

A heap-based buffer overflow flaw was found in the SeaMonkey string to
floating point conversion routines. A web page containing malicious
JavaScript could crash SeaMonkey or, potentially, execute arbitrary code
with the privileges of the user running SeaMonkey. (CVE-2009-1563)

A flaw was found in the way SeaMonkey handles text selection. A malicious
website may be able to read highlighted text in a different domain (e.g.
another website the user is viewing), bypassing the same-origin policy.
(CVE-2009-3375)

A flaw was found in the way SeaMonkey displays a right-to-left override
character when downloading a file. In these cases, the name displayed in
the title bar differs from the name displayed in the dialog body. An
attacker could use this flaw to trick a user into downloading a file that
has a file name or extension that differs from what the user expected.
(CVE-2009-3376)

Several flaws were found in the processing of malformed web content. A web
page containing malicious content could cause SeaMonkey to crash or,
potentially, execute arbitrary code with the privileges of the user running
SeaMonkey. (CVE-2009-3380)

All SeaMonkey users should upgrade to these updated packages, which correct
these issues. After installing the update, SeaMonkey must be restarted for
the changes to take effect.</description>
    <advisory from="secalert@redhat.com">
     <severity>Critical</severity>
     <rights>Copyright 2009 Red Hat, Inc.</rights>
     <issued date="2009-10-27"/>
     <updated date="2009-10-27"/>
     <cve cvss2="6.8/AV:N/AC:M/Au:N/C:P/I:P/A:P" href="https://access.redhat.com/security/cve/CVE-2009-0689" public="20091120">CVE-2009-0689</cve>
     <cve cvss2="6.8/AV:N/AC:M/Au:N/C:P/I:P/A:P" cwe="CWE-122" href="https://access.redhat.com/security/cve/CVE-2009-1563" public="20091027">CVE-2009-1563</cve>
     <cve cvss2="3.6/AV:L/AC:L/Au:N/C:P/I:P/A:N" href="https://access.redhat.com/security/cve/CVE-2009-3274" impact="moderate" public="20090909">CVE-2009-3274</cve>
     <cve cvss2="4.3/AV:N/AC:M/Au:N/C:P/I:N/A:N" href="https://access.redhat.com/security/cve/CVE-2009-3375" impact="moderate" public="20091027">CVE-2009-3375</cve>
     <cve cvss2="2.6/AV:N/AC:H/Au:N/C:N/I:P/A:N" href="https://access.redhat.com/security/cve/CVE-2009-3376" impact="low" public="20091027">CVE-2009-3376</cve>
     <cve cvss2="6.8/AV:N/AC:M/Au:N/C:P/I:P/A:P" href="https://access.redhat.com/security/cve/CVE-2009-3380" public="20091027">CVE-2009-3380</cve>
     <cve cvss2="6.8/AV:N/AC:M/Au:N/C:P/I:P/A:P" cwe="CWE-190" href="https://access.redhat.com/security/cve/CVE-2009-3384" public="20091027">CVE-2009-3384</cve>
     <cve cvss2="5.8/AV:N/AC:M/Au:N/C:P/I:P/A:N" href="https://access.redhat.com/security/cve/CVE-2009-3385" public="20091027">CVE-2009-3385</cve>
     <bugzilla href="https://bugzilla.redhat.com/524815" id="524815">CVE-2009-3274 Firefox: Predictable /tmp pathname use</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/530162" id="530162">CVE-2009-0689 (rejected CVE-2009-1563) Firefox heap buffer overflow in string to number conversion</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/530167" id="530167">CVE-2009-3375 Firefox cross-origin data theft through document.getSelection()</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/530168" id="530168">CVE-2009-3376 Firefox download filename spoofing with RTL override</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/530567" id="530567">CVE-2009-3380 Firefox crashes with evidence of memory corruption</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.47.el3" test_ref="oval:com.redhat.rhsa:tst:20091531001"/>
       <criterion comment="seamonkey-nss-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578012"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.47.el3" test_ref="oval:com.redhat.rhsa:tst:20091531003"/>
       <criterion comment="seamonkey-mail is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578020"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey is earlier than 0:1.0.9-0.47.el3" test_ref="oval:com.redhat.rhsa:tst:20091531005"/>
       <criterion comment="seamonkey is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578018"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.47.el3" test_ref="oval:com.redhat.rhsa:tst:20091531007"/>
       <criterion comment="seamonkey-nss is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578016"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.47.el3" test_ref="oval:com.redhat.rhsa:tst:20091531009"/>
       <criterion comment="seamonkey-js-debugger is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.47.el3" test_ref="oval:com.redhat.rhsa:tst:20091531011"/>
       <criterion comment="seamonkey-dom-inspector is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.47.el3" test_ref="oval:com.redhat.rhsa:tst:20091531013"/>
       <criterion comment="seamonkey-nspr-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.47.el3" test_ref="oval:com.redhat.rhsa:tst:20091531015"/>
       <criterion comment="seamonkey-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578014"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.47.el3" test_ref="oval:com.redhat.rhsa:tst:20091531017"/>
       <criterion comment="seamonkey-nspr is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578010"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.47.el3" test_ref="oval:com.redhat.rhsa:tst:20091531019"/>
       <criterion comment="seamonkey-chat is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578006"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="seamonkey is earlier than 0:1.0.9-50.el4_8" test_ref="oval:com.redhat.rhsa:tst:20091531022"/>
       <criterion comment="seamonkey is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578018"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-50.el4_8" test_ref="oval:com.redhat.rhsa:tst:20091531023"/>
       <criterion comment="seamonkey-js-debugger is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-mail is earlier than 0:1.0.9-50.el4_8" test_ref="oval:com.redhat.rhsa:tst:20091531024"/>
       <criterion comment="seamonkey-mail is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578020"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-chat is earlier than 0:1.0.9-50.el4_8" test_ref="oval:com.redhat.rhsa:tst:20091531025"/>
       <criterion comment="seamonkey-chat is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-devel is earlier than 0:1.0.9-50.el4_8" test_ref="oval:com.redhat.rhsa:tst:20091531026"/>
       <criterion comment="seamonkey-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578014"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-50.el4_8" test_ref="oval:com.redhat.rhsa:tst:20091531027"/>
       <criterion comment="seamonkey-dom-inspector is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578002"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20091535" version="635">
   <metadata>
    <title>RHSA-2009:1535: pidgin security update (Moderate)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
    </affected>
    <reference ref_id="RHSA-2009:1535" ref_url="https://access.redhat.com/errata/RHSA-2009:1535" source="RHSA"/>
    <reference ref_id="CVE-2009-2703" ref_url="https://access.redhat.com/security/cve/CVE-2009-2703" source="CVE"/>
    <reference ref_id="CVE-2009-3083" ref_url="https://access.redhat.com/security/cve/CVE-2009-3083" source="CVE"/>
    <reference ref_id="CVE-2009-3615" ref_url="https://access.redhat.com/security/cve/CVE-2009-3615" source="CVE"/>
    <description>Pidgin is an instant messaging program which can log in to multiple
accounts on multiple instant messaging networks simultaneously.

An invalid pointer dereference bug was found in the way the Pidgin OSCAR
protocol implementation processed lists of contacts. A remote attacker
could send a specially-crafted contact list to a user running Pidgin,
causing Pidgin to crash. (CVE-2009-3615)

A NULL pointer dereference flaw was found in the way the Pidgin IRC
protocol plug-in handles IRC topics. A malicious IRC server could send a
specially-crafted IRC TOPIC message, which once received by Pidgin, would
lead to a denial of service (Pidgin crash). (CVE-2009-2703)

A NULL pointer dereference flaw was found in the way the Pidgin MSN
protocol plug-in handles improper MSNSLP invitations. A remote attacker
could send a specially-crafted MSNSLP invitation request, which once
accepted by a valid Pidgin user, would lead to a denial of service (Pidgin
crash). (CVE-2009-3083)

All Pidgin users should upgrade to this updated package, which contains
backported patches to resolve these issues. Pidgin must be restarted for
this update to take effect.</description>
    <advisory from="secalert@redhat.com">
     <severity>Moderate</severity>
     <rights>Copyright 2009 Red Hat, Inc.</rights>
     <issued date="2009-10-29"/>
     <updated date="2009-10-29"/>
     <cve cvss2="4.3/AV:N/AC:M/Au:N/C:N/I:N/A:P" cwe="CWE-476" href="https://access.redhat.com/security/cve/CVE-2009-2703" impact="low" public="20090903">CVE-2009-2703</cve>
     <cve cvss2="4.3/AV:N/AC:M/Au:N/C:N/I:N/A:P" cwe="CWE-476" href="https://access.redhat.com/security/cve/CVE-2009-3083" impact="low" public="20090903">CVE-2009-3083</cve>
     <cve cvss2="4.3/AV:N/AC:M/Au:N/C:N/I:N/A:P" href="https://access.redhat.com/security/cve/CVE-2009-3615" public="20091010">CVE-2009-3615</cve>
     <bugzilla href="https://bugzilla.redhat.com/521823" id="521823">CVE-2009-2703 Pidgin: NULL pointer dereference by handling IRC topic(s) (DoS)</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/521832" id="521832">CVE-2009-3083 Pidgin: NULL pointer dereference by processing incomplete MSN SLP invite (DoS)</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/529357" id="529357">CVE-2009-3615 Pidgin: Invalid pointer dereference (crash) after receiving contacts from SIM IM client</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="AND">
    <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
    <criterion comment="pidgin is earlier than 0:1.5.1-6.el3" test_ref="oval:com.redhat.rhsa:tst:20091535001"/>
    <criterion comment="pidgin is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20080584002"/>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20091549" version="632">
   <metadata>
    <title>RHSA-2009:1549: wget security update (Moderate)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
     <platform>Red Hat Enterprise Linux 5</platform>
    </affected>
    <reference ref_id="RHSA-2009:1549" ref_url="https://access.redhat.com/errata/RHSA-2009:1549" source="RHSA"/>
    <reference ref_id="CVE-2009-3490" ref_url="https://access.redhat.com/security/cve/CVE-2009-3490" source="CVE"/>
    <description>GNU Wget is a file retrieval utility that can use HTTP, HTTPS, and FTP.

Daniel Stenberg reported that Wget is affected by the previously published
&quot;null prefix attack&quot;, caused by incorrect handling of NULL characters in
X.509 certificates. If an attacker is able to get a carefully-crafted
certificate signed by a trusted Certificate Authority, the attacker could
use the certificate during a man-in-the-middle attack and potentially
confuse Wget into accepting it by mistake. (CVE-2009-3490)

Wget users should upgrade to this updated package, which contains a
backported patch to correct this issue.</description>
    <advisory from="secalert@redhat.com">
     <severity>Moderate</severity>
     <rights>Copyright 2009 Red Hat, Inc.</rights>
     <issued date="2009-11-03"/>
     <updated date="2009-11-03"/>
     <cve cvss2="4/AV:N/AC:H/Au:N/C:P/I:P/A:N" href="https://access.redhat.com/security/cve/CVE-2009-3490" public="20090812">CVE-2009-3490</cve>
     <bugzilla href="https://bugzilla.redhat.com/520454" id="520454">CVE-2009-3490 wget: incorrect verification of SSL certificate with NUL in name</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:5</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criterion comment="wget is earlier than 0:1.10.2-0.30E.1" test_ref="oval:com.redhat.rhsa:tst:20091549001"/>
     <criterion comment="wget is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20091549002"/>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criterion comment="wget is earlier than 0:1.10.2-1.el4_8.1" test_ref="oval:com.redhat.rhsa:tst:20091549004"/>
     <criterion comment="wget is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20091549002"/>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 5 is installed" test_ref="oval:com.redhat.rhsa:tst:20070066013"/>
     <criterion comment="wget is earlier than 0:1.11.4-2.el5_4.1" test_ref="oval:com.redhat.rhsa:tst:20091549006"/>
     <criterion comment="wget is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20091549007"/>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20091550" version="654">
   <metadata>
    <title>RHSA-2009:1550: kernel security and bug fix update (Important)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
    </affected>
    <reference ref_id="RHSA-2009:1550" ref_url="https://access.redhat.com/errata/RHSA-2009:1550" source="RHSA"/>
    <reference ref_id="CVE-2008-5029" ref_url="https://access.redhat.com/security/cve/CVE-2008-5029" source="CVE"/>
    <reference ref_id="CVE-2008-5300" ref_url="https://access.redhat.com/security/cve/CVE-2008-5300" source="CVE"/>
    <reference ref_id="CVE-2009-1337" ref_url="https://access.redhat.com/security/cve/CVE-2009-1337" source="CVE"/>
    <reference ref_id="CVE-2009-1385" ref_url="https://access.redhat.com/security/cve/CVE-2009-1385" source="CVE"/>
    <reference ref_id="CVE-2009-1895" ref_url="https://access.redhat.com/security/cve/CVE-2009-1895" source="CVE"/>
    <reference ref_id="CVE-2009-2848" ref_url="https://access.redhat.com/security/cve/CVE-2009-2848" source="CVE"/>
    <reference ref_id="CVE-2009-3002" ref_url="https://access.redhat.com/security/cve/CVE-2009-3002" source="CVE"/>
    <reference ref_id="CVE-2009-3547" ref_url="https://access.redhat.com/security/cve/CVE-2009-3547" source="CVE"/>
    <description>The kernel packages contain the Linux kernel, the core of any Linux
operating system.

Security fixes:

* when fput() was called to close a socket, the __scm_destroy() function in
the Linux kernel could make indirect recursive calls to itself. This could,
potentially, lead to a denial of service issue. (CVE-2008-5029, Important)

* the sendmsg() function in the Linux kernel did not block during UNIX
socket garbage collection. This could, potentially, lead to a local denial
of service. (CVE-2008-5300, Important)

* the exit_notify() function in the Linux kernel did not properly reset the
exit signal if a process executed a set user ID (setuid) application before
exiting. This could allow a local, unprivileged user to elevate their
privileges. (CVE-2009-1337, Important)

* a flaw was found in the Intel PRO/1000 network driver in the Linux
kernel. Frames with sizes near the MTU of an interface may be split across
multiple hardware receive descriptors. Receipt of such a frame could leak
through a validation check, leading to a corruption of the length check. A
remote attacker could use this flaw to send a specially-crafted packet that
would cause a denial of service or code execution. (CVE-2009-1385,
Important)

* the ADDR_COMPAT_LAYOUT and MMAP_PAGE_ZERO flags were not cleared when a
setuid or setgid program was executed. A local, unprivileged user could use
this flaw to bypass the mmap_min_addr protection mechanism and perform a
NULL pointer dereference attack, or bypass the Address Space Layout
Randomization (ASLR) security feature. (CVE-2009-1895, Important)

* it was discovered that, when executing a new process, the clear_child_tid
pointer in the Linux kernel is not cleared. If this pointer points to a
writable portion of the memory of the new program, the kernel could corrupt
four bytes of memory, possibly leading to a local denial of service or
privilege escalation. (CVE-2009-2848, Important)

* missing initialization flaws were found in getname() implementations in
the IrDA sockets, AppleTalk DDP protocol, NET/ROM protocol, and ROSE
protocol implementations in the Linux kernel. Certain data structures in
these getname() implementations were not initialized properly before being
copied to user-space. These flaws could lead to an information leak.
(CVE-2009-3002, Important)

* a NULL pointer dereference flaw was found in each of the following
functions in the Linux kernel: pipe_read_open(), pipe_write_open(), and
pipe_rdwr_open(). When the mutex lock is not held, the i_pipe pointer could
be released by other processes before it is used to update the pipe's
reader and writer counters. This could lead to a local denial of service or
privilege escalation. (CVE-2009-3547, Important)

Bug fixes:

* this update adds the mmap_min_addr tunable and restriction checks to help
prevent unprivileged users from creating new memory mappings below the
minimum address. This can help prevent the exploitation of NULL pointer
dereference bugs. Note that mmap_min_addr is set to zero (disabled) by
default for backwards compatibility. (BZ#512642)

* a bridge reference count problem in IPv6 has been fixed. (BZ#457010)

* enforce null-termination of user-supplied arguments to setsockopt().
(BZ#505514)

* the gcc flag &quot;-fno-delete-null-pointer-checks&quot; was added to the kernel
build options. This prevents gcc from optimizing out NULL pointer checks
after the first use of a pointer. NULL pointer bugs are often exploited by
attackers. Keeping these checks is a safety measure. (BZ#511185)

* a check has been added to the IPv4 code to make sure that rt is not NULL,
to help prevent future bugs in functions that call ip_append_data() from
being exploitable. (BZ#520300)

Users should upgrade to these updated packages, which contain backported
patches to correct these issues. The system must be rebooted for this
update to take effect.</description>
    <advisory from="secalert@redhat.com">
     <severity>Important</severity>
     <rights>Copyright 2009 Red Hat, Inc.</rights>
     <issued date="2009-11-03"/>
     <updated date="2009-11-03"/>
     <cve cvss2="4.9/AV:L/AC:L/Au:N/C:N/I:N/A:C" href="https://access.redhat.com/security/cve/CVE-2008-5029" public="20081106">CVE-2008-5029</cve>
     <cve href="https://access.redhat.com/security/cve/CVE-2008-5300" public="20081120">CVE-2008-5300</cve>
     <cve cvss2="6.9/AV:L/AC:M/Au:N/C:C/I:C/A:C" href="https://access.redhat.com/security/cve/CVE-2009-1337" public="20090225">CVE-2009-1337</cve>
     <cve cvss2="7.1/AV:N/AC:M/Au:N/C:N/I:N/A:C" cwe="CWE-190 CWE-119" href="https://access.redhat.com/security/cve/CVE-2009-1385" public="20070425">CVE-2009-1385</cve>
     <cve cvss2="2.1/AV:L/AC:L/Au:N/C:N/I:P/A:N" href="https://access.redhat.com/security/cve/CVE-2009-1895" public="20090626">CVE-2009-1895</cve>
     <cve cvss2="7.2/AV:L/AC:L/Au:N/C:C/I:C/A:C" cwe="CWE-119" href="https://access.redhat.com/security/cve/CVE-2009-2848" public="20090731">CVE-2009-2848</cve>
     <cve cvss2="2.1/AV:L/AC:L/Au:N/C:P/I:N/A:N" href="https://access.redhat.com/security/cve/CVE-2009-3002" public="20090823">CVE-2009-3002</cve>
     <cve cvss2="7.2/AV:L/AC:L/Au:N/C:C/I:C/A:C" cwe="CWE-662 CWE-362 CWE-672 CWE-476" href="https://access.redhat.com/security/cve/CVE-2009-3547" public="20091014">CVE-2009-3547</cve>
     <bugzilla href="https://bugzilla.redhat.com/457010" id="457010">ipv6: use timer pending to fix bridge reference count problem [rhel-3.9]</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/470201" id="470201">CVE-2008-5029 kernel: Unix sockets kernel panic</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/473259" id="473259">CVE-2008-5300 kernel: fix soft lockups/OOM issues with unix socket garbage collector</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/493771" id="493771">CVE-2009-1337 kernel: exit_notify: kill the wrong capable(CAP_KILL) check</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/502981" id="502981">CVE-2009-1385 kernel: e1000_clean_rx_irq() denial of service</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/505514" id="505514">kernel: ensure devname passed to SO_BINDTODEVICE is NULL-terminated [rhel-3]</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/511171" id="511171">CVE-2009-1895 kernel: personality: fix PER_CLEAR_ON_SETID</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/511185" id="511185">kernel: build with -fno-delete-null-pointer-checks [rhel-3]</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/512642" id="512642">kernel: security: implement mmap_min_addr infrastructure [rhel-3]</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/515423" id="515423">CVE-2009-2848 kernel: execve: must clear current-&gt;clear_child_tid</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/519305" id="519305">CVE-2009-3001, CVE-2009-3002 kernel: numerous getname() infoleaks</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/520300" id="520300">kernel: ipv4: make ip_append_data() handle NULL routing table [rhel-3]</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/530490" id="530490">CVE-2009-3547 kernel: fs: pipe.c null pointer dereference</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="AND">
    <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
    <criteria operator="OR">
     <criteria operator="AND">
      <criterion comment="kernel-doc is earlier than 0:2.4.21-63.EL" test_ref="oval:com.redhat.rhsa:tst:20091550001"/>
      <criterion comment="kernel-doc is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060140006"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="kernel-source is earlier than 0:2.4.21-63.EL" test_ref="oval:com.redhat.rhsa:tst:20091550003"/>
      <criterion comment="kernel-source is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060140012"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="kernel is earlier than 0:2.4.21-63.EL" test_ref="oval:com.redhat.rhsa:tst:20091550005"/>
      <criterion comment="kernel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060140010"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="kernel-unsupported is earlier than 0:2.4.21-63.EL" test_ref="oval:com.redhat.rhsa:tst:20091550007"/>
      <criterion comment="kernel-unsupported is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060140002"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="kernel-smp is earlier than 0:2.4.21-63.EL" test_ref="oval:com.redhat.rhsa:tst:20091550009"/>
      <criterion comment="kernel-smp is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060140008"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-63.EL" test_ref="oval:com.redhat.rhsa:tst:20091550011"/>
      <criterion comment="kernel-hugemem-unsupported is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060140014"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="kernel-smp-unsupported is earlier than 0:2.4.21-63.EL" test_ref="oval:com.redhat.rhsa:tst:20091550013"/>
      <criterion comment="kernel-smp-unsupported is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060140004"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="kernel-hugemem is earlier than 0:2.4.21-63.EL" test_ref="oval:com.redhat.rhsa:tst:20091550015"/>
      <criterion comment="kernel-hugemem is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060140018"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="kernel-BOOT is earlier than 0:2.4.21-63.EL" test_ref="oval:com.redhat.rhsa:tst:20091550017"/>
      <criterion comment="kernel-BOOT is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060140016"/>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20091561" version="633">
   <metadata>
    <title>RHSA-2009:1561: libvorbis security update (Important)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
     <platform>Red Hat Enterprise Linux 5</platform>
    </affected>
    <reference ref_id="RHSA-2009:1561" ref_url="https://access.redhat.com/errata/RHSA-2009:1561" source="RHSA"/>
    <reference ref_id="CVE-2009-3379" ref_url="https://access.redhat.com/security/cve/CVE-2009-3379" source="CVE"/>
    <description>The libvorbis packages contain runtime libraries for use in programs that
support Ogg Vorbis. Ogg Vorbis is a fully open, non-proprietary, patent-and
royalty-free, general-purpose compressed audio format.

Multiple flaws were found in the libvorbis library. A specially-crafted Ogg
Vorbis media format file (Ogg) could cause an application using libvorbis
to crash or, possibly, execute arbitrary code when opened. (CVE-2009-3379)

Users of libvorbis should upgrade to these updated packages, which contain
backported patches to correct these issues. The desktop must be restarted
(log out, then log back in) for this update to take effect.</description>
    <advisory from="secalert@redhat.com">
     <severity>Important</severity>
     <rights>Copyright 2009 Red Hat, Inc.</rights>
     <issued date="2009-11-09"/>
     <updated date="2009-11-09"/>
     <cve cvss2="6.8/AV:N/AC:M/Au:N/C:P/I:P/A:P" href="https://access.redhat.com/security/cve/CVE-2009-3379" public="20091027">CVE-2009-3379</cve>
     <bugzilla href="https://bugzilla.redhat.com/531765" id="531765">CVE-2009-3379 libvorbis: security fixes mentioned in MFSA 2009-63</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:5</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="libvorbis-devel is earlier than 1:1.0-12.el3" test_ref="oval:com.redhat.rhsa:tst:20091561001"/>
       <criterion comment="libvorbis-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070845004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="libvorbis is earlier than 1:1.0-12.el3" test_ref="oval:com.redhat.rhsa:tst:20091561003"/>
       <criterion comment="libvorbis is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070845002"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="libvorbis is earlier than 1:1.1.0-3.el4_8.3" test_ref="oval:com.redhat.rhsa:tst:20091561006"/>
       <criterion comment="libvorbis is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070845002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="libvorbis-devel is earlier than 1:1.1.0-3.el4_8.3" test_ref="oval:com.redhat.rhsa:tst:20091561007"/>
       <criterion comment="libvorbis-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070845004"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 5 is installed" test_ref="oval:com.redhat.rhsa:tst:20070066013"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="libvorbis is earlier than 1:1.1.2-3.el5_4.4" test_ref="oval:com.redhat.rhsa:tst:20091561009"/>
       <criterion comment="libvorbis is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070845010"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="libvorbis-devel is earlier than 1:1.1.2-3.el5_4.4" test_ref="oval:com.redhat.rhsa:tst:20091561011"/>
       <criterion comment="libvorbis-devel is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070845012"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20091572" version="635">
   <metadata>
    <title>RHSA-2009:1572: 4Suite security update (Moderate)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
    </affected>
    <reference ref_id="RHSA-2009:1572" ref_url="https://access.redhat.com/errata/RHSA-2009:1572" source="RHSA"/>
    <reference ref_id="CVE-2009-3720" ref_url="https://access.redhat.com/security/cve/CVE-2009-3720" source="CVE"/>
    <description>The 4Suite package contains XML-related tools and libraries for Python,
including 4DOM, 4XSLT, 4XPath, 4RDF, and 4XPointer.

A buffer over-read flaw was found in the way 4Suite's XML parser handles
malformed UTF-8 sequences when processing XML files. A specially-crafted
XML file could cause applications using the 4Suite library to crash while
parsing the file. (CVE-2009-3720)

Note: In Red Hat Enterprise Linux 3, this flaw only affects a non-default
configuration of the 4Suite package: configurations where the beta version
of the cDomlette module is enabled.

All 4Suite users should upgrade to this updated package, which contains a
backported patch to correct this issue. After installing the updated
package, applications using the 4Suite XML-related tools and libraries must
be restarted for the update to take effect.</description>
    <advisory from="secalert@redhat.com">
     <severity>Moderate</severity>
     <rights>Copyright 2009 Red Hat, Inc.</rights>
     <issued date="2009-11-10"/>
     <updated date="2009-11-10"/>
     <cve cvss2="5.0/AV:N/AC:L/Au:N/C:N/I:N/A:P" href="https://access.redhat.com/security/cve/CVE-2009-3720" public="20090117">CVE-2009-3720</cve>
     <bugzilla href="https://bugzilla.redhat.com/531697" id="531697">CVE-2009-3720 expat: buffer over-read and crash on XML with malformed UTF-8 sequences</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criterion comment="4Suite is earlier than 0:0.11.1-15" test_ref="oval:com.redhat.rhsa:tst:20091572001"/>
     <criterion comment="4Suite is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20091572002"/>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criterion comment="4Suite is earlier than 0:1.0-3.el4_8.1" test_ref="oval:com.redhat.rhsa:tst:20091572004"/>
     <criterion comment="4Suite is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20091572002"/>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20091579" version="645">
   <metadata>
    <title>RHSA-2009:1579: httpd security update (Moderate)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 5</platform>
    </affected>
    <reference ref_id="RHSA-2009:1579" ref_url="https://access.redhat.com/errata/RHSA-2009:1579" source="RHSA"/>
    <reference ref_id="CVE-2009-3094" ref_url="https://access.redhat.com/security/cve/CVE-2009-3094" source="CVE"/>
    <reference ref_id="CVE-2009-3095" ref_url="https://access.redhat.com/security/cve/CVE-2009-3095" source="CVE"/>
    <reference ref_id="CVE-2009-3555" ref_url="https://access.redhat.com/security/cve/CVE-2009-3555" source="CVE"/>
    <description>The Apache HTTP Server is a popular Web server.

A flaw was found in the way the TLS/SSL (Transport Layer Security/Secure
Sockets Layer) protocols handle session renegotiation. A man-in-the-middle
attacker could use this flaw to prefix arbitrary plain text to a client's
session (for example, an HTTPS connection to a website). This could force
the server to process an attacker's request as if authenticated using the
victim's credentials. This update partially mitigates this flaw for SSL
sessions to HTTP servers using mod_ssl by rejecting client-requested
renegotiation. (CVE-2009-3555)

Note: This update does not fully resolve the issue for HTTPS servers. An
attack is still possible in configurations that require a server-initiated
renegotiation. Refer to the following Knowledgebase article for further
information: http://kbase.redhat.com/faq/docs/DOC-20491

A NULL pointer dereference flaw was found in the Apache mod_proxy_ftp
module. A malicious FTP server to which requests are being proxied could
use this flaw to crash an httpd child process via a malformed reply to the
EPSV or PASV commands, resulting in a limited denial of service.
(CVE-2009-3094)

A second flaw was found in the Apache mod_proxy_ftp module. In a reverse
proxy configuration, a remote attacker could use this flaw to bypass
intended access restrictions by creating a carefully-crafted HTTP
Authorization header, allowing the attacker to send arbitrary commands to
the FTP server. (CVE-2009-3095)

All httpd users should upgrade to these updated packages, which contain
backported patches to correct these issues. After installing the updated
packages, the httpd daemon must be restarted for the update to take effect.</description>
    <advisory from="secalert@redhat.com">
     <severity>Moderate</severity>
     <rights>Copyright 2009 Red Hat, Inc.</rights>
     <issued date="2009-11-11"/>
     <updated date="2009-11-11"/>
     <cve cvss2="2.6/AV:N/AC:H/Au:N/C:N/I:N/A:P" href="https://access.redhat.com/security/cve/CVE-2009-3094" impact="low" public="20090902">CVE-2009-3094</cve>
     <cve cvss2="2.6/AV:N/AC:H/Au:N/C:N/I:P/A:N" href="https://access.redhat.com/security/cve/CVE-2009-3095" impact="low" public="20090903">CVE-2009-3095</cve>
     <cve cvss2="4.3/AV:N/AC:M/Au:N/C:N/I:P/A:N" cwe="CWE-300" href="https://access.redhat.com/security/cve/CVE-2009-3555" public="20091105">CVE-2009-3555</cve>
     <bugzilla href="https://bugzilla.redhat.com/521619" id="521619">CVE-2009-3094 httpd: NULL pointer defer in mod_proxy_ftp caused by crafted EPSV and PASV reply</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/522209" id="522209">CVE-2009-3095 httpd: mod_proxy_ftp FTP command injection via Authorization HTTP header</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/533125" id="533125">CVE-2009-3555 TLS: MITM attacks via session renegotiation</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:5</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="httpd is earlier than 0:2.0.46-77.ent" test_ref="oval:com.redhat.rhsa:tst:20091579001"/>
       <criterion comment="httpd is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060159006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="httpd-devel is earlier than 0:2.0.46-77.ent" test_ref="oval:com.redhat.rhsa:tst:20091579003"/>
       <criterion comment="httpd-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060159004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="mod_ssl is earlier than 1:2.0.46-77.ent" test_ref="oval:com.redhat.rhsa:tst:20091579005"/>
       <criterion comment="mod_ssl is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060159002"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 5 is installed" test_ref="oval:com.redhat.rhsa:tst:20070066013"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="httpd-manual is earlier than 0:2.2.3-31.el5_4.2" test_ref="oval:com.redhat.rhsa:tst:20091579008"/>
       <criterion comment="httpd-manual is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20080967023"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="httpd is earlier than 0:2.2.3-31.el5_4.2" test_ref="oval:com.redhat.rhsa:tst:20091579010"/>
       <criterion comment="httpd is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20080967017"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="httpd-devel is earlier than 0:2.2.3-31.el5_4.2" test_ref="oval:com.redhat.rhsa:tst:20091579012"/>
       <criterion comment="httpd-devel is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20080967021"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="mod_ssl is earlier than 1:2.2.3-31.el5_4.2" test_ref="oval:com.redhat.rhsa:tst:20091579014"/>
       <criterion comment="mod_ssl is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20080967019"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20091625" version="639">
   <metadata>
    <title>RHSA-2009:1625: expat security update (Moderate)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
     <platform>Red Hat Enterprise Linux 5</platform>
    </affected>
    <reference ref_id="RHSA-2009:1625" ref_url="https://access.redhat.com/errata/RHSA-2009:1625" source="RHSA"/>
    <reference ref_id="CVE-2009-3560" ref_url="https://access.redhat.com/security/cve/CVE-2009-3560" source="CVE"/>
    <reference ref_id="CVE-2009-3720" ref_url="https://access.redhat.com/security/cve/CVE-2009-3720" source="CVE"/>
    <description>Expat is a C library written by James Clark for parsing XML documents.

Two buffer over-read flaws were found in the way Expat handled malformed
UTF-8 sequences when processing XML files. A specially-crafted XML file
could cause applications using Expat to crash while parsing the file.
(CVE-2009-3560, CVE-2009-3720)

All expat users should upgrade to these updated packages, which contain
backported patches to correct these issues. After installing the updated
packages, applications using the Expat library must be restarted for the
update to take effect.</description>
    <advisory from="secalert@redhat.com">
     <severity>Moderate</severity>
     <rights>Copyright 2009 Red Hat, Inc.</rights>
     <issued date="2009-12-07"/>
     <updated date="2009-12-07"/>
     <cve cvss2="5.0/AV:N/AC:L/Au:N/C:N/I:N/A:P" href="https://access.redhat.com/security/cve/CVE-2009-3560" public="20091202">CVE-2009-3560</cve>
     <cve cvss2="5.0/AV:N/AC:L/Au:N/C:N/I:N/A:P" href="https://access.redhat.com/security/cve/CVE-2009-3720" public="20090117">CVE-2009-3720</cve>
     <bugzilla href="https://bugzilla.redhat.com/531697" id="531697">CVE-2009-3720 expat: buffer over-read and crash on XML with malformed UTF-8 sequences</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/533174" id="533174">CVE-2009-3560 expat: buffer over-read and crash in big2_toUtf8() on XML with malformed UTF-8 sequences</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:5</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="expat is earlier than 0:1.95.5-6.2" test_ref="oval:com.redhat.rhsa:tst:20091625001"/>
       <criterion comment="expat is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20091625002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="expat-devel is earlier than 0:1.95.5-6.2" test_ref="oval:com.redhat.rhsa:tst:20091625003"/>
       <criterion comment="expat-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20091625004"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="expat-devel is earlier than 0:1.95.7-4.el4_8.2" test_ref="oval:com.redhat.rhsa:tst:20091625006"/>
       <criterion comment="expat-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20091625004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="expat is earlier than 0:1.95.7-4.el4_8.2" test_ref="oval:com.redhat.rhsa:tst:20091625007"/>
       <criterion comment="expat is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20091625002"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 5 is installed" test_ref="oval:com.redhat.rhsa:tst:20070066013"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="expat is earlier than 0:1.95.8-8.3.el5_4.2" test_ref="oval:com.redhat.rhsa:tst:20091625009"/>
       <criterion comment="expat is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20091625010"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="expat-devel is earlier than 0:1.95.8-8.3.el5_4.2" test_ref="oval:com.redhat.rhsa:tst:20091625011"/>
       <criterion comment="expat-devel is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20091625012"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20091646" version="636">
   <metadata>
    <title>RHSA-2009:1646: libtool security update (Moderate)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
     <platform>Red Hat Enterprise Linux 5</platform>
    </affected>
    <reference ref_id="RHSA-2009:1646" ref_url="https://access.redhat.com/errata/RHSA-2009:1646" source="RHSA"/>
    <reference ref_id="CVE-2009-3736" ref_url="https://access.redhat.com/security/cve/CVE-2009-3736" source="CVE"/>
    <description>GNU Libtool is a set of shell scripts which automatically configure UNIX,
Linux, and similar operating systems to generically build shared libraries.

A flaw was found in the way GNU Libtool's libltdl library looked for
modules to load. It was possible for libltdl to load and run modules from
an arbitrary library in the current working directory. If a local attacker
could trick a local user into running an application (which uses libltdl)
from an attacker-controlled directory containing a malicious Libtool
control file (.la), the attacker could possibly execute arbitrary code with
the privileges of the user running the application. (CVE-2009-3736)

All libtool users should upgrade to these updated packages, which contain
a backported patch to correct this issue. After installing the updated
packages, applications using the libltdl library must be restarted for the
update to take effect.</description>
    <advisory from="secalert@redhat.com">
     <severity>Moderate</severity>
     <rights>Copyright 2009 Red Hat, Inc.</rights>
     <issued date="2009-12-08"/>
     <updated date="2009-12-08"/>
     <cve cvss2="6.2/AV:L/AC:H/Au:N/C:C/I:C/A:C" href="https://access.redhat.com/security/cve/CVE-2009-3736" public="20091116">CVE-2009-3736</cve>
     <bugzilla href="https://bugzilla.redhat.com/537941" id="537941">CVE-2009-3736 libtool: libltdl may load and execute code from a library in the current directory</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:5</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="libtool is earlier than 0:1.4.3-7" test_ref="oval:com.redhat.rhsa:tst:20091646001"/>
       <criterion comment="libtool is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20091646002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="libtool-libs is earlier than 0:1.4.3-7" test_ref="oval:com.redhat.rhsa:tst:20091646003"/>
       <criterion comment="libtool-libs is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20091646004"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="libtool-libs is earlier than 0:1.5.6-5.el4_8" test_ref="oval:com.redhat.rhsa:tst:20091646006"/>
       <criterion comment="libtool-libs is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20091646004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="libtool is earlier than 0:1.5.6-5.el4_8" test_ref="oval:com.redhat.rhsa:tst:20091646007"/>
       <criterion comment="libtool is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20091646002"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 5 is installed" test_ref="oval:com.redhat.rhsa:tst:20070066013"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="libtool-ltdl-devel is earlier than 0:1.5.22-7.el5_4" test_ref="oval:com.redhat.rhsa:tst:20091646009"/>
       <criterion comment="libtool-ltdl-devel is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20091646010"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="libtool-ltdl is earlier than 0:1.5.22-7.el5_4" test_ref="oval:com.redhat.rhsa:tst:20091646011"/>
       <criterion comment="libtool-ltdl is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20091646012"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="libtool is earlier than 0:1.5.22-7.el5_4" test_ref="oval:com.redhat.rhsa:tst:20091646013"/>
       <criterion comment="libtool is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20091646014"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20091651" version="634">
   <metadata>
    <title>RHSA-2009:1651: ntp security update (Moderate)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
    </affected>
    <reference ref_id="RHSA-2009:1651" ref_url="https://access.redhat.com/errata/RHSA-2009:1651" source="RHSA"/>
    <reference ref_id="CVE-2009-0159" ref_url="https://access.redhat.com/security/cve/CVE-2009-0159" source="CVE"/>
    <reference ref_id="CVE-2009-3563" ref_url="https://access.redhat.com/security/cve/CVE-2009-3563" source="CVE"/>
    <description>The Network Time Protocol (NTP) is used to synchronize a computer's time
with a referenced time source.

Robin Park and Dmitri Vinokurov discovered a flaw in the way ntpd handled
certain malformed NTP packets. ntpd logged information about all such
packets and replied with an NTP packet that was treated as malformed when
received by another ntpd. A remote attacker could use this flaw to create
an NTP packet reply loop between two ntpd servers via a malformed packet
with a spoofed source IP address and port, causing ntpd on those servers to
use excessive amounts of CPU time and fill disk space with log messages.
(CVE-2009-3563)

A buffer overflow flaw was found in the ntpq diagnostic command. A
malicious, remote server could send a specially-crafted reply to an ntpq
request that could crash ntpq or, potentially, execute arbitrary code with
the privileges of the user running the ntpq command. (CVE-2009-0159)

All ntp users are advised to upgrade to this updated package, which
contains backported patches to resolve these issues. After installing the
update, the ntpd daemon will restart automatically.</description>
    <advisory from="secalert@redhat.com">
     <severity>Moderate</severity>
     <rights>Copyright 2009 Red Hat, Inc.</rights>
     <issued date="2009-12-08"/>
     <updated date="2009-12-08"/>
     <cve cvss2="5.1/AV:N/AC:H/Au:N/C:P/I:P/A:P" cwe="CWE-121" href="https://access.redhat.com/security/cve/CVE-2009-0159" impact="low" public="20090409">CVE-2009-0159</cve>
     <cve cvss2="5/AV:N/AC:L/Au:N/C:N/I:N/A:P" href="https://access.redhat.com/security/cve/CVE-2009-3563" public="20091208">CVE-2009-3563</cve>
     <bugzilla href="https://bugzilla.redhat.com/490617" id="490617">CVE-2009-0159 ntp: buffer overflow in ntpq</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/531213" id="531213">CVE-2009-3563 ntpd: DoS with mode 7 packets (VU#568372)</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="AND">
    <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
    <criterion comment="ntp is earlier than 0:4.1.2-6.el3" test_ref="oval:com.redhat.rhsa:tst:20091651001"/>
    <criterion comment="ntp is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20091651002"/>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20091673" version="637">
   <metadata>
    <title>RHSA-2009:1673: seamonkey security update (Critical)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
    </affected>
    <reference ref_id="RHSA-2009:1673" ref_url="https://access.redhat.com/errata/RHSA-2009:1673" source="RHSA"/>
    <reference ref_id="CVE-2009-3979" ref_url="https://access.redhat.com/security/cve/CVE-2009-3979" source="CVE"/>
    <reference ref_id="CVE-2009-3983" ref_url="https://access.redhat.com/security/cve/CVE-2009-3983" source="CVE"/>
    <reference ref_id="CVE-2009-3984" ref_url="https://access.redhat.com/security/cve/CVE-2009-3984" source="CVE"/>
    <description>SeaMonkey is an open source Web browser, email and newsgroup client, IRC
chat client, and HTML editor.

Several flaws were found in the processing of malformed web content. A web
page containing malicious content could cause SeaMonkey to crash or,
potentially, execute arbitrary code with the privileges of the user running
SeaMonkey. (CVE-2009-3979)

A flaw was found in the SeaMonkey NT Lan Manager (NTLM) authentication
protocol implementation. If an attacker could trick a local user that has
NTLM credentials into visiting a specially-crafted web page, they could
send arbitrary requests, authenticated with the user's NTLM credentials, to
other applications on the user's system. (CVE-2009-3983)

A flaw was found in the way SeaMonkey displayed the SSL location bar
indicator. An attacker could create an unencrypted web page that appears
to be encrypted, possibly tricking the user into believing they are
visiting a secure page. (CVE-2009-3984)

All SeaMonkey users should upgrade to these updated packages, which correct
these issues. After installing the update, SeaMonkey must be restarted for
the changes to take effect.</description>
    <advisory from="secalert@redhat.com">
     <severity>Critical</severity>
     <rights>Copyright 2009 Red Hat, Inc.</rights>
     <issued date="2009-12-15"/>
     <updated date="2009-12-15"/>
     <cve cvss2="6.8/AV:N/AC:M/Au:N/C:P/I:P/A:P" href="https://access.redhat.com/security/cve/CVE-2009-3979" public="20091215">CVE-2009-3979</cve>
     <cve cvss2="4.3/AV:N/AC:M/Au:N/C:N/I:P/A:N" href="https://access.redhat.com/security/cve/CVE-2009-3983" impact="moderate" public="20091215">CVE-2009-3983</cve>
     <cve cvss2="4.3/AV:N/AC:M/Au:N/C:N/I:P/A:N" href="https://access.redhat.com/security/cve/CVE-2009-3984" impact="moderate" public="20091215">CVE-2009-3984</cve>
     <bugzilla href="https://bugzilla.redhat.com/546694" id="546694">CVE-2009-3979 Mozilla crash with evidence of memory corruption</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/546720" id="546720">CVE-2009-3983 Mozilla NTLM reflection vulnerability</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/546722" id="546722">CVE-2009-3984 Mozilla SSL spoofing with document.location and empty SSL response page</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.48.el3" test_ref="oval:com.redhat.rhsa:tst:20091673001"/>
       <criterion comment="seamonkey-dom-inspector is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.48.el3" test_ref="oval:com.redhat.rhsa:tst:20091673003"/>
       <criterion comment="seamonkey-nspr-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.48.el3" test_ref="oval:com.redhat.rhsa:tst:20091673005"/>
       <criterion comment="seamonkey-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578014"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey is earlier than 0:1.0.9-0.48.el3" test_ref="oval:com.redhat.rhsa:tst:20091673007"/>
       <criterion comment="seamonkey is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578018"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.48.el3" test_ref="oval:com.redhat.rhsa:tst:20091673009"/>
       <criterion comment="seamonkey-nss-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578012"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.48.el3" test_ref="oval:com.redhat.rhsa:tst:20091673011"/>
       <criterion comment="seamonkey-js-debugger is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.48.el3" test_ref="oval:com.redhat.rhsa:tst:20091673013"/>
       <criterion comment="seamonkey-nspr is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578010"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.48.el3" test_ref="oval:com.redhat.rhsa:tst:20091673015"/>
       <criterion comment="seamonkey-mail is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578020"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.48.el3" test_ref="oval:com.redhat.rhsa:tst:20091673017"/>
       <criterion comment="seamonkey-chat is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.48.el3" test_ref="oval:com.redhat.rhsa:tst:20091673019"/>
       <criterion comment="seamonkey-nss is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578016"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="seamonkey-devel is earlier than 0:1.0.9-51.el4_8" test_ref="oval:com.redhat.rhsa:tst:20091673022"/>
       <criterion comment="seamonkey-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578014"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-51.el4_8" test_ref="oval:com.redhat.rhsa:tst:20091673023"/>
       <criterion comment="seamonkey-dom-inspector is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey is earlier than 0:1.0.9-51.el4_8" test_ref="oval:com.redhat.rhsa:tst:20091673024"/>
       <criterion comment="seamonkey is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578018"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-chat is earlier than 0:1.0.9-51.el4_8" test_ref="oval:com.redhat.rhsa:tst:20091673025"/>
       <criterion comment="seamonkey-chat is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-mail is earlier than 0:1.0.9-51.el4_8" test_ref="oval:com.redhat.rhsa:tst:20091673026"/>
       <criterion comment="seamonkey-mail is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578020"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-51.el4_8" test_ref="oval:com.redhat.rhsa:tst:20091673027"/>
       <criterion comment="seamonkey-js-debugger is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578008"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20100029" version="638">
   <metadata>
    <title>RHSA-2010:0029: krb5 security update (Critical)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
     <platform>Red Hat Enterprise Linux 5</platform>
    </affected>
    <reference ref_id="RHSA-2010:0029" ref_url="https://access.redhat.com/errata/RHSA-2010:0029" source="RHSA"/>
    <reference ref_id="CVE-2009-4212" ref_url="https://access.redhat.com/security/cve/CVE-2009-4212" source="CVE"/>
    <description>Kerberos is a network authentication system which allows clients and
servers to authenticate to each other using symmetric encryption and a
trusted third party, the Key Distribution Center (KDC).

Multiple integer underflow flaws, leading to heap-based corruption, were
found in the way the MIT Kerberos Key Distribution Center (KDC) decrypted
ciphertexts encrypted with the Advanced Encryption Standard (AES) and
ARCFOUR (RC4) encryption algorithms. If a remote KDC client were able to
provide a specially-crafted AES- or RC4-encrypted ciphertext or texts, it
could potentially lead to either a denial of service of the central KDC
(KDC crash or abort upon processing the crafted ciphertext), or arbitrary
code execution with the privileges of the KDC (i.e., root privileges).
(CVE-2009-4212)

All krb5 users should upgrade to these updated packages, which contain a
backported patch to correct these issues. All running services using the
MIT Kerberos libraries must be restarted for the update to take effect.</description>
    <advisory from="secalert@redhat.com">
     <severity>Critical</severity>
     <rights>Copyright 2010 Red Hat, Inc.</rights>
     <issued date="2010-01-12"/>
     <updated date="2010-01-12"/>
     <cve cvss2="10.0/AV:N/AC:L/Au:N/C:C/I:C/A:C" cwe="CWE-190 CWE-119" href="https://access.redhat.com/security/cve/CVE-2009-4212" public="20100112">CVE-2009-4212</cve>
     <bugzilla href="https://bugzilla.redhat.com/545015" id="545015">CVE-2009-4212 krb: KDC integer overflows in AES and RC4 decryption routines (MITKRB5-SA-2009-004)</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:5</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="krb5-workstation is earlier than 0:1.2.7-71" test_ref="oval:com.redhat.rhsa:tst:20100029001"/>
       <criterion comment="krb5-workstation is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070095008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="krb5-libs is earlier than 0:1.2.7-71" test_ref="oval:com.redhat.rhsa:tst:20100029003"/>
       <criterion comment="krb5-libs is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070095006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="krb5-server is earlier than 0:1.2.7-71" test_ref="oval:com.redhat.rhsa:tst:20100029005"/>
       <criterion comment="krb5-server is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070095002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="krb5-devel is earlier than 0:1.2.7-71" test_ref="oval:com.redhat.rhsa:tst:20100029007"/>
       <criterion comment="krb5-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070095004"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="krb5-libs is earlier than 0:1.3.4-62.el4_8.1" test_ref="oval:com.redhat.rhsa:tst:20100029010"/>
       <criterion comment="krb5-libs is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070095006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="krb5-workstation is earlier than 0:1.3.4-62.el4_8.1" test_ref="oval:com.redhat.rhsa:tst:20100029011"/>
       <criterion comment="krb5-workstation is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070095008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="krb5-devel is earlier than 0:1.3.4-62.el4_8.1" test_ref="oval:com.redhat.rhsa:tst:20100029012"/>
       <criterion comment="krb5-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070095004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="krb5-server is earlier than 0:1.3.4-62.el4_8.1" test_ref="oval:com.redhat.rhsa:tst:20100029013"/>
       <criterion comment="krb5-server is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070095002"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 5 is installed" test_ref="oval:com.redhat.rhsa:tst:20070066013"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="krb5-libs is earlier than 0:1.6.1-36.el5_4.1" test_ref="oval:com.redhat.rhsa:tst:20100029015"/>
       <criterion comment="krb5-libs is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070095018"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="krb5-devel is earlier than 0:1.6.1-36.el5_4.1" test_ref="oval:com.redhat.rhsa:tst:20100029017"/>
       <criterion comment="krb5-devel is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070095020"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="krb5-server is earlier than 0:1.6.1-36.el5_4.1" test_ref="oval:com.redhat.rhsa:tst:20100029019"/>
       <criterion comment="krb5-server is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070095022"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="krb5-workstation is earlier than 0:1.6.1-36.el5_4.1" test_ref="oval:com.redhat.rhsa:tst:20100029021"/>
       <criterion comment="krb5-workstation is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070095016"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20100039" version="639">
   <metadata>
    <title>RHSA-2010:0039: gcc and gcc4 security update (Moderate)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
     <platform>Red Hat Enterprise Linux 5</platform>
    </affected>
    <reference ref_id="RHSA-2010:0039" ref_url="https://access.redhat.com/errata/RHSA-2010:0039" source="RHSA"/>
    <reference ref_id="CVE-2009-3736" ref_url="https://access.redhat.com/security/cve/CVE-2009-3736" source="CVE"/>
    <description>The gcc and gcc4 packages include, among others, C, C++, and Java GNU
compilers and related support libraries. libgcj contains a copy of GNU
Libtool's libltdl library.

A flaw was found in the way GNU Libtool's libltdl library looked for
libraries to load. It was possible for libltdl to load a malicious library
from the current working directory. In certain configurations, if a local
attacker is able to trick a local user into running a Java application
(which uses a function to load native libraries, such as
System.loadLibrary) from within an attacker-controlled directory containing
a malicious library or module, the attacker could possibly execute
arbitrary code with the privileges of the user running the Java
application. (CVE-2009-3736)

All gcc and gcc4 users should upgrade to these updated packages, which
contain a backported patch to correct this issue. All running Java
applications using libgcj must be restarted for this update to take effect.</description>
    <advisory from="secalert@redhat.com">
     <severity>Moderate</severity>
     <rights>Copyright 2010 Red Hat, Inc.</rights>
     <issued date="2010-01-13"/>
     <updated date="2010-01-13"/>
     <cve cvss2="6.2/AV:L/AC:H/Au:N/C:C/I:C/A:C" href="https://access.redhat.com/security/cve/CVE-2009-3736" public="20091116">CVE-2009-3736</cve>
     <bugzilla href="https://bugzilla.redhat.com/537941" id="537941">CVE-2009-3736 libtool: libltdl may load and execute code from a library in the current directory</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:5</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="gcc-objc is earlier than 0:3.2.3-60" test_ref="oval:com.redhat.rhsa:tst:20100039001"/>
       <criterion comment="gcc-objc is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070473002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="gcc-c++ is earlier than 0:3.2.3-60" test_ref="oval:com.redhat.rhsa:tst:20100039003"/>
       <criterion comment="gcc-c++ is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070473004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="libgcj is earlier than 0:3.2.3-60" test_ref="oval:com.redhat.rhsa:tst:20100039005"/>
       <criterion comment="libgcj is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070473006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="libgnat is earlier than 0:3.2.3-60" test_ref="oval:com.redhat.rhsa:tst:20100039007"/>
       <criterion comment="libgnat is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070473008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="libobjc is earlier than 0:3.2.3-60" test_ref="oval:com.redhat.rhsa:tst:20100039009"/>
       <criterion comment="libobjc is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070473010"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="libf2c is earlier than 0:3.2.3-60" test_ref="oval:com.redhat.rhsa:tst:20100039011"/>
       <criterion comment="libf2c is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070473012"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="gcc is earlier than 0:3.2.3-60" test_ref="oval:com.redhat.rhsa:tst:20100039013"/>
       <criterion comment="gcc is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070473014"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="gcc-java is earlier than 0:3.2.3-60" test_ref="oval:com.redhat.rhsa:tst:20100039015"/>
       <criterion comment="gcc-java is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070473020"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="gcc-g77 is earlier than 0:3.2.3-60" test_ref="oval:com.redhat.rhsa:tst:20100039017"/>
       <criterion comment="gcc-g77 is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070473016"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="libgcj-devel is earlier than 0:3.2.3-60" test_ref="oval:com.redhat.rhsa:tst:20100039019"/>
       <criterion comment="libgcj-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070473024"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="libstdc++-devel is earlier than 0:3.2.3-60" test_ref="oval:com.redhat.rhsa:tst:20100039021"/>
       <criterion comment="libstdc++-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070473022"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="libgcc is earlier than 0:3.2.3-60" test_ref="oval:com.redhat.rhsa:tst:20100039023"/>
       <criterion comment="libgcc is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070473018"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="cpp is earlier than 0:3.2.3-60" test_ref="oval:com.redhat.rhsa:tst:20100039025"/>
       <criterion comment="cpp is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070473028"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="gcc-gnat is earlier than 0:3.2.3-60" test_ref="oval:com.redhat.rhsa:tst:20100039027"/>
       <criterion comment="gcc-gnat is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070473026"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="libstdc++ is earlier than 0:3.2.3-60" test_ref="oval:com.redhat.rhsa:tst:20100039029"/>
       <criterion comment="libstdc++ is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070473030"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="gcc-c++-ppc32 is earlier than 0:3.2.3-60" test_ref="oval:com.redhat.rhsa:tst:20100039031"/>
       <criterion comment="gcc-c++-ppc32 is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070473032"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="gcc-ppc32 is earlier than 0:3.2.3-60" test_ref="oval:com.redhat.rhsa:tst:20100039033"/>
       <criterion comment="gcc-ppc32 is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070473034"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="libgfortran is earlier than 0:4.1.2-44.EL4_8.1" test_ref="oval:com.redhat.rhsa:tst:20100039036"/>
       <criterion comment="libgfortran is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20100039037"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="libgcj4-src is earlier than 0:4.1.2-44.EL4_8.1" test_ref="oval:com.redhat.rhsa:tst:20100039038"/>
       <criterion comment="libgcj4-src is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20100039039"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="gcc4-java is earlier than 0:4.1.2-44.EL4_8.1" test_ref="oval:com.redhat.rhsa:tst:20100039040"/>
       <criterion comment="gcc4-java is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20100039041"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="libgcj4 is earlier than 0:4.1.2-44.EL4_8.1" test_ref="oval:com.redhat.rhsa:tst:20100039042"/>
       <criterion comment="libgcj4 is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20100039043"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="libgomp is earlier than 0:4.1.2-44.EL4_8.1" test_ref="oval:com.redhat.rhsa:tst:20100039044"/>
       <criterion comment="libgomp is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20100039045"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="libmudflap is earlier than 0:4.1.2-44.EL4_8.1" test_ref="oval:com.redhat.rhsa:tst:20100039046"/>
       <criterion comment="libmudflap is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20100039047"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="gcc4-gfortran is earlier than 0:4.1.2-44.EL4_8.1" test_ref="oval:com.redhat.rhsa:tst:20100039048"/>
       <criterion comment="gcc4-gfortran is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20100039049"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="gcc4 is earlier than 0:4.1.2-44.EL4_8.1" test_ref="oval:com.redhat.rhsa:tst:20100039050"/>
       <criterion comment="gcc4 is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20100039051"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="libmudflap-devel is earlier than 0:4.1.2-44.EL4_8.1" test_ref="oval:com.redhat.rhsa:tst:20100039052"/>
       <criterion comment="libmudflap-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20100039053"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="gcc4-c++ is earlier than 0:4.1.2-44.EL4_8.1" test_ref="oval:com.redhat.rhsa:tst:20100039054"/>
       <criterion comment="gcc4-c++ is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20100039055"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="libgcj4-devel is earlier than 0:4.1.2-44.EL4_8.1" test_ref="oval:com.redhat.rhsa:tst:20100039056"/>
       <criterion comment="libgcj4-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20100039057"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="libgcj-devel is earlier than 0:3.4.6-11.el4_8.1" test_ref="oval:com.redhat.rhsa:tst:20100039058"/>
       <criterion comment="libgcj-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070473024"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="libgnat is earlier than 0:3.4.6-11.el4_8.1" test_ref="oval:com.redhat.rhsa:tst:20100039059"/>
       <criterion comment="libgnat is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070473008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="gcc-gnat is earlier than 0:3.4.6-11.el4_8.1" test_ref="oval:com.redhat.rhsa:tst:20100039060"/>
       <criterion comment="gcc-gnat is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070473026"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="libstdc++ is earlier than 0:3.4.6-11.el4_8.1" test_ref="oval:com.redhat.rhsa:tst:20100039061"/>
       <criterion comment="libstdc++ is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070473030"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="libobjc is earlier than 0:3.4.6-11.el4_8.1" test_ref="oval:com.redhat.rhsa:tst:20100039062"/>
       <criterion comment="libobjc is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070473010"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="cpp is earlier than 0:3.4.6-11.el4_8.1" test_ref="oval:com.redhat.rhsa:tst:20100039063"/>
       <criterion comment="cpp is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070473028"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="gcc-objc is earlier than 0:3.4.6-11.el4_8.1" test_ref="oval:com.redhat.rhsa:tst:20100039064"/>
       <criterion comment="gcc-objc is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070473002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="libf2c is earlier than 0:3.4.6-11.el4_8.1" test_ref="oval:com.redhat.rhsa:tst:20100039065"/>
       <criterion comment="libf2c is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070473012"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="gcc-java is earlier than 0:3.4.6-11.el4_8.1" test_ref="oval:com.redhat.rhsa:tst:20100039066"/>
       <criterion comment="gcc-java is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070473020"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="libgcj is earlier than 0:3.4.6-11.el4_8.1" test_ref="oval:com.redhat.rhsa:tst:20100039067"/>
       <criterion comment="libgcj is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070473006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="gcc is earlier than 0:3.4.6-11.el4_8.1" test_ref="oval:com.redhat.rhsa:tst:20100039068"/>
       <criterion comment="gcc is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070473014"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="gcc-c++ is earlier than 0:3.4.6-11.el4_8.1" test_ref="oval:com.redhat.rhsa:tst:20100039069"/>
       <criterion comment="gcc-c++ is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070473004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="gcc-g77 is earlier than 0:3.4.6-11.el4_8.1" test_ref="oval:com.redhat.rhsa:tst:20100039070"/>
       <criterion comment="gcc-g77 is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070473016"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="libstdc++-devel is earlier than 0:3.4.6-11.el4_8.1" test_ref="oval:com.redhat.rhsa:tst:20100039071"/>
       <criterion comment="libstdc++-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070473022"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="libgcc is earlier than 0:3.4.6-11.el4_8.1" test_ref="oval:com.redhat.rhsa:tst:20100039072"/>
       <criterion comment="libgcc is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070473018"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="gcc-c++-ppc32 is earlier than 0:3.4.6-11.el4_8.1" test_ref="oval:com.redhat.rhsa:tst:20100039073"/>
       <criterion comment="gcc-c++-ppc32 is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070473032"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="gcc-ppc32 is earlier than 0:3.4.6-11.el4_8.1" test_ref="oval:com.redhat.rhsa:tst:20100039074"/>
       <criterion comment="gcc-ppc32 is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070473034"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 5 is installed" test_ref="oval:com.redhat.rhsa:tst:20070066013"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="libstdc++-devel is earlier than 0:4.1.2-46.el5_4.2" test_ref="oval:com.redhat.rhsa:tst:20100039076"/>
       <criterion comment="libstdc++-devel is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20100039077"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="libstdc++ is earlier than 0:4.1.2-46.el5_4.2" test_ref="oval:com.redhat.rhsa:tst:20100039078"/>
       <criterion comment="libstdc++ is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20100039079"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="libmudflap-devel is earlier than 0:4.1.2-46.el5_4.2" test_ref="oval:com.redhat.rhsa:tst:20100039080"/>
       <criterion comment="libmudflap-devel is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20100039081"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="libobjc is earlier than 0:4.1.2-46.el5_4.2" test_ref="oval:com.redhat.rhsa:tst:20100039082"/>
       <criterion comment="libobjc is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20100039083"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="libgnat is earlier than 0:4.1.2-46.el5_4.2" test_ref="oval:com.redhat.rhsa:tst:20100039084"/>
       <criterion comment="libgnat is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20100039085"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="gcc-gnat is earlier than 0:4.1.2-46.el5_4.2" test_ref="oval:com.redhat.rhsa:tst:20100039086"/>
       <criterion comment="gcc-gnat is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20100039087"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="gcc-objc++ is earlier than 0:4.1.2-46.el5_4.2" test_ref="oval:com.redhat.rhsa:tst:20100039088"/>
       <criterion comment="gcc-objc++ is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20100039089"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="gcc-objc is earlier than 0:4.1.2-46.el5_4.2" test_ref="oval:com.redhat.rhsa:tst:20100039090"/>
       <criterion comment="gcc-objc is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20100039091"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="gcc-java is earlier than 0:4.1.2-46.el5_4.2" test_ref="oval:com.redhat.rhsa:tst:20100039092"/>
       <criterion comment="gcc-java is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20100039093"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="libgcj is earlier than 0:4.1.2-46.el5_4.2" test_ref="oval:com.redhat.rhsa:tst:20100039094"/>
       <criterion comment="libgcj is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20100039095"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="cpp is earlier than 0:4.1.2-46.el5_4.2" test_ref="oval:com.redhat.rhsa:tst:20100039096"/>
       <criterion comment="cpp is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20100039097"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="libgcj-src is earlier than 0:4.1.2-46.el5_4.2" test_ref="oval:com.redhat.rhsa:tst:20100039098"/>
       <criterion comment="libgcj-src is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20100039099"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="libmudflap is earlier than 0:4.1.2-46.el5_4.2" test_ref="oval:com.redhat.rhsa:tst:20100039100"/>
       <criterion comment="libmudflap is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20100039101"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="libgcc is earlier than 0:4.1.2-46.el5_4.2" test_ref="oval:com.redhat.rhsa:tst:20100039102"/>
       <criterion comment="libgcc is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20100039103"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="libgcj-devel is earlier than 0:4.1.2-46.el5_4.2" test_ref="oval:com.redhat.rhsa:tst:20100039104"/>
       <criterion comment="libgcj-devel is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20100039105"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="gcc is earlier than 0:4.1.2-46.el5_4.2" test_ref="oval:com.redhat.rhsa:tst:20100039106"/>
       <criterion comment="gcc is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20100039107"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="libgfortran is earlier than 0:4.1.2-46.el5_4.2" test_ref="oval:com.redhat.rhsa:tst:20100039108"/>
       <criterion comment="libgfortran is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20100039109"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="gcc-c++ is earlier than 0:4.1.2-46.el5_4.2" test_ref="oval:com.redhat.rhsa:tst:20100039110"/>
       <criterion comment="gcc-c++ is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20100039111"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="gcc-gfortran is earlier than 0:4.1.2-46.el5_4.2" test_ref="oval:com.redhat.rhsa:tst:20100039112"/>
       <criterion comment="gcc-gfortran is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20100039113"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20100040" version="643">
   <metadata>
    <title>RHSA-2010:0040: php security update (Moderate)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
     <platform>Red Hat Enterprise Linux 5</platform>
    </affected>
    <reference ref_id="RHSA-2010:0040" ref_url="https://access.redhat.com/errata/RHSA-2010:0040" source="RHSA"/>
    <reference ref_id="CVE-2009-2687" ref_url="https://access.redhat.com/security/cve/CVE-2009-2687" source="CVE"/>
    <reference ref_id="CVE-2009-3291" ref_url="https://access.redhat.com/security/cve/CVE-2009-3291" source="CVE"/>
    <reference ref_id="CVE-2009-3292" ref_url="https://access.redhat.com/security/cve/CVE-2009-3292" source="CVE"/>
    <reference ref_id="CVE-2009-3546" ref_url="https://access.redhat.com/security/cve/CVE-2009-3546" source="CVE"/>
    <reference ref_id="CVE-2009-4017" ref_url="https://access.redhat.com/security/cve/CVE-2009-4017" source="CVE"/>
    <reference ref_id="CVE-2009-4142" ref_url="https://access.redhat.com/security/cve/CVE-2009-4142" source="CVE"/>
    <description>PHP is an HTML-embedded scripting language commonly used with the Apache
HTTP Web server.

Multiple missing input sanitization flaws were discovered in PHP's exif
extension. A specially-crafted image file could cause the PHP interpreter
to crash or, possibly, disclose portions of its memory when a PHP script
tried to extract Exchangeable image file format (Exif) metadata from the
image file. (CVE-2009-2687, CVE-2009-3292)

A missing input sanitization flaw, leading to a buffer overflow, was
discovered in PHP's gd library. A specially-crafted GD image file could
cause the PHP interpreter to crash or, possibly, execute arbitrary code
when opened. (CVE-2009-3546)

It was discovered that PHP did not limit the maximum number of files that
can be uploaded in one request. A remote attacker could use this flaw to
instigate a denial of service by causing the PHP interpreter to use lots of
system resources dealing with requests containing large amounts of files to
be uploaded. This vulnerability depends on file uploads being enabled
(which it is, in the default PHP configuration). (CVE-2009-4017)

Note: This update introduces a new configuration option, max_file_uploads,
used for limiting the number of files that can be uploaded in one request.
By default, the limit is 20 files per request.

It was discovered that PHP was affected by the previously published &quot;null
prefix attack&quot;, caused by incorrect handling of NUL characters in X.509
certificates. If an attacker is able to get a carefully-crafted certificate
signed by a trusted Certificate Authority, the attacker could use the
certificate during a man-in-the-middle attack and potentially confuse PHP
into accepting it by mistake. (CVE-2009-3291)

It was discovered that PHP's htmlspecialchars() function did not properly
recognize partial multi-byte sequences for some multi-byte encodings,
sending them to output without them being escaped. An attacker could use
this flaw to perform a cross-site scripting attack. (CVE-2009-4142)

All php users should upgrade to these updated packages, which contain
backported patches to resolve these issues. After installing the updated
packages, the httpd daemon must be restarted for the update to take effect.</description>
    <advisory from="secalert@redhat.com">
     <severity>Moderate</severity>
     <rights>Copyright 2010 Red Hat, Inc.</rights>
     <issued date="2010-01-13"/>
     <updated date="2010-01-13"/>
     <cve cvss2="5.8/AV:N/AC:M/Au:N/C:P/I:N/A:P" href="https://access.redhat.com/security/cve/CVE-2009-2687" public="20090618">CVE-2009-2687</cve>
     <cve cvss2="2.6/AV:N/AC:H/Au:N/C:N/I:P/A:N" href="https://access.redhat.com/security/cve/CVE-2009-3291" impact="low" public="20090916">CVE-2009-3291</cve>
     <cve cvss2="4.3/AV:N/AC:M/Au:N/C:N/I:N/A:P" href="https://access.redhat.com/security/cve/CVE-2009-3292" impact="low" public="20090916">CVE-2009-3292</cve>
     <cve cvss2="4.4/AV:L/AC:M/Au:N/C:P/I:P/A:P" cwe="CWE-20" href="https://access.redhat.com/security/cve/CVE-2009-3546" impact="low" public="20091012">CVE-2009-3546</cve>
     <cve cvss2="5.0/AV:N/AC:L/Au:N/C:N/I:N/A:P" href="https://access.redhat.com/security/cve/CVE-2009-4017" public="20091120">CVE-2009-4017</cve>
     <cve cvss2="4.3/AV:N/AC:M/Au:N/C:N/I:P/A:N" href="https://access.redhat.com/security/cve/CVE-2009-4142" public="20091006">CVE-2009-4142</cve>
     <bugzilla href="https://bugzilla.redhat.com/506896" id="506896">CVE-2009-2687 php: exif_read_data crash on corrupted JPEG files</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/524222" id="524222">CVE-2009-3292 php: exif extension: Multiple missing sanity checks in EXIF file processing</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/524228" id="524228">CVE-2009-3291 php: openssl extension: Incorrect verification of SSL certificate with NUL in name</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/529213" id="529213">CVE-2009-3546 gd: insufficient input validation in _gdGetColors()</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/540459" id="540459">CVE-2009-4017 PHP: resource exhaustion attack via upload requests with lots of files</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/548516" id="548516">CVE-2009-4142 php: htmlspecialchars() insufficient checking of input for multi-byte encodings</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:5</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="php-imap is earlier than 0:4.3.2-54.ent" test_ref="oval:com.redhat.rhsa:tst:20100040001"/>
       <criterion comment="php-imap is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276010"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-devel is earlier than 0:4.3.2-54.ent" test_ref="oval:com.redhat.rhsa:tst:20100040003"/>
       <criterion comment="php-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php is earlier than 0:4.3.2-54.ent" test_ref="oval:com.redhat.rhsa:tst:20100040005"/>
       <criterion comment="php is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-pgsql is earlier than 0:4.3.2-54.ent" test_ref="oval:com.redhat.rhsa:tst:20100040007"/>
       <criterion comment="php-pgsql is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276012"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-odbc is earlier than 0:4.3.2-54.ent" test_ref="oval:com.redhat.rhsa:tst:20100040009"/>
       <criterion comment="php-odbc is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-mysql is earlier than 0:4.3.2-54.ent" test_ref="oval:com.redhat.rhsa:tst:20100040011"/>
       <criterion comment="php-mysql is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276014"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-ldap is earlier than 0:4.3.2-54.ent" test_ref="oval:com.redhat.rhsa:tst:20100040013"/>
       <criterion comment="php-ldap is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276006"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="php-snmp is earlier than 0:4.3.9-3.29" test_ref="oval:com.redhat.rhsa:tst:20100040016"/>
       <criterion comment="php-snmp is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276024"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-ncurses is earlier than 0:4.3.9-3.29" test_ref="oval:com.redhat.rhsa:tst:20100040018"/>
       <criterion comment="php-ncurses is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276026"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-domxml is earlier than 0:4.3.9-3.29" test_ref="oval:com.redhat.rhsa:tst:20100040020"/>
       <criterion comment="php-domxml is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276032"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-pear is earlier than 0:4.3.9-3.29" test_ref="oval:com.redhat.rhsa:tst:20100040022"/>
       <criterion comment="php-pear is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276028"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-mbstring is earlier than 0:4.3.9-3.29" test_ref="oval:com.redhat.rhsa:tst:20100040024"/>
       <criterion comment="php-mbstring is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276030"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-gd is earlier than 0:4.3.9-3.29" test_ref="oval:com.redhat.rhsa:tst:20100040026"/>
       <criterion comment="php-gd is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276035"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-ldap is earlier than 0:4.3.9-3.29" test_ref="oval:com.redhat.rhsa:tst:20100040028"/>
       <criterion comment="php-ldap is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-devel is earlier than 0:4.3.9-3.29" test_ref="oval:com.redhat.rhsa:tst:20100040029"/>
       <criterion comment="php-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-imap is earlier than 0:4.3.9-3.29" test_ref="oval:com.redhat.rhsa:tst:20100040030"/>
       <criterion comment="php-imap is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276010"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-pgsql is earlier than 0:4.3.9-3.29" test_ref="oval:com.redhat.rhsa:tst:20100040031"/>
       <criterion comment="php-pgsql is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276012"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-xmlrpc is earlier than 0:4.3.9-3.29" test_ref="oval:com.redhat.rhsa:tst:20100040032"/>
       <criterion comment="php-xmlrpc is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276019"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-odbc is earlier than 0:4.3.9-3.29" test_ref="oval:com.redhat.rhsa:tst:20100040034"/>
       <criterion comment="php-odbc is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php is earlier than 0:4.3.9-3.29" test_ref="oval:com.redhat.rhsa:tst:20100040035"/>
       <criterion comment="php is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-mysql is earlier than 0:4.3.9-3.29" test_ref="oval:com.redhat.rhsa:tst:20100040036"/>
       <criterion comment="php-mysql is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060276014"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 5 is installed" test_ref="oval:com.redhat.rhsa:tst:20070066013"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="php-devel is earlier than 0:5.1.6-24.el5_4.5" test_ref="oval:com.redhat.rhsa:tst:20100040038"/>
       <criterion comment="php-devel is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20080544027"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-dba is earlier than 0:5.1.6-24.el5_4.5" test_ref="oval:com.redhat.rhsa:tst:20100040040"/>
       <criterion comment="php-dba is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20080544041"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-xmlrpc is earlier than 0:5.1.6-24.el5_4.5" test_ref="oval:com.redhat.rhsa:tst:20100040042"/>
       <criterion comment="php-xmlrpc is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20080544043"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-snmp is earlier than 0:5.1.6-24.el5_4.5" test_ref="oval:com.redhat.rhsa:tst:20100040044"/>
       <criterion comment="php-snmp is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20080544017"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-bcmath is earlier than 0:5.1.6-24.el5_4.5" test_ref="oval:com.redhat.rhsa:tst:20100040046"/>
       <criterion comment="php-bcmath is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20080544039"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-mbstring is earlier than 0:5.1.6-24.el5_4.5" test_ref="oval:com.redhat.rhsa:tst:20100040048"/>
       <criterion comment="php-mbstring is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20080544023"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-pdo is earlier than 0:5.1.6-24.el5_4.5" test_ref="oval:com.redhat.rhsa:tst:20100040050"/>
       <criterion comment="php-pdo is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20080544021"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-gd is earlier than 0:5.1.6-24.el5_4.5" test_ref="oval:com.redhat.rhsa:tst:20100040052"/>
       <criterion comment="php-gd is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20080544033"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-cli is earlier than 0:5.1.6-24.el5_4.5" test_ref="oval:com.redhat.rhsa:tst:20100040054"/>
       <criterion comment="php-cli is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20080544049"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-soap is earlier than 0:5.1.6-24.el5_4.5" test_ref="oval:com.redhat.rhsa:tst:20100040056"/>
       <criterion comment="php-soap is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20080544047"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-ldap is earlier than 0:5.1.6-24.el5_4.5" test_ref="oval:com.redhat.rhsa:tst:20100040058"/>
       <criterion comment="php-ldap is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20080544025"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-imap is earlier than 0:5.1.6-24.el5_4.5" test_ref="oval:com.redhat.rhsa:tst:20100040060"/>
       <criterion comment="php-imap is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20080544031"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-xml is earlier than 0:5.1.6-24.el5_4.5" test_ref="oval:com.redhat.rhsa:tst:20100040062"/>
       <criterion comment="php-xml is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20080544051"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-odbc is earlier than 0:5.1.6-24.el5_4.5" test_ref="oval:com.redhat.rhsa:tst:20100040064"/>
       <criterion comment="php-odbc is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20080544029"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-common is earlier than 0:5.1.6-24.el5_4.5" test_ref="oval:com.redhat.rhsa:tst:20100040066"/>
       <criterion comment="php-common is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20080544045"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-ncurses is earlier than 0:5.1.6-24.el5_4.5" test_ref="oval:com.redhat.rhsa:tst:20100040068"/>
       <criterion comment="php-ncurses is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20080544019"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php is earlier than 0:5.1.6-24.el5_4.5" test_ref="oval:com.redhat.rhsa:tst:20100040070"/>
       <criterion comment="php is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20080544053"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-pgsql is earlier than 0:5.1.6-24.el5_4.5" test_ref="oval:com.redhat.rhsa:tst:20100040072"/>
       <criterion comment="php-pgsql is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20080544037"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="php-mysql is earlier than 0:5.1.6-24.el5_4.5" test_ref="oval:com.redhat.rhsa:tst:20100040074"/>
       <criterion comment="php-mysql is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20080544035"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20100061" version="635">
   <metadata>
    <title>RHSA-2010:0061: gzip security update (Moderate)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
     <platform>Red Hat Enterprise Linux 5</platform>
    </affected>
    <reference ref_id="RHSA-2010:0061" ref_url="https://access.redhat.com/errata/RHSA-2010:0061" source="RHSA"/>
    <reference ref_id="CVE-2010-0001" ref_url="https://access.redhat.com/security/cve/CVE-2010-0001" source="CVE"/>
    <description>The gzip package provides the GNU gzip data compression program.

An integer underflow flaw, leading to an array index error, was found in
the way gzip expanded archive files compressed with the Lempel-Ziv-Welch
(LZW) compression algorithm. If a victim expanded a specially-crafted
archive, it could cause gzip to crash or, potentially, execute arbitrary
code with the privileges of the user running gzip. This flaw only affects
64-bit systems. (CVE-2010-0001)

Red Hat would like to thank Aki Helin of the Oulu University Secure
Programming Group for responsibly reporting this flaw.

Users of gzip should upgrade to this updated package, which contains a
backported patch to correct this issue.</description>
    <advisory from="secalert@redhat.com">
     <severity>Moderate</severity>
     <rights>Copyright 2010 Red Hat, Inc.</rights>
     <issued date="2010-01-20"/>
     <updated date="2010-01-20"/>
     <cve cvss2="6.8/AV:N/AC:M/Au:N/C:P/I:P/A:P" cwe="CWE-190" href="https://access.redhat.com/security/cve/CVE-2010-0001" public="20100120">CVE-2010-0001</cve>
     <bugzilla href="https://bugzilla.redhat.com/554418" id="554418">CVE-2010-0001 gzip: (64 bit) Integer underflow by decompressing LZW format files</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:5</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criterion comment="gzip is earlier than 0:1.3.3-15.rhel3" test_ref="oval:com.redhat.rhsa:tst:20100061001"/>
     <criterion comment="gzip is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060667002"/>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criterion comment="gzip is earlier than 0:1.3.3-18.el4_8.1" test_ref="oval:com.redhat.rhsa:tst:20100061004"/>
     <criterion comment="gzip is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060667002"/>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 5 is installed" test_ref="oval:com.redhat.rhsa:tst:20070066013"/>
     <criterion comment="gzip is earlier than 0:1.3.5-11.el5_4.1" test_ref="oval:com.redhat.rhsa:tst:20100061006"/>
     <criterion comment="gzip is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20100061007"/>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20100101" version="645">
   <metadata>
    <title>RHSA-2010:0101: openoffice.org security update (Important)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
     <platform>Red Hat Enterprise Linux 5</platform>
    </affected>
    <reference ref_id="RHSA-2010:0101" ref_url="https://access.redhat.com/errata/RHSA-2010:0101" source="RHSA"/>
    <reference ref_id="CVE-2009-2949" ref_url="https://access.redhat.com/security/cve/CVE-2009-2949" source="CVE"/>
    <reference ref_id="CVE-2009-2950" ref_url="https://access.redhat.com/security/cve/CVE-2009-2950" source="CVE"/>
    <reference ref_id="CVE-2009-3301" ref_url="https://access.redhat.com/security/cve/CVE-2009-3301" source="CVE"/>
    <reference ref_id="CVE-2009-3302" ref_url="https://access.redhat.com/security/cve/CVE-2009-3302" source="CVE"/>
    <description>OpenOffice.org is an office productivity suite that includes desktop
applications, such as a word processor, spreadsheet application,
presentation manager, formula editor, and a drawing program.

An integer overflow flaw, leading to a heap-based buffer overflow, was
found in the way OpenOffice.org parsed XPM files. An attacker could create
a specially-crafted document, which once opened by a local, unsuspecting
user, could lead to arbitrary code execution with the permissions of the
user running OpenOffice.org. Note: This flaw affects embedded XPM files in
OpenOffice.org documents as well as stand-alone XPM files. (CVE-2009-2949)

An integer underflow flaw and a boundary error flaw, both possibly leading
to a heap-based buffer overflow, were found in the way OpenOffice.org
parsed certain records in Microsoft Word documents. An attacker could
create a specially-crafted Microsoft Word document, which once opened by a
local, unsuspecting user, could cause OpenOffice.org to crash or,
potentially, execute arbitrary code with the permissions of the user
running OpenOffice.org. (CVE-2009-3301, CVE-2009-3302)

A heap-based buffer overflow flaw, leading to memory corruption, was found
in the way OpenOffice.org parsed GIF files. An attacker could create a
specially-crafted document, which once opened by a local, unsuspecting
user, could cause OpenOffice.org to crash. Note: This flaw affects embedded
GIF files in OpenOffice.org documents as well as stand-alone GIF files.
(CVE-2009-2950)

All users of OpenOffice.org are advised to upgrade to these updated
packages, which contain backported patches to correct these issues. All
running instances of OpenOffice.org applications must be restarted for this
update to take effect.</description>
    <advisory from="secalert@redhat.com">
     <severity>Important</severity>
     <rights>Copyright 2010 Red Hat, Inc.</rights>
     <issued date="2010-02-12"/>
     <updated date="2010-02-12"/>
     <cve cvss2="6.8/AV:N/AC:M/Au:N/C:P/I:P/A:P" cwe="CWE-190" href="https://access.redhat.com/security/cve/CVE-2009-2949" public="20100212">CVE-2009-2949</cve>
     <cve cvss2="6.8/AV:N/AC:M/Au:N/C:P/I:P/A:P" href="https://access.redhat.com/security/cve/CVE-2009-2950" impact="moderate" public="20100212">CVE-2009-2950</cve>
     <cve cvss2="6.8/AV:N/AC:M/Au:N/C:P/I:P/A:P" href="https://access.redhat.com/security/cve/CVE-2009-3301" public="20100212">CVE-2009-3301</cve>
     <cve cvss2="6.8/AV:N/AC:M/Au:N/C:P/I:P/A:P" href="https://access.redhat.com/security/cve/CVE-2009-3302" public="20100212">CVE-2009-3302</cve>
     <bugzilla href="https://bugzilla.redhat.com/527512" id="527512">CVE-2009-2950 openoffice.org: GIF file parsing heap overflow</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/527540" id="527540">CVE-2009-2949 openoffice.org: integer overflow in XPM processing</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/533038" id="533038">CVE-2009-3301 OpenOffice.org Word sprmTDefTable Memory Corruption</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/533043" id="533043">CVE-2009-3302 OpenOffice.org Word sprmTSetBrc Memory Corruption</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
      <cpe>cpe:/a:redhat:rhel_productivity:5</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:5</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="openoffice.org-libs is earlier than 0:1.1.2-46.2.0.EL3" test_ref="oval:com.redhat.rhsa:tst:20100101001"/>
       <criterion comment="openoffice.org-libs is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060573004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org is earlier than 0:1.1.2-46.2.0.EL3" test_ref="oval:com.redhat.rhsa:tst:20100101003"/>
       <criterion comment="openoffice.org is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060573006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-i18n is earlier than 0:1.1.2-46.2.0.EL3" test_ref="oval:com.redhat.rhsa:tst:20100101005"/>
       <criterion comment="openoffice.org-i18n is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060573002"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="openoffice.org is earlier than 0:1.1.5-10.6.0.7.EL4.3" test_ref="oval:com.redhat.rhsa:tst:20100101008"/>
       <criterion comment="openoffice.org is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060573006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-i18n is earlier than 0:1.1.5-10.6.0.7.EL4.3" test_ref="oval:com.redhat.rhsa:tst:20100101009"/>
       <criterion comment="openoffice.org-i18n is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060573002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-kde is earlier than 0:1.1.5-10.6.0.7.EL4.3" test_ref="oval:com.redhat.rhsa:tst:20100101010"/>
       <criterion comment="openoffice.org-kde is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060573011"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-libs is earlier than 0:1.1.5-10.6.0.7.EL4.3" test_ref="oval:com.redhat.rhsa:tst:20100101012"/>
       <criterion comment="openoffice.org-libs is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060573004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-bn is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:com.redhat.rhsa:tst:20100101013"/>
       <criterion comment="openoffice.org2-langpack-bn is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406068"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-cy_GB is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:com.redhat.rhsa:tst:20100101015"/>
       <criterion comment="openoffice.org2-langpack-cy_GB is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406072"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-graphicfilter is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:com.redhat.rhsa:tst:20100101017"/>
       <criterion comment="openoffice.org2-graphicfilter is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406040"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-el_GR is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:com.redhat.rhsa:tst:20100101019"/>
       <criterion comment="openoffice.org2-langpack-el_GR is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406048"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-de is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:com.redhat.rhsa:tst:20100101021"/>
       <criterion comment="openoffice.org2-langpack-de is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406016"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-it is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:com.redhat.rhsa:tst:20100101023"/>
       <criterion comment="openoffice.org2-langpack-it is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406094"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-hi_IN is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:com.redhat.rhsa:tst:20100101025"/>
       <criterion comment="openoffice.org2-langpack-hi_IN is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406038"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-bg_BG is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:com.redhat.rhsa:tst:20100101027"/>
       <criterion comment="openoffice.org2-langpack-bg_BG is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406014"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-sk_SK is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:com.redhat.rhsa:tst:20100101029"/>
       <criterion comment="openoffice.org2-langpack-sk_SK is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406078"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-da_DK is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:com.redhat.rhsa:tst:20100101031"/>
       <criterion comment="openoffice.org2-langpack-da_DK is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406100"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-pl_PL is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:com.redhat.rhsa:tst:20100101033"/>
       <criterion comment="openoffice.org2-langpack-pl_PL is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406082"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-emailmerge is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:com.redhat.rhsa:tst:20100101035"/>
       <criterion comment="openoffice.org2-emailmerge is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406106"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-pa_IN is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:com.redhat.rhsa:tst:20100101037"/>
       <criterion comment="openoffice.org2-langpack-pa_IN is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406096"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-base is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:com.redhat.rhsa:tst:20100101039"/>
       <criterion comment="openoffice.org2-base is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406102"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-ko_KR is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:com.redhat.rhsa:tst:20100101041"/>
       <criterion comment="openoffice.org2-langpack-ko_KR is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406090"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-xsltfilter is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:com.redhat.rhsa:tst:20100101043"/>
       <criterion comment="openoffice.org2-xsltfilter is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406062"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-ru is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:com.redhat.rhsa:tst:20100101045"/>
       <criterion comment="openoffice.org2-langpack-ru is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406060"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-ga_IE is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:com.redhat.rhsa:tst:20100101047"/>
       <criterion comment="openoffice.org2-langpack-ga_IE is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406114"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-zu_ZA is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:com.redhat.rhsa:tst:20100101049"/>
       <criterion comment="openoffice.org2-langpack-zu_ZA is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406112"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-sv is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:com.redhat.rhsa:tst:20100101051"/>
       <criterion comment="openoffice.org2-langpack-sv is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406120"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-eu_ES is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:com.redhat.rhsa:tst:20100101053"/>
       <criterion comment="openoffice.org2-langpack-eu_ES is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406036"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-draw is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:com.redhat.rhsa:tst:20100101055"/>
       <criterion comment="openoffice.org2-draw is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406122"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-nl is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:com.redhat.rhsa:tst:20100101057"/>
       <criterion comment="openoffice.org2-langpack-nl is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406044"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-fr is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:com.redhat.rhsa:tst:20100101059"/>
       <criterion comment="openoffice.org2-langpack-fr is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406124"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-sl_SI is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:com.redhat.rhsa:tst:20100101061"/>
       <criterion comment="openoffice.org2-langpack-sl_SI is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406046"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-nn_NO is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:com.redhat.rhsa:tst:20100101063"/>
       <criterion comment="openoffice.org2-langpack-nn_NO is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406126"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-hu_HU is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:com.redhat.rhsa:tst:20100101065"/>
       <criterion comment="openoffice.org2-langpack-hu_HU is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406026"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-hr_HR is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:com.redhat.rhsa:tst:20100101067"/>
       <criterion comment="openoffice.org2-langpack-hr_HR is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406080"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-pt_PT is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:com.redhat.rhsa:tst:20100101069"/>
       <criterion comment="openoffice.org2-langpack-pt_PT is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406020"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-fi_FI is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:com.redhat.rhsa:tst:20100101071"/>
       <criterion comment="openoffice.org2-langpack-fi_FI is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406024"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-et_EE is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:com.redhat.rhsa:tst:20100101073"/>
       <criterion comment="openoffice.org2-langpack-et_EE is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406018"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-zh_TW is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:com.redhat.rhsa:tst:20100101075"/>
       <criterion comment="openoffice.org2-langpack-zh_TW is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406084"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-cs_CZ is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:com.redhat.rhsa:tst:20100101077"/>
       <criterion comment="openoffice.org2-langpack-cs_CZ is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406054"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-th_TH is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:com.redhat.rhsa:tst:20100101079"/>
       <criterion comment="openoffice.org2-langpack-th_TH is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406028"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-lt_LT is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:com.redhat.rhsa:tst:20100101081"/>
       <criterion comment="openoffice.org2-langpack-lt_LT is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406086"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-tr_TR is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:com.redhat.rhsa:tst:20100101083"/>
       <criterion comment="openoffice.org2-langpack-tr_TR is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406022"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-gl_ES is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:com.redhat.rhsa:tst:20100101085"/>
       <criterion comment="openoffice.org2-langpack-gl_ES is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406118"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-core is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:com.redhat.rhsa:tst:20100101087"/>
       <criterion comment="openoffice.org2-core is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406034"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-pyuno is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:com.redhat.rhsa:tst:20100101089"/>
       <criterion comment="openoffice.org2-pyuno is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406032"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-ms_MY is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:com.redhat.rhsa:tst:20100101091"/>
       <criterion comment="openoffice.org2-langpack-ms_MY is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406056"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-ca_ES is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:com.redhat.rhsa:tst:20100101093"/>
       <criterion comment="openoffice.org2-langpack-ca_ES is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406030"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-ar is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:com.redhat.rhsa:tst:20100101095"/>
       <criterion comment="openoffice.org2-langpack-ar is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406058"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-ja_JP is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:com.redhat.rhsa:tst:20100101097"/>
       <criterion comment="openoffice.org2-langpack-ja_JP is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406076"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-writer is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:com.redhat.rhsa:tst:20100101099"/>
       <criterion comment="openoffice.org2-writer is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406074"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-zh_CN is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:com.redhat.rhsa:tst:20100101101"/>
       <criterion comment="openoffice.org2-langpack-zh_CN is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406042"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-impress is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:com.redhat.rhsa:tst:20100101103"/>
       <criterion comment="openoffice.org2-impress is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406088"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-ta_IN is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:com.redhat.rhsa:tst:20100101105"/>
       <criterion comment="openoffice.org2-langpack-ta_IN is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406098"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-sr_CS is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:com.redhat.rhsa:tst:20100101107"/>
       <criterion comment="openoffice.org2-langpack-sr_CS is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406052"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-es is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:com.redhat.rhsa:tst:20100101109"/>
       <criterion comment="openoffice.org2-langpack-es is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406104"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-nb_NO is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:com.redhat.rhsa:tst:20100101111"/>
       <criterion comment="openoffice.org2-langpack-nb_NO is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406092"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-calc is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:com.redhat.rhsa:tst:20100101113"/>
       <criterion comment="openoffice.org2-calc is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406050"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-gu_IN is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:com.redhat.rhsa:tst:20100101115"/>
       <criterion comment="openoffice.org2-langpack-gu_IN is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406064"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-he_IL is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:com.redhat.rhsa:tst:20100101117"/>
       <criterion comment="openoffice.org2-langpack-he_IL is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406066"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-af_ZA is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:com.redhat.rhsa:tst:20100101119"/>
       <criterion comment="openoffice.org2-langpack-af_ZA is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406110"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-testtools is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:com.redhat.rhsa:tst:20100101121"/>
       <criterion comment="openoffice.org2-testtools is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406116"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-pt_BR is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:com.redhat.rhsa:tst:20100101123"/>
       <criterion comment="openoffice.org2-langpack-pt_BR is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406108"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-math is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:com.redhat.rhsa:tst:20100101125"/>
       <criterion comment="openoffice.org2-math is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406070"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-javafilter is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" test_ref="oval:com.redhat.rhsa:tst:20100101127"/>
       <criterion comment="openoffice.org2-javafilter is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406128"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 5 is installed" test_ref="oval:com.redhat.rhsa:tst:20070066013"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-bn is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:com.redhat.rhsa:tst:20100101130"/>
       <criterion comment="openoffice.org-langpack-bn is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406211"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-nl is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:com.redhat.rhsa:tst:20100101132"/>
       <criterion comment="openoffice.org-langpack-nl is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406207"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-graphicfilter is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:com.redhat.rhsa:tst:20100101134"/>
       <criterion comment="openoffice.org-graphicfilter is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406143"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-xsltfilter is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:com.redhat.rhsa:tst:20100101136"/>
       <criterion comment="openoffice.org-xsltfilter is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406179"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-xh_ZA is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:com.redhat.rhsa:tst:20100101138"/>
       <criterion comment="openoffice.org-langpack-xh_ZA is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406183"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-et_EE is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:com.redhat.rhsa:tst:20100101140"/>
       <criterion comment="openoffice.org-langpack-et_EE is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406199"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-ml_IN is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:com.redhat.rhsa:tst:20100101142"/>
       <criterion comment="openoffice.org-langpack-ml_IN is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406231"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-ar is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:com.redhat.rhsa:tst:20100101144"/>
       <criterion comment="openoffice.org-langpack-ar is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406217"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-zh_TW is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:com.redhat.rhsa:tst:20100101146"/>
       <criterion comment="openoffice.org-langpack-zh_TW is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406219"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-ta_IN is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:com.redhat.rhsa:tst:20100101148"/>
       <criterion comment="openoffice.org-langpack-ta_IN is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406227"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-pyuno is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:com.redhat.rhsa:tst:20100101150"/>
       <criterion comment="openoffice.org-pyuno is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406239"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-cs_CZ is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:com.redhat.rhsa:tst:20100101152"/>
       <criterion comment="openoffice.org-langpack-cs_CZ is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406137"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-st_ZA is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:com.redhat.rhsa:tst:20100101154"/>
       <criterion comment="openoffice.org-langpack-st_ZA is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406273"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-sr_CS is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:com.redhat.rhsa:tst:20100101156"/>
       <criterion comment="openoffice.org-langpack-sr_CS is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406233"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-ca_ES is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:com.redhat.rhsa:tst:20100101158"/>
       <criterion comment="openoffice.org-langpack-ca_ES is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406165"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-or_IN is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:com.redhat.rhsa:tst:20100101160"/>
       <criterion comment="openoffice.org-langpack-or_IN is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406251"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-sk_SK is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:com.redhat.rhsa:tst:20100101162"/>
       <criterion comment="openoffice.org-langpack-sk_SK is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406131"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-hi_IN is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:com.redhat.rhsa:tst:20100101164"/>
       <criterion comment="openoffice.org-langpack-hi_IN is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406135"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-impress is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:com.redhat.rhsa:tst:20100101166"/>
       <criterion comment="openoffice.org-impress is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406261"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-hr_HR is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:com.redhat.rhsa:tst:20100101168"/>
       <criterion comment="openoffice.org-langpack-hr_HR is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406163"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-ts_ZA is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:com.redhat.rhsa:tst:20100101170"/>
       <criterion comment="openoffice.org-langpack-ts_ZA is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406253"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-ko_KR is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:com.redhat.rhsa:tst:20100101172"/>
       <criterion comment="openoffice.org-langpack-ko_KR is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406173"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-tn_ZA is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:com.redhat.rhsa:tst:20100101174"/>
       <criterion comment="openoffice.org-langpack-tn_ZA is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406191"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-ru is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:com.redhat.rhsa:tst:20100101176"/>
       <criterion comment="openoffice.org-langpack-ru is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406275"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-bg_BG is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:com.redhat.rhsa:tst:20100101178"/>
       <criterion comment="openoffice.org-langpack-bg_BG is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406241"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-ja_JP is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:com.redhat.rhsa:tst:20100101180"/>
       <criterion comment="openoffice.org-langpack-ja_JP is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406189"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-sdk-doc is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:com.redhat.rhsa:tst:20100101182"/>
       <criterion comment="openoffice.org-sdk-doc is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20080939277"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-fr is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:com.redhat.rhsa:tst:20100101184"/>
       <criterion comment="openoffice.org-langpack-fr is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406175"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-as_IN is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:com.redhat.rhsa:tst:20100101186"/>
       <criterion comment="openoffice.org-langpack-as_IN is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406213"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-lt_LT is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:com.redhat.rhsa:tst:20100101188"/>
       <criterion comment="openoffice.org-langpack-lt_LT is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406185"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-da_DK is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:com.redhat.rhsa:tst:20100101190"/>
       <criterion comment="openoffice.org-langpack-da_DK is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406229"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-de is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:com.redhat.rhsa:tst:20100101192"/>
       <criterion comment="openoffice.org-langpack-de is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406221"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-draw is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:com.redhat.rhsa:tst:20100101194"/>
       <criterion comment="openoffice.org-draw is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406205"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-fi_FI is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:com.redhat.rhsa:tst:20100101196"/>
       <criterion comment="openoffice.org-langpack-fi_FI is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406255"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-pt_BR is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:com.redhat.rhsa:tst:20100101198"/>
       <criterion comment="openoffice.org-langpack-pt_BR is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406133"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-nso_ZA is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:com.redhat.rhsa:tst:20100101200"/>
       <criterion comment="openoffice.org-langpack-nso_ZA is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406187"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-math is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:com.redhat.rhsa:tst:20100101202"/>
       <criterion comment="openoffice.org-math is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406167"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-gl_ES is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:com.redhat.rhsa:tst:20100101204"/>
       <criterion comment="openoffice.org-langpack-gl_ES is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406153"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-sv is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:com.redhat.rhsa:tst:20100101206"/>
       <criterion comment="openoffice.org-langpack-sv is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406263"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-el_GR is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:com.redhat.rhsa:tst:20100101208"/>
       <criterion comment="openoffice.org-langpack-el_GR is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406245"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-ss_ZA is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:com.redhat.rhsa:tst:20100101210"/>
       <criterion comment="openoffice.org-langpack-ss_ZA is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406151"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-sdk is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:com.redhat.rhsa:tst:20100101212"/>
       <criterion comment="openoffice.org-sdk is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20080939171"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-eu_ES is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:com.redhat.rhsa:tst:20100101214"/>
       <criterion comment="openoffice.org-langpack-eu_ES is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406257"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-cy_GB is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:com.redhat.rhsa:tst:20100101216"/>
       <criterion comment="openoffice.org-langpack-cy_GB is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406177"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-core is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:com.redhat.rhsa:tst:20100101218"/>
       <criterion comment="openoffice.org-core is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406249"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-ga_IE is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:com.redhat.rhsa:tst:20100101220"/>
       <criterion comment="openoffice.org-langpack-ga_IE is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406157"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-th_TH is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:com.redhat.rhsa:tst:20100101222"/>
       <criterion comment="openoffice.org-langpack-th_TH is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406235"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-pa_IN is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:com.redhat.rhsa:tst:20100101224"/>
       <criterion comment="openoffice.org-langpack-pa_IN is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406215"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-testtools is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:com.redhat.rhsa:tst:20100101226"/>
       <criterion comment="openoffice.org-testtools is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406159"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-headless is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:com.redhat.rhsa:tst:20100101228"/>
       <criterion comment="openoffice.org-headless is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20080939135"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-mr_IN is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:com.redhat.rhsa:tst:20100101230"/>
       <criterion comment="openoffice.org-langpack-mr_IN is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406193"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-hu_HU is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:com.redhat.rhsa:tst:20100101232"/>
       <criterion comment="openoffice.org-langpack-hu_HU is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406161"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-nb_NO is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:com.redhat.rhsa:tst:20100101234"/>
       <criterion comment="openoffice.org-langpack-nb_NO is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406149"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-gu_IN is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:com.redhat.rhsa:tst:20100101236"/>
       <criterion comment="openoffice.org-langpack-gu_IN is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406169"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-zu_ZA is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:com.redhat.rhsa:tst:20100101238"/>
       <criterion comment="openoffice.org-langpack-zu_ZA is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406209"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-pl_PL is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:com.redhat.rhsa:tst:20100101240"/>
       <criterion comment="openoffice.org-langpack-pl_PL is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406223"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-calc is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:com.redhat.rhsa:tst:20100101242"/>
       <criterion comment="openoffice.org-calc is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406265"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-zh_CN is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:com.redhat.rhsa:tst:20100101244"/>
       <criterion comment="openoffice.org-langpack-zh_CN is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406155"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-it is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:com.redhat.rhsa:tst:20100101246"/>
       <criterion comment="openoffice.org-langpack-it is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406197"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-ur is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:com.redhat.rhsa:tst:20100101248"/>
       <criterion comment="openoffice.org-langpack-ur is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406237"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-nr_ZA is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:com.redhat.rhsa:tst:20100101250"/>
       <criterion comment="openoffice.org-langpack-nr_ZA is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406139"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-base is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:com.redhat.rhsa:tst:20100101252"/>
       <criterion comment="openoffice.org-base is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406181"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-ve_ZA is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:com.redhat.rhsa:tst:20100101254"/>
       <criterion comment="openoffice.org-langpack-ve_ZA is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406141"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-emailmerge is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:com.redhat.rhsa:tst:20100101256"/>
       <criterion comment="openoffice.org-emailmerge is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406201"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-pt_PT is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:com.redhat.rhsa:tst:20100101258"/>
       <criterion comment="openoffice.org-langpack-pt_PT is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406203"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-kn_IN is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:com.redhat.rhsa:tst:20100101260"/>
       <criterion comment="openoffice.org-langpack-kn_IN is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406271"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-javafilter is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:com.redhat.rhsa:tst:20100101262"/>
       <criterion comment="openoffice.org-javafilter is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406269"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-tr_TR is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:com.redhat.rhsa:tst:20100101264"/>
       <criterion comment="openoffice.org-langpack-tr_TR is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406145"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-te_IN is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:com.redhat.rhsa:tst:20100101266"/>
       <criterion comment="openoffice.org-langpack-te_IN is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406195"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-he_IL is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:com.redhat.rhsa:tst:20100101268"/>
       <criterion comment="openoffice.org-langpack-he_IL is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406243"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-sl_SI is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:com.redhat.rhsa:tst:20100101270"/>
       <criterion comment="openoffice.org-langpack-sl_SI is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406267"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-ms_MY is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:com.redhat.rhsa:tst:20100101272"/>
       <criterion comment="openoffice.org-langpack-ms_MY is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406171"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-nn_NO is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:com.redhat.rhsa:tst:20100101274"/>
       <criterion comment="openoffice.org-langpack-nn_NO is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406225"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-writer is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:com.redhat.rhsa:tst:20100101276"/>
       <criterion comment="openoffice.org-writer is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406147"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-es is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:com.redhat.rhsa:tst:20100101278"/>
       <criterion comment="openoffice.org-langpack-es is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406259"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-langpack-af_ZA is earlier than 1:2.3.0-6.11.el5_4.4" test_ref="oval:com.redhat.rhsa:tst:20100101280"/>
       <criterion comment="openoffice.org-langpack-af_ZA is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070406247"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20100113" version="633">
   <metadata>
    <title>RHSA-2010:0113: seamonkey security update (Critical)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
    </affected>
    <reference ref_id="RHSA-2010:0113" ref_url="https://access.redhat.com/errata/RHSA-2010:0113" source="RHSA"/>
    <reference ref_id="CVE-2009-1571" ref_url="https://access.redhat.com/security/cve/CVE-2009-1571" source="CVE"/>
    <reference ref_id="CVE-2010-0159" ref_url="https://access.redhat.com/security/cve/CVE-2010-0159" source="CVE"/>
    <reference ref_id="CVE-2010-0169" ref_url="https://access.redhat.com/security/cve/CVE-2010-0169" source="CVE"/>
    <reference ref_id="CVE-2010-0171" ref_url="https://access.redhat.com/security/cve/CVE-2010-0171" source="CVE"/>
    <description>SeaMonkey is an open source Web browser, email and newsgroup client, IRC
chat client, and HTML editor.

A use-after-free flaw was found in SeaMonkey. Under low memory conditions,
visiting a web page containing malicious content could result in SeaMonkey
executing arbitrary code with the privileges of the user running SeaMonkey.
(CVE-2009-1571)

Several flaws were found in the processing of malformed web content. A web
page containing malicious content could cause SeaMonkey to crash or,
potentially, execute arbitrary code with the privileges of the user running
SeaMonkey. (CVE-2010-0159)

All SeaMonkey users should upgrade to these updated packages, which correct
these issues. After installing the update, SeaMonkey must be restarted for
the changes to take effect.</description>
    <advisory from="secalert@redhat.com">
     <severity>Critical</severity>
     <rights>Copyright 2010 Red Hat, Inc.</rights>
     <issued date="2010-02-17"/>
     <updated date="2010-02-17"/>
     <cve cvss2="6.8/AV:N/AC:M/Au:N/C:P/I:P/A:P" href="https://access.redhat.com/security/cve/CVE-2009-1571" public="20100217">CVE-2009-1571</cve>
     <cve cvss2="6.8/AV:N/AC:M/Au:N/C:P/I:P/A:P" href="https://access.redhat.com/security/cve/CVE-2010-0159" public="20100217">CVE-2010-0159</cve>
     <cve cvss2="4.3/AV:N/AC:M/Au:N/C:N/I:P/A:N" href="https://access.redhat.com/security/cve/CVE-2010-0169" impact="low" public="20100323">CVE-2010-0169</cve>
     <cve cvss2="4.3/AV:N/AC:M/Au:N/C:N/I:P/A:N" cwe="CWE-79" href="https://access.redhat.com/security/cve/CVE-2010-0171" impact="important" public="20100323">CVE-2010-0171</cve>
     <bugzilla href="https://bugzilla.redhat.com/566047" id="566047">CVE-2010-0159 Mozilla crashes with evidence of memory corruption (MFSA 2010-01)</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/566050" id="566050">CVE-2009-1571 Mozilla incorrectly frees used memory (MFSA 2010-03)</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.50.el3" test_ref="oval:com.redhat.rhsa:tst:20100113001"/>
       <criterion comment="seamonkey-mail is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578020"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.50.el3" test_ref="oval:com.redhat.rhsa:tst:20100113003"/>
       <criterion comment="seamonkey-nss is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578016"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.50.el3" test_ref="oval:com.redhat.rhsa:tst:20100113005"/>
       <criterion comment="seamonkey-chat is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.50.el3" test_ref="oval:com.redhat.rhsa:tst:20100113007"/>
       <criterion comment="seamonkey-nspr-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.50.el3" test_ref="oval:com.redhat.rhsa:tst:20100113009"/>
       <criterion comment="seamonkey-dom-inspector is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.50.el3" test_ref="oval:com.redhat.rhsa:tst:20100113011"/>
       <criterion comment="seamonkey-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578014"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey is earlier than 0:1.0.9-0.50.el3" test_ref="oval:com.redhat.rhsa:tst:20100113013"/>
       <criterion comment="seamonkey is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578018"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.50.el3" test_ref="oval:com.redhat.rhsa:tst:20100113015"/>
       <criterion comment="seamonkey-nss-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578012"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.50.el3" test_ref="oval:com.redhat.rhsa:tst:20100113017"/>
       <criterion comment="seamonkey-js-debugger is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.50.el3" test_ref="oval:com.redhat.rhsa:tst:20100113019"/>
       <criterion comment="seamonkey-nspr is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578010"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="seamonkey-chat is earlier than 0:1.0.9-52.el4_8" test_ref="oval:com.redhat.rhsa:tst:20100113022"/>
       <criterion comment="seamonkey-chat is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-devel is earlier than 0:1.0.9-52.el4_8" test_ref="oval:com.redhat.rhsa:tst:20100113023"/>
       <criterion comment="seamonkey-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578014"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey is earlier than 0:1.0.9-52.el4_8" test_ref="oval:com.redhat.rhsa:tst:20100113024"/>
       <criterion comment="seamonkey is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578018"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-52.el4_8" test_ref="oval:com.redhat.rhsa:tst:20100113025"/>
       <criterion comment="seamonkey-js-debugger is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-52.el4_8" test_ref="oval:com.redhat.rhsa:tst:20100113026"/>
       <criterion comment="seamonkey-dom-inspector is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-mail is earlier than 0:1.0.9-52.el4_8" test_ref="oval:com.redhat.rhsa:tst:20100113027"/>
       <criterion comment="seamonkey-mail is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578020"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20100140" version="640">
   <metadata>
    <title>RHSA-2010:0140: pango security update (Moderate)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
     <platform>Red Hat Enterprise Linux 5</platform>
    </affected>
    <reference ref_id="RHSA-2010:0140" ref_url="https://access.redhat.com/errata/RHSA-2010:0140" source="RHSA"/>
    <reference ref_id="CVE-2010-0421" ref_url="https://access.redhat.com/security/cve/CVE-2010-0421" source="CVE"/>
    <description>Pango is a library used for the layout and rendering of internationalized
text.

An input sanitization flaw, leading to an array index error, was found in
the way the Pango font rendering library synthesized the Glyph Definition
(GDEF) table from a font's character map and the Unicode property database.
If an attacker created a specially-crafted font file and tricked a local,
unsuspecting user into loading the font file in an application that uses
the Pango font rendering library, it could cause that application to crash.
(CVE-2010-0421)

Users of pango and evolution28-pango are advised to upgrade to these
updated packages, which contain a backported patch to resolve this issue.
After installing this update, you must restart your system or restart your
X session for this update to take effect.</description>
    <advisory from="secalert@redhat.com">
     <severity>Moderate</severity>
     <rights>Copyright 2010 Red Hat, Inc.</rights>
     <issued date="2010-03-15"/>
     <updated date="2010-03-15"/>
     <cve cvss2="4.3/AV:N/AC:M/Au:N/C:N/I:N/A:P" href="https://access.redhat.com/security/cve/CVE-2010-0421" public="20100315">CVE-2010-0421</cve>
     <bugzilla href="https://bugzilla.redhat.com/555831" id="555831">CVE-2010-0421 libpangoft2 segfaults on forged font files</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:5</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="pango-devel is earlier than 0:1.2.5-10" test_ref="oval:com.redhat.rhsa:tst:20100140001"/>
       <criterion comment="pango-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20090476002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="pango is earlier than 0:1.2.5-10" test_ref="oval:com.redhat.rhsa:tst:20100140003"/>
       <criterion comment="pango is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20090476004"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="evolution28-pango is earlier than 0:1.14.9-13.el4_8" test_ref="oval:com.redhat.rhsa:tst:20100140006"/>
       <criterion comment="evolution28-pango is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20090476011"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="evolution28-pango-devel is earlier than 0:1.14.9-13.el4_8" test_ref="oval:com.redhat.rhsa:tst:20100140008"/>
       <criterion comment="evolution28-pango-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20090476009"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="pango-devel is earlier than 0:1.6.0-16.el4_8" test_ref="oval:com.redhat.rhsa:tst:20100140010"/>
       <criterion comment="pango-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20090476002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="pango is earlier than 0:1.6.0-16.el4_8" test_ref="oval:com.redhat.rhsa:tst:20100140011"/>
       <criterion comment="pango is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20090476004"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 5 is installed" test_ref="oval:com.redhat.rhsa:tst:20070066013"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="pango-devel is earlier than 0:1.14.9-8.el5" test_ref="oval:com.redhat.rhsa:tst:20100140013"/>
       <criterion comment="pango-devel is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20090476016"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="pango is earlier than 0:1.14.9-8.el5" test_ref="oval:com.redhat.rhsa:tst:20100140015"/>
       <criterion comment="pango is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20090476014"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20100142" version="633">
   <metadata>
    <title>RHSA-2010:0142: tar security update (Moderate)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
    </affected>
    <reference ref_id="RHSA-2010:0142" ref_url="https://access.redhat.com/errata/RHSA-2010:0142" source="RHSA"/>
    <reference ref_id="CVE-2010-0624" ref_url="https://access.redhat.com/security/cve/CVE-2010-0624" source="CVE"/>
    <description>The GNU tar program saves many files together in one archive and can
restore individual files (or all of the files) from that archive.

A heap-based buffer overflow flaw was found in the way tar expanded archive
files. If a user were tricked into expanding a specially-crafted archive,
it could cause the tar executable to crash or execute arbitrary code with
the privileges of the user running tar. (CVE-2010-0624)

Red Hat would like to thank Jakob Lell for responsibly reporting this
issue.

Users of tar are advised to upgrade to this updated package, which contains
a backported patch to correct this issue.</description>
    <advisory from="secalert@redhat.com">
     <severity>Moderate</severity>
     <rights>Copyright 2010 Red Hat, Inc.</rights>
     <issued date="2010-03-15"/>
     <updated date="2010-03-15"/>
     <cve cvss2="5.1/AV:N/AC:H/Au:N/C:P/I:P/A:P" cwe="CWE-122" href="https://access.redhat.com/security/cve/CVE-2010-0624" public="20100310">CVE-2010-0624</cve>
     <bugzilla href="https://bugzilla.redhat.com/564368" id="564368">CVE-2010-0624 tar, cpio: Heap-based buffer overflow by expanding a specially-crafted archive</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="AND">
    <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
    <criterion comment="tar is earlier than 0:1.13.25-16.RHEL3" test_ref="oval:com.redhat.rhsa:tst:20100142001"/>
    <criterion comment="tar is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060195002"/>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20100145" version="634">
   <metadata>
    <title>RHSA-2010:0145: cpio security update (Moderate)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
    </affected>
    <reference ref_id="RHSA-2010:0145" ref_url="https://access.redhat.com/errata/RHSA-2010:0145" source="RHSA"/>
    <reference ref_id="CVE-2005-4268" ref_url="https://access.redhat.com/security/cve/CVE-2005-4268" source="CVE"/>
    <reference ref_id="CVE-2010-0624" ref_url="https://access.redhat.com/security/cve/CVE-2010-0624" source="CVE"/>
    <description>GNU cpio copies files into or out of a cpio or tar archive.

A heap-based buffer overflow flaw was found in the way cpio expanded
archive files. If a user were tricked into expanding a specially-crafted
archive, it could cause the cpio executable to crash or execute arbitrary
code with the privileges of the user running cpio. (CVE-2010-0624)

Red Hat would like to thank Jakob Lell for responsibly reporting the
CVE-2010-0624 issue.

A stack-based buffer overflow flaw was found in the way cpio expanded large
archive files. If a user expanded a specially-crafted archive, it could
cause the cpio executable to crash. This issue only affected 64-bit
platforms. (CVE-2005-4268)

Users of cpio are advised to upgrade to this updated package, which
contains backported patches to correct these issues.</description>
    <advisory from="secalert@redhat.com">
     <severity>Moderate</severity>
     <rights>Copyright 2010 Red Hat, Inc.</rights>
     <issued date="2010-03-15"/>
     <updated date="2010-03-15"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2005-4268" impact="low" public="20051107">CVE-2005-4268</cve>
     <cve cvss2="5.1/AV:N/AC:H/Au:N/C:P/I:P/A:P" cwe="CWE-122" href="https://access.redhat.com/security/cve/CVE-2010-0624" public="20100310">CVE-2010-0624</cve>
     <bugzilla href="https://bugzilla.redhat.com/229191" id="229191">CVE-2005-4268 cpio large filesize buffer overflow</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/564368" id="564368">CVE-2010-0624 tar, cpio: Heap-based buffer overflow by expanding a specially-crafted archive</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="AND">
    <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
    <criterion comment="cpio is earlier than 0:2.5-6.RHEL3" test_ref="oval:com.redhat.rhsa:tst:20100145001"/>
    <criterion comment="cpio is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20100145002"/>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20100163" version="635">
   <metadata>
    <title>RHSA-2010:0163: openssl security update (Moderate)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
    </affected>
    <reference ref_id="RHSA-2010:0163" ref_url="https://access.redhat.com/errata/RHSA-2010:0163" source="RHSA"/>
    <reference ref_id="CVE-2009-0590" ref_url="https://access.redhat.com/security/cve/CVE-2009-0590" source="CVE"/>
    <reference ref_id="CVE-2009-2409" ref_url="https://access.redhat.com/security/cve/CVE-2009-2409" source="CVE"/>
    <reference ref_id="CVE-2009-3555" ref_url="https://access.redhat.com/security/cve/CVE-2009-3555" source="CVE"/>
    <description>OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL v2/v3)
and Transport Layer Security (TLS v1) protocols, as well as a
full-strength, general purpose cryptography library.

A flaw was found in the way the TLS/SSL (Transport Layer Security/Secure
Sockets Layer) protocols handled session renegotiation. A man-in-the-middle
attacker could use this flaw to prefix arbitrary plain text to a client's
session (for example, an HTTPS connection to a website). This could force
the server to process an attacker's request as if authenticated using the
victim's credentials. This update addresses this flaw by implementing the
TLS Renegotiation Indication Extension, as defined in RFC 5746.
(CVE-2009-3555)

Refer to the following Knowledgebase article for additional details about
the CVE-2009-3555 flaw: http://kbase.redhat.com/faq/docs/DOC-20491

Dan Kaminsky found that browsers could accept certificates with MD2 hash
signatures, even though MD2 is no longer considered a cryptographically
strong algorithm. This could make it easier for an attacker to create a
malicious certificate that would be treated as trusted by a browser.
OpenSSL now disables the use of the MD2 algorithm inside signatures by
default. (CVE-2009-2409)

An input validation flaw was found in the handling of the BMPString and
UniversalString ASN1 string types in OpenSSL's ASN1_STRING_print_ex()
function. An attacker could use this flaw to create a specially-crafted
X.509 certificate that could cause applications using the affected function
to crash when printing certificate contents. (CVE-2009-0590)

Note: The affected function is rarely used. No application shipped with Red
Hat Enterprise Linux calls this function, for example.

All OpenSSL users should upgrade to these updated packages, which contain
backported patches to resolve these issues. For the update to take effect,
all services linked to the OpenSSL library must be restarted, or the system
rebooted.</description>
    <advisory from="secalert@redhat.com">
     <severity>Moderate</severity>
     <rights>Copyright 2010 Red Hat, Inc.</rights>
     <issued date="2010-03-25"/>
     <updated date="2010-03-25"/>
     <cve cvss2="2.6/AV:N/AC:H/Au:N/C:N/I:N/A:P" href="https://access.redhat.com/security/cve/CVE-2009-0590" impact="low" public="20090325">CVE-2009-0590</cve>
     <cve cvss2="2.6/AV:N/AC:H/Au:N/C:N/I:P/A:N" href="https://access.redhat.com/security/cve/CVE-2009-2409" public="20090729">CVE-2009-2409</cve>
     <cve cvss2="4.3/AV:N/AC:M/Au:N/C:N/I:P/A:N" cwe="CWE-300" href="https://access.redhat.com/security/cve/CVE-2009-3555" public="20091105">CVE-2009-3555</cve>
     <bugzilla href="https://bugzilla.redhat.com/492304" id="492304">CVE-2009-0590 openssl: ASN1 printing crash</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/510197" id="510197">CVE-2009-2409 deprecate MD2 in SSL cert validation (Kaminsky)</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/533125" id="533125">CVE-2009-3555 TLS: MITM attacks via session renegotiation</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="openssl-perl is earlier than 0:0.9.7a-33.26" test_ref="oval:com.redhat.rhsa:tst:20100163001"/>
       <criterion comment="openssl-perl is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060661004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openssl is earlier than 0:0.9.7a-33.26" test_ref="oval:com.redhat.rhsa:tst:20100163003"/>
       <criterion comment="openssl is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060661006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openssl-devel is earlier than 0:0.9.7a-33.26" test_ref="oval:com.redhat.rhsa:tst:20100163005"/>
       <criterion comment="openssl-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060661008"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="openssl-perl is earlier than 0:0.9.7a-43.17.el4_8.5" test_ref="oval:com.redhat.rhsa:tst:20100163008"/>
       <criterion comment="openssl-perl is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060661004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openssl is earlier than 0:0.9.7a-43.17.el4_8.5" test_ref="oval:com.redhat.rhsa:tst:20100163009"/>
       <criterion comment="openssl is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060661006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openssl-devel is earlier than 0:0.9.7a-43.17.el4_8.5" test_ref="oval:com.redhat.rhsa:tst:20100163010"/>
       <criterion comment="openssl-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060661008"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20100173" version="632">
   <metadata>
    <title>RHSA-2010:0173: openssl096b security update (Important)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
    </affected>
    <reference ref_id="RHSA-2010:0173" ref_url="https://access.redhat.com/errata/RHSA-2010:0173" source="RHSA"/>
    <reference ref_id="CVE-2009-3245" ref_url="https://access.redhat.com/security/cve/CVE-2009-3245" source="CVE"/>
    <description>OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL v2/v3)
and Transport Layer Security (TLS v1) protocols, as well as a
full-strength, general purpose cryptography library.

It was discovered that OpenSSL did not always check the return value of the
bn_wexpand() function. An attacker able to trigger a memory allocation
failure in that function could cause an application using the OpenSSL
library to crash or, possibly, execute arbitrary code. (CVE-2009-3245)

All openssl096b users should upgrade to these updated packages, which
contain a backported patch to resolve this issue. For the update to take
effect, all programs using the openssl096b library must be restarted.</description>
    <advisory from="secalert@redhat.com">
     <severity>Important</severity>
     <rights>Copyright 2010 Red Hat, Inc.</rights>
     <issued date="2010-03-25"/>
     <updated date="2010-03-25"/>
     <cve cvss2="7.6/AV:N/AC:H/Au:N/C:C/I:C/A:C" cwe="CWE-252 CWE-476" href="https://access.redhat.com/security/cve/CVE-2009-3245" public="20100223">CVE-2009-3245</cve>
     <bugzilla href="https://bugzilla.redhat.com/570924" id="570924">CVE-2009-3245 openssl: missing bn_wexpand return value checks</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criterion comment="openssl096b is earlier than 0:0.9.6b-16.50" test_ref="oval:com.redhat.rhsa:tst:20100173001"/>
     <criterion comment="openssl096b is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060661002"/>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criterion comment="openssl096b is earlier than 0:0.9.6b-22.46.el4_8.1" test_ref="oval:com.redhat.rhsa:tst:20100173004"/>
     <criterion comment="openssl096b is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060661002"/>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20100329" version="636">
   <metadata>
    <title>RHSA-2010:0329: curl security update (Moderate)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
    </affected>
    <reference ref_id="RHSA-2010:0329" ref_url="https://access.redhat.com/errata/RHSA-2010:0329" source="RHSA"/>
    <reference ref_id="CVE-2010-0734" ref_url="https://access.redhat.com/security/cve/CVE-2010-0734" source="CVE"/>
    <description>cURL is a tool for getting files from FTP, HTTP, Gopher, Telnet, and DICT
servers, using any of the supported protocols. cURL is designed to work
without user interaction or any kind of interactivity.

Wesley Miaw discovered that when deflate compression was used, libcurl
could call the registered write callback function with data exceeding the
documented limit. A malicious server could use this flaw to crash an
application using libcurl or, potentially, execute arbitrary code. Note:
This issue only affected applications using libcurl that rely on the
documented data size limit, and that copy the data to the insufficiently
sized buffer. (CVE-2010-0734)

Users of curl should upgrade to these updated packages, which contain a
backported patch to correct this issue. All running applications using
libcurl must be restarted for the update to take effect.</description>
    <advisory from="secalert@redhat.com">
     <severity>Moderate</severity>
     <rights>Copyright 2010 Red Hat, Inc.</rights>
     <issued date="2010-03-30"/>
     <updated date="2010-03-30"/>
     <cve cvss2="5.1/AV:N/AC:H/Au:N/C:P/I:P/A:P" href="https://access.redhat.com/security/cve/CVE-2010-0734" public="20100209">CVE-2010-0734</cve>
     <bugzilla href="https://bugzilla.redhat.com/563220" id="563220">CVE-2010-0734 curl: zlib-compression causes curl to pass more than CURL_MAX_WRITE_SIZE bytes to write callback</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="curl-devel is earlier than 0:7.10.6-11.rhel3" test_ref="oval:com.redhat.rhsa:tst:20100329001"/>
       <criterion comment="curl-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20090341002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="curl is earlier than 0:7.10.6-11.rhel3" test_ref="oval:com.redhat.rhsa:tst:20100329003"/>
       <criterion comment="curl is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20090341004"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="curl is earlier than 0:7.12.1-11.1.el4_8.3" test_ref="oval:com.redhat.rhsa:tst:20100329006"/>
       <criterion comment="curl is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20090341004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="curl-devel is earlier than 0:7.12.1-11.1.el4_8.3" test_ref="oval:com.redhat.rhsa:tst:20100329007"/>
       <criterion comment="curl-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20090341002"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20100333" version="636">
   <metadata>
    <title>RHSA-2010:0333: seamonkey security update (Critical)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
    </affected>
    <reference ref_id="RHSA-2010:0333" ref_url="https://access.redhat.com/errata/RHSA-2010:0333" source="RHSA"/>
    <reference ref_id="CVE-2010-0174" ref_url="https://access.redhat.com/security/cve/CVE-2010-0174" source="CVE"/>
    <reference ref_id="CVE-2010-0175" ref_url="https://access.redhat.com/security/cve/CVE-2010-0175" source="CVE"/>
    <reference ref_id="CVE-2010-0176" ref_url="https://access.redhat.com/security/cve/CVE-2010-0176" source="CVE"/>
    <reference ref_id="CVE-2010-0177" ref_url="https://access.redhat.com/security/cve/CVE-2010-0177" source="CVE"/>
    <description>SeaMonkey is an open source Web browser, email and newsgroup client, IRC
chat client, and HTML editor.

Several use-after-free flaws were found in SeaMonkey. Visiting a web page
containing malicious content could result in SeaMonkey executing arbitrary
code with the privileges of the user running SeaMonkey. (CVE-2010-0175,
CVE-2010-0176, CVE-2010-0177)

Several flaws were found in the processing of malformed web content. A web
page containing malicious content could cause SeaMonkey to crash or,
potentially, execute arbitrary code with the privileges of the user running
SeaMonkey. (CVE-2010-0174)

All SeaMonkey users should upgrade to these updated packages, which correct
these issues. After installing the update, SeaMonkey must be restarted for
the changes to take effect.</description>
    <advisory from="secalert@redhat.com">
     <severity>Critical</severity>
     <rights>Copyright 2010 Red Hat, Inc.</rights>
     <issued date="2010-03-30"/>
     <updated date="2010-03-30"/>
     <cve cvss2="6.8/AV:N/AC:M/Au:N/C:P/I:P/A:P" href="https://access.redhat.com/security/cve/CVE-2010-0174" public="20100330">CVE-2010-0174</cve>
     <cve cvss2="6.8/AV:N/AC:M/Au:N/C:P/I:P/A:P" cwe="CWE-416" href="https://access.redhat.com/security/cve/CVE-2010-0175" public="20100330">CVE-2010-0175</cve>
     <cve cvss2="6.8/AV:N/AC:M/Au:N/C:P/I:P/A:P" href="https://access.redhat.com/security/cve/CVE-2010-0176" public="20100330">CVE-2010-0176</cve>
     <cve cvss2="6.8/AV:N/AC:M/Au:N/C:P/I:P/A:P" href="https://access.redhat.com/security/cve/CVE-2010-0177" public="20100330">CVE-2010-0177</cve>
     <bugzilla href="https://bugzilla.redhat.com/578147" id="578147">CVE-2010-0174 Mozilla crashes with evidence of memory corruption</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/578149" id="578149">CVE-2010-0175 Mozilla remote code execution with use-after-free in nsTreeSelection</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/578150" id="578150">CVE-2010-0176 Mozilla Dangling pointer vulnerability in nsTreeContentView</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/578152" id="578152">CVE-2010-0177 Mozilla Dangling pointer vulnerability in nsPluginArray</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.52.el3" test_ref="oval:com.redhat.rhsa:tst:20100333001"/>
       <criterion comment="seamonkey-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578014"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.52.el3" test_ref="oval:com.redhat.rhsa:tst:20100333003"/>
       <criterion comment="seamonkey-nss-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578012"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.52.el3" test_ref="oval:com.redhat.rhsa:tst:20100333005"/>
       <criterion comment="seamonkey-dom-inspector is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.52.el3" test_ref="oval:com.redhat.rhsa:tst:20100333007"/>
       <criterion comment="seamonkey-nspr-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey is earlier than 0:1.0.9-0.52.el3" test_ref="oval:com.redhat.rhsa:tst:20100333009"/>
       <criterion comment="seamonkey is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578018"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.52.el3" test_ref="oval:com.redhat.rhsa:tst:20100333011"/>
       <criterion comment="seamonkey-js-debugger is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.52.el3" test_ref="oval:com.redhat.rhsa:tst:20100333013"/>
       <criterion comment="seamonkey-mail is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578020"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.52.el3" test_ref="oval:com.redhat.rhsa:tst:20100333015"/>
       <criterion comment="seamonkey-nspr is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578010"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.52.el3" test_ref="oval:com.redhat.rhsa:tst:20100333017"/>
       <criterion comment="seamonkey-chat is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.52.el3" test_ref="oval:com.redhat.rhsa:tst:20100333019"/>
       <criterion comment="seamonkey-nss is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578016"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="seamonkey-mail is earlier than 0:1.0.9-54.el4_8" test_ref="oval:com.redhat.rhsa:tst:20100333022"/>
       <criterion comment="seamonkey-mail is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578020"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-54.el4_8" test_ref="oval:com.redhat.rhsa:tst:20100333023"/>
       <criterion comment="seamonkey-js-debugger is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-54.el4_8" test_ref="oval:com.redhat.rhsa:tst:20100333024"/>
       <criterion comment="seamonkey-dom-inspector is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-devel is earlier than 0:1.0.9-54.el4_8" test_ref="oval:com.redhat.rhsa:tst:20100333025"/>
       <criterion comment="seamonkey-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578014"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey is earlier than 0:1.0.9-54.el4_8" test_ref="oval:com.redhat.rhsa:tst:20100333026"/>
       <criterion comment="seamonkey is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578018"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-chat is earlier than 0:1.0.9-54.el4_8" test_ref="oval:com.redhat.rhsa:tst:20100333027"/>
       <criterion comment="seamonkey-chat is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578006"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20100360" version="636">
   <metadata>
    <title>RHSA-2010:0360: wireshark security update (Moderate)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
     <platform>Red Hat Enterprise Linux 5</platform>
    </affected>
    <reference ref_id="RHSA-2010:0360" ref_url="https://access.redhat.com/errata/RHSA-2010:0360" source="RHSA"/>
    <reference ref_id="CVE-2009-2560" ref_url="https://access.redhat.com/security/cve/CVE-2009-2560" source="CVE"/>
    <reference ref_id="CVE-2009-2562" ref_url="https://access.redhat.com/security/cve/CVE-2009-2562" source="CVE"/>
    <reference ref_id="CVE-2009-2563" ref_url="https://access.redhat.com/security/cve/CVE-2009-2563" source="CVE"/>
    <reference ref_id="CVE-2009-3550" ref_url="https://access.redhat.com/security/cve/CVE-2009-3550" source="CVE"/>
    <reference ref_id="CVE-2009-3829" ref_url="https://access.redhat.com/security/cve/CVE-2009-3829" source="CVE"/>
    <reference ref_id="CVE-2009-4377" ref_url="https://access.redhat.com/security/cve/CVE-2009-4377" source="CVE"/>
    <reference ref_id="CVE-2010-0304" ref_url="https://access.redhat.com/security/cve/CVE-2010-0304" source="CVE"/>
    <description>Wireshark is a program for monitoring network traffic. Wireshark was
previously known as Ethereal.

An invalid pointer dereference flaw was found in the Wireshark SMB and SMB2
dissectors. If Wireshark read a malformed packet off a network or opened a
malicious dump file, it could crash or, possibly, execute arbitrary code as
the user running Wireshark. (CVE-2009-4377)

Several buffer overflow flaws were found in the Wireshark LWRES dissector.
If Wireshark read a malformed packet off a network or opened a malicious
dump file, it could crash or, possibly, execute arbitrary code as the user
running Wireshark. (CVE-2010-0304)

Several denial of service flaws were found in Wireshark. Wireshark could
crash or stop responding if it read a malformed packet off a network, or
opened a malicious dump file. (CVE-2009-2560, CVE-2009-2562, CVE-2009-2563,
CVE-2009-3550, CVE-2009-3829)

Users of Wireshark should upgrade to these updated packages, which contain
Wireshark version 1.0.11, and resolve these issues. All running instances
of Wireshark must be restarted for the update to take effect.</description>
    <advisory from="secalert@redhat.com">
     <severity>Moderate</severity>
     <rights>Copyright 2010 Red Hat, Inc.</rights>
     <issued date="2010-04-20"/>
     <updated date="2010-04-20"/>
     <cve cvss2="2.9/AV:A/AC:M/Au:N/C:N/I:N/A:P" href="https://access.redhat.com/security/cve/CVE-2009-2560" impact="low" public="20090720">CVE-2009-2560</cve>
     <cve cvss2="2.9/AV:A/AC:M/Au:N/C:N/I:N/A:P" cwe="CWE-190" href="https://access.redhat.com/security/cve/CVE-2009-2562" public="20090720">CVE-2009-2562</cve>
     <cve cvss2="2.9/AV:A/AC:M/Au:N/C:N/I:N/A:P" href="https://access.redhat.com/security/cve/CVE-2009-2563" impact="low" public="20090720">CVE-2009-2563</cve>
     <cve cvss2="2.9/AV:A/AC:M/Au:N/C:N/I:N/A:P" cwe="CWE-476" href="https://access.redhat.com/security/cve/CVE-2009-3550" impact="low" public="20091027">CVE-2009-3550</cve>
     <cve cvss2="1.9/AV:L/AC:M/Au:N/C:N/I:N/A:P" href="https://access.redhat.com/security/cve/CVE-2009-3829" impact="low" public="20091005">CVE-2009-3829</cve>
     <cve cvss2="5.4/AV:A/AC:M/Au:N/C:P/I:P/A:P" href="https://access.redhat.com/security/cve/CVE-2009-4377" public="20091217">CVE-2009-4377</cve>
     <cve cvss2="2.9/AV:A/AC:M/Au:N/C:N/I:N/A:P" href="https://access.redhat.com/security/cve/CVE-2010-0304" public="20100127">CVE-2010-0304</cve>
     <bugzilla href="https://bugzilla.redhat.com/512987" id="512987">CVE-2009-2562 Wireshark: Integer overflow in the AFS dissector</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/512992" id="512992">CVE-2009-2563 Wireshark: Null-ptr dereference in the InfiniBand dissector</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/513008" id="513008">CVE-2009-2560 Wireshark: various flaws in a) RADIUS, b) Bluetooth L2CAP, c) MIOP dissectors (DoS)</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/531260" id="531260">CVE-2009-3550 Wireshark: NULL pointer dereference in the DCERPC over SMB packet disassembly</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/532479" id="532479">CVE-2009-3829 wireshark: unsigned integer wrap vulnerability in ERF reader (VU#676492)</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/549578" id="549578">CVE-2009-4377 wireshark: invalid pointer dereference in SMB/SMB2 dissectors</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/559793" id="559793">CVE-2010-0304 wireshark: crash in LWRES dissector</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:5</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="wireshark-gnome is earlier than 0:1.0.11-EL3.6" test_ref="oval:com.redhat.rhsa:tst:20100360001"/>
       <criterion comment="wireshark-gnome is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060602004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="wireshark is earlier than 0:1.0.11-EL3.6" test_ref="oval:com.redhat.rhsa:tst:20100360003"/>
       <criterion comment="wireshark is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060602002"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="wireshark is earlier than 0:1.0.11-1.el4_8.5" test_ref="oval:com.redhat.rhsa:tst:20100360006"/>
       <criterion comment="wireshark is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060602002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="wireshark-gnome is earlier than 0:1.0.11-1.el4_8.5" test_ref="oval:com.redhat.rhsa:tst:20100360007"/>
       <criterion comment="wireshark-gnome is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060602004"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 5 is installed" test_ref="oval:com.redhat.rhsa:tst:20070066013"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="wireshark is earlier than 0:1.0.11-1.el5_5.5" test_ref="oval:com.redhat.rhsa:tst:20100360009"/>
       <criterion comment="wireshark is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070066012"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="wireshark-gnome is earlier than 0:1.0.11-1.el5_5.5" test_ref="oval:com.redhat.rhsa:tst:20100360011"/>
       <criterion comment="wireshark-gnome is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070066010"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20100386" version="633">
   <metadata>
    <title>RHSA-2010:0386: Red Hat Enterprise Linux 3 - 6-Month End Of Life Notice (Low)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
    </affected>
    <reference ref_id="RHSA-2010:0386" ref_url="https://access.redhat.com/errata/RHSA-2010:0386" source="RHSA"/>
    <description>In accordance with the Red Hat Enterprise Linux Errata Support Policy, the
regular 7 year life-cycle of Red Hat Enterprise Linux 3 will end on October
31, 2010.

After this date, Red Hat will discontinue the regular subscription services
for Red Hat Enterprise Linux 3. Therefore, new bug fix, enhancement, and
security errata updates, as well as technical support services will no
longer be available for the following products:

* Red Hat Enterprise Linux AS 3
* Red Hat Enterprise Linux ES 3
* Red Hat Enterprise Linux WS 3
* Red Hat Enterprise Linux Extras 3
* Red Hat Desktop 3
* Red Hat Global File System 3
* Red Hat Cluster Suite 3

Customers still running production workloads on Red Hat Enterprise
Linux 3 are advised to begin planning the upgrade to Red Hat Enterprise
Linux 5. Active subscribers of Red Hat Enterprise Linux already have access
to all currently maintained versions of Red Hat Enterprise Linux, as part
of their subscription without additional fees.

For customers who are unable to migrate off Red Hat Enterprise Linux 3
before its end-of-life date, Red Hat may offer a limited, optional
extension program. For more information, contact your Red Hat sales
representative or channel partner.

Details of the Red Hat Enterprise Linux life-cycle can be found on the Red
Hat website: http://www.redhat.com/security/updates/errata/</description>
    <advisory from="secalert@redhat.com">
     <severity>Low</severity>
     <rights>Copyright 2010 Red Hat, Inc.</rights>
     <issued date="2010-05-03"/>
     <updated date="2010-05-03"/>
     <bugzilla href="https://bugzilla.redhat.com/586512" id="586512">Send Out RHEL 3 6-Month EOL Notice</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="AND">
    <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
    <criteria operator="OR">
     <criteria operator="AND">
      <criterion comment="redhat-release is earlier than 0:3AS-13.9.8" test_ref="oval:com.redhat.rhsa:tst:20100386001"/>
      <criterion comment="redhat-release is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20091526002"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="redhat-release is earlier than 0:3ES-13.9.8" test_ref="oval:com.redhat.rhsa:tst:20100386003"/>
      <criterion comment="redhat-release is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20091526002"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="redhat-release is earlier than 0:3WS-13.9.8" test_ref="oval:com.redhat.rhsa:tst:20100386004"/>
      <criterion comment="redhat-release is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20091526002"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="redhat-release is earlier than 0:3Desktop-13.9.8" test_ref="oval:com.redhat.rhsa:tst:20100386005"/>
      <criterion comment="redhat-release is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20091526002"/>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20100401" version="640">
   <metadata>
    <title>RHSA-2010:0401: tetex security update (Moderate)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
    </affected>
    <reference ref_id="RHSA-2010:0401" ref_url="https://access.redhat.com/errata/RHSA-2010:0401" source="RHSA"/>
    <reference ref_id="CVE-2007-5935" ref_url="https://access.redhat.com/security/cve/CVE-2007-5935" source="CVE"/>
    <reference ref_id="CVE-2009-0791" ref_url="https://access.redhat.com/security/cve/CVE-2009-0791" source="CVE"/>
    <reference ref_id="CVE-2009-3609" ref_url="https://access.redhat.com/security/cve/CVE-2009-3609" source="CVE"/>
    <reference ref_id="CVE-2010-0739" ref_url="https://access.redhat.com/security/cve/CVE-2010-0739" source="CVE"/>
    <reference ref_id="CVE-2010-0827" ref_url="https://access.redhat.com/security/cve/CVE-2010-0827" source="CVE"/>
    <reference ref_id="CVE-2010-1440" ref_url="https://access.redhat.com/security/cve/CVE-2010-1440" source="CVE"/>
    <description>teTeX is an implementation of TeX. TeX takes a text file and a set of
formatting commands as input, and creates a typesetter-independent DeVice
Independent (DVI) file as output.

A buffer overflow flaw was found in the way teTeX processed virtual font
files when converting DVI files into PostScript. An attacker could create a
malicious DVI file that would cause the dvips executable to crash or,
potentially, execute arbitrary code. (CVE-2010-0827)

Multiple integer overflow flaws were found in the way teTeX processed
special commands when converting DVI files into PostScript. An attacker
could create a malicious DVI file that would cause the dvips executable to
crash or, potentially, execute arbitrary code. (CVE-2010-0739,
CVE-2010-1440)

A stack-based buffer overflow flaw was found in the way teTeX processed DVI
files containing HyperTeX references with long titles, when converting them
into PostScript. An attacker could create a malicious DVI file that would
cause the dvips executable to crash. (CVE-2007-5935)

teTeX embeds a copy of Xpdf, an open source Portable Document Format (PDF)
file viewer, to allow adding images in PDF format to the generated PDF
documents. The following issues affect Xpdf code:

Multiple integer overflow flaws were found in Xpdf. If a local user
generated a PDF file from a TeX document, referencing a specially-crafted
PDF file, it would cause Xpdf to crash or, potentially, execute arbitrary
code with the privileges of the user running pdflatex. (CVE-2009-0791,
CVE-2009-3609)

All users of tetex are advised to upgrade to these updated packages, which
contain backported patches to correct these issues.</description>
    <advisory from="secalert@redhat.com">
     <severity>Moderate</severity>
     <rights>Copyright 2010 Red Hat, Inc.</rights>
     <issued date="2010-05-06"/>
     <updated date="2010-05-06"/>
     <cve href="https://access.redhat.com/security/cve/CVE-2007-5935" impact="low" public="20071017">CVE-2007-5935</cve>
     <cve cvss2="5.8/AV:A/AC:L/Au:N/C:P/I:P/A:P" cwe="CWE-190" href="https://access.redhat.com/security/cve/CVE-2009-0791" public="20090519">CVE-2009-0791</cve>
     <cve cvss2="2.1/AV:L/AC:L/Au:N/C:N/I:N/A:P" cwe="CWE-190" href="https://access.redhat.com/security/cve/CVE-2009-3609" impact="low" public="20091014">CVE-2009-3609</cve>
     <cve cvss2="6.8/AV:N/AC:M/Au:N/C:P/I:P/A:P" cwe="CWE-190" href="https://access.redhat.com/security/cve/CVE-2010-0739" public="20100412">CVE-2010-0739</cve>
     <cve cvss2="6.8/AV:N/AC:M/Au:N/C:P/I:P/A:P" href="https://access.redhat.com/security/cve/CVE-2010-0827" public="20100325">CVE-2010-0827</cve>
     <cve cvss2="6.8/AV:N/AC:M/Au:N/C:P/I:P/A:P" cwe="CWE-190" href="https://access.redhat.com/security/cve/CVE-2010-1440" public="20100503">CVE-2010-1440</cve>
     <bugzilla href="https://bugzilla.redhat.com/368591" id="368591">CVE-2007-5935 dvips -z buffer overflow with long href</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/491840" id="491840">CVE-2009-0791 xpdf: multiple integer overflows</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/526893" id="526893">CVE-2009-3609 xpdf/poppler: ImageStream::ImageStream integer overflow</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/572914" id="572914">CVE-2010-0827 tetex, texlive: Buffer overflow flaw by processing virtual font files</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/572941" id="572941">CVE-2010-0739 tetex, texlive: Integer overflow by processing special commands</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/586819" id="586819">CVE-2010-1440 tetex, texlive: Integer overflow by processing special commands</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="AND">
    <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
    <criteria operator="OR">
     <criteria operator="AND">
      <criterion comment="tetex-xdvi is earlier than 0:1.0.7-67.19" test_ref="oval:com.redhat.rhsa:tst:20100401001"/>
      <criterion comment="tetex-xdvi is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060160004"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="tetex-fonts is earlier than 0:1.0.7-67.19" test_ref="oval:com.redhat.rhsa:tst:20100401003"/>
      <criterion comment="tetex-fonts is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060160012"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="tetex-dvips is earlier than 0:1.0.7-67.19" test_ref="oval:com.redhat.rhsa:tst:20100401005"/>
      <criterion comment="tetex-dvips is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060160008"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="tetex is earlier than 0:1.0.7-67.19" test_ref="oval:com.redhat.rhsa:tst:20100401007"/>
      <criterion comment="tetex is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060160002"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="tetex-afm is earlier than 0:1.0.7-67.19" test_ref="oval:com.redhat.rhsa:tst:20100401009"/>
      <criterion comment="tetex-afm is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060160010"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="tetex-latex is earlier than 0:1.0.7-67.19" test_ref="oval:com.redhat.rhsa:tst:20100401011"/>
      <criterion comment="tetex-latex is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060160006"/>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20100423" version="633">
   <metadata>
    <title>RHSA-2010:0423: krb5 security update (Important)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
     <platform>Red Hat Enterprise Linux 5</platform>
    </affected>
    <reference ref_id="RHSA-2010:0423" ref_url="https://access.redhat.com/errata/RHSA-2010:0423" source="RHSA"/>
    <reference ref_id="CVE-2010-1321" ref_url="https://access.redhat.com/security/cve/CVE-2010-1321" source="CVE"/>
    <description>Kerberos is a network authentication system which allows clients and
servers to authenticate to each other using symmetric encryption and a
trusted third party, the Key Distribution Center (KDC).

A NULL pointer dereference flaw was discovered in the MIT Kerberos Generic
Security Service Application Program Interface (GSS-API) library. A remote,
authenticated attacker could use this flaw to crash any server application
using the GSS-API authentication mechanism, by sending a specially-crafted
GSS-API token with a missing checksum field. (CVE-2010-1321)

Red Hat would like to thank the MIT Kerberos Team for responsibly reporting
this issue. Upstream acknowledges Shawn Emery of Oracle as the original
reporter.

All krb5 users should upgrade to these updated packages, which contain a
backported patch to correct this issue. All running services using the MIT
Kerberos libraries must be restarted for the update to take effect.</description>
    <advisory from="secalert@redhat.com">
     <severity>Important</severity>
     <rights>Copyright 2010 Red Hat, Inc.</rights>
     <issued date="2010-05-18"/>
     <updated date="2010-05-18"/>
     <cve cvss2="4/AV:N/AC:L/Au:S/C:N/I:N/A:P" cwe="CWE-476" href="https://access.redhat.com/security/cve/CVE-2010-1321" public="20100518">CVE-2010-1321</cve>
     <bugzilla href="https://bugzilla.redhat.com/582466" id="582466">CVE-2010-1321 krb5: null pointer dereference in GSS-API library leads to DoS (MITKRB5-SA-2010-005)</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:5</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="krb5-server is earlier than 0:1.2.7-72" test_ref="oval:com.redhat.rhsa:tst:20100423001"/>
       <criterion comment="krb5-server is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070095002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="krb5-devel is earlier than 0:1.2.7-72" test_ref="oval:com.redhat.rhsa:tst:20100423003"/>
       <criterion comment="krb5-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070095004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="krb5-workstation is earlier than 0:1.2.7-72" test_ref="oval:com.redhat.rhsa:tst:20100423005"/>
       <criterion comment="krb5-workstation is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070095008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="krb5-libs is earlier than 0:1.2.7-72" test_ref="oval:com.redhat.rhsa:tst:20100423007"/>
       <criterion comment="krb5-libs is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070095006"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="krb5-libs is earlier than 0:1.3.4-62.el4_8.2" test_ref="oval:com.redhat.rhsa:tst:20100423010"/>
       <criterion comment="krb5-libs is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070095006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="krb5-devel is earlier than 0:1.3.4-62.el4_8.2" test_ref="oval:com.redhat.rhsa:tst:20100423011"/>
       <criterion comment="krb5-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070095004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="krb5-workstation is earlier than 0:1.3.4-62.el4_8.2" test_ref="oval:com.redhat.rhsa:tst:20100423012"/>
       <criterion comment="krb5-workstation is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070095008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="krb5-server is earlier than 0:1.3.4-62.el4_8.2" test_ref="oval:com.redhat.rhsa:tst:20100423013"/>
       <criterion comment="krb5-server is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070095002"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 5 is installed" test_ref="oval:com.redhat.rhsa:tst:20070066013"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="krb5-libs is earlier than 0:1.6.1-36.el5_5.4" test_ref="oval:com.redhat.rhsa:tst:20100423015"/>
       <criterion comment="krb5-libs is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070095018"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="krb5-devel is earlier than 0:1.6.1-36.el5_5.4" test_ref="oval:com.redhat.rhsa:tst:20100423017"/>
       <criterion comment="krb5-devel is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070095020"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="krb5-server is earlier than 0:1.6.1-36.el5_5.4" test_ref="oval:com.redhat.rhsa:tst:20100423019"/>
       <criterion comment="krb5-server is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070095022"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="krb5-workstation is earlier than 0:1.6.1-36.el5_5.4" test_ref="oval:com.redhat.rhsa:tst:20100423021"/>
       <criterion comment="krb5-workstation is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070095016"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20100427" version="641">
   <metadata>
    <title>RHSA-2010:0427: postgresql security update (Moderate)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
    </affected>
    <reference ref_id="RHSA-2010:0427" ref_url="https://access.redhat.com/errata/RHSA-2010:0427" source="RHSA"/>
    <reference ref_id="CVE-2009-4136" ref_url="https://access.redhat.com/security/cve/CVE-2009-4136" source="CVE"/>
    <reference ref_id="CVE-2010-0442" ref_url="https://access.redhat.com/security/cve/CVE-2010-0442" source="CVE"/>
    <reference ref_id="CVE-2010-0733" ref_url="https://access.redhat.com/security/cve/CVE-2010-0733" source="CVE"/>
    <reference ref_id="CVE-2010-1169" ref_url="https://access.redhat.com/security/cve/CVE-2010-1169" source="CVE"/>
    <reference ref_id="CVE-2010-1170" ref_url="https://access.redhat.com/security/cve/CVE-2010-1170" source="CVE"/>
    <description>PostgreSQL is an advanced object-relational database management system
(DBMS). PL/Perl and PL/Tcl allow users to write PostgreSQL functions in the
Perl and Tcl languages, and are installed in trusted mode by default. In
trusted mode, certain operations, such as operating system level access,
are restricted.

A flaw was found in the way PostgreSQL enforced permission checks on
scripts written in PL/Perl. If the PL/Perl procedural language was
registered on a particular database, an authenticated database user running
a specially-crafted PL/Perl script could use this flaw to bypass intended
PL/Perl trusted mode restrictions, allowing them to run arbitrary Perl
scripts with the privileges of the database server. (CVE-2010-1169)

Red Hat would like to thank Tim Bunce for responsibly reporting the
CVE-2010-1169 flaw.

A flaw was found in the way PostgreSQL enforced permission checks on
scripts written in PL/Tcl. If the PL/Tcl procedural language was registered
on a particular database, an authenticated database user running a
specially-crafted PL/Tcl script could use this flaw to bypass intended
PL/Tcl trusted mode restrictions, allowing them to run arbitrary Tcl
scripts with the privileges of the database server. (CVE-2010-1170)

A buffer overflow flaw was found in the way PostgreSQL retrieved a
substring from the bit string for BIT() and BIT VARYING() SQL data types.
An authenticated database user running a specially-crafted SQL query could
use this flaw to cause a temporary denial of service (postgres daemon
crash) or, potentially, execute arbitrary code with the privileges of the
database server. (CVE-2010-0442)

An integer overflow flaw was found in the way PostgreSQL used to calculate
the size of the hash table for joined relations. An authenticated database
user could create a specially-crafted SQL query which could cause a
temporary denial of service (postgres daemon crash) or, potentially,
execute arbitrary code with the privileges of the database server.
(CVE-2010-0733)

PostgreSQL improperly protected session-local state during the execution of
an index function by a database superuser during the database maintenance
operations. An authenticated database user could use this flaw to elevate
their privileges via specially-crafted index functions. (CVE-2009-4136)

All PostgreSQL users are advised to upgrade to these updated packages,
which contain backported patches to correct these issues. Running
PostgreSQL instances must be restarted (&quot;service rhdb restart&quot;) for this
update to take effect.</description>
    <advisory from="secalert@redhat.com">
     <severity>Moderate</severity>
     <rights>Copyright 2010 Red Hat, Inc.</rights>
     <issued date="2010-05-19"/>
     <updated date="2010-05-19"/>
     <cve cvss2="4.0/AV:A/AC:H/Au:S/C:P/I:P/A:P" href="https://access.redhat.com/security/cve/CVE-2009-4136" impact="low" public="20091214">CVE-2009-4136</cve>
     <cve cvss2="5.2/AV:A/AC:L/Au:S/C:P/I:P/A:P" href="https://access.redhat.com/security/cve/CVE-2010-0442" public="20100127">CVE-2010-0442</cve>
     <cve cvss2="2.7/AV:A/AC:L/Au:S/C:N/I:N/A:P" cwe="CWE-190" href="https://access.redhat.com/security/cve/CVE-2010-0733" impact="low" public="20091214">CVE-2010-0733</cve>
     <cve cvss2="5.2/AV:A/AC:L/Au:S/C:P/I:P/A:P" href="https://access.redhat.com/security/cve/CVE-2010-1169" public="20100517">CVE-2010-1169</cve>
     <cve cvss2="4.9/AV:A/AC:M/Au:S/C:P/I:P/A:P" href="https://access.redhat.com/security/cve/CVE-2010-1170" public="20100517">CVE-2010-1170</cve>
     <bugzilla href="https://bugzilla.redhat.com/546321" id="546321">CVE-2009-4136 postgresql: SQL privilege escalation via modifications to session-local state</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/546621" id="546621">CVE-2010-0733 postgresql: Integer overflow in hash table size calculation</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/559259" id="559259">CVE-2010-0442 postgresql: substring() negative length argument buffer overflow</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/582615" id="582615">CVE-2010-1169 PostgreSQL: PL/Perl Intended restriction bypass</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/583072" id="583072">CVE-2010-1170 PostgreSQL: PL/Tcl Intended restriction bypass</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="AND">
    <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
    <criteria operator="OR">
     <criteria operator="AND">
      <criterion comment="rh-postgresql-pl is earlier than 0:7.3.21-3" test_ref="oval:com.redhat.rhsa:tst:20100427001"/>
      <criterion comment="rh-postgresql-pl is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060526016"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="rh-postgresql-tcl is earlier than 0:7.3.21-3" test_ref="oval:com.redhat.rhsa:tst:20100427003"/>
      <criterion comment="rh-postgresql-tcl is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060526020"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="rh-postgresql-server is earlier than 0:7.3.21-3" test_ref="oval:com.redhat.rhsa:tst:20100427005"/>
      <criterion comment="rh-postgresql-server is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060526006"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="rh-postgresql-test is earlier than 0:7.3.21-3" test_ref="oval:com.redhat.rhsa:tst:20100427007"/>
      <criterion comment="rh-postgresql-test is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060526004"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="rh-postgresql-docs is earlier than 0:7.3.21-3" test_ref="oval:com.redhat.rhsa:tst:20100427009"/>
      <criterion comment="rh-postgresql-docs is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060526010"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="rh-postgresql-contrib is earlier than 0:7.3.21-3" test_ref="oval:com.redhat.rhsa:tst:20100427011"/>
      <criterion comment="rh-postgresql-contrib is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060526002"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="rh-postgresql-python is earlier than 0:7.3.21-3" test_ref="oval:com.redhat.rhsa:tst:20100427013"/>
      <criterion comment="rh-postgresql-python is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060526014"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="rh-postgresql-devel is earlier than 0:7.3.21-3" test_ref="oval:com.redhat.rhsa:tst:20100427015"/>
      <criterion comment="rh-postgresql-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060526018"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="rh-postgresql is earlier than 0:7.3.21-3" test_ref="oval:com.redhat.rhsa:tst:20100427017"/>
      <criterion comment="rh-postgresql is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060526022"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="rh-postgresql-libs is earlier than 0:7.3.21-3" test_ref="oval:com.redhat.rhsa:tst:20100427019"/>
      <criterion comment="rh-postgresql-libs is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060526008"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="rh-postgresql-jdbc is earlier than 0:7.3.21-3" test_ref="oval:com.redhat.rhsa:tst:20100427021"/>
      <criterion comment="rh-postgresql-jdbc is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060526012"/>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20100457" version="639">
   <metadata>
    <title>RHSA-2010:0457: perl security update (Moderate)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
    </affected>
    <reference ref_id="RHSA-2010:0457" ref_url="https://access.redhat.com/errata/RHSA-2010:0457" source="RHSA"/>
    <reference ref_id="CVE-2010-1168" ref_url="https://access.redhat.com/security/cve/CVE-2010-1168" source="CVE"/>
    <reference ref_id="CVE-2010-1447" ref_url="https://access.redhat.com/security/cve/CVE-2010-1447" source="CVE"/>
    <description>Perl is a high-level programming language commonly used for system
administration utilities and web programming. The Safe extension module
allows users to compile and execute Perl code in restricted compartments.

The Safe module did not properly restrict the code of implicitly called
methods (such as DESTROY and AUTOLOAD) on implicitly blessed objects
returned as a result of unsafe code evaluation. These methods could have
been executed unrestricted by Safe when such objects were accessed or
destroyed. A specially-crafted Perl script executed inside of a Safe
compartment could use this flaw to bypass intended Safe module
restrictions. (CVE-2010-1168)

The Safe module did not properly restrict code compiled in a Safe
compartment and executed out of the compartment via a subroutine reference
returned as a result of unsafe code evaluation. A specially-crafted Perl
script executed inside of a Safe compartment could use this flaw to bypass
intended Safe module restrictions, if the returned subroutine reference was
called from outside of the compartment. (CVE-2010-1447)

Red Hat would like to thank Tim Bunce for responsibly reporting the
CVE-2010-1168 and CVE-2010-1447 issues. Upstream acknowledges Nick Cleaton
as the original reporter of CVE-2010-1168, and Tim Bunce and Rafaël
Garcia-Suarez as the original reporters of CVE-2010-1447.

These packages upgrade the Safe extension module to version 2.27. Refer to
the Safe module's Changes file, linked to in the References, for a full
list of changes.

Users of perl are advised to upgrade to these updated packages, which
correct these issues. All applications using the Safe extension module must
be restarted for this update to take effect.</description>
    <advisory from="secalert@redhat.com">
     <severity>Moderate</severity>
     <rights>Copyright 2010 Red Hat, Inc.</rights>
     <issued date="2010-06-07"/>
     <updated date="2010-06-07"/>
     <cve cvss2="5.8/AV:N/AC:M/Au:N/C:P/I:P/A:N" href="https://access.redhat.com/security/cve/CVE-2010-1168" public="20100520">CVE-2010-1168</cve>
     <cve cvss2="6.8/AV:N/AC:M/Au:N/C:P/I:P/A:P" href="https://access.redhat.com/security/cve/CVE-2010-1447" public="20100517">CVE-2010-1447</cve>
     <bugzilla href="https://bugzilla.redhat.com/576508" id="576508">CVE-2010-1168 perl Safe: Intended restriction bypass via object references</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/588269" id="588269">CVE-2010-1447 perl: Safe restriction bypass when reference to subroutine in compartment is called from outside</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="perl-CGI is earlier than 2:2.89-101.EL3" test_ref="oval:com.redhat.rhsa:tst:20100457001"/>
       <criterion comment="perl-CGI is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070966006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="perl is earlier than 2:5.8.0-101.EL3" test_ref="oval:com.redhat.rhsa:tst:20100457003"/>
       <criterion comment="perl is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070966004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="perl-CPAN is earlier than 2:1.61-101.EL3" test_ref="oval:com.redhat.rhsa:tst:20100457005"/>
       <criterion comment="perl-CPAN is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070966002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="perl-suidperl is earlier than 2:5.8.0-101.EL3" test_ref="oval:com.redhat.rhsa:tst:20100457007"/>
       <criterion comment="perl-suidperl is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070966010"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="perl-DB_File is earlier than 2:1.806-101.EL3" test_ref="oval:com.redhat.rhsa:tst:20100457009"/>
       <criterion comment="perl-DB_File is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070966008"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="perl-suidperl is earlier than 3:5.8.5-53.el4" test_ref="oval:com.redhat.rhsa:tst:20100457012"/>
       <criterion comment="perl-suidperl is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070966010"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="perl is earlier than 3:5.8.5-53.el4" test_ref="oval:com.redhat.rhsa:tst:20100457013"/>
       <criterion comment="perl is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070966004"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20100488" version="637">
   <metadata>
    <title>RHSA-2010:0488: samba and samba3x security update (Critical)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
     <platform>Red Hat Enterprise Linux 5</platform>
    </affected>
    <reference ref_id="RHSA-2010:0488" ref_url="https://access.redhat.com/errata/RHSA-2010:0488" source="RHSA"/>
    <reference ref_id="CVE-2010-2063" ref_url="https://access.redhat.com/security/cve/CVE-2010-2063" source="CVE"/>
    <description>Samba is a suite of programs used by machines to share files, printers, and
other information.

An input sanitization flaw was found in the way Samba parsed client data. A
malicious client could send a specially-crafted SMB packet to the Samba
server, resulting in arbitrary code execution with the privileges of the
Samba server (smbd). (CVE-2010-2063)

Red Hat would like to thank the Samba team for responsibly reporting this
issue. Upstream acknowledges Jun Mao as the original reporter.

Users of Samba are advised to upgrade to these updated packages, which
contain a backported patch to resolve this issue. After installing this
update, the smb service will be restarted automatically.</description>
    <advisory from="secalert@redhat.com">
     <severity>Critical</severity>
     <rights>Copyright 2010 Red Hat, Inc.</rights>
     <issued date="2010-06-16"/>
     <updated date="2010-06-16"/>
     <cve cvss2="7.5/AV:N/AC:L/Au:N/C:P/I:P/A:P" cwe="CWE-228 CWE-119" href="https://access.redhat.com/security/cve/CVE-2010-2063" public="20100616">CVE-2010-2063</cve>
     <bugzilla href="https://bugzilla.redhat.com/601419" id="601419">CVE-2010-2063 samba: memory corruption vulnerability</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:5</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="samba-swat is earlier than 0:3.0.9-1.3E.17" test_ref="oval:com.redhat.rhsa:tst:20100488001"/>
       <criterion comment="samba-swat is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060591006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="samba-client is earlier than 0:3.0.9-1.3E.17" test_ref="oval:com.redhat.rhsa:tst:20100488003"/>
       <criterion comment="samba-client is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060591008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="samba-common is earlier than 0:3.0.9-1.3E.17" test_ref="oval:com.redhat.rhsa:tst:20100488005"/>
       <criterion comment="samba-common is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060591002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="samba is earlier than 0:3.0.9-1.3E.17" test_ref="oval:com.redhat.rhsa:tst:20100488007"/>
       <criterion comment="samba is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060591004"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="samba is earlier than 0:3.0.33-0.19.el4_8.1" test_ref="oval:com.redhat.rhsa:tst:20100488010"/>
       <criterion comment="samba is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060591004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="samba-common is earlier than 0:3.0.33-0.19.el4_8.1" test_ref="oval:com.redhat.rhsa:tst:20100488011"/>
       <criterion comment="samba-common is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060591002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="samba-client is earlier than 0:3.0.33-0.19.el4_8.1" test_ref="oval:com.redhat.rhsa:tst:20100488012"/>
       <criterion comment="samba-client is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060591008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="samba-swat is earlier than 0:3.0.33-0.19.el4_8.1" test_ref="oval:com.redhat.rhsa:tst:20100488013"/>
       <criterion comment="samba-swat is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060591006"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 5 is installed" test_ref="oval:com.redhat.rhsa:tst:20070066013"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="libsmbclient-devel is earlier than 0:3.0.33-3.29.el5_5" test_ref="oval:com.redhat.rhsa:tst:20100488015"/>
       <criterion comment="libsmbclient-devel is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20100488016"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="samba-swat is earlier than 0:3.0.33-3.29.el5_5" test_ref="oval:com.redhat.rhsa:tst:20100488017"/>
       <criterion comment="samba-swat is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070354020"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="samba-client is earlier than 0:3.0.33-3.29.el5_5" test_ref="oval:com.redhat.rhsa:tst:20100488019"/>
       <criterion comment="samba-client is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070354018"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="samba is earlier than 0:3.0.33-3.29.el5_5" test_ref="oval:com.redhat.rhsa:tst:20100488021"/>
       <criterion comment="samba is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070354022"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="samba-common is earlier than 0:3.0.33-3.29.el5_5" test_ref="oval:com.redhat.rhsa:tst:20100488023"/>
       <criterion comment="samba-common is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070354016"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="libsmbclient is earlier than 0:3.0.33-3.29.el5_5" test_ref="oval:com.redhat.rhsa:tst:20100488025"/>
       <criterion comment="libsmbclient is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20100488026"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="samba3x-doc is earlier than 0:3.3.8-0.52.el5_5" test_ref="oval:com.redhat.rhsa:tst:20100488027"/>
       <criterion comment="samba3x-doc is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20100488028"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="samba3x-common is earlier than 0:3.3.8-0.52.el5_5" test_ref="oval:com.redhat.rhsa:tst:20100488029"/>
       <criterion comment="samba3x-common is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20100488030"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="libtalloc is earlier than 0:1.2.0-52.el5_5" test_ref="oval:com.redhat.rhsa:tst:20100488031"/>
       <criterion comment="libtalloc is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20100488032"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="samba3x-client is earlier than 0:3.3.8-0.52.el5_5" test_ref="oval:com.redhat.rhsa:tst:20100488033"/>
       <criterion comment="samba3x-client is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20100488034"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="libtdb is earlier than 0:1.1.2-52.el5_5" test_ref="oval:com.redhat.rhsa:tst:20100488035"/>
       <criterion comment="libtdb is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20100488036"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="samba3x-swat is earlier than 0:3.3.8-0.52.el5_5" test_ref="oval:com.redhat.rhsa:tst:20100488037"/>
       <criterion comment="samba3x-swat is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20100488038"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="samba3x-winbind is earlier than 0:3.3.8-0.52.el5_5" test_ref="oval:com.redhat.rhsa:tst:20100488039"/>
       <criterion comment="samba3x-winbind is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20100488040"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="libtdb-devel is earlier than 0:1.1.2-52.el5_5" test_ref="oval:com.redhat.rhsa:tst:20100488041"/>
       <criterion comment="libtdb-devel is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20100488042"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="samba3x-domainjoin-gui is earlier than 0:3.3.8-0.52.el5_5" test_ref="oval:com.redhat.rhsa:tst:20100488043"/>
       <criterion comment="samba3x-domainjoin-gui is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20100488044"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="samba3x is earlier than 0:3.3.8-0.52.el5_5" test_ref="oval:com.redhat.rhsa:tst:20100488045"/>
       <criterion comment="samba3x is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20100488046"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="samba3x-winbind-devel is earlier than 0:3.3.8-0.52.el5_5" test_ref="oval:com.redhat.rhsa:tst:20100488047"/>
       <criterion comment="samba3x-winbind-devel is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20100488048"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="tdb-tools is earlier than 0:1.1.2-52.el5_5" test_ref="oval:com.redhat.rhsa:tst:20100488049"/>
       <criterion comment="tdb-tools is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20100488050"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="libtalloc-devel is earlier than 0:1.2.0-52.el5_5" test_ref="oval:com.redhat.rhsa:tst:20100488051"/>
       <criterion comment="libtalloc-devel is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20100488052"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20100490" version="642">
   <metadata>
    <title>RHSA-2010:0490: cups security update (Important)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
     <platform>Red Hat Enterprise Linux 5</platform>
    </affected>
    <reference ref_id="RHSA-2010:0490" ref_url="https://access.redhat.com/errata/RHSA-2010:0490" source="RHSA"/>
    <reference ref_id="CVE-2010-0540" ref_url="https://access.redhat.com/security/cve/CVE-2010-0540" source="CVE"/>
    <reference ref_id="CVE-2010-0542" ref_url="https://access.redhat.com/security/cve/CVE-2010-0542" source="CVE"/>
    <reference ref_id="CVE-2010-1748" ref_url="https://access.redhat.com/security/cve/CVE-2010-1748" source="CVE"/>
    <description>The Common UNIX Printing System (CUPS) provides a portable printing layer
for UNIX operating systems. The CUPS &quot;texttops&quot; filter converts text files
to PostScript.

A missing memory allocation failure check flaw, leading to a NULL pointer
dereference, was found in the CUPS &quot;texttops&quot; filter. An attacker could
create a malicious text file that would cause &quot;texttops&quot; to crash or,
potentially, execute arbitrary code as the &quot;lp&quot; user if the file was
printed. (CVE-2010-0542)

A Cross-Site Request Forgery (CSRF) issue was found in the CUPS web
interface. If a remote attacker could trick a user, who is logged into the
CUPS web interface as an administrator, into visiting a specially-crafted
website, the attacker could reconfigure and disable CUPS, and gain access
to print jobs and system files. (CVE-2010-0540)

Note: As a result of the fix for CVE-2010-0540, cookies must now be enabled
in your web browser to use the CUPS web interface.

An uninitialized memory read issue was found in the CUPS web interface. If
an attacker had access to the CUPS web interface, they could use a
specially-crafted URL to leverage this flaw to read a limited amount of
memory from the cupsd process, possibly obtaining sensitive information.
(CVE-2010-1748)

Red Hat would like to thank the Apple Product Security team for responsibly
reporting these issues. Upstream acknowledges regenrecht as the original
reporter of CVE-2010-0542; Adrian 'pagvac' Pastor of GNUCITIZEN and Tim
Starling as the original reporters of CVE-2010-0540; and Luca Carettoni as
the original reporter of CVE-2010-1748.

Users of cups are advised to upgrade to these updated packages, which
contain backported patches to correct these issues. After installing this
update, the cupsd daemon will be restarted automatically.</description>
    <advisory from="secalert@redhat.com">
     <severity>Important</severity>
     <rights>Copyright 2010 Red Hat, Inc.</rights>
     <issued date="2010-06-17"/>
     <updated date="2010-06-17"/>
     <cve cvss2="5.1/AV:N/AC:H/Au:N/C:P/I:P/A:P" cwe="CWE-352" href="https://access.redhat.com/security/cve/CVE-2010-0540" impact="moderate" public="20100615">CVE-2010-0540</cve>
     <cve cvss2="5.8/AV:A/AC:L/Au:N/C:P/I:P/A:P" cwe="CWE-476" href="https://access.redhat.com/security/cve/CVE-2010-0542" public="20100617">CVE-2010-0542</cve>
     <cve cvss2="3.3/AV:A/AC:L/Au:N/C:P/I:N/A:N" href="https://access.redhat.com/security/cve/CVE-2010-1748" impact="moderate" public="20100614">CVE-2010-1748</cve>
     <bugzilla href="https://bugzilla.redhat.com/587746" id="587746">CVE-2010-0542 CUPS: texttops unchecked memory allocation failure leading to NULL pointer dereference</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/588805" id="588805">CVE-2010-0540 CUPS administrator web interface CSRF</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/591983" id="591983">CVE-2010-1748 cups: web interface memory disclosure</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:5</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="cups is earlier than 1:1.1.17-13.3.65" test_ref="oval:com.redhat.rhsa:tst:20100490001"/>
       <criterion comment="cups is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060163006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="cups-devel is earlier than 1:1.1.17-13.3.65" test_ref="oval:com.redhat.rhsa:tst:20100490003"/>
       <criterion comment="cups-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060163002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="cups-libs is earlier than 1:1.1.17-13.3.65" test_ref="oval:com.redhat.rhsa:tst:20100490005"/>
       <criterion comment="cups-libs is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060163004"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="cups is earlier than 1:1.1.22-0.rc1.9.32.el4_8.6" test_ref="oval:com.redhat.rhsa:tst:20100490008"/>
       <criterion comment="cups is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060163006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="cups-devel is earlier than 1:1.1.22-0.rc1.9.32.el4_8.6" test_ref="oval:com.redhat.rhsa:tst:20100490009"/>
       <criterion comment="cups-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060163002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="cups-libs is earlier than 1:1.1.22-0.rc1.9.32.el4_8.6" test_ref="oval:com.redhat.rhsa:tst:20100490010"/>
       <criterion comment="cups-libs is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060163004"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 5 is installed" test_ref="oval:com.redhat.rhsa:tst:20070066013"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="cups-devel is earlier than 1:1.3.7-18.el5_5.4" test_ref="oval:com.redhat.rhsa:tst:20100490012"/>
       <criterion comment="cups-devel is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070123015"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="cups is earlier than 1:1.3.7-18.el5_5.4" test_ref="oval:com.redhat.rhsa:tst:20100490014"/>
       <criterion comment="cups is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070123013"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="cups-libs is earlier than 1:1.3.7-18.el5_5.4" test_ref="oval:com.redhat.rhsa:tst:20100490016"/>
       <criterion comment="cups-libs is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070123017"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="cups-lpd is earlier than 1:1.3.7-18.el5_5.4" test_ref="oval:com.redhat.rhsa:tst:20100490018"/>
       <criterion comment="cups-lpd is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070123019"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20100499" version="634">
   <metadata>
    <title>RHSA-2010:0499: seamonkey security update (Critical)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
    </affected>
    <reference ref_id="RHSA-2010:0499" ref_url="https://access.redhat.com/errata/RHSA-2010:0499" source="RHSA"/>
    <reference ref_id="CVE-2010-0163" ref_url="https://access.redhat.com/security/cve/CVE-2010-0163" source="CVE"/>
    <reference ref_id="CVE-2010-1197" ref_url="https://access.redhat.com/security/cve/CVE-2010-1197" source="CVE"/>
    <reference ref_id="CVE-2010-1198" ref_url="https://access.redhat.com/security/cve/CVE-2010-1198" source="CVE"/>
    <reference ref_id="CVE-2010-1199" ref_url="https://access.redhat.com/security/cve/CVE-2010-1199" source="CVE"/>
    <reference ref_id="CVE-2010-1200" ref_url="https://access.redhat.com/security/cve/CVE-2010-1200" source="CVE"/>
    <description>SeaMonkey is an open source web browser, email and newsgroup client, IRC
chat client, and HTML editor.

Several flaws were found in the processing of malformed web content. A web
page containing malicious content could cause SeaMonkey to crash or,
potentially, execute arbitrary code with the privileges of the user running
SeaMonkey. (CVE-2010-1200)

A flaw was found in the way browser plug-ins interact. It was possible for
a plug-in to reference the freed memory from a different plug-in, resulting
in the execution of arbitrary code with the privileges of the user running
SeaMonkey. (CVE-2010-1198)

An integer overflow flaw was found in the processing of malformed web
content. A web page containing malicious content could cause SeaMonkey to
crash or, potentially, execute arbitrary code with the privileges of the
user running SeaMonkey. (CVE-2010-1199)

A flaw was found in the way SeaMonkey processed mail attachments. A
specially-crafted mail message could cause SeaMonkey to crash.
(CVE-2010-0163)

A flaw was found in the way SeaMonkey handled the &quot;Content-Disposition:
attachment&quot; HTTP header when the &quot;Content-Type: multipart&quot; HTTP header was
also present. A website that allows arbitrary uploads and relies on the
&quot;Content-Disposition: attachment&quot; HTTP header to prevent content from being
displayed inline, could be used by an attacker to serve malicious content
to users. (CVE-2010-1197)

All SeaMonkey users should upgrade to these updated packages, which correct
these issues. After installing the update, SeaMonkey must be restarted for
the changes to take effect.</description>
    <advisory from="secalert@redhat.com">
     <severity>Critical</severity>
     <rights>Copyright 2010 Red Hat, Inc.</rights>
     <issued date="2010-06-22"/>
     <updated date="2010-06-22"/>
     <cve cvss2="6.8/AV:N/AC:M/Au:N/C:P/I:P/A:P" href="https://access.redhat.com/security/cve/CVE-2010-0163" impact="important" public="20100316">CVE-2010-0163</cve>
     <cve cvss2="4/AV:N/AC:H/Au:N/C:P/I:P/A:N" href="https://access.redhat.com/security/cve/CVE-2010-1197" impact="moderate" public="20100622">CVE-2010-1197</cve>
     <cve cvss2="6.8/AV:N/AC:M/Au:N/C:P/I:P/A:P" href="https://access.redhat.com/security/cve/CVE-2010-1198" public="20100622">CVE-2010-1198</cve>
     <cve cvss2="6.8/AV:N/AC:M/Au:N/C:P/I:P/A:P" cwe="CWE-190" href="https://access.redhat.com/security/cve/CVE-2010-1199" public="20100622">CVE-2010-1199</cve>
     <cve cvss2="6.8/AV:N/AC:M/Au:N/C:P/I:P/A:P" href="https://access.redhat.com/security/cve/CVE-2010-1200" public="20100622">CVE-2010-1200</cve>
     <bugzilla href="https://bugzilla.redhat.com/576391" id="576391">CVE-2010-0163 seamonkey/thunderbird: crash when indexing certain messages with attachments</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/590804" id="590804">CVE-2010-1200 Mozilla Crashes with evidence of memory corruption</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/590828" id="590828">CVE-2010-1198 Mozilla Freed object reuse across plugin instances</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/590833" id="590833">CVE-2010-1199 Mozilla Integer Overflow in XSLT Node Sorting</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/590850" id="590850">CVE-2010-1197 Mozilla Content-Disposition: attachment ignored if Content-Type: multipart also present</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.55.el3" test_ref="oval:com.redhat.rhsa:tst:20100499001"/>
       <criterion comment="seamonkey-nss is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578016"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.55.el3" test_ref="oval:com.redhat.rhsa:tst:20100499003"/>
       <criterion comment="seamonkey-js-debugger is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.55.el3" test_ref="oval:com.redhat.rhsa:tst:20100499005"/>
       <criterion comment="seamonkey-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578014"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.55.el3" test_ref="oval:com.redhat.rhsa:tst:20100499007"/>
       <criterion comment="seamonkey-nss-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578012"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.55.el3" test_ref="oval:com.redhat.rhsa:tst:20100499009"/>
       <criterion comment="seamonkey-nspr is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578010"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.55.el3" test_ref="oval:com.redhat.rhsa:tst:20100499011"/>
       <criterion comment="seamonkey-nspr-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.55.el3" test_ref="oval:com.redhat.rhsa:tst:20100499013"/>
       <criterion comment="seamonkey-dom-inspector is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey is earlier than 0:1.0.9-0.55.el3" test_ref="oval:com.redhat.rhsa:tst:20100499015"/>
       <criterion comment="seamonkey is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578018"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.55.el3" test_ref="oval:com.redhat.rhsa:tst:20100499017"/>
       <criterion comment="seamonkey-chat is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.55.el3" test_ref="oval:com.redhat.rhsa:tst:20100499019"/>
       <criterion comment="seamonkey-mail is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578020"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="seamonkey is earlier than 0:1.0.9-58.el4_8" test_ref="oval:com.redhat.rhsa:tst:20100499022"/>
       <criterion comment="seamonkey is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578018"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-mail is earlier than 0:1.0.9-58.el4_8" test_ref="oval:com.redhat.rhsa:tst:20100499023"/>
       <criterion comment="seamonkey-mail is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578020"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-devel is earlier than 0:1.0.9-58.el4_8" test_ref="oval:com.redhat.rhsa:tst:20100499024"/>
       <criterion comment="seamonkey-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578014"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-58.el4_8" test_ref="oval:com.redhat.rhsa:tst:20100499025"/>
       <criterion comment="seamonkey-js-debugger is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-58.el4_8" test_ref="oval:com.redhat.rhsa:tst:20100499026"/>
       <criterion comment="seamonkey-dom-inspector is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-chat is earlier than 0:1.0.9-58.el4_8" test_ref="oval:com.redhat.rhsa:tst:20100499027"/>
       <criterion comment="seamonkey-chat is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578006"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20100520" version="632">
   <metadata>
    <title>RHSA-2010:0520: libtiff security update (Important)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
    </affected>
    <reference ref_id="RHSA-2010:0520" ref_url="https://access.redhat.com/errata/RHSA-2010:0520" source="RHSA"/>
    <reference ref_id="CVE-2010-1411" ref_url="https://access.redhat.com/security/cve/CVE-2010-1411" source="CVE"/>
    <reference ref_id="CVE-2010-2598" ref_url="https://access.redhat.com/security/cve/CVE-2010-2598" source="CVE"/>
    <description>The libtiff packages contain a library of functions for manipulating Tagged
Image File Format (TIFF) files.

Multiple integer overflow flaws, leading to a buffer overflow, were
discovered in libtiff. An attacker could use these flaws to create a
specially-crafted TIFF file that, when opened, would cause an application
linked against libtiff to crash or, possibly, execute arbitrary code.
(CVE-2010-1411)

An input validation flaw was discovered in libtiff. An attacker could use
this flaw to create a specially-crafted TIFF file that, when opened, would
cause an application linked against libtiff to crash. (CVE-2010-2598)

Red Hat would like to thank Apple Product Security for responsibly
reporting the CVE-2010-1411 flaw, who credit Kevin Finisterre of
digitalmunition.com for the discovery of the issue.

All libtiff users are advised to upgrade to these updated packages, which
contain backported patches to resolve these issues. All running
applications linked against libtiff must be restarted for this update to
take effect.</description>
    <advisory from="secalert@redhat.com">
     <severity>Important</severity>
     <rights>Copyright 2010 Red Hat, Inc.</rights>
     <issued date="2010-07-08"/>
     <updated date="2010-07-08"/>
     <cve cvss2="6.8/AV:N/AC:M/Au:N/C:P/I:P/A:P" cwe="CWE-190" href="https://access.redhat.com/security/cve/CVE-2010-1411" public="20100614">CVE-2010-1411</cve>
     <cve cvss2="4.3/AV:N/AC:M/Au:N/C:N/I:N/A:P" href="https://access.redhat.com/security/cve/CVE-2010-2598" impact="low" public="20100610">CVE-2010-2598</cve>
     <bugzilla href="https://bugzilla.redhat.com/592361" id="592361">CVE-2010-1411 libtiff: integer overflows leading to heap overflow in Fax3SetupState</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/610786" id="610786">CVE-2010-2598 libtiff: crash when reading image with not configured compression</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="AND">
    <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
    <criteria operator="OR">
     <criteria operator="AND">
      <criterion comment="libtiff is earlier than 0:3.5.7-34.el3" test_ref="oval:com.redhat.rhsa:tst:20100520001"/>
      <criterion comment="libtiff is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060425004"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="libtiff-devel is earlier than 0:3.5.7-34.el3" test_ref="oval:com.redhat.rhsa:tst:20100520003"/>
      <criterion comment="libtiff-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060425002"/>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20100534" version="641">
   <metadata>
    <title>RHSA-2010:0534: libpng security update (Important)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
     <platform>Red Hat Enterprise Linux 5</platform>
    </affected>
    <reference ref_id="RHSA-2010:0534" ref_url="https://access.redhat.com/errata/RHSA-2010:0534" source="RHSA"/>
    <reference ref_id="CVE-2009-2042" ref_url="https://access.redhat.com/security/cve/CVE-2009-2042" source="CVE"/>
    <reference ref_id="CVE-2010-0205" ref_url="https://access.redhat.com/security/cve/CVE-2010-0205" source="CVE"/>
    <reference ref_id="CVE-2010-1205" ref_url="https://access.redhat.com/security/cve/CVE-2010-1205" source="CVE"/>
    <reference ref_id="CVE-2010-2249" ref_url="https://access.redhat.com/security/cve/CVE-2010-2249" source="CVE"/>
    <description>The libpng packages contain a library of functions for creating and
manipulating PNG (Portable Network Graphics) image format files.

A memory corruption flaw was found in the way applications, using the
libpng library and its progressive reading method, decoded certain PNG
images. An attacker could create a specially-crafted PNG image that, when
opened, could cause an application using libpng to crash or, potentially,
execute arbitrary code with the privileges of the user running the
application. (CVE-2010-1205)

A denial of service flaw was found in the way applications using the libpng
library decoded PNG images that have certain, highly compressed ancillary
chunks. An attacker could create a specially-crafted PNG image that could
cause an application using libpng to consume excessive amounts of memory
and CPU time, and possibly crash. (CVE-2010-0205)

A memory leak flaw was found in the way applications using the libpng
library decoded PNG images that use the Physical Scale (sCAL) extension. An
attacker could create a specially-crafted PNG image that could cause an
application using libpng to exhaust all available memory and possibly crash
or exit. (CVE-2010-2249)

A sensitive information disclosure flaw was found in the way applications
using the libpng library processed 1-bit interlaced PNG images. An attacker
could create a specially-crafted PNG image that could cause an application
using libpng to disclose uninitialized memory. (CVE-2009-2042)

Users of libpng and libpng10 should upgrade to these updated packages,
which contain backported patches to correct these issues. All running
applications using libpng or libpng10 must be restarted for the update to
take effect.</description>
    <advisory from="secalert@redhat.com">
     <severity>Important</severity>
     <rights>Copyright 2010 Red Hat, Inc.</rights>
     <issued date="2010-07-14"/>
     <updated date="2010-07-14"/>
     <cve cvss2="2.6/AV:N/AC:H/Au:N/C:P/I:N/A:N" href="https://access.redhat.com/security/cve/CVE-2009-2042" impact="low" public="20090604">CVE-2009-2042</cve>
     <cve cvss2="4.3/AV:N/AC:M/Au:N/C:N/I:N/A:P" cwe="CWE-409 CWE-400" href="https://access.redhat.com/security/cve/CVE-2010-0205" impact="moderate" public="20100301">CVE-2010-0205</cve>
     <cve cvss2="6.8/AV:N/AC:M/Au:N/C:P/I:P/A:P" href="https://access.redhat.com/security/cve/CVE-2010-1205" public="20100625">CVE-2010-1205</cve>
     <cve cvss2="4.3/AV:N/AC:M/Au:N/C:N/I:N/A:P" cwe="CWE-401" href="https://access.redhat.com/security/cve/CVE-2010-2249" impact="low" public="20100625">CVE-2010-2249</cve>
     <bugzilla href="https://bugzilla.redhat.com/504782" id="504782">CVE-2009-2042 libpng: Interlaced Images Information Disclosure Vulnerability</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/566234" id="566234">CVE-2010-0205 libpng: excessive memory consumption due to highly compressed huge ancillary chunk</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/608238" id="608238">CVE-2010-1205 libpng: out-of-bounds memory write</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/608644" id="608644">CVE-2010-2249 libpng: Memory leak when processing Physical Scale (sCAL) images</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:5</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="libpng is earlier than 2:1.2.2-30" test_ref="oval:com.redhat.rhsa:tst:20100534001"/>
       <criterion comment="libpng is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070356004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="libpng-devel is earlier than 2:1.2.2-30" test_ref="oval:com.redhat.rhsa:tst:20100534003"/>
       <criterion comment="libpng-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070356002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="libpng10 is earlier than 0:1.0.13-21" test_ref="oval:com.redhat.rhsa:tst:20100534005"/>
       <criterion comment="libpng10 is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070356008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="libpng10-devel is earlier than 0:1.0.13-21" test_ref="oval:com.redhat.rhsa:tst:20100534007"/>
       <criterion comment="libpng10-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070356006"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="libpng-devel is earlier than 2:1.2.7-3.el4_8.3" test_ref="oval:com.redhat.rhsa:tst:20100534010"/>
       <criterion comment="libpng-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070356002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="libpng is earlier than 2:1.2.7-3.el4_8.3" test_ref="oval:com.redhat.rhsa:tst:20100534011"/>
       <criterion comment="libpng is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070356004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="libpng10-devel is earlier than 0:1.0.16-3.el4_8.4" test_ref="oval:com.redhat.rhsa:tst:20100534012"/>
       <criterion comment="libpng10-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070356006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="libpng10 is earlier than 0:1.0.16-3.el4_8.4" test_ref="oval:com.redhat.rhsa:tst:20100534013"/>
       <criterion comment="libpng10 is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070356008"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 5 is installed" test_ref="oval:com.redhat.rhsa:tst:20070066013"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="libpng is earlier than 2:1.2.10-7.1.el5_5.3" test_ref="oval:com.redhat.rhsa:tst:20100534015"/>
       <criterion comment="libpng is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070356016"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="libpng-devel is earlier than 2:1.2.10-7.1.el5_5.3" test_ref="oval:com.redhat.rhsa:tst:20100534017"/>
       <criterion comment="libpng-devel is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070356018"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20100546" version="633">
   <metadata>
    <title>RHSA-2010:0546: seamonkey security update (Critical)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
    </affected>
    <reference ref_id="RHSA-2010:0546" ref_url="https://access.redhat.com/errata/RHSA-2010:0546" source="RHSA"/>
    <reference ref_id="CVE-2010-1205" ref_url="https://access.redhat.com/security/cve/CVE-2010-1205" source="CVE"/>
    <reference ref_id="CVE-2010-1211" ref_url="https://access.redhat.com/security/cve/CVE-2010-1211" source="CVE"/>
    <reference ref_id="CVE-2010-1214" ref_url="https://access.redhat.com/security/cve/CVE-2010-1214" source="CVE"/>
    <reference ref_id="CVE-2010-2751" ref_url="https://access.redhat.com/security/cve/CVE-2010-2751" source="CVE"/>
    <reference ref_id="CVE-2010-2753" ref_url="https://access.redhat.com/security/cve/CVE-2010-2753" source="CVE"/>
    <reference ref_id="CVE-2010-2754" ref_url="https://access.redhat.com/security/cve/CVE-2010-2754" source="CVE"/>
    <description>SeaMonkey is an open source web browser, email and newsgroup client, IRC
chat client, and HTML editor.

Several flaws were found in the processing of malformed web content. A web
page containing malicious content could cause SeaMonkey to crash or,
potentially, execute arbitrary code with the privileges of the user running
SeaMonkey. (CVE-2010-1211, CVE-2010-2753, CVE-2010-1214)

A memory corruption flaw was found in the way SeaMonkey decoded certain PNG
images. An attacker could create a specially-crafted PNG image that, when
opened, could cause SeaMonkey to crash or, potentially, execute arbitrary
code with the privileges of the user running SeaMonkey. (CVE-2010-1205)

A same-origin policy bypass flaw was found in SeaMonkey. An attacker could
create a malicious web page that, when viewed by a victim, could steal
private data from a different website the victim has loaded with SeaMonkey.
(CVE-2010-2754)

A flaw was found in the way SeaMonkey displayed the location bar when
visiting a secure web page. A malicious server could use this flaw to
present data that appears to originate from a secure server, even though it
does not. (CVE-2010-2751)

All SeaMonkey users should upgrade to these updated packages, which correct
these issues. After installing the update, SeaMonkey must be restarted for
the changes to take effect.</description>
    <advisory from="secalert@redhat.com">
     <severity>Critical</severity>
     <rights>Copyright 2010 Red Hat, Inc.</rights>
     <issued date="2010-07-20"/>
     <updated date="2010-07-20"/>
     <cve cvss2="6.8/AV:N/AC:M/Au:N/C:P/I:P/A:P" href="https://access.redhat.com/security/cve/CVE-2010-1205" impact="important" public="20100625">CVE-2010-1205</cve>
     <cve cvss2="6.8/AV:N/AC:M/Au:N/C:P/I:P/A:P" href="https://access.redhat.com/security/cve/CVE-2010-1211" public="20100720">CVE-2010-1211</cve>
     <cve cvss2="6.8/AV:N/AC:M/Au:N/C:P/I:P/A:P" href="https://access.redhat.com/security/cve/CVE-2010-1214" public="20100720">CVE-2010-1214</cve>
     <cve cvss2="2.6/AV:N/AC:H/Au:N/C:N/I:P/A:N" href="https://access.redhat.com/security/cve/CVE-2010-2751" impact="moderate" public="20100720">CVE-2010-2751</cve>
     <cve cvss2="6.8/AV:N/AC:M/Au:N/C:P/I:P/A:P" href="https://access.redhat.com/security/cve/CVE-2010-2753" public="20100720">CVE-2010-2753</cve>
     <cve cvss2="5.1/AV:N/AC:H/Au:N/C:P/I:P/A:P" href="https://access.redhat.com/security/cve/CVE-2010-2754" impact="moderate" public="20100720">CVE-2010-2754</cve>
     <bugzilla href="https://bugzilla.redhat.com/608238" id="608238">CVE-2010-1205 libpng: out-of-bounds memory write</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/615455" id="615455">CVE-2010-1211 Mozilla miscellaneous memory safety hazards</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/615462" id="615462">CVE-2010-1214 Mozilla Plugin parameter EnsureCachedAttrParamArrays remote code execution vulnerability</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/615466" id="615466">CVE-2010-2753 Mozilla nsTreeSelection dangling pointer remote code execution vulnerability</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/615480" id="615480">CVE-2010-2751 Mozilla SSL spoofing with history.back() and history.forward()</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/615488" id="615488">CVE-2010-2754 Mozilla Cross-origin data leakage from script filename in error messages</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.57.el3" test_ref="oval:com.redhat.rhsa:tst:20100546001"/>
       <criterion comment="seamonkey-mail is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578020"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.57.el3" test_ref="oval:com.redhat.rhsa:tst:20100546003"/>
       <criterion comment="seamonkey-nss is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578016"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.57.el3" test_ref="oval:com.redhat.rhsa:tst:20100546005"/>
       <criterion comment="seamonkey-js-debugger is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.57.el3" test_ref="oval:com.redhat.rhsa:tst:20100546007"/>
       <criterion comment="seamonkey-nspr-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.57.el3" test_ref="oval:com.redhat.rhsa:tst:20100546009"/>
       <criterion comment="seamonkey-dom-inspector is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey is earlier than 0:1.0.9-0.57.el3" test_ref="oval:com.redhat.rhsa:tst:20100546011"/>
       <criterion comment="seamonkey is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578018"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.57.el3" test_ref="oval:com.redhat.rhsa:tst:20100546013"/>
       <criterion comment="seamonkey-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578014"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.57.el3" test_ref="oval:com.redhat.rhsa:tst:20100546015"/>
       <criterion comment="seamonkey-nss-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578012"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.57.el3" test_ref="oval:com.redhat.rhsa:tst:20100546017"/>
       <criterion comment="seamonkey-nspr is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578010"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.57.el3" test_ref="oval:com.redhat.rhsa:tst:20100546019"/>
       <criterion comment="seamonkey-chat is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578006"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-60.el4" test_ref="oval:com.redhat.rhsa:tst:20100546022"/>
       <criterion comment="seamonkey-dom-inspector is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-60.el4" test_ref="oval:com.redhat.rhsa:tst:20100546023"/>
       <criterion comment="seamonkey-js-debugger is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-mail is earlier than 0:1.0.9-60.el4" test_ref="oval:com.redhat.rhsa:tst:20100546024"/>
       <criterion comment="seamonkey-mail is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578020"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey is earlier than 0:1.0.9-60.el4" test_ref="oval:com.redhat.rhsa:tst:20100546025"/>
       <criterion comment="seamonkey is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578018"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-devel is earlier than 0:1.0.9-60.el4" test_ref="oval:com.redhat.rhsa:tst:20100546026"/>
       <criterion comment="seamonkey-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578014"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-chat is earlier than 0:1.0.9-60.el4" test_ref="oval:com.redhat.rhsa:tst:20100546027"/>
       <criterion comment="seamonkey-chat is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578006"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20100557" version="632">
   <metadata>
    <title>RHSA-2010:0557: seamonkey security update (Critical)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
    </affected>
    <reference ref_id="RHSA-2010:0557" ref_url="https://access.redhat.com/errata/RHSA-2010:0557" source="RHSA"/>
    <reference ref_id="CVE-2010-2755" ref_url="https://access.redhat.com/security/cve/CVE-2010-2755" source="CVE"/>
    <description>SeaMonkey is an open source web browser, email and newsgroup client, IRC
chat client, and HTML editor.

An invalid free flaw was found in SeaMonkey's plugin handler. Malicious web content could result in an invalid memory pointer being freed, causing SeaMonkey to crash or, potentially, execute arbitrary code with the privileges of the user running SeaMonkey. (CVE-2010-2755)

All SeaMonkey users should upgrade to these updated packages, which correct
this issue. After installing the update, SeaMonkey must be restarted for
the changes to take effect.</description>
    <advisory from="secalert@redhat.com">
     <severity>Critical</severity>
     <rights>Copyright 2010 Red Hat, Inc.</rights>
     <issued date="2010-07-23"/>
     <updated date="2010-07-23"/>
     <cve cvss2="6.8/AV:N/AC:M/Au:N/C:P/I:P/A:P" href="https://access.redhat.com/security/cve/CVE-2010-2755" public="20100724">CVE-2010-2755</cve>
     <bugzilla href="https://bugzilla.redhat.com/617657" id="617657">CVE-2010-2755 Mozilla arbitrary free flaw</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.58.el3" test_ref="oval:com.redhat.rhsa:tst:20100557001"/>
       <criterion comment="seamonkey-js-debugger is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.58.el3" test_ref="oval:com.redhat.rhsa:tst:20100557003"/>
       <criterion comment="seamonkey-nspr is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578010"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.58.el3" test_ref="oval:com.redhat.rhsa:tst:20100557005"/>
       <criterion comment="seamonkey-dom-inspector is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.58.el3" test_ref="oval:com.redhat.rhsa:tst:20100557007"/>
       <criterion comment="seamonkey-mail is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578020"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.58.el3" test_ref="oval:com.redhat.rhsa:tst:20100557009"/>
       <criterion comment="seamonkey-chat is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.58.el3" test_ref="oval:com.redhat.rhsa:tst:20100557011"/>
       <criterion comment="seamonkey-nspr-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.58.el3" test_ref="oval:com.redhat.rhsa:tst:20100557013"/>
       <criterion comment="seamonkey-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578014"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey is earlier than 0:1.0.9-0.58.el3" test_ref="oval:com.redhat.rhsa:tst:20100557015"/>
       <criterion comment="seamonkey is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578018"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.58.el3" test_ref="oval:com.redhat.rhsa:tst:20100557017"/>
       <criterion comment="seamonkey-nss-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578012"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.58.el3" test_ref="oval:com.redhat.rhsa:tst:20100557019"/>
       <criterion comment="seamonkey-nss is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578016"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-61.el4" test_ref="oval:com.redhat.rhsa:tst:20100557022"/>
       <criterion comment="seamonkey-js-debugger is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-61.el4" test_ref="oval:com.redhat.rhsa:tst:20100557023"/>
       <criterion comment="seamonkey-dom-inspector is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey is earlier than 0:1.0.9-61.el4" test_ref="oval:com.redhat.rhsa:tst:20100557024"/>
       <criterion comment="seamonkey is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578018"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-mail is earlier than 0:1.0.9-61.el4" test_ref="oval:com.redhat.rhsa:tst:20100557025"/>
       <criterion comment="seamonkey-mail is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578020"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-devel is earlier than 0:1.0.9-61.el4" test_ref="oval:com.redhat.rhsa:tst:20100557026"/>
       <criterion comment="seamonkey-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578014"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-chat is earlier than 0:1.0.9-61.el4" test_ref="oval:com.redhat.rhsa:tst:20100557027"/>
       <criterion comment="seamonkey-chat is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578006"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20100576" version="632">
   <metadata>
    <title>RHSA-2010:0576: Red Hat Enterprise Linux 3 - 3-Month End Of Life Notice (Low)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
    </affected>
    <reference ref_id="RHSA-2010:0576" ref_url="https://access.redhat.com/errata/RHSA-2010:0576" source="RHSA"/>
    <description>In accordance with the Red Hat Enterprise Linux Errata Support Policy, the
regular 7 year life-cycle of Red Hat Enterprise Linux 3 will end on October
31, 2010.

After this date, Red Hat will discontinue the regular subscription services
for Red Hat Enterprise Linux 3. Therefore, new bug fix, enhancement, and
security errata updates, as well as technical support services will no
longer be available for the following products:

* Red Hat Enterprise Linux AS 3
* Red Hat Enterprise Linux ES 3
* Red Hat Enterprise Linux WS 3
* Red Hat Enterprise Linux Extras 3
* Red Hat Desktop 3
* Red Hat Global File System 3
* Red Hat Cluster Suite 3

Customers still running production workloads on Red Hat Enterprise
Linux 3 are advised to begin planning the upgrade to Red Hat Enterprise
Linux 5. Active subscribers of Red Hat Enterprise Linux already have access
to all currently maintained versions of Red Hat Enterprise Linux, as part
of their subscription without additional fees.

For customers who are unable to migrate off Red Hat Enterprise Linux 3
before its end-of-life date, Red Hat may offer a limited, optional
extension program. For more information, contact your Red Hat sales
representative or channel partner.

Details of the Red Hat Enterprise Linux life-cycle can be found on the Red
Hat website: http://www.redhat.com/security/updates/errata/</description>
    <advisory from="secalert@redhat.com">
     <severity>Low</severity>
     <rights>Copyright 2010 Red Hat, Inc.</rights>
     <issued date="2010-07-30"/>
     <updated date="2010-07-30"/>
     <bugzilla href="https://bugzilla.redhat.com/616794" id="616794">Send Out RHEL 3 3-Month EOL Notice</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="AND">
    <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
    <criteria operator="OR">
     <criteria operator="AND">
      <criterion comment="redhat-release is earlier than 0:3Desktop-13.9.9" test_ref="oval:com.redhat.rhsa:tst:20100576001"/>
      <criterion comment="redhat-release is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20091526002"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="redhat-release is earlier than 0:3ES-13.9.9" test_ref="oval:com.redhat.rhsa:tst:20100576003"/>
      <criterion comment="redhat-release is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20091526002"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="redhat-release is earlier than 0:3WS-13.9.9" test_ref="oval:com.redhat.rhsa:tst:20100576004"/>
      <criterion comment="redhat-release is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20091526002"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="redhat-release is earlier than 0:3AS-13.9.9" test_ref="oval:com.redhat.rhsa:tst:20100576005"/>
      <criterion comment="redhat-release is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20091526002"/>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20100577" version="639">
   <metadata>
    <title>RHSA-2010:0577: freetype security update (Important)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
    </affected>
    <reference ref_id="RHSA-2010:0577" ref_url="https://access.redhat.com/errata/RHSA-2010:0577" source="RHSA"/>
    <reference ref_id="CVE-2010-2500" ref_url="https://access.redhat.com/security/cve/CVE-2010-2500" source="CVE"/>
    <reference ref_id="CVE-2010-2527" ref_url="https://access.redhat.com/security/cve/CVE-2010-2527" source="CVE"/>
    <reference ref_id="CVE-2010-2541" ref_url="https://access.redhat.com/security/cve/CVE-2010-2541" source="CVE"/>
    <description>FreeType is a free, high-quality, portable font engine that can open and
manage font files. It also loads, hints, and renders individual glyphs
efficiently. These packages provide both the FreeType 1 and FreeType 2 font
engines.

An integer overflow flaw was found in the way the FreeType font engine
processed font files. If a user loaded a carefully-crafted font file with
an application linked against FreeType, it could cause the application to
crash or, possibly, execute arbitrary code with the privileges of the user
running the application. (CVE-2010-2500)

Several buffer overflow flaws were found in the FreeType demo applications.
If a user loaded a carefully-crafted font file with a demo application, it
could cause the application to crash or, possibly, execute arbitrary code
with the privileges of the user running the application. (CVE-2010-2527,
CVE-2010-2541)

Red Hat would like to thank Robert Swiecki of the Google Security Team for
the discovery of the CVE-2010-2500 and CVE-2010-2527 issues.

Note: All of the issues in this erratum only affect the FreeType 2 font
engine.

Users are advised to upgrade to these updated packages, which contain
backported patches to correct these issues. The X server must be restarted
(log out, then log back in) for this update to take effect.</description>
    <advisory from="secalert@redhat.com">
     <severity>Important</severity>
     <rights>Copyright 2010 Red Hat, Inc.</rights>
     <issued date="2010-07-30"/>
     <updated date="2010-07-30"/>
     <cve cvss2="6.8/AV:N/AC:M/Au:N/C:P/I:P/A:P" cwe="CWE-190" href="https://access.redhat.com/security/cve/CVE-2010-2500" public="20100609">CVE-2010-2500</cve>
     <cve cvss2="3.7/AV:L/AC:H/Au:N/C:P/I:P/A:P" href="https://access.redhat.com/security/cve/CVE-2010-2527" impact="low" public="20100609">CVE-2010-2527</cve>
     <cve cvss2="3.7/AV:L/AC:H/Au:N/C:P/I:P/A:P" href="https://access.redhat.com/security/cve/CVE-2010-2541" impact="low" public="20100722">CVE-2010-2541</cve>
     <bugzilla href="https://bugzilla.redhat.com/613167" id="613167">CVE-2010-2500 freetype: integer overflow vulnerability in smooth/ftgrays.c</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/614557" id="614557">CVE-2010-2527 Freetype demos multiple buffer overflows</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/617342" id="617342">CVE-2010-2541 Freetype ftmulti buffer overflow</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="AND">
    <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
    <criteria operator="OR">
     <criteria operator="AND">
      <criterion comment="freetype is earlier than 0:2.1.4-15.el3" test_ref="oval:com.redhat.rhsa:tst:20100577001"/>
      <criterion comment="freetype is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060500002"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="freetype-devel is earlier than 0:2.1.4-15.el3" test_ref="oval:com.redhat.rhsa:tst:20100577003"/>
      <criterion comment="freetype-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060500004"/>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20100607" version="637">
   <metadata>
    <title>RHSA-2010:0607: freetype security update (Important)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
     <platform>Red Hat Enterprise Linux 5</platform>
    </affected>
    <reference ref_id="RHSA-2010:0607" ref_url="https://access.redhat.com/errata/RHSA-2010:0607" source="RHSA"/>
    <reference ref_id="CVE-2010-1797" ref_url="https://access.redhat.com/security/cve/CVE-2010-1797" source="CVE"/>
    <description>FreeType is a free, high-quality, portable font engine that can open and
manage font files. It also loads, hints, and renders individual glyphs
efficiently. The freetype packages for Red Hat Enterprise Linux 3 and 4
provide both the FreeType 1 and FreeType 2 font engines. The freetype
packages for Red Hat Enterprise Linux 5 provide only the FreeType 2 font
engine.

Two stack overflow flaws were found in the way the FreeType font engine
processed certain Compact Font Format (CFF) character strings (opcodes). If
a user loaded a specially-crafted font file with an application linked
against FreeType, it could cause the application to crash or, possibly,
execute arbitrary code with the privileges of the user running the
application. (CVE-2010-1797)

Red Hat would like to thank Braden Thomas of the Apple Product Security
team for reporting these issues.

Note: CVE-2010-1797 only affects the FreeType 2 font engine.

Users are advised to upgrade to these updated packages, which contain a
backported patch to correct these issues. The X server must be restarted
(log out, then log back in) for this update to take effect.</description>
    <advisory from="secalert@redhat.com">
     <severity>Important</severity>
     <rights>Copyright 2010 Red Hat, Inc.</rights>
     <issued date="2010-08-05"/>
     <updated date="2010-08-05"/>
     <cve cvss2="6.8/AV:N/AC:M/Au:N/C:P/I:P/A:P" href="https://access.redhat.com/security/cve/CVE-2010-1797" public="20100805">CVE-2010-1797</cve>
     <bugzilla href="https://bugzilla.redhat.com/621144" id="621144">CVE-2010-1797 FreeType: Multiple stack overflows by processing CFF opcodes</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:5</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="freetype-devel is earlier than 0:2.1.4-16.el3" test_ref="oval:com.redhat.rhsa:tst:20100607001"/>
       <criterion comment="freetype-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060500004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="freetype is earlier than 0:2.1.4-16.el3" test_ref="oval:com.redhat.rhsa:tst:20100607003"/>
       <criterion comment="freetype is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060500002"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="freetype-devel is earlier than 0:2.1.9-15.el4.8" test_ref="oval:com.redhat.rhsa:tst:20100607006"/>
       <criterion comment="freetype-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060500004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="freetype-utils is earlier than 0:2.1.9-15.el4.8" test_ref="oval:com.redhat.rhsa:tst:20100607007"/>
       <criterion comment="freetype-utils is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060500010"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="freetype is earlier than 0:2.1.9-15.el4.8" test_ref="oval:com.redhat.rhsa:tst:20100607009"/>
       <criterion comment="freetype is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060500002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="freetype-demos is earlier than 0:2.1.9-15.el4.8" test_ref="oval:com.redhat.rhsa:tst:20100607010"/>
       <criterion comment="freetype-demos is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060500008"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 5 is installed" test_ref="oval:com.redhat.rhsa:tst:20070066013"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="freetype is earlier than 0:2.2.1-26.el5_5" test_ref="oval:com.redhat.rhsa:tst:20100607013"/>
       <criterion comment="freetype is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070150016"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="freetype-demos is earlier than 0:2.2.1-26.el5_5" test_ref="oval:com.redhat.rhsa:tst:20100607015"/>
       <criterion comment="freetype-demos is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070150014"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="freetype-devel is earlier than 0:2.2.1-26.el5_5" test_ref="oval:com.redhat.rhsa:tst:20100607017"/>
       <criterion comment="freetype-devel is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070150018"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20100625" version="637">
   <metadata>
    <title>RHSA-2010:0625: wireshark security update (Moderate)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
     <platform>Red Hat Enterprise Linux 5</platform>
    </affected>
    <reference ref_id="RHSA-2010:0625" ref_url="https://access.redhat.com/errata/RHSA-2010:0625" source="RHSA"/>
    <reference ref_id="CVE-2010-1455" ref_url="https://access.redhat.com/security/cve/CVE-2010-1455" source="CVE"/>
    <reference ref_id="CVE-2010-2283" ref_url="https://access.redhat.com/security/cve/CVE-2010-2283" source="CVE"/>
    <reference ref_id="CVE-2010-2284" ref_url="https://access.redhat.com/security/cve/CVE-2010-2284" source="CVE"/>
    <reference ref_id="CVE-2010-2286" ref_url="https://access.redhat.com/security/cve/CVE-2010-2286" source="CVE"/>
    <reference ref_id="CVE-2010-2287" ref_url="https://access.redhat.com/security/cve/CVE-2010-2287" source="CVE"/>
    <reference ref_id="CVE-2010-2995" ref_url="https://access.redhat.com/security/cve/CVE-2010-2995" source="CVE"/>
    <description>Wireshark is a program for monitoring network traffic. Wireshark was
previously known as Ethereal.

Multiple buffer overflow flaws were found in the Wireshark SigComp
Universal Decompressor Virtual Machine (UDVM) dissector. If Wireshark read
a malformed packet off a network or opened a malicious dump file, it could
crash or, possibly, execute arbitrary code as the user running Wireshark.
(CVE-2010-2287, CVE-2010-2995)

Several denial of service flaws were found in Wireshark. Wireshark could
crash or stop responding if it read a malformed packet off a network, or
opened a malicious dump file. (CVE-2010-1455, CVE-2010-2283, CVE-2010-2284,
CVE-2010-2286)

Users of Wireshark should upgrade to these updated packages, which contain
Wireshark version 1.0.15, and resolve these issues. All running instances
of Wireshark must be restarted for the update to take effect.</description>
    <advisory from="secalert@redhat.com">
     <severity>Moderate</severity>
     <rights>Copyright 2010 Red Hat, Inc.</rights>
     <issued date="2010-08-11"/>
     <updated date="2010-08-11"/>
     <cve cvss2="1.8/AV:A/AC:H/Au:N/C:N/I:N/A:P" href="https://access.redhat.com/security/cve/CVE-2010-1455" impact="low" public="20100505">CVE-2010-1455</cve>
     <cve cvss2="2.9/AV:A/AC:M/Au:N/C:N/I:N/A:P" cwe="CWE-476" href="https://access.redhat.com/security/cve/CVE-2010-2283" impact="low" public="20100609">CVE-2010-2283</cve>
     <cve cvss2="2.9/AV:A/AC:M/Au:N/C:N/I:N/A:P" href="https://access.redhat.com/security/cve/CVE-2010-2284" impact="low" public="20100609">CVE-2010-2284</cve>
     <cve cvss2="2.9/AV:A/AC:M/Au:N/C:N/I:N/A:P" cwe="CWE-835" href="https://access.redhat.com/security/cve/CVE-2010-2286" impact="low" public="20100609">CVE-2010-2286</cve>
     <cve cvss2="5.4/AV:A/AC:M/Au:N/C:P/I:P/A:P" href="https://access.redhat.com/security/cve/CVE-2010-2287" public="20100609">CVE-2010-2287</cve>
     <cve cvss2="5.4/AV:A/AC:M/Au:N/C:P/I:P/A:P" href="https://access.redhat.com/security/cve/CVE-2010-2995" public="20100609">CVE-2010-2995</cve>
     <bugzilla href="https://bugzilla.redhat.com/590613" id="590613">CVE-2010-1455 wireshark: DOCSIS dissector crash</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/604290" id="604290">CVE-2010-2283 wireshark: SMB dissector NULL pointer dereference</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/604292" id="604292">CVE-2010-2284 wireshark: ASN.1 BER dissector stack overrun</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/604302" id="604302">CVE-2010-2286 wireshark: SigComp UDVM dissector infinite loop</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/604308" id="604308">CVE-2010-2995 wireshark: SigComp UDVM dissector buffer overruns</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:5</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="wireshark-gnome is earlier than 0:1.0.15-EL3.1" test_ref="oval:com.redhat.rhsa:tst:20100625001"/>
       <criterion comment="wireshark-gnome is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060602004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="wireshark is earlier than 0:1.0.15-EL3.1" test_ref="oval:com.redhat.rhsa:tst:20100625003"/>
       <criterion comment="wireshark is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060602002"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="wireshark-gnome is earlier than 0:1.0.15-1.el4_8.1" test_ref="oval:com.redhat.rhsa:tst:20100625006"/>
       <criterion comment="wireshark-gnome is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060602004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="wireshark is earlier than 0:1.0.15-1.el4_8.1" test_ref="oval:com.redhat.rhsa:tst:20100625007"/>
       <criterion comment="wireshark is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060602002"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 5 is installed" test_ref="oval:com.redhat.rhsa:tst:20070066013"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="wireshark is earlier than 0:1.0.15-1.el5_5.1" test_ref="oval:com.redhat.rhsa:tst:20100625009"/>
       <criterion comment="wireshark is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070066012"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="wireshark-gnome is earlier than 0:1.0.15-1.el5_5.1" test_ref="oval:com.redhat.rhsa:tst:20100625011"/>
       <criterion comment="wireshark-gnome is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070066010"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20100643" version="636">
   <metadata>
    <title>RHSA-2010:0643: openoffice.org security update (Important)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
    </affected>
    <reference ref_id="RHSA-2010:0643" ref_url="https://access.redhat.com/errata/RHSA-2010:0643" source="RHSA"/>
    <reference ref_id="CVE-2010-2935" ref_url="https://access.redhat.com/security/cve/CVE-2010-2935" source="CVE"/>
    <reference ref_id="CVE-2010-2936" ref_url="https://access.redhat.com/security/cve/CVE-2010-2936" source="CVE"/>
    <description>OpenOffice.org is an office productivity suite that includes desktop
applications, such as a word processor, spreadsheet application,
presentation manager, formula editor, and a drawing program.

An integer truncation error, leading to a heap-based buffer overflow, was
found in the way the OpenOffice.org Impress presentation application
sanitized a file's dictionary property items. An attacker could use this
flaw to create a specially-crafted Microsoft Office PowerPoint file that,
when opened, would cause OpenOffice.org Impress to crash or, possibly,
execute arbitrary code with the privileges of the user running
OpenOffice.org Impress. (CVE-2010-2935)

An integer overflow flaw, leading to a heap-based buffer overflow, was
found in the way OpenOffice.org Impress processed polygons in input
documents. An attacker could use this flaw to create a specially-crafted
Microsoft Office PowerPoint file that, when opened, would cause
OpenOffice.org Impress to crash or, possibly, execute arbitrary code with
the privileges of the user running OpenOffice.org Impress. (CVE-2010-2936)

All users of OpenOffice.org are advised to upgrade to these updated
packages, which contain backported patches to correct these issues. For Red
Hat Enterprise Linux 3, this erratum provides updated openoffice.org
packages. For Red Hat Enterprise Linux 4, this erratum provides updated
openoffice.org and openoffice.org2 packages. All running instances of
OpenOffice.org applications must be restarted for this update to take
effect.</description>
    <advisory from="secalert@redhat.com">
     <severity>Important</severity>
     <rights>Copyright 2010 Red Hat, Inc.</rights>
     <issued date="2010-08-23"/>
     <updated date="2010-08-23"/>
     <cve cvss2="6.8/AV:N/AC:M/Au:N/C:P/I:P/A:P" href="https://access.redhat.com/security/cve/CVE-2010-2935" public="20100726">CVE-2010-2935</cve>
     <cve cvss2="6.8/AV:N/AC:M/Au:N/C:P/I:P/A:P" cwe="CWE-122" href="https://access.redhat.com/security/cve/CVE-2010-2936" impact="moderate" public="20100726">CVE-2010-2936</cve>
     <bugzilla href="https://bugzilla.redhat.com/622529" id="622529">CVE-2010-2935 OpenOffice.Org: Integer truncation error by parsing specially-crafted Microsoft PowerPoint document</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/622555" id="622555">CVE-2010-2936 OpenOffice.org: Heap-based buffer overflow by parsing specially-crafted Microsoft PowerPoint document</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="openoffice.org-i18n is earlier than 0:1.1.2-48.2.0.EL3" test_ref="oval:com.redhat.rhsa:tst:20100643001"/>
       <criterion comment="openoffice.org-i18n is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060573002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-libs is earlier than 0:1.1.2-48.2.0.EL3" test_ref="oval:com.redhat.rhsa:tst:20100643003"/>
       <criterion comment="openoffice.org-libs is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060573004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org is earlier than 0:1.1.2-48.2.0.EL3" test_ref="oval:com.redhat.rhsa:tst:20100643005"/>
       <criterion comment="openoffice.org is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060573006"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="openoffice.org2-math is earlier than 1:2.0.4-5.7.0.6.1.el4_8.6" test_ref="oval:com.redhat.rhsa:tst:20100643008"/>
       <criterion comment="openoffice.org2-math is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406070"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-javafilter is earlier than 1:2.0.4-5.7.0.6.1.el4_8.6" test_ref="oval:com.redhat.rhsa:tst:20100643010"/>
       <criterion comment="openoffice.org2-javafilter is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406128"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-bn is earlier than 1:2.0.4-5.7.0.6.1.el4_8.6" test_ref="oval:com.redhat.rhsa:tst:20100643012"/>
       <criterion comment="openoffice.org2-langpack-bn is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406068"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-graphicfilter is earlier than 1:2.0.4-5.7.0.6.1.el4_8.6" test_ref="oval:com.redhat.rhsa:tst:20100643014"/>
       <criterion comment="openoffice.org2-graphicfilter is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406040"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-el_GR is earlier than 1:2.0.4-5.7.0.6.1.el4_8.6" test_ref="oval:com.redhat.rhsa:tst:20100643016"/>
       <criterion comment="openoffice.org2-langpack-el_GR is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406048"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-de is earlier than 1:2.0.4-5.7.0.6.1.el4_8.6" test_ref="oval:com.redhat.rhsa:tst:20100643018"/>
       <criterion comment="openoffice.org2-langpack-de is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406016"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-it is earlier than 1:2.0.4-5.7.0.6.1.el4_8.6" test_ref="oval:com.redhat.rhsa:tst:20100643020"/>
       <criterion comment="openoffice.org2-langpack-it is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406094"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-sk_SK is earlier than 1:2.0.4-5.7.0.6.1.el4_8.6" test_ref="oval:com.redhat.rhsa:tst:20100643022"/>
       <criterion comment="openoffice.org2-langpack-sk_SK is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406078"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-bg_BG is earlier than 1:2.0.4-5.7.0.6.1.el4_8.6" test_ref="oval:com.redhat.rhsa:tst:20100643024"/>
       <criterion comment="openoffice.org2-langpack-bg_BG is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406014"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-hi_IN is earlier than 1:2.0.4-5.7.0.6.1.el4_8.6" test_ref="oval:com.redhat.rhsa:tst:20100643026"/>
       <criterion comment="openoffice.org2-langpack-hi_IN is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406038"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-da_DK is earlier than 1:2.0.4-5.7.0.6.1.el4_8.6" test_ref="oval:com.redhat.rhsa:tst:20100643028"/>
       <criterion comment="openoffice.org2-langpack-da_DK is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406100"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-pl_PL is earlier than 1:2.0.4-5.7.0.6.1.el4_8.6" test_ref="oval:com.redhat.rhsa:tst:20100643030"/>
       <criterion comment="openoffice.org2-langpack-pl_PL is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406082"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-ko_KR is earlier than 1:2.0.4-5.7.0.6.1.el4_8.6" test_ref="oval:com.redhat.rhsa:tst:20100643032"/>
       <criterion comment="openoffice.org2-langpack-ko_KR is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406090"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-emailmerge is earlier than 1:2.0.4-5.7.0.6.1.el4_8.6" test_ref="oval:com.redhat.rhsa:tst:20100643034"/>
       <criterion comment="openoffice.org2-emailmerge is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406106"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-pa_IN is earlier than 1:2.0.4-5.7.0.6.1.el4_8.6" test_ref="oval:com.redhat.rhsa:tst:20100643036"/>
       <criterion comment="openoffice.org2-langpack-pa_IN is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406096"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-base is earlier than 1:2.0.4-5.7.0.6.1.el4_8.6" test_ref="oval:com.redhat.rhsa:tst:20100643038"/>
       <criterion comment="openoffice.org2-base is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406102"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-xsltfilter is earlier than 1:2.0.4-5.7.0.6.1.el4_8.6" test_ref="oval:com.redhat.rhsa:tst:20100643040"/>
       <criterion comment="openoffice.org2-xsltfilter is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406062"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-ga_IE is earlier than 1:2.0.4-5.7.0.6.1.el4_8.6" test_ref="oval:com.redhat.rhsa:tst:20100643042"/>
       <criterion comment="openoffice.org2-langpack-ga_IE is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406114"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-ru is earlier than 1:2.0.4-5.7.0.6.1.el4_8.6" test_ref="oval:com.redhat.rhsa:tst:20100643044"/>
       <criterion comment="openoffice.org2-langpack-ru is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406060"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-zu_ZA is earlier than 1:2.0.4-5.7.0.6.1.el4_8.6" test_ref="oval:com.redhat.rhsa:tst:20100643046"/>
       <criterion comment="openoffice.org2-langpack-zu_ZA is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406112"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-sv is earlier than 1:2.0.4-5.7.0.6.1.el4_8.6" test_ref="oval:com.redhat.rhsa:tst:20100643048"/>
       <criterion comment="openoffice.org2-langpack-sv is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406120"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-eu_ES is earlier than 1:2.0.4-5.7.0.6.1.el4_8.6" test_ref="oval:com.redhat.rhsa:tst:20100643050"/>
       <criterion comment="openoffice.org2-langpack-eu_ES is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406036"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-draw is earlier than 1:2.0.4-5.7.0.6.1.el4_8.6" test_ref="oval:com.redhat.rhsa:tst:20100643052"/>
       <criterion comment="openoffice.org2-draw is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406122"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-nl is earlier than 1:2.0.4-5.7.0.6.1.el4_8.6" test_ref="oval:com.redhat.rhsa:tst:20100643054"/>
       <criterion comment="openoffice.org2-langpack-nl is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406044"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-fr is earlier than 1:2.0.4-5.7.0.6.1.el4_8.6" test_ref="oval:com.redhat.rhsa:tst:20100643056"/>
       <criterion comment="openoffice.org2-langpack-fr is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406124"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-sl_SI is earlier than 1:2.0.4-5.7.0.6.1.el4_8.6" test_ref="oval:com.redhat.rhsa:tst:20100643058"/>
       <criterion comment="openoffice.org2-langpack-sl_SI is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406046"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-nn_NO is earlier than 1:2.0.4-5.7.0.6.1.el4_8.6" test_ref="oval:com.redhat.rhsa:tst:20100643060"/>
       <criterion comment="openoffice.org2-langpack-nn_NO is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406126"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-cs_CZ is earlier than 1:2.0.4-5.7.0.6.1.el4_8.6" test_ref="oval:com.redhat.rhsa:tst:20100643062"/>
       <criterion comment="openoffice.org2-langpack-cs_CZ is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406054"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-hu_HU is earlier than 1:2.0.4-5.7.0.6.1.el4_8.6" test_ref="oval:com.redhat.rhsa:tst:20100643064"/>
       <criterion comment="openoffice.org2-langpack-hu_HU is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406026"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-zh_TW is earlier than 1:2.0.4-5.7.0.6.1.el4_8.6" test_ref="oval:com.redhat.rhsa:tst:20100643066"/>
       <criterion comment="openoffice.org2-langpack-zh_TW is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406084"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-tr_TR is earlier than 1:2.0.4-5.7.0.6.1.el4_8.6" test_ref="oval:com.redhat.rhsa:tst:20100643068"/>
       <criterion comment="openoffice.org2-langpack-tr_TR is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406022"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-core is earlier than 1:2.0.4-5.7.0.6.1.el4_8.6" test_ref="oval:com.redhat.rhsa:tst:20100643070"/>
       <criterion comment="openoffice.org2-core is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406034"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-hr_HR is earlier than 1:2.0.4-5.7.0.6.1.el4_8.6" test_ref="oval:com.redhat.rhsa:tst:20100643072"/>
       <criterion comment="openoffice.org2-langpack-hr_HR is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406080"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-pyuno is earlier than 1:2.0.4-5.7.0.6.1.el4_8.6" test_ref="oval:com.redhat.rhsa:tst:20100643074"/>
       <criterion comment="openoffice.org2-pyuno is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406032"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-ms_MY is earlier than 1:2.0.4-5.7.0.6.1.el4_8.6" test_ref="oval:com.redhat.rhsa:tst:20100643076"/>
       <criterion comment="openoffice.org2-langpack-ms_MY is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406056"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-fi_FI is earlier than 1:2.0.4-5.7.0.6.1.el4_8.6" test_ref="oval:com.redhat.rhsa:tst:20100643078"/>
       <criterion comment="openoffice.org2-langpack-fi_FI is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406024"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-pt_PT is earlier than 1:2.0.4-5.7.0.6.1.el4_8.6" test_ref="oval:com.redhat.rhsa:tst:20100643080"/>
       <criterion comment="openoffice.org2-langpack-pt_PT is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406020"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-et_EE is earlier than 1:2.0.4-5.7.0.6.1.el4_8.6" test_ref="oval:com.redhat.rhsa:tst:20100643082"/>
       <criterion comment="openoffice.org2-langpack-et_EE is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406018"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-lt_LT is earlier than 1:2.0.4-5.7.0.6.1.el4_8.6" test_ref="oval:com.redhat.rhsa:tst:20100643084"/>
       <criterion comment="openoffice.org2-langpack-lt_LT is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406086"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-th_TH is earlier than 1:2.0.4-5.7.0.6.1.el4_8.6" test_ref="oval:com.redhat.rhsa:tst:20100643086"/>
       <criterion comment="openoffice.org2-langpack-th_TH is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406028"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-ar is earlier than 1:2.0.4-5.7.0.6.1.el4_8.6" test_ref="oval:com.redhat.rhsa:tst:20100643088"/>
       <criterion comment="openoffice.org2-langpack-ar is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406058"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-ca_ES is earlier than 1:2.0.4-5.7.0.6.1.el4_8.6" test_ref="oval:com.redhat.rhsa:tst:20100643090"/>
       <criterion comment="openoffice.org2-langpack-ca_ES is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406030"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-gl_ES is earlier than 1:2.0.4-5.7.0.6.1.el4_8.6" test_ref="oval:com.redhat.rhsa:tst:20100643092"/>
       <criterion comment="openoffice.org2-langpack-gl_ES is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406118"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-ja_JP is earlier than 1:2.0.4-5.7.0.6.1.el4_8.6" test_ref="oval:com.redhat.rhsa:tst:20100643094"/>
       <criterion comment="openoffice.org2-langpack-ja_JP is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406076"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-writer is earlier than 1:2.0.4-5.7.0.6.1.el4_8.6" test_ref="oval:com.redhat.rhsa:tst:20100643096"/>
       <criterion comment="openoffice.org2-writer is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406074"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-zh_CN is earlier than 1:2.0.4-5.7.0.6.1.el4_8.6" test_ref="oval:com.redhat.rhsa:tst:20100643098"/>
       <criterion comment="openoffice.org2-langpack-zh_CN is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406042"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-ta_IN is earlier than 1:2.0.4-5.7.0.6.1.el4_8.6" test_ref="oval:com.redhat.rhsa:tst:20100643100"/>
       <criterion comment="openoffice.org2-langpack-ta_IN is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406098"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-impress is earlier than 1:2.0.4-5.7.0.6.1.el4_8.6" test_ref="oval:com.redhat.rhsa:tst:20100643102"/>
       <criterion comment="openoffice.org2-impress is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406088"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-nb_NO is earlier than 1:2.0.4-5.7.0.6.1.el4_8.6" test_ref="oval:com.redhat.rhsa:tst:20100643104"/>
       <criterion comment="openoffice.org2-langpack-nb_NO is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406092"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-he_IL is earlier than 1:2.0.4-5.7.0.6.1.el4_8.6" test_ref="oval:com.redhat.rhsa:tst:20100643106"/>
       <criterion comment="openoffice.org2-langpack-he_IL is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406066"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-sr_CS is earlier than 1:2.0.4-5.7.0.6.1.el4_8.6" test_ref="oval:com.redhat.rhsa:tst:20100643108"/>
       <criterion comment="openoffice.org2-langpack-sr_CS is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406052"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-es is earlier than 1:2.0.4-5.7.0.6.1.el4_8.6" test_ref="oval:com.redhat.rhsa:tst:20100643110"/>
       <criterion comment="openoffice.org2-langpack-es is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406104"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-calc is earlier than 1:2.0.4-5.7.0.6.1.el4_8.6" test_ref="oval:com.redhat.rhsa:tst:20100643112"/>
       <criterion comment="openoffice.org2-calc is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406050"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-gu_IN is earlier than 1:2.0.4-5.7.0.6.1.el4_8.6" test_ref="oval:com.redhat.rhsa:tst:20100643114"/>
       <criterion comment="openoffice.org2-langpack-gu_IN is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406064"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-pt_BR is earlier than 1:2.0.4-5.7.0.6.1.el4_8.6" test_ref="oval:com.redhat.rhsa:tst:20100643116"/>
       <criterion comment="openoffice.org2-langpack-pt_BR is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406108"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-af_ZA is earlier than 1:2.0.4-5.7.0.6.1.el4_8.6" test_ref="oval:com.redhat.rhsa:tst:20100643118"/>
       <criterion comment="openoffice.org2-langpack-af_ZA is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406110"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-testtools is earlier than 1:2.0.4-5.7.0.6.1.el4_8.6" test_ref="oval:com.redhat.rhsa:tst:20100643120"/>
       <criterion comment="openoffice.org2-testtools is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406116"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org2-langpack-cy_GB is earlier than 1:2.0.4-5.7.0.6.1.el4_8.6" test_ref="oval:com.redhat.rhsa:tst:20100643122"/>
       <criterion comment="openoffice.org2-langpack-cy_GB is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070406072"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org is earlier than 0:1.1.5-10.6.0.7.EL4.5" test_ref="oval:com.redhat.rhsa:tst:20100643124"/>
       <criterion comment="openoffice.org is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060573006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-i18n is earlier than 0:1.1.5-10.6.0.7.EL4.5" test_ref="oval:com.redhat.rhsa:tst:20100643125"/>
       <criterion comment="openoffice.org-i18n is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060573002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-libs is earlier than 0:1.1.5-10.6.0.7.EL4.5" test_ref="oval:com.redhat.rhsa:tst:20100643126"/>
       <criterion comment="openoffice.org-libs is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060573004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="openoffice.org-kde is earlier than 0:1.1.5-10.6.0.7.EL4.5" test_ref="oval:com.redhat.rhsa:tst:20100643127"/>
       <criterion comment="openoffice.org-kde is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060573011"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20100680" version="634">
   <metadata>
    <title>RHSA-2010:0680: seamonkey security update (Critical)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
    </affected>
    <reference ref_id="RHSA-2010:0680" ref_url="https://access.redhat.com/errata/RHSA-2010:0680" source="RHSA"/>
    <reference ref_id="CVE-2010-2760" ref_url="https://access.redhat.com/security/cve/CVE-2010-2760" source="CVE"/>
    <reference ref_id="CVE-2010-2765" ref_url="https://access.redhat.com/security/cve/CVE-2010-2765" source="CVE"/>
    <reference ref_id="CVE-2010-2767" ref_url="https://access.redhat.com/security/cve/CVE-2010-2767" source="CVE"/>
    <reference ref_id="CVE-2010-2768" ref_url="https://access.redhat.com/security/cve/CVE-2010-2768" source="CVE"/>
    <reference ref_id="CVE-2010-3167" ref_url="https://access.redhat.com/security/cve/CVE-2010-3167" source="CVE"/>
    <reference ref_id="CVE-2010-3168" ref_url="https://access.redhat.com/security/cve/CVE-2010-3168" source="CVE"/>
    <reference ref_id="CVE-2010-3169" ref_url="https://access.redhat.com/security/cve/CVE-2010-3169" source="CVE"/>
    <description>SeaMonkey is an open source web browser, email and newsgroup client, IRC
chat client, and HTML editor.

Several flaws were found in the processing of malformed web content. A web
page containing malicious content could cause SeaMonkey to crash or,
potentially, execute arbitrary code with the privileges of the user running
SeaMonkey. (CVE-2010-3169)

A buffer overflow flaw was found in SeaMonkey. A web page containing
malicious content could cause SeaMonkey to crash or, potentially, execute
arbitrary code with the privileges of the user running SeaMonkey.
(CVE-2010-2765)

A use-after-free flaw and several dangling pointer flaws were found in
SeaMonkey. A web page containing malicious content could cause SeaMonkey to
crash or, potentially, execute arbitrary code with the privileges of the
user running SeaMonkey. (CVE-2010-2760, CVE-2010-2767, CVE-2010-3167,
CVE-2010-3168)

A cross-site scripting (XSS) flaw was found in SeaMonkey. A web page
containing malicious content could cause SeaMonkey to run JavaScript code
with the permissions of a different website. (CVE-2010-2768)

All SeaMonkey users should upgrade to these updated packages, which correct
these issues. After installing the update, SeaMonkey must be restarted for
the changes to take effect.</description>
    <advisory from="secalert@redhat.com">
     <severity>Critical</severity>
     <rights>Copyright 2010 Red Hat, Inc.</rights>
     <issued date="2010-09-07"/>
     <updated date="2010-09-07"/>
     <cve cvss2="6.8/AV:N/AC:M/Au:N/C:P/I:P/A:P" href="https://access.redhat.com/security/cve/CVE-2010-2760" public="20100907">CVE-2010-2760</cve>
     <cve cvss2="6.8/AV:N/AC:M/Au:N/C:P/I:P/A:P" cwe="CWE-190" href="https://access.redhat.com/security/cve/CVE-2010-2765" public="20100907">CVE-2010-2765</cve>
     <cve cvss2="6.8/AV:N/AC:M/Au:N/C:P/I:P/A:P" href="https://access.redhat.com/security/cve/CVE-2010-2767" public="20100907">CVE-2010-2767</cve>
     <cve cvss2="5.1/AV:N/AC:H/Au:N/C:P/I:P/A:P" cwe="CWE-79" href="https://access.redhat.com/security/cve/CVE-2010-2768" impact="moderate" public="20100907">CVE-2010-2768</cve>
     <cve cvss2="6.8/AV:N/AC:M/Au:N/C:P/I:P/A:P" href="https://access.redhat.com/security/cve/CVE-2010-3167" public="20100907">CVE-2010-3167</cve>
     <cve cvss2="6.8/AV:N/AC:M/Au:N/C:P/I:P/A:P" href="https://access.redhat.com/security/cve/CVE-2010-3168" public="20100907">CVE-2010-3168</cve>
     <cve cvss2="6.8/AV:N/AC:M/Au:N/C:P/I:P/A:P" href="https://access.redhat.com/security/cve/CVE-2010-3169" public="20100907">CVE-2010-3169</cve>
     <bugzilla href="https://bugzilla.redhat.com/630055" id="630055">CVE-2010-3169 Mozilla Miscellaneous memory safety hazards</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/630056" id="630056">CVE-2010-2765 Mozilla Frameset integer overflow vulnerability (MFSA 2010-50)</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/630059" id="630059">CVE-2010-2767 Mozilla Dangling pointer vulnerability using DOM plugin array (MFSA 2010-51)</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/630062" id="630062">CVE-2010-2760 Mozilla Dangling pointer vulnerability in nsTreeSelection (MFSA 2010-54)</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/630064" id="630064">CVE-2010-3168 Mozilla XUL tree removal crash and remote code execution (MFSA 2010-55)</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/630067" id="630067">CVE-2010-3167 Mozilla Dangling pointer vulnerability in nsTreeContentView (MFSA 2010-56)</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/630074" id="630074">CVE-2010-2768 Mozilla UTF-7 XSS by overriding document charset using &lt;object&gt; type attribute (MFSA 2010-61)</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.60.el3" test_ref="oval:com.redhat.rhsa:tst:20100680001"/>
       <criterion comment="seamonkey-mail is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578020"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.60.el3" test_ref="oval:com.redhat.rhsa:tst:20100680003"/>
       <criterion comment="seamonkey-chat is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.60.el3" test_ref="oval:com.redhat.rhsa:tst:20100680005"/>
       <criterion comment="seamonkey-nspr-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.60.el3" test_ref="oval:com.redhat.rhsa:tst:20100680007"/>
       <criterion comment="seamonkey-dom-inspector is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.60.el3" test_ref="oval:com.redhat.rhsa:tst:20100680009"/>
       <criterion comment="seamonkey-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578014"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey is earlier than 0:1.0.9-0.60.el3" test_ref="oval:com.redhat.rhsa:tst:20100680011"/>
       <criterion comment="seamonkey is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578018"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.60.el3" test_ref="oval:com.redhat.rhsa:tst:20100680013"/>
       <criterion comment="seamonkey-nss is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578016"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.60.el3" test_ref="oval:com.redhat.rhsa:tst:20100680015"/>
       <criterion comment="seamonkey-nss-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578012"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.60.el3" test_ref="oval:com.redhat.rhsa:tst:20100680017"/>
       <criterion comment="seamonkey-js-debugger is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.60.el3" test_ref="oval:com.redhat.rhsa:tst:20100680019"/>
       <criterion comment="seamonkey-nspr is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578010"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-63.el4" test_ref="oval:com.redhat.rhsa:tst:20100680022"/>
       <criterion comment="seamonkey-js-debugger is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-devel is earlier than 0:1.0.9-63.el4" test_ref="oval:com.redhat.rhsa:tst:20100680023"/>
       <criterion comment="seamonkey-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578014"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-63.el4" test_ref="oval:com.redhat.rhsa:tst:20100680024"/>
       <criterion comment="seamonkey-dom-inspector is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-mail is earlier than 0:1.0.9-63.el4" test_ref="oval:com.redhat.rhsa:tst:20100680025"/>
       <criterion comment="seamonkey-mail is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578020"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey is earlier than 0:1.0.9-63.el4" test_ref="oval:com.redhat.rhsa:tst:20100680026"/>
       <criterion comment="seamonkey is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578018"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-chat is earlier than 0:1.0.9-63.el4" test_ref="oval:com.redhat.rhsa:tst:20100680027"/>
       <criterion comment="seamonkey-chat is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578006"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20100697" version="638">
   <metadata>
    <title>RHSA-2010:0697: samba security and bug fix update (Critical)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
     <platform>Red Hat Enterprise Linux 5</platform>
    </affected>
    <reference ref_id="RHSA-2010:0697" ref_url="https://access.redhat.com/errata/RHSA-2010:0697" source="RHSA"/>
    <reference ref_id="CVE-2010-3069" ref_url="https://access.redhat.com/security/cve/CVE-2010-3069" source="CVE"/>
    <description>Samba is a suite of programs used by machines to share files, printers, and
other information.

A missing array boundary checking flaw was found in the way Samba parsed
the binary representation of Windows security identifiers (SIDs). A
malicious client could send a specially-crafted SMB request to the Samba
server, resulting in arbitrary code execution with the privileges of the
Samba server (smbd). (CVE-2010-3069)

For Red Hat Enterprise Linux 4, this update also fixes the following bug:

* Previously, the restorecon utility was required during the installation
of the samba-common package. As a result, attempting to update samba
without this utility installed may have failed with the following error:

/var/tmp/rpm-tmp.[xxxxx]: line 7: restorecon: command not found

With this update, the utility is only used when it is already present on
the system, and the package is now always updated as expected. (BZ#629602)

Users of Samba are advised to upgrade to these updated packages, which
correct these issues. After installing this update, the smb service will be
restarted automatically.</description>
    <advisory from="secalert@redhat.com">
     <severity>Critical</severity>
     <rights>Copyright 2010 Red Hat, Inc.</rights>
     <issued date="2010-09-14"/>
     <updated date="2010-09-14"/>
     <cve cvss2="8.3/AV:A/AC:L/Au:N/C:C/I:C/A:C" cwe="CWE-129 CWE-121" href="https://access.redhat.com/security/cve/CVE-2010-3069" public="20100914">CVE-2010-3069</cve>
     <bugzilla href="https://bugzilla.redhat.com/629602" id="629602">restorecon: command not found after upgrade - leaves two samba-common versions</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/630869" id="630869">CVE-2010-3069 Samba: Stack-based buffer overflow by processing specially-crafted SID records</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:5</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="samba-client is earlier than 0:3.0.9-1.3E.18" test_ref="oval:com.redhat.rhsa:tst:20100697001"/>
       <criterion comment="samba-client is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060591008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="samba-common is earlier than 0:3.0.9-1.3E.18" test_ref="oval:com.redhat.rhsa:tst:20100697003"/>
       <criterion comment="samba-common is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060591002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="samba is earlier than 0:3.0.9-1.3E.18" test_ref="oval:com.redhat.rhsa:tst:20100697005"/>
       <criterion comment="samba is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060591004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="samba-swat is earlier than 0:3.0.9-1.3E.18" test_ref="oval:com.redhat.rhsa:tst:20100697007"/>
       <criterion comment="samba-swat is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060591006"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="samba-common is earlier than 0:3.0.33-0.19.el4_8.3" test_ref="oval:com.redhat.rhsa:tst:20100697010"/>
       <criterion comment="samba-common is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060591002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="samba-client is earlier than 0:3.0.33-0.19.el4_8.3" test_ref="oval:com.redhat.rhsa:tst:20100697011"/>
       <criterion comment="samba-client is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060591008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="samba-swat is earlier than 0:3.0.33-0.19.el4_8.3" test_ref="oval:com.redhat.rhsa:tst:20100697012"/>
       <criterion comment="samba-swat is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060591006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="samba is earlier than 0:3.0.33-0.19.el4_8.3" test_ref="oval:com.redhat.rhsa:tst:20100697013"/>
       <criterion comment="samba is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060591004"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 5 is installed" test_ref="oval:com.redhat.rhsa:tst:20070066013"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="samba-common is earlier than 0:3.0.33-3.29.el5_5.1" test_ref="oval:com.redhat.rhsa:tst:20100697015"/>
       <criterion comment="samba-common is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070354016"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="samba-client is earlier than 0:3.0.33-3.29.el5_5.1" test_ref="oval:com.redhat.rhsa:tst:20100697017"/>
       <criterion comment="samba-client is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070354018"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="libsmbclient is earlier than 0:3.0.33-3.29.el5_5.1" test_ref="oval:com.redhat.rhsa:tst:20100697019"/>
       <criterion comment="libsmbclient is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20100488026"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="samba-swat is earlier than 0:3.0.33-3.29.el5_5.1" test_ref="oval:com.redhat.rhsa:tst:20100697021"/>
       <criterion comment="samba-swat is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070354020"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="samba is earlier than 0:3.0.33-3.29.el5_5.1" test_ref="oval:com.redhat.rhsa:tst:20100697023"/>
       <criterion comment="samba is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20070354022"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="libsmbclient-devel is earlier than 0:3.0.33-3.29.el5_5.1" test_ref="oval:com.redhat.rhsa:tst:20100697025"/>
       <criterion comment="libsmbclient-devel is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20100488016"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20100703" version="636">
   <metadata>
    <title>RHSA-2010:0703: bzip2 security update (Important)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
     <platform>Red Hat Enterprise Linux 5</platform>
    </affected>
    <reference ref_id="RHSA-2010:0703" ref_url="https://access.redhat.com/errata/RHSA-2010:0703" source="RHSA"/>
    <reference ref_id="CVE-2010-0405" ref_url="https://access.redhat.com/security/cve/CVE-2010-0405" source="CVE"/>
    <description>bzip2 is a freely available, high-quality data compressor. It provides both
standalone compression and decompression utilities, as well as a shared
library for use with other programs.

An integer overflow flaw was discovered in the bzip2 decompression routine.
This issue could, when decompressing malformed archives, cause bzip2, or an
application linked against the libbz2 library, to crash or, potentially,
execute arbitrary code. (CVE-2010-0405)

Users of bzip2 should upgrade to these updated packages, which contain a
backported patch to resolve this issue. All running applications using the
libbz2 library must be restarted for the update to take effect.</description>
    <advisory from="secalert@redhat.com">
     <severity>Important</severity>
     <rights>Copyright 2010 Red Hat, Inc.</rights>
     <issued date="2010-09-20"/>
     <updated date="2010-09-20"/>
     <cve cvss2="5.1/AV:N/AC:H/Au:N/C:P/I:P/A:P" cwe="CWE-190" href="https://access.redhat.com/security/cve/CVE-2010-0405" public="20100920">CVE-2010-0405</cve>
     <bugzilla href="https://bugzilla.redhat.com/627882" id="627882">CVE-2010-0405 bzip2: integer overflow flaw in BZ2_decompress</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:5</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="bzip2 is earlier than 0:1.0.2-14.EL3" test_ref="oval:com.redhat.rhsa:tst:20100703001"/>
       <criterion comment="bzip2 is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20080893006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="bzip2-libs is earlier than 0:1.0.2-14.EL3" test_ref="oval:com.redhat.rhsa:tst:20100703003"/>
       <criterion comment="bzip2-libs is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20080893002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="bzip2-devel is earlier than 0:1.0.2-14.EL3" test_ref="oval:com.redhat.rhsa:tst:20100703005"/>
       <criterion comment="bzip2-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20080893004"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="bzip2-devel is earlier than 0:1.0.2-16.el4_8" test_ref="oval:com.redhat.rhsa:tst:20100703008"/>
       <criterion comment="bzip2-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20080893004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="bzip2-libs is earlier than 0:1.0.2-16.el4_8" test_ref="oval:com.redhat.rhsa:tst:20100703009"/>
       <criterion comment="bzip2-libs is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20080893002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="bzip2 is earlier than 0:1.0.2-16.el4_8" test_ref="oval:com.redhat.rhsa:tst:20100703010"/>
       <criterion comment="bzip2 is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20080893006"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 5 is installed" test_ref="oval:com.redhat.rhsa:tst:20070066013"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="bzip2-libs is earlier than 0:1.0.3-6.el5_5" test_ref="oval:com.redhat.rhsa:tst:20100703012"/>
       <criterion comment="bzip2-libs is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20080893013"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="bzip2-devel is earlier than 0:1.0.3-6.el5_5" test_ref="oval:com.redhat.rhsa:tst:20100703014"/>
       <criterion comment="bzip2-devel is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20080893017"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="bzip2 is earlier than 0:1.0.3-6.el5_5" test_ref="oval:com.redhat.rhsa:tst:20100703016"/>
       <criterion comment="bzip2 is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20080893015"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20100720" version="632">
   <metadata>
    <title>RHSA-2010:0720: mikmod security update (Moderate)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
     <platform>Red Hat Enterprise Linux 5</platform>
    </affected>
    <reference ref_id="RHSA-2010:0720" ref_url="https://access.redhat.com/errata/RHSA-2010:0720" source="RHSA"/>
    <reference ref_id="CVE-2007-6720" ref_url="https://access.redhat.com/security/cve/CVE-2007-6720" source="CVE"/>
    <reference ref_id="CVE-2009-3995" ref_url="https://access.redhat.com/security/cve/CVE-2009-3995" source="CVE"/>
    <reference ref_id="CVE-2009-3996" ref_url="https://access.redhat.com/security/cve/CVE-2009-3996" source="CVE"/>
    <description>MikMod is a MOD music file player for Linux, UNIX, and similar operating
systems. It supports various file formats including MOD, STM, S3M, MTM, XM,
ULT, and IT.

Multiple input validation flaws, resulting in buffer overflows, were
discovered in MikMod. Specially-crafted music files in various formats
could, when played, cause an application using the MikMod library to crash
or, potentially, execute arbitrary code. (CVE-2009-3995, CVE-2009-3996,
CVE-2007-6720)

All MikMod users should upgrade to these updated packages, which contain
backported patches to correct these issues. All running applications using
the MikMod library must be restarted for this update to take effect.</description>
    <advisory from="secalert@redhat.com">
     <severity>Moderate</severity>
     <rights>Copyright 2010 Red Hat, Inc.</rights>
     <issued date="2010-09-28"/>
     <updated date="2010-09-28"/>
     <cve cvss2="2.6/AV:N/AC:H/Au:N/C:N/I:N/A:P" href="https://access.redhat.com/security/cve/CVE-2007-6720" impact="low" public="20080119">CVE-2007-6720</cve>
     <cve cvss2="5.1/AV:N/AC:H/Au:N/C:P/I:P/A:P" href="https://access.redhat.com/security/cve/CVE-2009-3995" public="20100205">CVE-2009-3995</cve>
     <cve cvss2="5.1/AV:N/AC:H/Au:N/C:P/I:P/A:P" href="https://access.redhat.com/security/cve/CVE-2009-3996" public="20100205">CVE-2009-3996</cve>
     <bugzilla href="https://bugzilla.redhat.com/479829" id="479829">CVE-2007-6720 mikmod: crash or abort when loading/playing multiple files with different number of channels</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/614643" id="614643">CVE-2009-3995 CVE-2009-3996 libmikmod: arbitrary code execution via crafted Impulse Tracker or Ultratracker files</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:5</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="mikmod is earlier than 0:3.1.6-23.el3" test_ref="oval:com.redhat.rhsa:tst:20100720001"/>
       <criterion comment="mikmod is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20100720002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="mikmod-devel is earlier than 0:3.1.6-23.el3" test_ref="oval:com.redhat.rhsa:tst:20100720003"/>
       <criterion comment="mikmod-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20100720004"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="mikmod is earlier than 0:3.1.6-33.el4_8.1" test_ref="oval:com.redhat.rhsa:tst:20100720006"/>
       <criterion comment="mikmod is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20100720002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="mikmod-devel is earlier than 0:3.1.6-33.el4_8.1" test_ref="oval:com.redhat.rhsa:tst:20100720007"/>
       <criterion comment="mikmod-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20100720004"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 5 is installed" test_ref="oval:com.redhat.rhsa:tst:20070066013"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="mikmod-devel is earlier than 0:3.1.6-39.el5_5.1" test_ref="oval:com.redhat.rhsa:tst:20100720009"/>
       <criterion comment="mikmod-devel is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20100720010"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="mikmod is earlier than 0:3.1.6-39.el5_5.1" test_ref="oval:com.redhat.rhsa:tst:20100720011"/>
       <criterion comment="mikmod is signed with Red Hat redhatrelease key" test_ref="oval:com.redhat.rhsa:tst:20100720012"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20100734" version="634">
   <metadata>
    <title>RHSA-2010:0734: Red Hat Enterprise Linux 3 - 1-Month End Of Life Notice (Low)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
    </affected>
    <reference ref_id="RHSA-2010:0734" ref_url="https://access.redhat.com/errata/RHSA-2010:0734" source="RHSA"/>
    <description>In accordance with the Red Hat Enterprise Linux Errata Support Policy, the
regular 7 year life-cycle of Red Hat Enterprise Linux 3 will end on October
31, 2010.

After this date, Red Hat will discontinue the regular subscription services
for Red Hat Enterprise Linux 3. Therefore, new bug fix, enhancement, and
security errata updates, as well as technical support services will no
longer be available for the following products:

* Red Hat Enterprise Linux AS 3
* Red Hat Enterprise Linux ES 3
* Red Hat Enterprise Linux WS 3
* Red Hat Enterprise Linux Extras 3
* Red Hat Desktop 3
* Red Hat Global File System 3
* Red Hat Cluster Suite 3

Customers still running production workloads on Red Hat Enterprise
Linux 3 are advised to begin planning the upgrade to Red Hat Enterprise
Linux 5. Active subscribers of Red Hat Enterprise Linux already have access
to all currently maintained versions of Red Hat Enterprise Linux, as part
of their subscription without additional fees.

For customers who are unable to migrate off Red Hat Enterprise Linux 3
before its end-of-life date, Red Hat is offering a limited, optional
extension program referred to as RHEL 3 ELS. For more information, contact
your Red Hat sales representative or channel partner on this program.

Once you are eligible for subscribing to the RHEL 3 ELS channels, read the
Red Hat Knowledgebase article DOC-40489 at
https://access.redhat.com/kb/docs/DOC-40489 for detailed information on how
to subscribe to the RHEL 3 ELS channels.

Details of the Red Hat Enterprise Linux life-cycle can be found on the Red
Hat website: http://www.redhat.com/security/updates/errata/</description>
    <advisory from="secalert@redhat.com">
     <severity>Low</severity>
     <rights>Copyright 2010 Red Hat, Inc.</rights>
     <issued date="2010-09-30"/>
     <updated date="2010-09-30"/>
     <bugzilla href="https://bugzilla.redhat.com/635632" id="635632">Send Out RHEL 3 1-Month EOL Notice</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="AND">
    <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
    <criteria operator="OR">
     <criteria operator="AND">
      <criterion comment="redhat-release is earlier than 0:3AS-13.9.10" test_ref="oval:com.redhat.rhsa:tst:20100734001"/>
      <criterion comment="redhat-release is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20091526002"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="redhat-release is earlier than 0:3WS-13.9.10" test_ref="oval:com.redhat.rhsa:tst:20100734003"/>
      <criterion comment="redhat-release is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20091526002"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="redhat-release is earlier than 0:3Desktop-13.9.10" test_ref="oval:com.redhat.rhsa:tst:20100734004"/>
      <criterion comment="redhat-release is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20091526002"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="redhat-release is earlier than 0:3ES-13.9.10" test_ref="oval:com.redhat.rhsa:tst:20100734005"/>
      <criterion comment="redhat-release is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20091526002"/>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20100736" version="637">
   <metadata>
    <title>RHSA-2010:0736: freetype security update (Important)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
    </affected>
    <reference ref_id="RHSA-2010:0736" ref_url="https://access.redhat.com/errata/RHSA-2010:0736" source="RHSA"/>
    <reference ref_id="CVE-2010-2806" ref_url="https://access.redhat.com/security/cve/CVE-2010-2806" source="CVE"/>
    <reference ref_id="CVE-2010-3054" ref_url="https://access.redhat.com/security/cve/CVE-2010-3054" source="CVE"/>
    <reference ref_id="CVE-2010-3311" ref_url="https://access.redhat.com/security/cve/CVE-2010-3311" source="CVE"/>
    <description>FreeType is a free, high-quality, portable font engine that can open and
manage font files. It also loads, hints, and renders individual glyphs
efficiently. The freetype packages for Red Hat Enterprise Linux 3 provide
both the FreeType 1 and FreeType 2 font engines.

It was discovered that the FreeType font rendering engine improperly
validated certain position values when processing input streams. If a user
loaded a specially-crafted font file with an application linked against
FreeType, and the relevant font glyphs were subsequently rendered with the
X FreeType library (libXft), it could trigger a heap-based buffer overflow
in the libXft library, causing the application to crash or, possibly,
execute arbitrary code with the privileges of the user running the
application. (CVE-2010-3311)

An array index error was found in the way the FreeType font rendering
engine processed certain PostScript Type 42 font files. If a user loaded a
specially-crafted font file with an application linked against FreeType, it
could cause the application to crash or, possibly, execute arbitrary code
with the privileges of the user running the application. (CVE-2010-2806)

A stack overflow flaw was found in the way the FreeType font rendering
engine processed PostScript Type 1 font files that contain nested Standard
Encoding Accented Character (seac) calls. If a user loaded a
specially-crafted font file with an application linked against FreeType, it
could cause the application to crash. (CVE-2010-3054)

Note: All of the issues in this erratum only affect the FreeType 2 font
engine.

Users are advised to upgrade to these updated packages, which contain
backported patches to correct these issues. The X server must be restarted
(log out, then log back in) for this update to take effect.</description>
    <advisory from="secalert@redhat.com">
     <severity>Important</severity>
     <rights>Copyright 2010 Red Hat, Inc.</rights>
     <issued date="2010-10-04"/>
     <updated date="2010-10-04"/>
     <cve cvss2="6.8/AV:N/AC:M/Au:N/C:P/I:P/A:P" cwe="CWE-122" href="https://access.redhat.com/security/cve/CVE-2010-2806" public="20100805">CVE-2010-2806</cve>
     <cve cvss2="4.3/AV:N/AC:M/Au:N/C:N/I:N/A:P" href="https://access.redhat.com/security/cve/CVE-2010-3054" impact="low" public="20100813">CVE-2010-3054</cve>
     <cve cvss2="6.8/AV:N/AC:M/Au:N/C:P/I:P/A:P" cwe="CWE-190 CWE-122" href="https://access.redhat.com/security/cve/CVE-2010-3311" public="20100930">CVE-2010-3311</cve>
     <bugzilla href="https://bugzilla.redhat.com/621980" id="621980">CVE-2010-2806 FreeType: Heap-based buffer overflow by processing FontType42 fonts with negative length of SFNT strings (FT bug #30656)</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/623625" id="623625">CVE-2010-3311 freetype: Input stream position error by processing Compact Font Format (CFF) font files</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/625632" id="625632">CVE-2010-3054 freetype: DoS via nested &quot;seac&quot; calls</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="AND">
    <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
    <criteria operator="OR">
     <criteria operator="AND">
      <criterion comment="freetype-devel is earlier than 0:2.1.4-18.el3" test_ref="oval:com.redhat.rhsa:tst:20100736001"/>
      <criterion comment="freetype-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060500004"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="freetype is earlier than 0:2.1.4-18.el3" test_ref="oval:com.redhat.rhsa:tst:20100736003"/>
      <criterion comment="freetype is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060500002"/>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20100750" version="635">
   <metadata>
    <title>RHSA-2010:0750: xpdf security update (Important)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
    </affected>
    <reference ref_id="RHSA-2010:0750" ref_url="https://access.redhat.com/errata/RHSA-2010:0750" source="RHSA"/>
    <reference ref_id="CVE-2010-3702" ref_url="https://access.redhat.com/security/cve/CVE-2010-3702" source="CVE"/>
    <description>Xpdf is an X Window System based viewer for Portable Document Format (PDF)
files.

An uninitialized pointer use flaw was discovered in Xpdf. An attacker could
create a malicious PDF file that, when opened, would cause Xpdf to crash
or, potentially, execute arbitrary code. (CVE-2010-3702)

Users are advised to upgrade to this updated package, which contains a
backported patch to correct this issue.</description>
    <advisory from="secalert@redhat.com">
     <severity>Important</severity>
     <rights>Copyright 2010 Red Hat, Inc.</rights>
     <issued date="2010-10-07"/>
     <updated date="2010-10-07"/>
     <cve cvss2="5.8/AV:A/AC:L/Au:N/C:P/I:P/A:P" href="https://access.redhat.com/security/cve/CVE-2010-3702" public="20100924">CVE-2010-3702</cve>
     <bugzilla href="https://bugzilla.redhat.com/595245" id="595245">CVE-2010-3702 xpdf: uninitialized Gfx::parser pointer dereference</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="AND">
    <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
    <criterion comment="xpdf is earlier than 1:2.02-19.el3" test_ref="oval:com.redhat.rhsa:tst:20100750001"/>
    <criterion comment="xpdf is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20070735002"/>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20100754" version="635">
   <metadata>
    <title>RHSA-2010:0754: cups security update (Important)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
    </affected>
    <reference ref_id="RHSA-2010:0754" ref_url="https://access.redhat.com/errata/RHSA-2010:0754" source="RHSA"/>
    <reference ref_id="CVE-2010-3702" ref_url="https://access.redhat.com/security/cve/CVE-2010-3702" source="CVE"/>
    <description>The Common UNIX Printing System (CUPS) provides a portable printing layer
for UNIX operating systems. The CUPS &quot;pdftops&quot; filter converts Portable
Document Format (PDF) files to PostScript.

An uninitialized pointer use flaw was discovered in the CUPS &quot;pdftops&quot;
filter. An attacker could create a malicious PDF file that, when printed,
would cause &quot;pdftops&quot; to crash or, potentially, execute arbitrary code as
the &quot;lp&quot; user. (CVE-2010-3702)

Users of cups are advised to upgrade to these updated packages, which
contain a backported patch to correct this issue. After installing this
update, the cupsd daemon will be restarted automatically.</description>
    <advisory from="secalert@redhat.com">
     <severity>Important</severity>
     <rights>Copyright 2010 Red Hat, Inc.</rights>
     <issued date="2010-10-07"/>
     <updated date="2010-10-07"/>
     <cve cvss2="5.8/AV:A/AC:L/Au:N/C:P/I:P/A:P" href="https://access.redhat.com/security/cve/CVE-2010-3702" public="20100924">CVE-2010-3702</cve>
     <bugzilla href="https://bugzilla.redhat.com/595245" id="595245">CVE-2010-3702 xpdf: uninitialized Gfx::parser pointer dereference</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="AND">
    <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
    <criteria operator="OR">
     <criteria operator="AND">
      <criterion comment="cups-devel is earlier than 1:1.1.17-13.3.70" test_ref="oval:com.redhat.rhsa:tst:20100754001"/>
      <criterion comment="cups-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060163002"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="cups is earlier than 1:1.1.17-13.3.70" test_ref="oval:com.redhat.rhsa:tst:20100754003"/>
      <criterion comment="cups is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060163006"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="cups-libs is earlier than 1:1.1.17-13.3.70" test_ref="oval:com.redhat.rhsa:tst:20100754005"/>
      <criterion comment="cups-libs is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060163004"/>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20100781" version="635">
   <metadata>
    <title>RHSA-2010:0781: seamonkey security update (Critical)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
    </affected>
    <reference ref_id="RHSA-2010:0781" ref_url="https://access.redhat.com/errata/RHSA-2010:0781" source="RHSA"/>
    <reference ref_id="CVE-2010-3170" ref_url="https://access.redhat.com/security/cve/CVE-2010-3170" source="CVE"/>
    <reference ref_id="CVE-2010-3173" ref_url="https://access.redhat.com/security/cve/CVE-2010-3173" source="CVE"/>
    <reference ref_id="CVE-2010-3176" ref_url="https://access.redhat.com/security/cve/CVE-2010-3176" source="CVE"/>
    <reference ref_id="CVE-2010-3177" ref_url="https://access.redhat.com/security/cve/CVE-2010-3177" source="CVE"/>
    <reference ref_id="CVE-2010-3180" ref_url="https://access.redhat.com/security/cve/CVE-2010-3180" source="CVE"/>
    <reference ref_id="CVE-2010-3182" ref_url="https://access.redhat.com/security/cve/CVE-2010-3182" source="CVE"/>
    <description>SeaMonkey is an open source web browser, email and newsgroup client, IRC
chat client, and HTML editor.

Several flaws were found in the processing of malformed web content. A web
page containing malicious content could cause SeaMonkey to crash or,
potentially, execute arbitrary code with the privileges of the user running
SeaMonkey. (CVE-2010-3176, CVE-2010-3180)

A flaw was found in the way the Gopher parser in SeaMonkey converted text
into HTML. A malformed file name on a Gopher server could, when accessed by
a victim running SeaMonkey, allow arbitrary JavaScript to be executed in
the context of the Gopher domain. (CVE-2010-3177)

A flaw was found in the script that launches SeaMonkey. The LD_LIBRARY_PATH
variable was appending a &quot;.&quot; character, which could allow a local attacker
to execute arbitrary code with the privileges of a different user running
SeaMonkey, if that user ran SeaMonkey from within an attacker-controlled
directory. (CVE-2010-3182)

It was found that the SSL DHE (Diffie-Hellman Ephemeral) mode
implementation for key exchanges in SeaMonkey accepted DHE keys that were
256 bits in length. This update removes support for 256 bit DHE keys, as
such keys are easily broken using modern hardware. (CVE-2010-3173)

A flaw was found in the way SeaMonkey matched SSL certificates when the
certificates had a Common Name containing a wildcard and a partial IP
address. SeaMonkey incorrectly accepted connections to IP addresses that
fell within the SSL certificate's wildcard range as valid SSL connections,
possibly allowing an attacker to conduct a man-in-the-middle attack.
(CVE-2010-3170)

All SeaMonkey users should upgrade to these updated packages, which correct
these issues. After installing the update, SeaMonkey must be restarted for
the changes to take effect.</description>
    <advisory from="secalert@redhat.com">
     <severity>Critical</severity>
     <rights>Copyright 2010 Red Hat, Inc.</rights>
     <issued date="2010-10-19"/>
     <updated date="2010-10-19"/>
     <cve cvss2="2.6/AV:N/AC:H/Au:N/C:N/I:P/A:N" href="https://access.redhat.com/security/cve/CVE-2010-3170" impact="low" public="20100714">CVE-2010-3170</cve>
     <cve cvss2="5.1/AV:N/AC:H/Au:N/C:P/I:P/A:P" href="https://access.redhat.com/security/cve/CVE-2010-3173" impact="moderate" public="20101019">CVE-2010-3173</cve>
     <cve cvss2="6.8/AV:N/AC:M/Au:N/C:P/I:P/A:P" href="https://access.redhat.com/security/cve/CVE-2010-3176" public="20101019">CVE-2010-3176</cve>
     <cve cvss2="5.1/AV:N/AC:H/Au:N/C:P/I:P/A:P" cwe="CWE-79" href="https://access.redhat.com/security/cve/CVE-2010-3177" impact="moderate" public="20101019">CVE-2010-3177</cve>
     <cve cvss2="6.8/AV:N/AC:M/Au:N/C:P/I:P/A:P" cwe="CWE-416" href="https://access.redhat.com/security/cve/CVE-2010-3180" public="20101019">CVE-2010-3180</cve>
     <cve cvss2="5.1/AV:N/AC:H/Au:N/C:P/I:P/A:P" href="https://access.redhat.com/security/cve/CVE-2010-3182" impact="moderate" public="20101019">CVE-2010-3182</cve>
     <bugzilla href="https://bugzilla.redhat.com/630047" id="630047">CVE-2010-3170 firefox/nss: doesn't handle IP-based wildcards in X509 certificates safely</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/642272" id="642272">CVE-2010-3176 Mozilla miscellaneous memory safety hazards</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/642283" id="642283">CVE-2010-3180 Mozilla use-after-free error in nsBarProp</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/642290" id="642290">CVE-2010-3177 Mozilla XSS in gopher parser when parsing hrefs</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/642300" id="642300">CVE-2010-3182 Mozilla unsafe library loading flaw</bugzilla>
     <bugzilla href="https://bugzilla.redhat.com/642302" id="642302">CVE-2010-3173 NSS: insecure Diffie-Hellman key exchange</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="seamonkey is earlier than 0:1.0.9-0.61.el3" test_ref="oval:com.redhat.rhsa:tst:20100781001"/>
       <criterion comment="seamonkey is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578018"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.61.el3" test_ref="oval:com.redhat.rhsa:tst:20100781003"/>
       <criterion comment="seamonkey-chat is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.61.el3" test_ref="oval:com.redhat.rhsa:tst:20100781005"/>
       <criterion comment="seamonkey-mail is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578020"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.61.el3" test_ref="oval:com.redhat.rhsa:tst:20100781007"/>
       <criterion comment="seamonkey-nss is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578016"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.61.el3" test_ref="oval:com.redhat.rhsa:tst:20100781009"/>
       <criterion comment="seamonkey-js-debugger is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.61.el3" test_ref="oval:com.redhat.rhsa:tst:20100781011"/>
       <criterion comment="seamonkey-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578014"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.61.el3" test_ref="oval:com.redhat.rhsa:tst:20100781013"/>
       <criterion comment="seamonkey-nss-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578012"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.61.el3" test_ref="oval:com.redhat.rhsa:tst:20100781015"/>
       <criterion comment="seamonkey-nspr is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578010"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.61.el3" test_ref="oval:com.redhat.rhsa:tst:20100781017"/>
       <criterion comment="seamonkey-nspr-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.61.el3" test_ref="oval:com.redhat.rhsa:tst:20100781019"/>
       <criterion comment="seamonkey-dom-inspector is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578002"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="seamonkey-devel is earlier than 0:1.0.9-64.el4" test_ref="oval:com.redhat.rhsa:tst:20100781022"/>
       <criterion comment="seamonkey-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578014"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-64.el4" test_ref="oval:com.redhat.rhsa:tst:20100781023"/>
       <criterion comment="seamonkey-dom-inspector is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-64.el4" test_ref="oval:com.redhat.rhsa:tst:20100781024"/>
       <criterion comment="seamonkey-js-debugger is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey is earlier than 0:1.0.9-64.el4" test_ref="oval:com.redhat.rhsa:tst:20100781025"/>
       <criterion comment="seamonkey is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578018"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-mail is earlier than 0:1.0.9-64.el4" test_ref="oval:com.redhat.rhsa:tst:20100781026"/>
       <criterion comment="seamonkey-mail is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578020"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-chat is earlier than 0:1.0.9-64.el4" test_ref="oval:com.redhat.rhsa:tst:20100781027"/>
       <criterion comment="seamonkey-chat is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578006"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20100810" version="632">
   <metadata>
    <title>RHSA-2010:0810: seamonkey security update (Critical)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
     <platform>Red Hat Enterprise Linux 4</platform>
    </affected>
    <reference ref_id="RHSA-2010:0810" ref_url="https://access.redhat.com/errata/RHSA-2010:0810" source="RHSA"/>
    <reference ref_id="CVE-2010-3765" ref_url="https://access.redhat.com/security/cve/CVE-2010-3765" source="CVE"/>
    <description>SeaMonkey is an open source web browser, email and newsgroup client, IRC
chat client, and HTML editor.

A race condition flaw was found in the way SeaMonkey handled Document
Object Model (DOM) element properties. A web page containing malicious
content could cause SeaMonkey to crash or, potentially, execute arbitrary
code with the privileges of the user running SeaMonkey. (CVE-2010-3765)

All SeaMonkey users should upgrade to these updated packages, which correct
this issue. After installing the update, SeaMonkey must be restarted for
the changes to take effect.</description>
    <advisory from="secalert@redhat.com">
     <severity>Critical</severity>
     <rights>Copyright 2010 Red Hat, Inc.</rights>
     <issued date="2010-10-27"/>
     <updated date="2010-10-27"/>
     <cve cvss2="6.8/AV:N/AC:M/Au:N/C:P/I:P/A:P" href="https://access.redhat.com/security/cve/CVE-2010-3765" public="20101028">CVE-2010-3765</cve>
     <bugzilla href="https://bugzilla.redhat.com/646997" id="646997">CVE-2010-3765 Firefox race condition flaw (MFSA 2010-73)</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
      <cpe>cpe:/o:redhat:enterprise_linux:4</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="OR">
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.62.el3" test_ref="oval:com.redhat.rhsa:tst:20100810001"/>
       <criterion comment="seamonkey-nspr-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578004"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey is earlier than 0:1.0.9-0.62.el3" test_ref="oval:com.redhat.rhsa:tst:20100810003"/>
       <criterion comment="seamonkey is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578018"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-nss is earlier than 0:1.0.9-0.62.el3" test_ref="oval:com.redhat.rhsa:tst:20100810005"/>
       <criterion comment="seamonkey-nss is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578016"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.62.el3" test_ref="oval:com.redhat.rhsa:tst:20100810007"/>
       <criterion comment="seamonkey-js-debugger is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.62.el3" test_ref="oval:com.redhat.rhsa:tst:20100810009"/>
       <criterion comment="seamonkey-dom-inspector is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578002"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-mail is earlier than 0:1.0.9-0.62.el3" test_ref="oval:com.redhat.rhsa:tst:20100810011"/>
       <criterion comment="seamonkey-mail is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578020"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-nspr is earlier than 0:1.0.9-0.62.el3" test_ref="oval:com.redhat.rhsa:tst:20100810013"/>
       <criterion comment="seamonkey-nspr is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578010"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-chat is earlier than 0:1.0.9-0.62.el3" test_ref="oval:com.redhat.rhsa:tst:20100810015"/>
       <criterion comment="seamonkey-chat is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-devel is earlier than 0:1.0.9-0.62.el3" test_ref="oval:com.redhat.rhsa:tst:20100810017"/>
       <criterion comment="seamonkey-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578014"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.62.el3" test_ref="oval:com.redhat.rhsa:tst:20100810019"/>
       <criterion comment="seamonkey-nss-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578012"/>
      </criteria>
     </criteria>
    </criteria>
    <criteria operator="AND">
     <criterion comment="Red Hat Enterprise Linux 4 is installed" test_ref="oval:com.redhat.rhsa:tst:20060159015"/>
     <criteria operator="OR">
      <criteria operator="AND">
       <criterion comment="seamonkey is earlier than 0:1.0.9-65.el4_8" test_ref="oval:com.redhat.rhsa:tst:20100810022"/>
       <criterion comment="seamonkey is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578018"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-chat is earlier than 0:1.0.9-65.el4_8" test_ref="oval:com.redhat.rhsa:tst:20100810023"/>
       <criterion comment="seamonkey-chat is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578006"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-mail is earlier than 0:1.0.9-65.el4_8" test_ref="oval:com.redhat.rhsa:tst:20100810024"/>
       <criterion comment="seamonkey-mail is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578020"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-js-debugger is earlier than 0:1.0.9-65.el4_8" test_ref="oval:com.redhat.rhsa:tst:20100810025"/>
       <criterion comment="seamonkey-js-debugger is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578008"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-devel is earlier than 0:1.0.9-65.el4_8" test_ref="oval:com.redhat.rhsa:tst:20100810026"/>
       <criterion comment="seamonkey-devel is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578014"/>
      </criteria>
      <criteria operator="AND">
       <criterion comment="seamonkey-dom-inspector is earlier than 0:1.0.9-65.el4_8" test_ref="oval:com.redhat.rhsa:tst:20100810027"/>
       <criterion comment="seamonkey-dom-inspector is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20060578002"/>
      </criteria>
     </criteria>
    </criteria>
   </criteria>
  </definition>
  <definition class="patch" id="oval:com.redhat.rhsa:def:20100817" version="632">
   <metadata>
    <title>RHSA-2010:0817: Red Hat Enterprise Linux 3 - End Of Life (Low)</title>
    <affected family="unix">
     <platform>Red Hat Enterprise Linux 3</platform>
    </affected>
    <reference ref_id="RHSA-2010:0817" ref_url="https://access.redhat.com/errata/RHSA-2010:0817" source="RHSA"/>
    <description>In accordance with the Red Hat Enterprise Linux Errata Support Policy, the
regular 7 year life-cycle of Red Hat Enterprise Linux 3 has ended.

Red Hat has discontinued the regular subscription services for Red Hat
Enterprise Linux 3. Therefore, new bug fix, enhancement, and security
errata updates, as well as technical support services are no longer
available for the following products:

* Red Hat Enterprise Linux AS 3
* Red Hat Enterprise Linux ES 3
* Red Hat Enterprise Linux WS 3
* Red Hat Enterprise Linux Extras 3
* Red Hat Desktop 3
* Red Hat Global File System 3
* Red Hat Cluster Suite 3

Servers subscribed to Red Hat Enterprise Linux 3 channels on the Red Hat
Network will shortly become unsubscribed. As a benefit of the Red Hat
subscription model, those subscriptions can be used to entitle any system
on any currently supported release of Red Hat Enterprise Linux.

Red Hat Enterprise Linux Subscriptions are version-independent and allow
access to all major releases of Red Hat Enterprise Linux, that are
currently supported within their regular 7-year life-cycle. Therefore
customers retain access to Red Hat Enterprise Linux 4, 5 and soon to be
released 6. There are no additional upgrade fees when moving from Red Hat
Enterprise Linux 3 to any of these newer releases.

For customers who are unable to migrate off Red Hat Enterprise Linux 3, Red
Hat is offering a limited, optional extension program referred to as RHEL 3
Extended Life Cycle Support (ELS). For more information, contact your Red
Hat sales representative or channel partner on this program. Additionally
you can find more information on this program here:
http://www.redhat.com/rhel/server/extended_lifecycle_support/

Once you are eligible for subscribing to the RHEL 3 ELS channels, read the
Red Hat Knowledgebase article DOC-40489 at
https://access.redhat.com/kb/docs/DOC-40489 for detailed information on how
to subscribe to the RHEL 3 ELS channels.

Details of the Red Hat Enterprise Linux life-cycle can be found on the Red
Hat website: http://www.redhat.com/security/updates/errata/</description>
    <advisory from="secalert@redhat.com">
     <severity>Low</severity>
     <rights>Copyright 2010 Red Hat, Inc.</rights>
     <issued date="2010-11-01"/>
     <updated date="2010-11-01"/>
     <bugzilla href="https://bugzilla.redhat.com/644878" id="644878">Send Out RHEL 3 final EOL Notice</bugzilla>
     <affected_cpe_list>
      <cpe>cpe:/o:redhat:enterprise_linux:3</cpe>
     </affected_cpe_list>
    </advisory>
   </metadata>
   <criteria operator="AND">
    <criterion comment="Red Hat Enterprise Linux 3 is installed" test_ref="oval:com.redhat.rhba:tst:20070026003"/>
    <criteria operator="OR">
     <criteria operator="AND">
      <criterion comment="redhat-release is earlier than 0:3AS-13.9.11" test_ref="oval:com.redhat.rhsa:tst:20100817001"/>
      <criterion comment="redhat-release is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20091526002"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="redhat-release is earlier than 0:3ES-13.9.11" test_ref="oval:com.redhat.rhsa:tst:20100817003"/>
      <criterion comment="redhat-release is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20091526002"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="redhat-release is earlier than 0:3Desktop-13.9.11" test_ref="oval:com.redhat.rhsa:tst:20100817004"/>
      <criterion comment="redhat-release is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20091526002"/>
     </criteria>
     <criteria operator="AND">
      <criterion comment="redhat-release is earlier than 0:3WS-13.9.11" test_ref="oval:com.redhat.rhsa:tst:20100817005"/>
      <criterion comment="redhat-release is signed with Red Hat master key" test_ref="oval:com.redhat.rhsa:tst:20091526002"/>
     </criteria>
    </criteria>
   </criteria>
  </definition>
 </definitions>
 <tests>
  <red-def:rpminfo_test check="at least one" comment="htdig is earlier than 2:3.1.6-7.el3" id="oval:com.redhat.rhba:tst:20070026001" version="634">
   <red-def:object object_ref="oval:com.redhat.rhba:obj:20070026001"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="htdig is signed with Red Hat master key" id="oval:com.redhat.rhba:tst:20070026002" version="634">
   <red-def:object object_ref="oval:com.redhat.rhba:obj:20070026001"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="Red Hat Enterprise Linux 3 is installed" id="oval:com.redhat.rhba:tst:20070026003" version="634">
   <red-def:object object_ref="oval:com.redhat.rhba:obj:20070026002"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="unzip is earlier than 0:5.50-35.EL3" id="oval:com.redhat.rhba:tst:20070418001" version="632">
   <red-def:object object_ref="oval:com.redhat.rhba:obj:20070418001"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070418001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="unzip is signed with Red Hat master key" id="oval:com.redhat.rhba:tst:20070418002" version="632">
   <red-def:object object_ref="oval:com.redhat.rhba:obj:20070418001"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="initscripts is earlier than 0:7.31.30.EL-1" id="oval:com.redhat.rhsa:tst:20060015001" version="644">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060015001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060015001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="initscripts is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060015002" version="644">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060015001"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="squid is earlier than 7:2.5.STABLE3-6.3E.16" id="oval:com.redhat.rhsa:tst:20060045001" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060045001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060045001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="squid is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060045002" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060045001"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="vixie-cron is earlier than 0:4.1-10.EL3" id="oval:com.redhat.rhsa:tst:20060117001" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060117001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060117001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="vixie-cron is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060117002" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060117001"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="kernel-unsupported is earlier than 0:2.4.21-37.0.1.EL" id="oval:com.redhat.rhsa:tst:20060140001" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060140001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060140001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="kernel-unsupported is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060140002" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060140001"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="kernel-smp-unsupported is earlier than 0:2.4.21-37.0.1.EL" id="oval:com.redhat.rhsa:tst:20060140003" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060140002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060140003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="kernel-smp-unsupported is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060140004" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060140002"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="kernel-doc is earlier than 0:2.4.21-37.0.1.EL" id="oval:com.redhat.rhsa:tst:20060140005" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060140003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060140004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="kernel-doc is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060140006" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060140003"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="kernel-smp is earlier than 0:2.4.21-37.0.1.EL" id="oval:com.redhat.rhsa:tst:20060140007" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060140004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060140003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="kernel-smp is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060140008" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060140004"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="kernel is earlier than 0:2.4.21-37.0.1.EL" id="oval:com.redhat.rhsa:tst:20060140009" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060140005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060140001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="kernel is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060140010" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060140005"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="kernel-source is earlier than 0:2.4.21-37.0.1.EL" id="oval:com.redhat.rhsa:tst:20060140011" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060140006"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060140004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="kernel-source is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060140012" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060140006"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-37.0.1.EL" id="oval:com.redhat.rhsa:tst:20060140013" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060140007"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060140005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="kernel-hugemem-unsupported is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060140014" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060140007"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="kernel-BOOT is earlier than 0:2.4.21-37.0.1.EL" id="oval:com.redhat.rhsa:tst:20060140015" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060140008"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060140006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="kernel-BOOT is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060140016" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060140008"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="kernel-hugemem is earlier than 0:2.4.21-37.0.1.EL" id="oval:com.redhat.rhsa:tst:20060140017" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060140009"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060140005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="kernel-hugemem is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060140018" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060140009"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="kernel-doc is earlier than 0:2.4.21-40.EL" id="oval:com.redhat.rhsa:tst:20060144001" version="640">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060140003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060144001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="kernel-smp is earlier than 0:2.4.21-40.EL" id="oval:com.redhat.rhsa:tst:20060144003" version="640">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060140004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060144003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="kernel-source is earlier than 0:2.4.21-40.EL" id="oval:com.redhat.rhsa:tst:20060144005" version="640">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060140006"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060144001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="kernel is earlier than 0:2.4.21-40.EL" id="oval:com.redhat.rhsa:tst:20060144007" version="640">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060140005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060144004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="kernel-smp-unsupported is earlier than 0:2.4.21-40.EL" id="oval:com.redhat.rhsa:tst:20060144009" version="640">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060140002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060144003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="kernel-unsupported is earlier than 0:2.4.21-40.EL" id="oval:com.redhat.rhsa:tst:20060144011" version="640">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060140001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060144004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-40.EL" id="oval:com.redhat.rhsa:tst:20060144013" version="640">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060140007"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060144005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="kernel-hugemem is earlier than 0:2.4.21-40.EL" id="oval:com.redhat.rhsa:tst:20060144015" version="640">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060140009"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060144005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="kernel-BOOT is earlier than 0:2.4.21-40.EL" id="oval:com.redhat.rhsa:tst:20060144017" version="640">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060140008"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060144006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="ethereal is earlier than 0:0.10.14-1.EL3.1" id="oval:com.redhat.rhsa:tst:20060156001" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060156001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060156001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="ethereal is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060156002" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060156001"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="ethereal-gnome is earlier than 0:0.10.14-1.EL3.1" id="oval:com.redhat.rhsa:tst:20060156003" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060156002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060156001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="ethereal-gnome is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060156004" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060156002"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="mod_ssl is earlier than 1:2.0.46-56.ent" id="oval:com.redhat.rhsa:tst:20060159001" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060159001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060159001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="mod_ssl is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060159002" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060159001"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="httpd-devel is earlier than 0:2.0.46-56.ent" id="oval:com.redhat.rhsa:tst:20060159003" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060159002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060159003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="httpd-devel is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060159004" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060159002"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="httpd is earlier than 0:2.0.46-56.ent" id="oval:com.redhat.rhsa:tst:20060159005" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060159003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060159003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="httpd is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060159006" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060159003"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="httpd-suexec is earlier than 0:2.0.52-22.ent" id="oval:com.redhat.rhsa:tst:20060159008" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060159005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060159005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="httpd-suexec is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060159009" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060159005"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="httpd-manual is earlier than 0:2.0.52-22.ent" id="oval:com.redhat.rhsa:tst:20060159010" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060159006"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060159005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="httpd-manual is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060159011" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060159006"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="httpd is earlier than 0:2.0.52-22.ent" id="oval:com.redhat.rhsa:tst:20060159012" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060159003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060159005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="httpd-devel is earlier than 0:2.0.52-22.ent" id="oval:com.redhat.rhsa:tst:20060159013" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060159002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060159005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="mod_ssl is earlier than 1:2.0.52-22.ent" id="oval:com.redhat.rhsa:tst:20060159014" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060159001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060159006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="Red Hat Enterprise Linux 4 is installed" id="oval:com.redhat.rhsa:tst:20060159015" version="638">
   <red-def:object object_ref="oval:com.redhat.rhba:obj:20070026002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060159007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="tetex is earlier than 0:1.0.7-67.9" id="oval:com.redhat.rhsa:tst:20060160001" version="644">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060160001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060160001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="tetex is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060160002" version="644">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060160001"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="tetex-xdvi is earlier than 0:1.0.7-67.9" id="oval:com.redhat.rhsa:tst:20060160003" version="644">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060160002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060160001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="tetex-xdvi is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060160004" version="644">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060160002"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="tetex-latex is earlier than 0:1.0.7-67.9" id="oval:com.redhat.rhsa:tst:20060160005" version="644">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060160003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060160001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="tetex-latex is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060160006" version="644">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060160003"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="tetex-dvips is earlier than 0:1.0.7-67.9" id="oval:com.redhat.rhsa:tst:20060160007" version="644">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060160004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060160001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="tetex-dvips is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060160008" version="644">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060160004"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="tetex-afm is earlier than 0:1.0.7-67.9" id="oval:com.redhat.rhsa:tst:20060160009" version="644">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060160005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060160001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="tetex-afm is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060160010" version="644">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060160005"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="tetex-fonts is earlier than 0:1.0.7-67.9" id="oval:com.redhat.rhsa:tst:20060160011" version="644">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060160006"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060160001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="tetex-fonts is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060160012" version="644">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060160006"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="tetex is earlier than 0:2.0.2-22.EL4.7" id="oval:com.redhat.rhsa:tst:20060160014" version="644">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060160001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060160004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="tetex-doc is earlier than 0:2.0.2-22.EL4.7" id="oval:com.redhat.rhsa:tst:20060160015" version="644">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060160008"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060160004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="tetex-doc is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060160016" version="644">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060160008"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="tetex-latex is earlier than 0:2.0.2-22.EL4.7" id="oval:com.redhat.rhsa:tst:20060160017" version="644">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060160003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060160004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="tetex-dvips is earlier than 0:2.0.2-22.EL4.7" id="oval:com.redhat.rhsa:tst:20060160018" version="644">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060160004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060160004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="tetex-afm is earlier than 0:2.0.2-22.EL4.7" id="oval:com.redhat.rhsa:tst:20060160019" version="644">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060160005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060160004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="tetex-xdvi is earlier than 0:2.0.2-22.EL4.7" id="oval:com.redhat.rhsa:tst:20060160020" version="644">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060160002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060160004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="tetex-fonts is earlier than 0:2.0.2-22.EL4.7" id="oval:com.redhat.rhsa:tst:20060160021" version="644">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060160006"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060160004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="cups-devel is earlier than 1:1.1.17-13.3.36" id="oval:com.redhat.rhsa:tst:20060163001" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060163001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060163001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="cups-devel is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060163002" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060163001"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="cups-libs is earlier than 1:1.1.17-13.3.36" id="oval:com.redhat.rhsa:tst:20060163003" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060163002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060163003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="cups-libs is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060163004" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060163002"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="cups is earlier than 1:1.1.17-13.3.36" id="oval:com.redhat.rhsa:tst:20060163005" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060163003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060163001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="cups is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060163006" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060163003"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="cups-devel is earlier than 1:1.1.22-0.rc1.9.10" id="oval:com.redhat.rhsa:tst:20060163008" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060163001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060163005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="cups-libs is earlier than 1:1.1.22-0.rc1.9.10" id="oval:com.redhat.rhsa:tst:20060163009" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060163002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060163006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="cups is earlier than 1:1.1.22-0.rc1.9.10" id="oval:com.redhat.rhsa:tst:20060163010" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060163003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060163005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="mod_auth_pgsql is earlier than 0:2.0.1-4.ent.1" id="oval:com.redhat.rhsa:tst:20060164001" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060164001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060164001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="mod_auth_pgsql is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060164002" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060164001"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="mod_auth_pgsql is earlier than 0:2.0.1-7.1" id="oval:com.redhat.rhsa:tst:20060164004" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060164001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060164004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="ImageMagick-devel is earlier than 0:5.5.6-18" id="oval:com.redhat.rhsa:tst:20060178001" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060178001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060178001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="ImageMagick-devel is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060178002" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060178001"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="ImageMagick is earlier than 0:5.5.6-18" id="oval:com.redhat.rhsa:tst:20060178003" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060178002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060178003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="ImageMagick is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060178004" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060178002"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="ImageMagick-perl is earlier than 0:5.5.6-18" id="oval:com.redhat.rhsa:tst:20060178005" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060178003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060178001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="ImageMagick-perl is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060178006" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060178003"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="ImageMagick-c++ is earlier than 0:5.5.6-18" id="oval:com.redhat.rhsa:tst:20060178007" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060178004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060178003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="ImageMagick-c++ is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060178008" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060178004"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="ImageMagick-c++-devel is earlier than 0:5.5.6-18" id="oval:com.redhat.rhsa:tst:20060178009" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060178005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060178001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="ImageMagick-c++-devel is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060178010" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060178005"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="ImageMagick-c++-devel is earlier than 0:6.0.7.1-14" id="oval:com.redhat.rhsa:tst:20060178012" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060178005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060178005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="ImageMagick-devel is earlier than 0:6.0.7.1-14" id="oval:com.redhat.rhsa:tst:20060178013" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060178001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060178005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="ImageMagick-perl is earlier than 0:6.0.7.1-14" id="oval:com.redhat.rhsa:tst:20060178014" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060178003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060178005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="ImageMagick is earlier than 0:6.0.7.1-14" id="oval:com.redhat.rhsa:tst:20060178015" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060178002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060178005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="ImageMagick-c++ is earlier than 0:6.0.7.1-14" id="oval:com.redhat.rhsa:tst:20060178016" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060178004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060178005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="tar is earlier than 0:1.13.25-14.RHEL3" id="oval:com.redhat.rhsa:tst:20060195001" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060195001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060195001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="tar is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060195002" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060195001"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="python-tools is earlier than 0:2.2.3-6.2" id="oval:com.redhat.rhsa:tst:20060197001" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060197001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060197001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="python-tools is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060197002" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060197001"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="python-devel is earlier than 0:2.2.3-6.2" id="oval:com.redhat.rhsa:tst:20060197003" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060197002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060197001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="python-devel is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060197004" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060197002"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="python is earlier than 0:2.2.3-6.2" id="oval:com.redhat.rhsa:tst:20060197005" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060197003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060197001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="python is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060197006" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060197003"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="tkinter is earlier than 0:2.2.3-6.2" id="oval:com.redhat.rhsa:tst:20060197007" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060197004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060197001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="tkinter is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060197008" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060197004"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="python is earlier than 0:2.3.4-14.2" id="oval:com.redhat.rhsa:tst:20060197010" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060197003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060197004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="python-docs is earlier than 0:2.3.4-14.2" id="oval:com.redhat.rhsa:tst:20060197011" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060197006"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060197004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="python-docs is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060197012" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060197006"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="python-tools is earlier than 0:2.3.4-14.2" id="oval:com.redhat.rhsa:tst:20060197013" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060197001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060197004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="python-devel is earlier than 0:2.3.4-14.2" id="oval:com.redhat.rhsa:tst:20060197014" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060197002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060197004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="tkinter is earlier than 0:2.3.4-14.2" id="oval:com.redhat.rhsa:tst:20060197015" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060197004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060197004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="mailman is earlier than 3:2.1.5.1-25.rhel3.4" id="oval:com.redhat.rhsa:tst:20060204001" version="640">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060204001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060204001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="mailman is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060204002" version="640">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060204001"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="mailman is earlier than 3:2.1.5.1-34.rhel4.2" id="oval:com.redhat.rhsa:tst:20060204004" version="640">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060204001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060204004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="sendmail-cf is earlier than 0:8.12.11-4.RHEL3.4" id="oval:com.redhat.rhsa:tst:20060264001" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060264001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060264001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="sendmail-cf is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060264002" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060264001"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="sendmail-devel is earlier than 0:8.12.11-4.RHEL3.4" id="oval:com.redhat.rhsa:tst:20060264003" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060264002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060264001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="sendmail-devel is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060264004" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060264002"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="sendmail-doc is earlier than 0:8.12.11-4.RHEL3.4" id="oval:com.redhat.rhsa:tst:20060264005" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060264003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060264001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="sendmail-doc is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060264006" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060264003"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="sendmail is earlier than 0:8.12.11-4.RHEL3.4" id="oval:com.redhat.rhsa:tst:20060264007" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060264004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060264001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="sendmail is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060264008" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060264004"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="sendmail is earlier than 0:8.13.1-3.RHEL4.3" id="oval:com.redhat.rhsa:tst:20060264010" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060264004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060264004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="sendmail-devel is earlier than 0:8.13.1-3.RHEL4.3" id="oval:com.redhat.rhsa:tst:20060264011" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060264002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060264004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="sendmail-doc is earlier than 0:8.13.1-3.RHEL4.3" id="oval:com.redhat.rhsa:tst:20060264012" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060264003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060264004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="sendmail-cf is earlier than 0:8.13.1-3.RHEL4.3" id="oval:com.redhat.rhsa:tst:20060264013" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060264001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060264004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="gnupg is earlier than 0:1.2.1-15" id="oval:com.redhat.rhsa:tst:20060266001" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060266001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060266001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="gnupg is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060266002" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060266001"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="gnupg is earlier than 0:1.2.6-3" id="oval:com.redhat.rhsa:tst:20060266004" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060266001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060266004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="ipsec-tools is earlier than 0:0.2.5-0.7.rhel3.3" id="oval:com.redhat.rhsa:tst:20060267001" version="641">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060267001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060267001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="ipsec-tools is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060267002" version="641">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060267001"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="ipsec-tools is earlier than 0:0.3.3-6.rhel4.1" id="oval:com.redhat.rhsa:tst:20060267004" version="641">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060267001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060267004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="freeradius is earlier than 0:1.0.1-2.RHEL3.2" id="oval:com.redhat.rhsa:tst:20060271001" version="642">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060271001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060271001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="freeradius is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060271002" version="642">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060271001"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="freeradius-mysql is earlier than 0:1.0.1-3.RHEL4.3" id="oval:com.redhat.rhsa:tst:20060271004" version="642">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060271003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060271004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="freeradius-mysql is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060271005" version="642">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060271003"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="freeradius is earlier than 0:1.0.1-3.RHEL4.3" id="oval:com.redhat.rhsa:tst:20060271006" version="642">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060271001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060271004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="freeradius-unixODBC is earlier than 0:1.0.1-3.RHEL4.3" id="oval:com.redhat.rhsa:tst:20060271007" version="642">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060271004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060271004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="freeradius-unixODBC is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060271008" version="642">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060271004"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="freeradius-postgresql is earlier than 0:1.0.1-3.RHEL4.3" id="oval:com.redhat.rhsa:tst:20060271009" version="642">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060271005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060271004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="freeradius-postgresql is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060271010" version="642">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060271005"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openmotif-devel is earlier than 0:2.2.3-5.RHEL3.3" id="oval:com.redhat.rhsa:tst:20060272001" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060272001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060272001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openmotif-devel is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060272002" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060272001"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openmotif is earlier than 0:2.2.3-5.RHEL3.3" id="oval:com.redhat.rhsa:tst:20060272003" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060272002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060272003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openmotif is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060272004" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060272002"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openmotif21 is earlier than 0:2.1.30-9.RHEL3.7" id="oval:com.redhat.rhsa:tst:20060272005" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060272003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060272004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openmotif21 is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060272006" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060272003"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openmotif21 is earlier than 0:2.1.30-11.RHEL4.5" id="oval:com.redhat.rhsa:tst:20060272008" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060272003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060272006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openmotif is earlier than 0:2.2.3-10.RHEL4.1" id="oval:com.redhat.rhsa:tst:20060272009" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060272002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060272007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openmotif-devel is earlier than 0:2.2.3-10.RHEL4.1" id="oval:com.redhat.rhsa:tst:20060272010" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060272001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060272007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php is earlier than 0:4.3.2-30.ent" id="oval:com.redhat.rhsa:tst:20060276001" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060276001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060276002" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276001"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-odbc is earlier than 0:4.3.2-30.ent" id="oval:com.redhat.rhsa:tst:20060276003" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060276001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-odbc is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060276004" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276002"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-ldap is earlier than 0:4.3.2-30.ent" id="oval:com.redhat.rhsa:tst:20060276005" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060276001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-ldap is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060276006" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276003"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-devel is earlier than 0:4.3.2-30.ent" id="oval:com.redhat.rhsa:tst:20060276007" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060276001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-devel is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060276008" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276004"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-imap is earlier than 0:4.3.2-30.ent" id="oval:com.redhat.rhsa:tst:20060276009" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060276001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-imap is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060276010" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276005"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-pgsql is earlier than 0:4.3.2-30.ent" id="oval:com.redhat.rhsa:tst:20060276011" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276006"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060276001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-pgsql is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060276012" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276006"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-mysql is earlier than 0:4.3.2-30.ent" id="oval:com.redhat.rhsa:tst:20060276013" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276007"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060276001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-mysql is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060276014" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276007"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-imap is earlier than 0:4.3.9-3.12" id="oval:com.redhat.rhsa:tst:20060276016" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060276004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-pgsql is earlier than 0:4.3.9-3.12" id="oval:com.redhat.rhsa:tst:20060276017" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276006"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060276004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-xmlrpc is earlier than 0:4.3.9-3.12" id="oval:com.redhat.rhsa:tst:20060276018" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276009"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060276004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-xmlrpc is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060276019" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276009"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-odbc is earlier than 0:4.3.9-3.12" id="oval:com.redhat.rhsa:tst:20060276020" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060276004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-mysql is earlier than 0:4.3.9-3.12" id="oval:com.redhat.rhsa:tst:20060276021" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276007"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060276004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php is earlier than 0:4.3.9-3.12" id="oval:com.redhat.rhsa:tst:20060276022" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060276004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-snmp is earlier than 0:4.3.9-3.12" id="oval:com.redhat.rhsa:tst:20060276023" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276010"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060276004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-snmp is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060276024" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276010"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-ncurses is earlier than 0:4.3.9-3.12" id="oval:com.redhat.rhsa:tst:20060276025" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276011"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060276004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-ncurses is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060276026" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276011"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-pear is earlier than 0:4.3.9-3.12" id="oval:com.redhat.rhsa:tst:20060276027" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276012"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060276004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-pear is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060276028" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276012"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-mbstring is earlier than 0:4.3.9-3.12" id="oval:com.redhat.rhsa:tst:20060276029" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276013"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060276004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-mbstring is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060276030" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276013"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-domxml is earlier than 0:4.3.9-3.12" id="oval:com.redhat.rhsa:tst:20060276031" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276014"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060276004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-domxml is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060276032" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276014"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-ldap is earlier than 0:4.3.9-3.12" id="oval:com.redhat.rhsa:tst:20060276033" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060276004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-gd is earlier than 0:4.3.9-3.12" id="oval:com.redhat.rhsa:tst:20060276034" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276015"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060276004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-gd is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060276035" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276015"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-devel is earlier than 0:4.3.9-3.12" id="oval:com.redhat.rhsa:tst:20060276036" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060276004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="squirrelmail is earlier than 0:1.4.6-5.el3" id="oval:com.redhat.rhsa:tst:20060283001" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060283001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060283001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="squirrelmail is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060283002" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060283001"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="squirrelmail is earlier than 0:1.4.6-5.el4" id="oval:com.redhat.rhsa:tst:20060283004" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060283001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060283004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openssh-askpass-gnome is earlier than 0:3.6.1p2-33.30.9" id="oval:com.redhat.rhsa:tst:20060298001" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060298001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060298001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openssh-askpass-gnome is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060298002" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060298001"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openssh-server is earlier than 0:3.6.1p2-33.30.9" id="oval:com.redhat.rhsa:tst:20060298003" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060298002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060298001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openssh-server is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060298004" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060298002"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openssh is earlier than 0:3.6.1p2-33.30.9" id="oval:com.redhat.rhsa:tst:20060298005" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060298003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060298001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openssh is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060298006" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060298003"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openssh-clients is earlier than 0:3.6.1p2-33.30.9" id="oval:com.redhat.rhsa:tst:20060298007" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060298004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060298001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openssh-clients is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060298008" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060298004"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openssh-askpass is earlier than 0:3.6.1p2-33.30.9" id="oval:com.redhat.rhsa:tst:20060298009" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060298005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060298001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openssh-askpass is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060298010" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060298005"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="devhelp-devel is earlier than 0:0.9.2-2.4.8" id="oval:com.redhat.rhsa:tst:20060329001" version="643">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060329001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060329001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="devhelp-devel is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060329002" version="643">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060329001"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="devhelp is earlier than 0:0.9.2-2.4.8" id="oval:com.redhat.rhsa:tst:20060329003" version="643">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060329002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060329001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="devhelp is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060329004" version="643">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060329002"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="elfutils-libelf-devel is earlier than 0:0.94.1-2" id="oval:com.redhat.rhsa:tst:20060368001" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060368001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060368001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="elfutils-libelf-devel is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060368002" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060368001"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="elfutils is earlier than 0:0.94.1-2" id="oval:com.redhat.rhsa:tst:20060368003" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060368002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060368003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="elfutils is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060368004" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060368002"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="elfutils-libelf is earlier than 0:0.94.1-2" id="oval:com.redhat.rhsa:tst:20060368005" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060368003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060368003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="elfutils-libelf is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060368006" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060368003"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="elfutils-devel is earlier than 0:0.94.1-2" id="oval:com.redhat.rhsa:tst:20060368007" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060368004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060368001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="elfutils-devel is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060368008" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060368004"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="ethereal is earlier than 0:0.99.0-EL3.2" id="oval:com.redhat.rhsa:tst:20060420001" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060156001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060420001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="ethereal-gnome is earlier than 0:0.99.0-EL3.2" id="oval:com.redhat.rhsa:tst:20060420003" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060156002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060420001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libtiff-devel is earlier than 0:3.5.7-25.el3.1" id="oval:com.redhat.rhsa:tst:20060425001" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060425001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060425001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libtiff-devel is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060425002" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060425001"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libtiff is earlier than 0:3.5.7-25.el3.1" id="oval:com.redhat.rhsa:tst:20060425003" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060425002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060425003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libtiff is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060425004" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060425002"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libtiff is earlier than 0:3.6.1-10" id="oval:com.redhat.rhsa:tst:20060425006" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060425002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060425005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libtiff-devel is earlier than 0:3.6.1-10" id="oval:com.redhat.rhsa:tst:20060425007" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060425001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060425006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="kernel-source is earlier than 0:2.4.21-47.EL" id="oval:com.redhat.rhsa:tst:20060437001" version="652">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060140006"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060437001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="kernel is earlier than 0:2.4.21-47.EL" id="oval:com.redhat.rhsa:tst:20060437003" version="652">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060140005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060437003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="kernel-doc is earlier than 0:2.4.21-47.EL" id="oval:com.redhat.rhsa:tst:20060437005" version="652">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060140003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060437001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="kernel-unsupported is earlier than 0:2.4.21-47.EL" id="oval:com.redhat.rhsa:tst:20060437007" version="652">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060140001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060437003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="kernel-smp is earlier than 0:2.4.21-47.EL" id="oval:com.redhat.rhsa:tst:20060437009" version="652">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060140004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060437004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="kernel-smp-unsupported is earlier than 0:2.4.21-47.EL" id="oval:com.redhat.rhsa:tst:20060437011" version="652">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060140002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060437004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-47.EL" id="oval:com.redhat.rhsa:tst:20060437013" version="652">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060140007"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060437005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="kernel-BOOT is earlier than 0:2.4.21-47.EL" id="oval:com.redhat.rhsa:tst:20060437015" version="652">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060140008"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060437006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="kernel-hugemem is earlier than 0:2.4.21-47.EL" id="oval:com.redhat.rhsa:tst:20060437017" version="652">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060140009"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060437005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="mailman is earlier than 3:2.1.5.1-25.rhel3.5" id="oval:com.redhat.rhsa:tst:20060486001" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060204001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060486001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="mailman is earlier than 3:2.1.5.1-34.rhel4.3" id="oval:com.redhat.rhsa:tst:20060486004" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060204001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060486004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="xscreensaver is earlier than 1:4.10-20" id="oval:com.redhat.rhsa:tst:20060498001" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060498001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060498001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="xscreensaver is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060498002" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060498001"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="freetype is earlier than 0:2.1.4-4.0.rhel3.2" id="oval:com.redhat.rhsa:tst:20060500001" version="640">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060500001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060500001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="freetype is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060500002" version="640">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060500001"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="freetype-devel is earlier than 0:2.1.4-4.0.rhel3.2" id="oval:com.redhat.rhsa:tst:20060500003" version="640">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060500002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060500003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="freetype-devel is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060500004" version="640">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060500002"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="freetype-devel is earlier than 0:2.1.9-1.rhel4.4" id="oval:com.redhat.rhsa:tst:20060500006" version="640">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060500002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060500005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="freetype-demos is earlier than 0:2.1.9-1.rhel4.4" id="oval:com.redhat.rhsa:tst:20060500007" version="640">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060500004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060500005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="freetype-demos is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060500008" version="640">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060500004"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="freetype-utils is earlier than 0:2.1.9-1.rhel4.4" id="oval:com.redhat.rhsa:tst:20060500009" version="640">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060500005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060500005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="freetype-utils is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060500010" version="640">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060500005"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="freetype is earlier than 0:2.1.9-1.rhel4.4" id="oval:com.redhat.rhsa:tst:20060500011" version="640">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060500001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060500006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="sendmail-devel is earlier than 0:8.12.11-4.RHEL3.6" id="oval:com.redhat.rhsa:tst:20060515001" version="644">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060264002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060515001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="sendmail-doc is earlier than 0:8.12.11-4.RHEL3.6" id="oval:com.redhat.rhsa:tst:20060515003" version="644">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060264003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060515001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="sendmail is earlier than 0:8.12.11-4.RHEL3.6" id="oval:com.redhat.rhsa:tst:20060515005" version="644">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060264004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060515001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="sendmail-cf is earlier than 0:8.12.11-4.RHEL3.6" id="oval:com.redhat.rhsa:tst:20060515007" version="644">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060264001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060515001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="sendmail is earlier than 0:8.13.1-3.RHEL4.5" id="oval:com.redhat.rhsa:tst:20060515010" version="644">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060264004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060515004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="sendmail-devel is earlier than 0:8.13.1-3.RHEL4.5" id="oval:com.redhat.rhsa:tst:20060515011" version="644">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060264002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060515004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="sendmail-cf is earlier than 0:8.13.1-3.RHEL4.5" id="oval:com.redhat.rhsa:tst:20060515012" version="644">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060264001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060515004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="sendmail-doc is earlier than 0:8.13.1-3.RHEL4.5" id="oval:com.redhat.rhsa:tst:20060515013" version="644">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060264003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060515004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="quagga is earlier than 0:0.96.2-11.3E" id="oval:com.redhat.rhsa:tst:20060525001" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060525001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060525001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="quagga is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060525002" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060525001"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="quagga is earlier than 0:0.98.3-2.4E" id="oval:com.redhat.rhsa:tst:20060525004" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060525001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060525004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="quagga-devel is earlier than 0:0.98.3-2.4E" id="oval:com.redhat.rhsa:tst:20060525005" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060525003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060525004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="quagga-devel is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060525006" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060525003"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="quagga-contrib is earlier than 0:0.98.3-2.4E" id="oval:com.redhat.rhsa:tst:20060525007" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060525004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060525004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="quagga-contrib is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060525008" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060525004"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="rh-postgresql-contrib is earlier than 0:7.3.15-2" id="oval:com.redhat.rhsa:tst:20060526001" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060526001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060526001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="rh-postgresql-contrib is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060526002" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060526001"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="rh-postgresql-test is earlier than 0:7.3.15-2" id="oval:com.redhat.rhsa:tst:20060526003" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060526002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060526001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="rh-postgresql-test is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060526004" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060526002"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="rh-postgresql-server is earlier than 0:7.3.15-2" id="oval:com.redhat.rhsa:tst:20060526005" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060526003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060526001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="rh-postgresql-server is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060526006" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060526003"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="rh-postgresql-libs is earlier than 0:7.3.15-2" id="oval:com.redhat.rhsa:tst:20060526007" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060526004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060526003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="rh-postgresql-libs is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060526008" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060526004"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="rh-postgresql-docs is earlier than 0:7.3.15-2" id="oval:com.redhat.rhsa:tst:20060526009" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060526005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060526001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="rh-postgresql-docs is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060526010" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060526005"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="rh-postgresql-jdbc is earlier than 0:7.3.15-2" id="oval:com.redhat.rhsa:tst:20060526011" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060526006"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060526001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="rh-postgresql-jdbc is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060526012" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060526006"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="rh-postgresql-python is earlier than 0:7.3.15-2" id="oval:com.redhat.rhsa:tst:20060526013" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060526007"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060526001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="rh-postgresql-python is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060526014" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060526007"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="rh-postgresql-pl is earlier than 0:7.3.15-2" id="oval:com.redhat.rhsa:tst:20060526015" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060526008"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060526001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="rh-postgresql-pl is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060526016" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060526008"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="rh-postgresql-devel is earlier than 0:7.3.15-2" id="oval:com.redhat.rhsa:tst:20060526017" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060526009"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060526001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="rh-postgresql-devel is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060526018" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060526009"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="rh-postgresql-tcl is earlier than 0:7.3.15-2" id="oval:com.redhat.rhsa:tst:20060526019" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060526010"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060526001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="rh-postgresql-tcl is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060526020" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060526010"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="rh-postgresql is earlier than 0:7.3.15-2" id="oval:com.redhat.rhsa:tst:20060526021" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060526011"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060526001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="rh-postgresql is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060526022" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060526011"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="postgresql-pl is earlier than 0:7.4.13-2.RHEL4.1" id="oval:com.redhat.rhsa:tst:20060526024" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060526013"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060526005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="postgresql-pl is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060526025" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060526013"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="postgresql-test is earlier than 0:7.4.13-2.RHEL4.1" id="oval:com.redhat.rhsa:tst:20060526026" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060526014"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060526005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="postgresql-test is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060526027" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060526014"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="postgresql-python is earlier than 0:7.4.13-2.RHEL4.1" id="oval:com.redhat.rhsa:tst:20060526028" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060526015"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060526005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="postgresql-python is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060526029" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060526015"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="postgresql-server is earlier than 0:7.4.13-2.RHEL4.1" id="oval:com.redhat.rhsa:tst:20060526030" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060526016"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060526005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="postgresql-server is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060526031" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060526016"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="postgresql-devel is earlier than 0:7.4.13-2.RHEL4.1" id="oval:com.redhat.rhsa:tst:20060526032" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060526017"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060526005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="postgresql-devel is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060526033" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060526017"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="postgresql-contrib is earlier than 0:7.4.13-2.RHEL4.1" id="oval:com.redhat.rhsa:tst:20060526034" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060526018"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060526005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="postgresql-contrib is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060526035" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060526018"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="postgresql-libs is earlier than 0:7.4.13-2.RHEL4.1" id="oval:com.redhat.rhsa:tst:20060526036" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060526019"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060526006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="postgresql-libs is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060526037" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060526019"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="postgresql-tcl is earlier than 0:7.4.13-2.RHEL4.1" id="oval:com.redhat.rhsa:tst:20060526038" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060526020"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060526005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="postgresql-tcl is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060526039" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060526020"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="postgresql-jdbc is earlier than 0:7.4.13-2.RHEL4.1" id="oval:com.redhat.rhsa:tst:20060526040" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060526021"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060526005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="postgresql-jdbc is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060526041" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060526021"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="postgresql-docs is earlier than 0:7.4.13-2.RHEL4.1" id="oval:com.redhat.rhsa:tst:20060526042" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060526022"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060526005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="postgresql-docs is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060526043" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060526022"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="postgresql is earlier than 0:7.4.13-2.RHEL4.1" id="oval:com.redhat.rhsa:tst:20060526044" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060526023"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060526005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="postgresql is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060526045" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060526023"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="squirrelmail is earlier than 0:1.4.6-7.el3" id="oval:com.redhat.rhsa:tst:20060547001" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060283001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060547001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="squirrelmail is earlier than 0:1.4.6-7.el4" id="oval:com.redhat.rhsa:tst:20060547004" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060283001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060547004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-odbc is earlier than 0:4.3.2-33.ent" id="oval:com.redhat.rhsa:tst:20060568001" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060568001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-ldap is earlier than 0:4.3.2-33.ent" id="oval:com.redhat.rhsa:tst:20060568003" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060568001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-imap is earlier than 0:4.3.2-33.ent" id="oval:com.redhat.rhsa:tst:20060568005" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060568001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-pgsql is earlier than 0:4.3.2-33.ent" id="oval:com.redhat.rhsa:tst:20060568007" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276006"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060568001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php is earlier than 0:4.3.2-33.ent" id="oval:com.redhat.rhsa:tst:20060568009" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060568001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-mysql is earlier than 0:4.3.2-33.ent" id="oval:com.redhat.rhsa:tst:20060568011" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276007"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060568001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-devel is earlier than 0:4.3.2-33.ent" id="oval:com.redhat.rhsa:tst:20060568013" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060568001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-odbc is earlier than 0:4.3.9-3.15" id="oval:com.redhat.rhsa:tst:20060568016" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060568004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-mysql is earlier than 0:4.3.9-3.15" id="oval:com.redhat.rhsa:tst:20060568017" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276007"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060568004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php is earlier than 0:4.3.9-3.15" id="oval:com.redhat.rhsa:tst:20060568018" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060568004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-snmp is earlier than 0:4.3.9-3.15" id="oval:com.redhat.rhsa:tst:20060568019" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276010"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060568004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-ncurses is earlier than 0:4.3.9-3.15" id="oval:com.redhat.rhsa:tst:20060568021" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276011"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060568004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-pear is earlier than 0:4.3.9-3.15" id="oval:com.redhat.rhsa:tst:20060568023" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276012"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060568004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-mbstring is earlier than 0:4.3.9-3.15" id="oval:com.redhat.rhsa:tst:20060568025" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276013"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060568004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-domxml is earlier than 0:4.3.9-3.15" id="oval:com.redhat.rhsa:tst:20060568027" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276014"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060568004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-ldap is earlier than 0:4.3.9-3.15" id="oval:com.redhat.rhsa:tst:20060568029" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060568004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-gd is earlier than 0:4.3.9-3.15" id="oval:com.redhat.rhsa:tst:20060568030" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276015"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060568004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-devel is earlier than 0:4.3.9-3.15" id="oval:com.redhat.rhsa:tst:20060568032" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060568004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-imap is earlier than 0:4.3.9-3.15" id="oval:com.redhat.rhsa:tst:20060568033" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060568004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-pgsql is earlier than 0:4.3.9-3.15" id="oval:com.redhat.rhsa:tst:20060568034" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276006"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060568004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-xmlrpc is earlier than 0:4.3.9-3.15" id="oval:com.redhat.rhsa:tst:20060568035" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276009"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060568004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="gnupg is earlier than 0:1.2.1-16" id="oval:com.redhat.rhsa:tst:20060571001" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060266001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060571001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="gnupg is earlier than 0:1.2.6-5" id="oval:com.redhat.rhsa:tst:20060571004" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060266001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060571004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-i18n is earlier than 0:1.1.2-34.2.0.EL3" id="oval:com.redhat.rhsa:tst:20060573001" version="640">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060573001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060573001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-i18n is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060573002" version="640">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060573001"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-libs is earlier than 0:1.1.2-34.2.0.EL3" id="oval:com.redhat.rhsa:tst:20060573003" version="640">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060573002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060573001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-libs is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060573004" version="640">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060573002"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org is earlier than 0:1.1.2-34.2.0.EL3" id="oval:com.redhat.rhsa:tst:20060573005" version="640">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060573003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060573001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060573006" version="640">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060573003"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org is earlier than 0:1.1.2-34.6.0.EL4" id="oval:com.redhat.rhsa:tst:20060573008" version="640">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060573003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060573004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-i18n is earlier than 0:1.1.2-34.6.0.EL4" id="oval:com.redhat.rhsa:tst:20060573009" version="640">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060573001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060573004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-kde is earlier than 0:1.1.2-34.6.0.EL4" id="oval:com.redhat.rhsa:tst:20060573010" version="640">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060573005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060573004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-kde is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060573011" version="640">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060573005"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-libs is earlier than 0:1.1.2-34.6.0.EL4" id="oval:com.redhat.rhsa:tst:20060573012" version="640">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060573002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060573004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="kdebase is earlier than 6:3.1.3-5.11" id="oval:com.redhat.rhsa:tst:20060576001" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060576001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060576001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="kdebase is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060576002" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060576001"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="kdebase-devel is earlier than 6:3.1.3-5.11" id="oval:com.redhat.rhsa:tst:20060576003" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060576002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060576003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="kdebase-devel is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060576004" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060576002"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="mutt is earlier than 5:1.4.1-3.5.rhel3" id="oval:com.redhat.rhsa:tst:20060577001" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060577001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060577001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="mutt is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060577002" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060577001"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="mutt is earlier than 5:1.4.1-11.rhel4" id="oval:com.redhat.rhsa:tst:20060577004" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060577001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060577004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-dom-inspector is earlier than 0:1.0.2-0.1.0.EL3" id="oval:com.redhat.rhsa:tst:20060578001" version="640">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060578001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-dom-inspector is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060578002" version="640">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578001"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-nspr-devel is earlier than 0:1.0.2-0.1.0.EL3" id="oval:com.redhat.rhsa:tst:20060578003" version="640">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060578001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-nspr-devel is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060578004" version="640">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578002"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-chat is earlier than 0:1.0.2-0.1.0.EL3" id="oval:com.redhat.rhsa:tst:20060578005" version="640">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060578001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-chat is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060578006" version="640">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578003"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-js-debugger is earlier than 0:1.0.2-0.1.0.EL3" id="oval:com.redhat.rhsa:tst:20060578007" version="640">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060578001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-js-debugger is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060578008" version="640">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578004"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-nspr is earlier than 0:1.0.2-0.1.0.EL3" id="oval:com.redhat.rhsa:tst:20060578009" version="640">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060578001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-nspr is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060578010" version="640">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578005"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-nss-devel is earlier than 0:1.0.2-0.1.0.EL3" id="oval:com.redhat.rhsa:tst:20060578011" version="640">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578006"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060578001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-nss-devel is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060578012" version="640">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578006"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-devel is earlier than 0:1.0.2-0.1.0.EL3" id="oval:com.redhat.rhsa:tst:20060578013" version="640">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578007"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060578001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-devel is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060578014" version="640">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578007"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-nss is earlier than 0:1.0.2-0.1.0.EL3" id="oval:com.redhat.rhsa:tst:20060578015" version="640">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578008"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060578001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-nss is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060578016" version="640">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578008"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey is earlier than 0:1.0.2-0.1.0.EL3" id="oval:com.redhat.rhsa:tst:20060578017" version="640">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578009"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060578001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060578018" version="640">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578009"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-mail is earlier than 0:1.0.2-0.1.0.EL3" id="oval:com.redhat.rhsa:tst:20060578019" version="640">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578010"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060578001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-mail is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060578020" version="640">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578010"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="samba-common is earlier than 0:3.0.9-1.3E.10" id="oval:com.redhat.rhsa:tst:20060591001" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060591001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060591001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="samba-common is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060591002" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060591001"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="samba is earlier than 0:3.0.9-1.3E.10" id="oval:com.redhat.rhsa:tst:20060591003" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060591002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060591001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="samba is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060591004" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060591002"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="samba-swat is earlier than 0:3.0.9-1.3E.10" id="oval:com.redhat.rhsa:tst:20060591005" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060591003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060591003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="samba-swat is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060591006" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060591003"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="samba-client is earlier than 0:3.0.9-1.3E.10" id="oval:com.redhat.rhsa:tst:20060591007" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060591004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060591003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="samba-client is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060591008" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060591004"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="samba-common is earlier than 0:3.0.10-1.4E.6.2" id="oval:com.redhat.rhsa:tst:20060591010" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060591001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060591005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="samba-client is earlier than 0:3.0.10-1.4E.6.2" id="oval:com.redhat.rhsa:tst:20060591011" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060591004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060591006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="samba is earlier than 0:3.0.10-1.4E.6.2" id="oval:com.redhat.rhsa:tst:20060591012" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060591002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060591006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="samba-swat is earlier than 0:3.0.10-1.4E.6.2" id="oval:com.redhat.rhsa:tst:20060591013" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060591003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060591006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="mailman is earlier than 3:2.1.5.1-25.rhel3.7" id="oval:com.redhat.rhsa:tst:20060600001" version="641">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060204001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060600001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="mailman is earlier than 3:2.1.5.1-34.rhel4.5" id="oval:com.redhat.rhsa:tst:20060600004" version="641">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060204001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060600004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="wireshark is earlier than 0:0.99.2-EL3.1" id="oval:com.redhat.rhsa:tst:20060602001" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060602001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060602001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="wireshark is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060602002" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060602001"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="wireshark-gnome is earlier than 0:0.99.2-EL3.1" id="oval:com.redhat.rhsa:tst:20060602003" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060602002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060602001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="wireshark-gnome is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060602004" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060602002"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="wireshark-gnome is earlier than 0:0.99.2-EL4.1" id="oval:com.redhat.rhsa:tst:20060602006" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060602002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060602004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="wireshark is earlier than 0:0.99.2-EL4.1" id="oval:com.redhat.rhsa:tst:20060602007" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060602001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060602004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libtiff-devel is earlier than 0:3.5.7-25.el3.4" id="oval:com.redhat.rhsa:tst:20060603001" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060425001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060603001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libtiff is earlier than 0:3.5.7-25.el3.4" id="oval:com.redhat.rhsa:tst:20060603003" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060425002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060603003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libtiff is earlier than 0:3.6.1-12" id="oval:com.redhat.rhsa:tst:20060603006" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060425002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060603005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libtiff-devel is earlier than 0:3.6.1-12" id="oval:com.redhat.rhsa:tst:20060603007" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060425001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060603006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="ruby-libs is earlier than 0:1.6.8-9.EL3.6" id="oval:com.redhat.rhsa:tst:20060604001" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060604001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060604001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="ruby-libs is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060604002" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060604001"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="ruby-devel is earlier than 0:1.6.8-9.EL3.6" id="oval:com.redhat.rhsa:tst:20060604003" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060604002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060604003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="ruby-devel is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060604004" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060604002"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="ruby-docs is earlier than 0:1.6.8-9.EL3.6" id="oval:com.redhat.rhsa:tst:20060604005" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060604003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060604003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="ruby-docs is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060604006" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060604003"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="ruby-tcltk is earlier than 0:1.6.8-9.EL3.6" id="oval:com.redhat.rhsa:tst:20060604007" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060604004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060604003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="ruby-tcltk is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060604008" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060604004"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="ruby is earlier than 0:1.6.8-9.EL3.6" id="oval:com.redhat.rhsa:tst:20060604009" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060604005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060604003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="ruby is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060604010" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060604005"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="ruby-mode is earlier than 0:1.6.8-9.EL3.6" id="oval:com.redhat.rhsa:tst:20060604011" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060604006"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060604003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="ruby-mode is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060604012" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060604006"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="irb is earlier than 0:1.6.8-9.EL3.6" id="oval:com.redhat.rhsa:tst:20060604013" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060604007"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060604003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="irb is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060604014" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060604007"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="irb is earlier than 0:1.8.1-7.EL4.6" id="oval:com.redhat.rhsa:tst:20060604016" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060604007"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060604005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="ruby-libs is earlier than 0:1.8.1-7.EL4.6" id="oval:com.redhat.rhsa:tst:20060604017" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060604001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060604006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="ruby-tcltk is earlier than 0:1.8.1-7.EL4.6" id="oval:com.redhat.rhsa:tst:20060604018" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060604004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060604005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="ruby is earlier than 0:1.8.1-7.EL4.6" id="oval:com.redhat.rhsa:tst:20060604019" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060604005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060604005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="ruby-docs is earlier than 0:1.8.1-7.EL4.6" id="oval:com.redhat.rhsa:tst:20060604020" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060604003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060604005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="ruby-devel is earlier than 0:1.8.1-7.EL4.6" id="oval:com.redhat.rhsa:tst:20060604021" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060604002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060604005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="ruby-mode is earlier than 0:1.8.1-7.EL4.6" id="oval:com.redhat.rhsa:tst:20060604022" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060604006"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060604005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-mail is earlier than 0:1.0.3-0.el3.1" id="oval:com.redhat.rhsa:tst:20060608001" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578010"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060608001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-js-debugger is earlier than 0:1.0.3-0.el3.1" id="oval:com.redhat.rhsa:tst:20060608003" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060608001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-nss is earlier than 0:1.0.3-0.el3.1" id="oval:com.redhat.rhsa:tst:20060608005" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578008"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060608001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-chat is earlier than 0:1.0.3-0.el3.1" id="oval:com.redhat.rhsa:tst:20060608007" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060608001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey is earlier than 0:1.0.3-0.el3.1" id="oval:com.redhat.rhsa:tst:20060608009" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578009"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060608001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-nspr-devel is earlier than 0:1.0.3-0.el3.1" id="oval:com.redhat.rhsa:tst:20060608011" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060608001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-dom-inspector is earlier than 0:1.0.3-0.el3.1" id="oval:com.redhat.rhsa:tst:20060608013" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060608001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-devel is earlier than 0:1.0.3-0.el3.1" id="oval:com.redhat.rhsa:tst:20060608015" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578007"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060608001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-nss-devel is earlier than 0:1.0.3-0.el3.1" id="oval:com.redhat.rhsa:tst:20060608017" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578006"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060608001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-nspr is earlier than 0:1.0.3-0.el3.1" id="oval:com.redhat.rhsa:tst:20060608019" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060608001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="gnupg is earlier than 0:1.2.1-17" id="oval:com.redhat.rhsa:tst:20060615001" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060266001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060615001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="gnupg is earlier than 0:1.2.6-6" id="oval:com.redhat.rhsa:tst:20060615004" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060266001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060615004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="httpd-devel is earlier than 0:2.0.46-61.ent" id="oval:com.redhat.rhsa:tst:20060619001" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060159002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060619001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="httpd is earlier than 0:2.0.46-61.ent" id="oval:com.redhat.rhsa:tst:20060619003" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060159003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060619001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="mod_ssl is earlier than 1:2.0.46-61.ent" id="oval:com.redhat.rhsa:tst:20060619005" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060159001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060619003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="httpd-suexec is earlier than 0:2.0.52-28.ent" id="oval:com.redhat.rhsa:tst:20060619008" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060159005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060619005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="httpd is earlier than 0:2.0.52-28.ent" id="oval:com.redhat.rhsa:tst:20060619010" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060159003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060619005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="httpd-manual is earlier than 0:2.0.52-28.ent" id="oval:com.redhat.rhsa:tst:20060619011" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060159006"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060619005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="httpd-devel is earlier than 0:2.0.52-28.ent" id="oval:com.redhat.rhsa:tst:20060619013" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060159002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060619005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="mod_ssl is earlier than 1:2.0.52-28.ent" id="oval:com.redhat.rhsa:tst:20060619014" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060159001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060619006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="ImageMagick is earlier than 0:5.5.6-20" id="oval:com.redhat.rhsa:tst:20060633001" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060178002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060633001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="ImageMagick-perl is earlier than 0:5.5.6-20" id="oval:com.redhat.rhsa:tst:20060633003" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060178003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060633003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="ImageMagick-c++ is earlier than 0:5.5.6-20" id="oval:com.redhat.rhsa:tst:20060633005" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060178004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060633001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="ImageMagick-c++-devel is earlier than 0:5.5.6-20" id="oval:com.redhat.rhsa:tst:20060633007" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060178005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060633003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="ImageMagick-devel is earlier than 0:5.5.6-20" id="oval:com.redhat.rhsa:tst:20060633009" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060178001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060633003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="ImageMagick-devel is earlier than 0:6.0.7.1-16" id="oval:com.redhat.rhsa:tst:20060633012" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060178001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060633005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="ImageMagick-perl is earlier than 0:6.0.7.1-16" id="oval:com.redhat.rhsa:tst:20060633013" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060178003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060633005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="ImageMagick is earlier than 0:6.0.7.1-16" id="oval:com.redhat.rhsa:tst:20060633014" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060178002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060633005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="ImageMagick-c++ is earlier than 0:6.0.7.1-16" id="oval:com.redhat.rhsa:tst:20060633015" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060178004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060633005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="ImageMagick-c++-devel is earlier than 0:6.0.7.1-16" id="oval:com.redhat.rhsa:tst:20060633016" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060178005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060633005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-Mesa-libGLU is earlier than 0:4.3.0-111.EL" id="oval:com.redhat.rhsa:tst:20060635001" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060635001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-Mesa-libGLU is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060635002" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635001"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-ISO8859-2-75dpi-fonts is earlier than 0:4.3.0-111.EL" id="oval:com.redhat.rhsa:tst:20060635003" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060635003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-ISO8859-2-75dpi-fonts is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060635004" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635002"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-font-utils is earlier than 0:4.3.0-111.EL" id="oval:com.redhat.rhsa:tst:20060635005" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060635003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-font-utils is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060635006" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635003"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-base-fonts is earlier than 0:4.3.0-111.EL" id="oval:com.redhat.rhsa:tst:20060635007" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060635003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-base-fonts is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060635008" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635004"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-ISO8859-14-100dpi-fonts is earlier than 0:4.3.0-111.EL" id="oval:com.redhat.rhsa:tst:20060635009" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060635003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-ISO8859-14-100dpi-fonts is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060635010" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635005"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-ISO8859-9-75dpi-fonts is earlier than 0:4.3.0-111.EL" id="oval:com.redhat.rhsa:tst:20060635011" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635006"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060635003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-ISO8859-9-75dpi-fonts is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060635012" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635006"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-cyrillic-fonts is earlier than 0:4.3.0-111.EL" id="oval:com.redhat.rhsa:tst:20060635013" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635007"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060635003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-cyrillic-fonts is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060635014" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635007"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-ISO8859-2-100dpi-fonts is earlier than 0:4.3.0-111.EL" id="oval:com.redhat.rhsa:tst:20060635015" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635008"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060635003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-ISO8859-2-100dpi-fonts is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060635016" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635008"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-xauth is earlier than 0:4.3.0-111.EL" id="oval:com.redhat.rhsa:tst:20060635017" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635009"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060635003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-xauth is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060635018" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635009"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-truetype-fonts is earlier than 0:4.3.0-111.EL" id="oval:com.redhat.rhsa:tst:20060635019" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635010"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060635003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-truetype-fonts is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060635020" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635010"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-xdm is earlier than 0:4.3.0-111.EL" id="oval:com.redhat.rhsa:tst:20060635021" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635011"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060635003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-xdm is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060635022" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635011"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-syriac-fonts is earlier than 0:4.3.0-111.EL" id="oval:com.redhat.rhsa:tst:20060635023" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635012"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060635003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-syriac-fonts is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060635024" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635012"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-75dpi-fonts is earlier than 0:4.3.0-111.EL" id="oval:com.redhat.rhsa:tst:20060635025" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635013"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060635003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-75dpi-fonts is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060635026" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635013"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-Xvfb is earlier than 0:4.3.0-111.EL" id="oval:com.redhat.rhsa:tst:20060635027" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635014"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060635003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-Xvfb is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060635028" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635014"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86 is earlier than 0:4.3.0-111.EL" id="oval:com.redhat.rhsa:tst:20060635029" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635015"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060635003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86 is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060635030" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635015"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-tools is earlier than 0:4.3.0-111.EL" id="oval:com.redhat.rhsa:tst:20060635031" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635016"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060635003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-tools is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060635032" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635016"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-ISO8859-14-75dpi-fonts is earlier than 0:4.3.0-111.EL" id="oval:com.redhat.rhsa:tst:20060635033" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635017"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060635003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-ISO8859-14-75dpi-fonts is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060635034" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635017"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-doc is earlier than 0:4.3.0-111.EL" id="oval:com.redhat.rhsa:tst:20060635035" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635018"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060635004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-doc is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060635036" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635018"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-devel is earlier than 0:4.3.0-111.EL" id="oval:com.redhat.rhsa:tst:20060635037" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635019"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060635001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-devel is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060635038" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635019"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-ISO8859-15-75dpi-fonts is earlier than 0:4.3.0-111.EL" id="oval:com.redhat.rhsa:tst:20060635039" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635020"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060635003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-ISO8859-15-75dpi-fonts is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060635040" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635020"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-libs is earlier than 0:4.3.0-111.EL" id="oval:com.redhat.rhsa:tst:20060635041" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635021"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060635001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-libs is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060635042" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635021"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-ISO8859-15-100dpi-fonts is earlier than 0:4.3.0-111.EL" id="oval:com.redhat.rhsa:tst:20060635043" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635022"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060635003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-ISO8859-15-100dpi-fonts is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060635044" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635022"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-Mesa-libGL is earlier than 0:4.3.0-111.EL" id="oval:com.redhat.rhsa:tst:20060635045" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635023"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060635001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-Mesa-libGL is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060635046" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635023"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-100dpi-fonts is earlier than 0:4.3.0-111.EL" id="oval:com.redhat.rhsa:tst:20060635047" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635024"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060635003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-100dpi-fonts is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060635048" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635024"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-sdk is earlier than 0:4.3.0-111.EL" id="oval:com.redhat.rhsa:tst:20060635049" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635025"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060635004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-sdk is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060635050" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635025"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-xfs is earlier than 0:4.3.0-111.EL" id="oval:com.redhat.rhsa:tst:20060635051" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635026"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060635003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-xfs is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060635052" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635026"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-libs-data is earlier than 0:4.3.0-111.EL" id="oval:com.redhat.rhsa:tst:20060635053" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635027"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060635003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-libs-data is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060635054" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635027"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-twm is earlier than 0:4.3.0-111.EL" id="oval:com.redhat.rhsa:tst:20060635055" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635028"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060635003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-twm is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060635056" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635028"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-Xnest is earlier than 0:4.3.0-111.EL" id="oval:com.redhat.rhsa:tst:20060635057" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635029"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060635003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-Xnest is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060635058" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635029"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-ISO8859-9-100dpi-fonts is earlier than 0:4.3.0-111.EL" id="oval:com.redhat.rhsa:tst:20060635059" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635030"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060635003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-ISO8859-9-100dpi-fonts is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060635060" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635030"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="kdegraphics is earlier than 7:3.1.3-3.10" id="oval:com.redhat.rhsa:tst:20060648001" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060648001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060648001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="kdegraphics is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060648002" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060648001"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="kdegraphics-devel is earlier than 7:3.1.3-3.10" id="oval:com.redhat.rhsa:tst:20060648003" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060648002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060648001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="kdegraphics-devel is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060648004" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060648002"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="wireshark is earlier than 0:0.99.3-EL3.2" id="oval:com.redhat.rhsa:tst:20060658001" version="644">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060602001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060658001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="wireshark-gnome is earlier than 0:0.99.3-EL3.2" id="oval:com.redhat.rhsa:tst:20060658003" version="644">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060602002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060658001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="wireshark is earlier than 0:0.99.3-EL4.2" id="oval:com.redhat.rhsa:tst:20060658006" version="644">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060602001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060658004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="wireshark-gnome is earlier than 0:0.99.3-EL4.2" id="oval:com.redhat.rhsa:tst:20060658007" version="644">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060602002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060658004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openssl096b is earlier than 0:0.9.6b-16.43" id="oval:com.redhat.rhsa:tst:20060661001" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060661001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060661001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openssl096b is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060661002" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060661001"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openssl-perl is earlier than 0:0.9.7a-33.18" id="oval:com.redhat.rhsa:tst:20060661003" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060661002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060661003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openssl-perl is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060661004" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060661002"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openssl is earlier than 0:0.9.7a-33.18" id="oval:com.redhat.rhsa:tst:20060661005" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060661003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060661004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openssl is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060661006" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060661003"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openssl-devel is earlier than 0:0.9.7a-33.18" id="oval:com.redhat.rhsa:tst:20060661007" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060661004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060661003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openssl-devel is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060661008" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060661004"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openssl096b is earlier than 0:0.9.6b-22.43" id="oval:com.redhat.rhsa:tst:20060661010" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060661001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060661006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openssl is earlier than 0:0.9.7a-43.11" id="oval:com.redhat.rhsa:tst:20060661011" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060661003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060661007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openssl-devel is earlier than 0:0.9.7a-43.11" id="oval:com.redhat.rhsa:tst:20060661012" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060661004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060661008"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openssl-perl is earlier than 0:0.9.7a-43.11" id="oval:com.redhat.rhsa:tst:20060661013" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060661002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060661009"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="ncompress is earlier than 0:4.2.4-39.rhel3" id="oval:com.redhat.rhsa:tst:20060663001" version="643">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060663001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060663001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="ncompress is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060663002" version="643">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060663001"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="ncompress is earlier than 0:4.2.4-43.rhel4" id="oval:com.redhat.rhsa:tst:20060663004" version="643">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060663001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060663004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-ISO8859-2-75dpi-fonts is earlier than 0:4.3.0-113.EL" id="oval:com.redhat.rhsa:tst:20060666001" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060666001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-Xnest is earlier than 0:4.3.0-113.EL" id="oval:com.redhat.rhsa:tst:20060666003" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635029"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060666001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-ISO8859-14-75dpi-fonts is earlier than 0:4.3.0-113.EL" id="oval:com.redhat.rhsa:tst:20060666005" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635017"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060666001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-ISO8859-9-100dpi-fonts is earlier than 0:4.3.0-113.EL" id="oval:com.redhat.rhsa:tst:20060666007" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635030"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060666001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-ISO8859-2-100dpi-fonts is earlier than 0:4.3.0-113.EL" id="oval:com.redhat.rhsa:tst:20060666009" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635008"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060666001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-ISO8859-15-75dpi-fonts is earlier than 0:4.3.0-113.EL" id="oval:com.redhat.rhsa:tst:20060666011" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635020"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060666001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-doc is earlier than 0:4.3.0-113.EL" id="oval:com.redhat.rhsa:tst:20060666013" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635018"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060666003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-Mesa-libGLU is earlier than 0:4.3.0-113.EL" id="oval:com.redhat.rhsa:tst:20060666015" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060666004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-ISO8859-15-100dpi-fonts is earlier than 0:4.3.0-113.EL" id="oval:com.redhat.rhsa:tst:20060666017" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635022"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060666001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-font-utils is earlier than 0:4.3.0-113.EL" id="oval:com.redhat.rhsa:tst:20060666019" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060666001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-ISO8859-14-100dpi-fonts is earlier than 0:4.3.0-113.EL" id="oval:com.redhat.rhsa:tst:20060666021" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060666001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-base-fonts is earlier than 0:4.3.0-113.EL" id="oval:com.redhat.rhsa:tst:20060666023" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060666001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-tools is earlier than 0:4.3.0-113.EL" id="oval:com.redhat.rhsa:tst:20060666025" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635016"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060666001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-Xvfb is earlier than 0:4.3.0-113.EL" id="oval:com.redhat.rhsa:tst:20060666027" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635014"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060666001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-xauth is earlier than 0:4.3.0-113.EL" id="oval:com.redhat.rhsa:tst:20060666029" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635009"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060666001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-truetype-fonts is earlier than 0:4.3.0-113.EL" id="oval:com.redhat.rhsa:tst:20060666031" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635010"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060666001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-devel is earlier than 0:4.3.0-113.EL" id="oval:com.redhat.rhsa:tst:20060666033" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635019"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060666004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-syriac-fonts is earlier than 0:4.3.0-113.EL" id="oval:com.redhat.rhsa:tst:20060666035" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635012"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060666001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-xdm is earlier than 0:4.3.0-113.EL" id="oval:com.redhat.rhsa:tst:20060666037" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635011"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060666001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-ISO8859-9-75dpi-fonts is earlier than 0:4.3.0-113.EL" id="oval:com.redhat.rhsa:tst:20060666039" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635006"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060666001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-libs-data is earlier than 0:4.3.0-113.EL" id="oval:com.redhat.rhsa:tst:20060666041" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635027"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060666001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-twm is earlier than 0:4.3.0-113.EL" id="oval:com.redhat.rhsa:tst:20060666043" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635028"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060666001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86 is earlier than 0:4.3.0-113.EL" id="oval:com.redhat.rhsa:tst:20060666045" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635015"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060666001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-cyrillic-fonts is earlier than 0:4.3.0-113.EL" id="oval:com.redhat.rhsa:tst:20060666047" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635007"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060666001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-Mesa-libGL is earlier than 0:4.3.0-113.EL" id="oval:com.redhat.rhsa:tst:20060666049" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635023"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060666004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-libs is earlier than 0:4.3.0-113.EL" id="oval:com.redhat.rhsa:tst:20060666051" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635021"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060666004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-100dpi-fonts is earlier than 0:4.3.0-113.EL" id="oval:com.redhat.rhsa:tst:20060666053" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635024"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060666001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-sdk is earlier than 0:4.3.0-113.EL" id="oval:com.redhat.rhsa:tst:20060666055" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635025"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060666003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-xfs is earlier than 0:4.3.0-113.EL" id="oval:com.redhat.rhsa:tst:20060666057" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635026"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060666001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-75dpi-fonts is earlier than 0:4.3.0-113.EL" id="oval:com.redhat.rhsa:tst:20060666059" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635013"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060666001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="gzip is earlier than 0:1.3.3-13.rhel3" id="oval:com.redhat.rhsa:tst:20060667001" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060667001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060667001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="gzip is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060667002" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060667001"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="gzip is earlier than 0:1.3.3-16.rhel4" id="oval:com.redhat.rhsa:tst:20060667004" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060667001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060667004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="squirrelmail is earlier than 0:1.4.8-2.el3" id="oval:com.redhat.rhsa:tst:20060668001" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060283001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060668001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="squirrelmail is earlier than 0:1.4.8-2.el4" id="oval:com.redhat.rhsa:tst:20060668004" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060283001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060668004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-imap is earlier than 0:4.3.2-36.ent" id="oval:com.redhat.rhsa:tst:20060669001" version="642">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060669001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php is earlier than 0:4.3.2-36.ent" id="oval:com.redhat.rhsa:tst:20060669003" version="642">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060669001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-mysql is earlier than 0:4.3.2-36.ent" id="oval:com.redhat.rhsa:tst:20060669005" version="642">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276007"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060669001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-odbc is earlier than 0:4.3.2-36.ent" id="oval:com.redhat.rhsa:tst:20060669007" version="642">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060669001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-pgsql is earlier than 0:4.3.2-36.ent" id="oval:com.redhat.rhsa:tst:20060669009" version="642">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276006"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060669001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-ldap is earlier than 0:4.3.2-36.ent" id="oval:com.redhat.rhsa:tst:20060669011" version="642">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060669001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-devel is earlier than 0:4.3.2-36.ent" id="oval:com.redhat.rhsa:tst:20060669013" version="642">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060669001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-snmp is earlier than 0:4.3.9-3.18" id="oval:com.redhat.rhsa:tst:20060669016" version="642">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276010"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060669004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-ncurses is earlier than 0:4.3.9-3.18" id="oval:com.redhat.rhsa:tst:20060669018" version="642">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276011"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060669004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-pear is earlier than 0:4.3.9-3.18" id="oval:com.redhat.rhsa:tst:20060669020" version="642">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276012"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060669004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-mbstring is earlier than 0:4.3.9-3.18" id="oval:com.redhat.rhsa:tst:20060669022" version="642">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276013"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060669004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-domxml is earlier than 0:4.3.9-3.18" id="oval:com.redhat.rhsa:tst:20060669024" version="642">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276014"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060669004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-ldap is earlier than 0:4.3.9-3.18" id="oval:com.redhat.rhsa:tst:20060669026" version="642">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060669004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-devel is earlier than 0:4.3.9-3.18" id="oval:com.redhat.rhsa:tst:20060669027" version="642">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060669004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-gd is earlier than 0:4.3.9-3.18" id="oval:com.redhat.rhsa:tst:20060669028" version="642">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276015"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060669004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-imap is earlier than 0:4.3.9-3.18" id="oval:com.redhat.rhsa:tst:20060669030" version="642">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060669004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-pgsql is earlier than 0:4.3.9-3.18" id="oval:com.redhat.rhsa:tst:20060669031" version="642">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276006"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060669004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-xmlrpc is earlier than 0:4.3.9-3.18" id="oval:com.redhat.rhsa:tst:20060669032" version="642">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276009"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060669004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-odbc is earlier than 0:4.3.9-3.18" id="oval:com.redhat.rhsa:tst:20060669034" version="642">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060669004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php is earlier than 0:4.3.9-3.18" id="oval:com.redhat.rhsa:tst:20060669035" version="642">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060669004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-mysql is earlier than 0:4.3.9-3.18" id="oval:com.redhat.rhsa:tst:20060669036" version="642">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276007"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060669004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-nss is earlier than 0:1.0.5-0.1.el3" id="oval:com.redhat.rhsa:tst:20060676001" version="640">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578008"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060676001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-mail is earlier than 0:1.0.5-0.1.el3" id="oval:com.redhat.rhsa:tst:20060676003" version="640">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578010"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060676001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey is earlier than 0:1.0.5-0.1.el3" id="oval:com.redhat.rhsa:tst:20060676005" version="640">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578009"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060676001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-nspr-devel is earlier than 0:1.0.5-0.1.el3" id="oval:com.redhat.rhsa:tst:20060676007" version="640">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060676001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-nspr is earlier than 0:1.0.5-0.1.el3" id="oval:com.redhat.rhsa:tst:20060676009" version="640">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060676001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-dom-inspector is earlier than 0:1.0.5-0.1.el3" id="oval:com.redhat.rhsa:tst:20060676011" version="640">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060676001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-nss-devel is earlier than 0:1.0.5-0.1.el3" id="oval:com.redhat.rhsa:tst:20060676013" version="640">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578006"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060676001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-devel is earlier than 0:1.0.5-0.1.el3" id="oval:com.redhat.rhsa:tst:20060676015" version="640">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578007"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060676001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-chat is earlier than 0:1.0.5-0.1.el3" id="oval:com.redhat.rhsa:tst:20060676017" version="640">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060676001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-js-debugger is earlier than 0:1.0.5-0.1.el3" id="oval:com.redhat.rhsa:tst:20060676019" version="640">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060676001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-mail is earlier than 0:1.0.5-0.1.el4" id="oval:com.redhat.rhsa:tst:20060676022" version="640">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578010"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060676004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey is earlier than 0:1.0.5-0.1.el4" id="oval:com.redhat.rhsa:tst:20060676023" version="640">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578009"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060676004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-dom-inspector is earlier than 0:1.0.5-0.1.el4" id="oval:com.redhat.rhsa:tst:20060676024" version="640">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060676004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-devel is earlier than 0:1.0.5-0.1.el4" id="oval:com.redhat.rhsa:tst:20060676025" version="640">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578007"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060676004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-chat is earlier than 0:1.0.5-0.1.el4" id="oval:com.redhat.rhsa:tst:20060676026" version="640">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060676004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-js-debugger is earlier than 0:1.0.5-0.1.el4" id="oval:com.redhat.rhsa:tst:20060676027" version="640">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060676004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="devhelp is earlier than 0:0.10-0.4.el4" id="oval:com.redhat.rhsa:tst:20060676028" version="640">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060329002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060676005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="devhelp-devel is earlier than 0:0.10-0.4.el4" id="oval:com.redhat.rhsa:tst:20060676030" version="640">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060329001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060676005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openssl-perl is earlier than 0:0.9.7a-33.21" id="oval:com.redhat.rhsa:tst:20060695001" version="642">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060661002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060695001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openssl is earlier than 0:0.9.7a-33.21" id="oval:com.redhat.rhsa:tst:20060695003" version="642">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060661003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060695003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openssl-devel is earlier than 0:0.9.7a-33.21" id="oval:com.redhat.rhsa:tst:20060695005" version="642">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060661004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060695001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openssl096b is earlier than 0:0.9.6b-16.46" id="oval:com.redhat.rhsa:tst:20060695007" version="642">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060661001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060695004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openssl-devel is earlier than 0:0.9.7a-43.14" id="oval:com.redhat.rhsa:tst:20060695010" version="642">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060661004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060695006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openssl-perl is earlier than 0:0.9.7a-43.14" id="oval:com.redhat.rhsa:tst:20060695011" version="642">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060661002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060695007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openssl is earlier than 0:0.9.7a-43.14" id="oval:com.redhat.rhsa:tst:20060695012" version="642">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060661003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060695008"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openssl096b is earlier than 0:0.9.6b-22.46" id="oval:com.redhat.rhsa:tst:20060695013" version="642">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060661001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060695009"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openssh-clients is earlier than 0:3.6.1p2-33.30.12" id="oval:com.redhat.rhsa:tst:20060697001" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060298004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060697001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openssh-askpass-gnome is earlier than 0:3.6.1p2-33.30.12" id="oval:com.redhat.rhsa:tst:20060697003" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060298001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060697001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openssh-askpass is earlier than 0:3.6.1p2-33.30.12" id="oval:com.redhat.rhsa:tst:20060697005" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060298005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060697001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openssh-server is earlier than 0:3.6.1p2-33.30.12" id="oval:com.redhat.rhsa:tst:20060697007" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060298002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060697001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openssh is earlier than 0:3.6.1p2-33.30.12" id="oval:com.redhat.rhsa:tst:20060697009" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060298003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060697001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openssh-server is earlier than 0:3.9p1-8.RHEL4.17" id="oval:com.redhat.rhsa:tst:20060697012" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060298002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060697004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openssh-askpass is earlier than 0:3.9p1-8.RHEL4.17" id="oval:com.redhat.rhsa:tst:20060697013" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060298005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060697004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openssh is earlier than 0:3.9p1-8.RHEL4.17" id="oval:com.redhat.rhsa:tst:20060697014" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060298003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060697004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openssh-clients is earlier than 0:3.9p1-8.RHEL4.17" id="oval:com.redhat.rhsa:tst:20060697015" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060298004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060697004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openssh-askpass-gnome is earlier than 0:3.9p1-8.RHEL4.17" id="oval:com.redhat.rhsa:tst:20060697016" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060298001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060697004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="kernel-doc is earlier than 0:2.4.21-47.0.1.EL" id="oval:com.redhat.rhsa:tst:20060710001" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060140003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060710001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="kernel-unsupported is earlier than 0:2.4.21-47.0.1.EL" id="oval:com.redhat.rhsa:tst:20060710003" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060140001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060710003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="kernel is earlier than 0:2.4.21-47.0.1.EL" id="oval:com.redhat.rhsa:tst:20060710005" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060140005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060710003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="kernel-source is earlier than 0:2.4.21-47.0.1.EL" id="oval:com.redhat.rhsa:tst:20060710007" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060140006"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060710001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="kernel-smp is earlier than 0:2.4.21-47.0.1.EL" id="oval:com.redhat.rhsa:tst:20060710009" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060140004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060710004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="kernel-smp-unsupported is earlier than 0:2.4.21-47.0.1.EL" id="oval:com.redhat.rhsa:tst:20060710011" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060140002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060710004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="kernel-hugemem is earlier than 0:2.4.21-47.0.1.EL" id="oval:com.redhat.rhsa:tst:20060710013" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060140009"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060710005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-47.0.1.EL" id="oval:com.redhat.rhsa:tst:20060710015" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060140007"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060710005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="kernel-BOOT is earlier than 0:2.4.21-47.0.1.EL" id="oval:com.redhat.rhsa:tst:20060710017" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060140008"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060710006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="python-devel is earlier than 0:2.2.3-6.5" id="oval:com.redhat.rhsa:tst:20060713001" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060197002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060713001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="python is earlier than 0:2.2.3-6.5" id="oval:com.redhat.rhsa:tst:20060713003" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060197003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060713001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="tkinter is earlier than 0:2.2.3-6.5" id="oval:com.redhat.rhsa:tst:20060713005" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060197004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060713001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="python-tools is earlier than 0:2.2.3-6.5" id="oval:com.redhat.rhsa:tst:20060713007" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060197001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060713001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="python is earlier than 0:2.3.4-14.3" id="oval:com.redhat.rhsa:tst:20060713010" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060197003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060713004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="python-docs is earlier than 0:2.3.4-14.3" id="oval:com.redhat.rhsa:tst:20060713011" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060197006"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060713004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="python-tools is earlier than 0:2.3.4-14.3" id="oval:com.redhat.rhsa:tst:20060713013" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060197001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060713004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="python-devel is earlier than 0:2.3.4-14.3" id="oval:com.redhat.rhsa:tst:20060713014" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060197002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060713004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="tkinter is earlier than 0:2.3.4-14.3" id="oval:com.redhat.rhsa:tst:20060713015" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060197004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060713004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="kdelibs is earlier than 6:3.1.3-6.12" id="oval:com.redhat.rhsa:tst:20060720001" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060720001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060720001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="kdelibs is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060720002" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060720001"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="kdelibs-devel is earlier than 6:3.1.3-6.12" id="oval:com.redhat.rhsa:tst:20060720003" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060720002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060720003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="kdelibs-devel is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060720004" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060720002"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="kdelibs-devel is earlier than 6:3.3.1-6.RHEL4" id="oval:com.redhat.rhsa:tst:20060720006" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060720002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060720005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="kdelibs is earlier than 6:3.3.1-6.RHEL4" id="oval:com.redhat.rhsa:tst:20060720007" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060720001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060720006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="qt is earlier than 1:3.1.2-14.RHEL3" id="oval:com.redhat.rhsa:tst:20060725001" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060725001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060725001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="qt is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060725002" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060725001"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="qt-devel is earlier than 1:3.1.2-14.RHEL3" id="oval:com.redhat.rhsa:tst:20060725003" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060725002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060725003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="qt-devel is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060725004" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060725002"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="qt-config is earlier than 1:3.1.2-14.RHEL3" id="oval:com.redhat.rhsa:tst:20060725005" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060725003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060725003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="qt-config is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060725006" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060725003"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="qt-MySQL is earlier than 1:3.1.2-14.RHEL3" id="oval:com.redhat.rhsa:tst:20060725007" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060725004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060725003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="qt-MySQL is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060725008" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060725004"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="qt-designer is earlier than 1:3.1.2-14.RHEL3" id="oval:com.redhat.rhsa:tst:20060725009" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060725005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060725003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="qt-designer is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060725010" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060725005"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="qt-ODBC is earlier than 1:3.1.2-14.RHEL3" id="oval:com.redhat.rhsa:tst:20060725011" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060725006"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060725003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="qt-ODBC is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060725012" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060725006"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="qt-designer is earlier than 1:3.3.3-10.RHEL4" id="oval:com.redhat.rhsa:tst:20060725014" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060725005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060725005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="qt-ODBC is earlier than 1:3.3.3-10.RHEL4" id="oval:com.redhat.rhsa:tst:20060725015" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060725006"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060725005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="qt-config is earlier than 1:3.3.3-10.RHEL4" id="oval:com.redhat.rhsa:tst:20060725016" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060725003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060725005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="qt is earlier than 1:3.3.3-10.RHEL4" id="oval:com.redhat.rhsa:tst:20060725017" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060725001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060725006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="qt-MySQL is earlier than 1:3.3.3-10.RHEL4" id="oval:com.redhat.rhsa:tst:20060725018" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060725004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060725005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="qt-devel is earlier than 1:3.3.3-10.RHEL4" id="oval:com.redhat.rhsa:tst:20060725019" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060725002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060725005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="qt-PostgreSQL is earlier than 1:3.3.3-10.RHEL4" id="oval:com.redhat.rhsa:tst:20060725020" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060725008"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060725005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="qt-PostgreSQL is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060725021" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060725008"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="wireshark is earlier than 0:0.99.4-EL3.1" id="oval:com.redhat.rhsa:tst:20060726001" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060602001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060726001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="wireshark-gnome is earlier than 0:0.99.4-EL3.1" id="oval:com.redhat.rhsa:tst:20060726003" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060602002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060726001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="wireshark is earlier than 0:0.99.4-EL4.1" id="oval:com.redhat.rhsa:tst:20060726006" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060602001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060726004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="wireshark-gnome is earlier than 0:0.99.4-EL4.1" id="oval:com.redhat.rhsa:tst:20060726007" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060602002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060726004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="texinfo is earlier than 0:4.5-3.el3.1" id="oval:com.redhat.rhsa:tst:20060727001" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060727001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060727001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="texinfo is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060727002" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060727001"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="info is earlier than 0:4.5-3.el3.1" id="oval:com.redhat.rhsa:tst:20060727003" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060727002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060727001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="info is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20060727004" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060727002"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="texinfo is earlier than 0:4.7-5.el4.2" id="oval:com.redhat.rhsa:tst:20060727006" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060727001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060727004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="info is earlier than 0:4.7-5.el4.2" id="oval:com.redhat.rhsa:tst:20060727007" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060727002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060727004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="ruby-devel is earlier than 0:1.6.8-9.EL3.8" id="oval:com.redhat.rhsa:tst:20060729001" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060604002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060729001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="ruby-docs is earlier than 0:1.6.8-9.EL3.8" id="oval:com.redhat.rhsa:tst:20060729003" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060604003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060729001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="ruby-mode is earlier than 0:1.6.8-9.EL3.8" id="oval:com.redhat.rhsa:tst:20060729005" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060604006"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060729001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="ruby is earlier than 0:1.6.8-9.EL3.8" id="oval:com.redhat.rhsa:tst:20060729007" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060604005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060729001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="ruby-tcltk is earlier than 0:1.6.8-9.EL3.8" id="oval:com.redhat.rhsa:tst:20060729009" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060604004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060729001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="irb is earlier than 0:1.6.8-9.EL3.8" id="oval:com.redhat.rhsa:tst:20060729011" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060604007"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060729001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="ruby-libs is earlier than 0:1.6.8-9.EL3.8" id="oval:com.redhat.rhsa:tst:20060729013" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060604001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060729003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="ruby-libs is earlier than 0:1.8.1-7.EL4.8" id="oval:com.redhat.rhsa:tst:20060729016" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060604001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060729005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="ruby-tcltk is earlier than 0:1.8.1-7.EL4.8" id="oval:com.redhat.rhsa:tst:20060729017" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060604004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060729006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="ruby is earlier than 0:1.8.1-7.EL4.8" id="oval:com.redhat.rhsa:tst:20060729018" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060604005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060729006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="ruby-docs is earlier than 0:1.8.1-7.EL4.8" id="oval:com.redhat.rhsa:tst:20060729019" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060604003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060729006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="ruby-devel is earlier than 0:1.8.1-7.EL4.8" id="oval:com.redhat.rhsa:tst:20060729020" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060604002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060729006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="ruby-mode is earlier than 0:1.8.1-7.EL4.8" id="oval:com.redhat.rhsa:tst:20060729021" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060604006"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060729006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="irb is earlier than 0:1.8.1-7.EL4.8" id="oval:com.redhat.rhsa:tst:20060729022" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060604007"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060729006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php is earlier than 0:4.3.2-37.ent" id="oval:com.redhat.rhsa:tst:20060730001" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060730001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-pgsql is earlier than 0:4.3.2-37.ent" id="oval:com.redhat.rhsa:tst:20060730003" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276006"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060730001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-mysql is earlier than 0:4.3.2-37.ent" id="oval:com.redhat.rhsa:tst:20060730005" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276007"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060730001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-devel is earlier than 0:4.3.2-37.ent" id="oval:com.redhat.rhsa:tst:20060730007" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060730001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-ldap is earlier than 0:4.3.2-37.ent" id="oval:com.redhat.rhsa:tst:20060730009" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060730001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-odbc is earlier than 0:4.3.2-37.ent" id="oval:com.redhat.rhsa:tst:20060730011" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060730001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-imap is earlier than 0:4.3.2-37.ent" id="oval:com.redhat.rhsa:tst:20060730013" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060730001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-ldap is earlier than 0:4.3.9-3.22" id="oval:com.redhat.rhsa:tst:20060730016" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060730004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-devel is earlier than 0:4.3.9-3.22" id="oval:com.redhat.rhsa:tst:20060730017" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060730004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-imap is earlier than 0:4.3.9-3.22" id="oval:com.redhat.rhsa:tst:20060730018" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060730004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-gd is earlier than 0:4.3.9-3.22" id="oval:com.redhat.rhsa:tst:20060730019" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276015"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060730004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-pgsql is earlier than 0:4.3.9-3.22" id="oval:com.redhat.rhsa:tst:20060730021" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276006"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060730004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-xmlrpc is earlier than 0:4.3.9-3.22" id="oval:com.redhat.rhsa:tst:20060730022" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276009"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060730004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-odbc is earlier than 0:4.3.9-3.22" id="oval:com.redhat.rhsa:tst:20060730024" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060730004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-mysql is earlier than 0:4.3.9-3.22" id="oval:com.redhat.rhsa:tst:20060730025" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276007"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060730004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php is earlier than 0:4.3.9-3.22" id="oval:com.redhat.rhsa:tst:20060730026" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060730004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-snmp is earlier than 0:4.3.9-3.22" id="oval:com.redhat.rhsa:tst:20060730027" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276010"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060730004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-ncurses is earlier than 0:4.3.9-3.22" id="oval:com.redhat.rhsa:tst:20060730029" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276011"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060730004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-domxml is earlier than 0:4.3.9-3.22" id="oval:com.redhat.rhsa:tst:20060730031" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276014"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060730004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-mbstring is earlier than 0:4.3.9-3.22" id="oval:com.redhat.rhsa:tst:20060730033" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276013"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060730004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-pear is earlier than 0:4.3.9-3.22" id="oval:com.redhat.rhsa:tst:20060730035" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276012"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060730004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-mail is earlier than 0:1.0.6-0.1.el3" id="oval:com.redhat.rhsa:tst:20060734001" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578010"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060734001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-nspr is earlier than 0:1.0.6-0.1.el3" id="oval:com.redhat.rhsa:tst:20060734003" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060734001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-nss-devel is earlier than 0:1.0.6-0.1.el3" id="oval:com.redhat.rhsa:tst:20060734005" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578006"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060734001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-js-debugger is earlier than 0:1.0.6-0.1.el3" id="oval:com.redhat.rhsa:tst:20060734007" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060734001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-nss is earlier than 0:1.0.6-0.1.el3" id="oval:com.redhat.rhsa:tst:20060734009" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578008"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060734001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-chat is earlier than 0:1.0.6-0.1.el3" id="oval:com.redhat.rhsa:tst:20060734011" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060734001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-devel is earlier than 0:1.0.6-0.1.el3" id="oval:com.redhat.rhsa:tst:20060734013" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578007"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060734001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey is earlier than 0:1.0.6-0.1.el3" id="oval:com.redhat.rhsa:tst:20060734015" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578009"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060734001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-nspr-devel is earlier than 0:1.0.6-0.1.el3" id="oval:com.redhat.rhsa:tst:20060734017" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060734001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-dom-inspector is earlier than 0:1.0.6-0.1.el3" id="oval:com.redhat.rhsa:tst:20060734019" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060734001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-mail is earlier than 0:1.0.6-0.1.el4" id="oval:com.redhat.rhsa:tst:20060734022" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578010"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060734004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-js-debugger is earlier than 0:1.0.6-0.1.el4" id="oval:com.redhat.rhsa:tst:20060734023" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060734004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-devel is earlier than 0:1.0.6-0.1.el4" id="oval:com.redhat.rhsa:tst:20060734024" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578007"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060734004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-chat is earlier than 0:1.0.6-0.1.el4" id="oval:com.redhat.rhsa:tst:20060734025" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060734004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey is earlier than 0:1.0.6-0.1.el4" id="oval:com.redhat.rhsa:tst:20060734026" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578009"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060734004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-dom-inspector is earlier than 0:1.0.6-0.1.el4" id="oval:com.redhat.rhsa:tst:20060734027" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060734004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="devhelp-devel is earlier than 0:0.10-0.5.el4" id="oval:com.redhat.rhsa:tst:20060734028" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060329001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060734005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="devhelp is earlier than 0:0.10-0.5.el4" id="oval:com.redhat.rhsa:tst:20060734030" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060329002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060734005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openssh-clients is earlier than 0:3.6.1p2-33.30.13" id="oval:com.redhat.rhsa:tst:20060738001" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060298004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060738001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openssh-askpass-gnome is earlier than 0:3.6.1p2-33.30.13" id="oval:com.redhat.rhsa:tst:20060738003" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060298001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060738001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openssh-askpass is earlier than 0:3.6.1p2-33.30.13" id="oval:com.redhat.rhsa:tst:20060738005" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060298005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060738001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openssh-server is earlier than 0:3.6.1p2-33.30.13" id="oval:com.redhat.rhsa:tst:20060738007" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060298002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060738001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openssh is earlier than 0:3.6.1p2-33.30.13" id="oval:com.redhat.rhsa:tst:20060738009" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060298003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060738001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openssh-server is earlier than 0:3.9p1-8.RHEL4.17.1" id="oval:com.redhat.rhsa:tst:20060738012" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060298002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060738004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openssh-askpass-gnome is earlier than 0:3.9p1-8.RHEL4.17.1" id="oval:com.redhat.rhsa:tst:20060738013" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060298001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060738004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openssh-clients is earlier than 0:3.9p1-8.RHEL4.17.1" id="oval:com.redhat.rhsa:tst:20060738014" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060298004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060738004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openssh-askpass is earlier than 0:3.9p1-8.RHEL4.17.1" id="oval:com.redhat.rhsa:tst:20060738015" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060298005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060738004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openssh is earlier than 0:3.9p1-8.RHEL4.17.1" id="oval:com.redhat.rhsa:tst:20060738016" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060298003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060738004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="tar is earlier than 0:1.13.25-15.RHEL3" id="oval:com.redhat.rhsa:tst:20060749001" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060195001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060749001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="tar is earlier than 0:1.14-12.RHEL4" id="oval:com.redhat.rhsa:tst:20060749004" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060195001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060749004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="gnupg is earlier than 0:1.2.1-19" id="oval:com.redhat.rhsa:tst:20060754001" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060266001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060754001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="gnupg is earlier than 0:1.2.6-8" id="oval:com.redhat.rhsa:tst:20060754004" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060266001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060754004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-mail is earlier than 0:1.0.7-0.1.el3" id="oval:com.redhat.rhsa:tst:20060759001" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578010"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060759001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-nss-devel is earlier than 0:1.0.7-0.1.el3" id="oval:com.redhat.rhsa:tst:20060759003" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578006"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060759001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-js-debugger is earlier than 0:1.0.7-0.1.el3" id="oval:com.redhat.rhsa:tst:20060759005" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060759001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-nspr is earlier than 0:1.0.7-0.1.el3" id="oval:com.redhat.rhsa:tst:20060759007" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060759001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-devel is earlier than 0:1.0.7-0.1.el3" id="oval:com.redhat.rhsa:tst:20060759009" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578007"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060759001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-chat is earlier than 0:1.0.7-0.1.el3" id="oval:com.redhat.rhsa:tst:20060759011" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060759001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-nss is earlier than 0:1.0.7-0.1.el3" id="oval:com.redhat.rhsa:tst:20060759013" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578008"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060759001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey is earlier than 0:1.0.7-0.1.el3" id="oval:com.redhat.rhsa:tst:20060759015" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578009"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060759001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-dom-inspector is earlier than 0:1.0.7-0.1.el3" id="oval:com.redhat.rhsa:tst:20060759017" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060759001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-nspr-devel is earlier than 0:1.0.7-0.1.el3" id="oval:com.redhat.rhsa:tst:20060759019" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060759001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-js-debugger is earlier than 0:1.0.7-0.1.el4" id="oval:com.redhat.rhsa:tst:20060759022" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060759004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-devel is earlier than 0:1.0.7-0.1.el4" id="oval:com.redhat.rhsa:tst:20060759023" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578007"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060759004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-chat is earlier than 0:1.0.7-0.1.el4" id="oval:com.redhat.rhsa:tst:20060759024" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060759004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey is earlier than 0:1.0.7-0.1.el4" id="oval:com.redhat.rhsa:tst:20060759025" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578009"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060759004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-dom-inspector is earlier than 0:1.0.7-0.1.el4" id="oval:com.redhat.rhsa:tst:20060759026" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060759004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-mail is earlier than 0:1.0.7-0.1.el4" id="oval:com.redhat.rhsa:tst:20060759027" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578010"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060759004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="devhelp is earlier than 0:0.10-0.6.el4" id="oval:com.redhat.rhsa:tst:20060759028" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060329002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060759005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="devhelp-devel is earlier than 0:0.10-0.6.el4" id="oval:com.redhat.rhsa:tst:20060759030" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060329001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20060759005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-i18n is earlier than 0:1.1.2-35.2.0.EL3" id="oval:com.redhat.rhsa:tst:20070001001" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060573001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070001001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-libs is earlier than 0:1.1.2-35.2.0.EL3" id="oval:com.redhat.rhsa:tst:20070001003" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060573002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070001001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org is earlier than 0:1.1.2-35.2.0.EL3" id="oval:com.redhat.rhsa:tst:20070001005" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060573003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070001001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org is earlier than 0:1.1.5-6.6.0.EL4" id="oval:com.redhat.rhsa:tst:20070001008" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060573003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070001004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-libs is earlier than 0:1.1.5-6.6.0.EL4" id="oval:com.redhat.rhsa:tst:20070001009" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060573002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070001004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-kde is earlier than 0:1.1.5-6.6.0.EL4" id="oval:com.redhat.rhsa:tst:20070001010" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060573005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070001004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-i18n is earlier than 0:1.1.5-6.6.0.EL4" id="oval:com.redhat.rhsa:tst:20070001012" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060573001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070001004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-Mesa-libGL is earlier than 0:4.3.0-115.EL" id="oval:com.redhat.rhsa:tst:20070002001" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635023"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070002001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-100dpi-fonts is earlier than 0:4.3.0-115.EL" id="oval:com.redhat.rhsa:tst:20070002003" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635024"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070002003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-libs is earlier than 0:4.3.0-115.EL" id="oval:com.redhat.rhsa:tst:20070002005" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635021"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070002001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-Xvfb is earlier than 0:4.3.0-115.EL" id="oval:com.redhat.rhsa:tst:20070002007" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635014"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070002003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-syriac-fonts is earlier than 0:4.3.0-115.EL" id="oval:com.redhat.rhsa:tst:20070002009" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635012"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070002003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-tools is earlier than 0:4.3.0-115.EL" id="oval:com.redhat.rhsa:tst:20070002011" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635016"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070002003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86 is earlier than 0:4.3.0-115.EL" id="oval:com.redhat.rhsa:tst:20070002013" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635015"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070002003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-ISO8859-2-100dpi-fonts is earlier than 0:4.3.0-115.EL" id="oval:com.redhat.rhsa:tst:20070002015" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635008"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070002003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-ISO8859-9-75dpi-fonts is earlier than 0:4.3.0-115.EL" id="oval:com.redhat.rhsa:tst:20070002017" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635006"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070002003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-ISO8859-14-100dpi-fonts is earlier than 0:4.3.0-115.EL" id="oval:com.redhat.rhsa:tst:20070002019" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070002003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-xfs is earlier than 0:4.3.0-115.EL" id="oval:com.redhat.rhsa:tst:20070002021" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635026"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070002003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-base-fonts is earlier than 0:4.3.0-115.EL" id="oval:com.redhat.rhsa:tst:20070002023" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070002003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-libs-data is earlier than 0:4.3.0-115.EL" id="oval:com.redhat.rhsa:tst:20070002025" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635027"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070002003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-sdk is earlier than 0:4.3.0-115.EL" id="oval:com.redhat.rhsa:tst:20070002027" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635025"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070002004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-Xnest is earlier than 0:4.3.0-115.EL" id="oval:com.redhat.rhsa:tst:20070002029" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635029"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070002003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-twm is earlier than 0:4.3.0-115.EL" id="oval:com.redhat.rhsa:tst:20070002031" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635028"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070002003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-ISO8859-14-75dpi-fonts is earlier than 0:4.3.0-115.EL" id="oval:com.redhat.rhsa:tst:20070002033" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635017"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070002003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-cyrillic-fonts is earlier than 0:4.3.0-115.EL" id="oval:com.redhat.rhsa:tst:20070002035" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635007"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070002003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-ISO8859-15-75dpi-fonts is earlier than 0:4.3.0-115.EL" id="oval:com.redhat.rhsa:tst:20070002037" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635020"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070002003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-ISO8859-9-100dpi-fonts is earlier than 0:4.3.0-115.EL" id="oval:com.redhat.rhsa:tst:20070002039" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635030"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070002003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-devel is earlier than 0:4.3.0-115.EL" id="oval:com.redhat.rhsa:tst:20070002041" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635019"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070002001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-ISO8859-15-100dpi-fonts is earlier than 0:4.3.0-115.EL" id="oval:com.redhat.rhsa:tst:20070002043" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635022"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070002003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-Mesa-libGLU is earlier than 0:4.3.0-115.EL" id="oval:com.redhat.rhsa:tst:20070002045" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070002001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-75dpi-fonts is earlier than 0:4.3.0-115.EL" id="oval:com.redhat.rhsa:tst:20070002047" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635013"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070002003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-xdm is earlier than 0:4.3.0-115.EL" id="oval:com.redhat.rhsa:tst:20070002049" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635011"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070002003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-ISO8859-2-75dpi-fonts is earlier than 0:4.3.0-115.EL" id="oval:com.redhat.rhsa:tst:20070002051" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070002003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-font-utils is earlier than 0:4.3.0-115.EL" id="oval:com.redhat.rhsa:tst:20070002053" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070002003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-doc is earlier than 0:4.3.0-115.EL" id="oval:com.redhat.rhsa:tst:20070002055" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635018"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070002004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-truetype-fonts is earlier than 0:4.3.0-115.EL" id="oval:com.redhat.rhsa:tst:20070002057" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635010"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070002003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-xauth is earlier than 0:4.3.0-115.EL" id="oval:com.redhat.rhsa:tst:20070002059" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635009"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070002003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libgsf is earlier than 0:1.6.0-7" id="oval:com.redhat.rhsa:tst:20070011001" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070011001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070011001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libgsf is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20070011002" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070011001"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libgsf-devel is earlier than 0:1.6.0-7" id="oval:com.redhat.rhsa:tst:20070011003" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070011002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070011001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libgsf-devel is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20070011004" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070011002"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libgsf is earlier than 0:1.10.1-2" id="oval:com.redhat.rhsa:tst:20070011006" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070011001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070011004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libgsf-devel is earlier than 0:1.10.1-2" id="oval:com.redhat.rhsa:tst:20070011007" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070011002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070011004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="ImageMagick-perl is earlier than 0:5.5.6-24" id="oval:com.redhat.rhsa:tst:20070015001" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060178003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070015001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="ImageMagick-c++ is earlier than 0:5.5.6-24" id="oval:com.redhat.rhsa:tst:20070015003" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060178004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070015003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="ImageMagick-c++-devel is earlier than 0:5.5.6-24" id="oval:com.redhat.rhsa:tst:20070015005" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060178005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070015001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="ImageMagick-devel is earlier than 0:5.5.6-24" id="oval:com.redhat.rhsa:tst:20070015007" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060178001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070015001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="ImageMagick is earlier than 0:5.5.6-24" id="oval:com.redhat.rhsa:tst:20070015009" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060178002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070015003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="ImageMagick is earlier than 0:6.0.7.1-16.0.3" id="oval:com.redhat.rhsa:tst:20070015012" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060178002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070015005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="ImageMagick-c++ is earlier than 0:6.0.7.1-16.0.3" id="oval:com.redhat.rhsa:tst:20070015013" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060178004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070015005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="ImageMagick-c++-devel is earlier than 0:6.0.7.1-16.0.3" id="oval:com.redhat.rhsa:tst:20070015014" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060178005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070015005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="ImageMagick-devel is earlier than 0:6.0.7.1-16.0.3" id="oval:com.redhat.rhsa:tst:20070015015" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060178001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070015005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="ImageMagick-perl is earlier than 0:6.0.7.1-16.0.3" id="oval:com.redhat.rhsa:tst:20070015016" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060178003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070015005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="fetchmail is earlier than 0:6.2.0-3.el3.3" id="oval:com.redhat.rhsa:tst:20070018001" version="640">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070018001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070018001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="fetchmail is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20070018002" version="640">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070018001"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="fetchmail is earlier than 0:6.2.5-6.el4.5" id="oval:com.redhat.rhsa:tst:20070018004" version="640">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070018001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070018004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="squirrelmail is earlier than 0:1.4.8-4.el3" id="oval:com.redhat.rhsa:tst:20070022001" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060283001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070022001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="squirrelmail is earlier than 0:1.4.8-4.el4" id="oval:com.redhat.rhsa:tst:20070022004" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060283001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070022004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-i18n is earlier than 0:1.1.2-38.2.0.EL3" id="oval:com.redhat.rhsa:tst:20070033001" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060573001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070033001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org is earlier than 0:1.1.2-38.2.0.EL3" id="oval:com.redhat.rhsa:tst:20070033003" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060573003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070033001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-libs is earlier than 0:1.1.2-38.2.0.EL3" id="oval:com.redhat.rhsa:tst:20070033005" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060573002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070033001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-i18n is earlier than 0:1.1.5-10.6.0.EL4" id="oval:com.redhat.rhsa:tst:20070033008" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060573001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070033004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-kde is earlier than 0:1.1.5-10.6.0.EL4" id="oval:com.redhat.rhsa:tst:20070033009" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060573005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070033004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-libs is earlier than 0:1.1.5-10.6.0.EL4" id="oval:com.redhat.rhsa:tst:20070033011" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060573002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070033004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org is earlier than 0:1.1.5-10.6.0.EL4" id="oval:com.redhat.rhsa:tst:20070033012" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060573003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070033004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="bind-libs is earlier than 20:9.2.4-20.EL3" id="oval:com.redhat.rhsa:tst:20070044001" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070044001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070044001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="bind-libs is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20070044002" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070044001"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="bind-utils is earlier than 20:9.2.4-20.EL3" id="oval:com.redhat.rhsa:tst:20070044003" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070044002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070044001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="bind-utils is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20070044004" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070044002"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="bind-chroot is earlier than 20:9.2.4-20.EL3" id="oval:com.redhat.rhsa:tst:20070044005" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070044003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070044001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="bind-chroot is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20070044006" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070044003"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="bind-devel is earlier than 20:9.2.4-20.EL3" id="oval:com.redhat.rhsa:tst:20070044007" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070044004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070044001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="bind-devel is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20070044008" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070044004"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="bind is earlier than 20:9.2.4-20.EL3" id="oval:com.redhat.rhsa:tst:20070044009" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070044005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070044001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="bind is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20070044010" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070044005"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="bind is earlier than 20:9.2.4-24.EL4" id="oval:com.redhat.rhsa:tst:20070044012" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070044005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070044004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="bind-devel is earlier than 20:9.2.4-24.EL4" id="oval:com.redhat.rhsa:tst:20070044013" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070044004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070044004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="bind-libs is earlier than 20:9.2.4-24.EL4" id="oval:com.redhat.rhsa:tst:20070044014" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070044001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070044005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="bind-chroot is earlier than 20:9.2.4-24.EL4" id="oval:com.redhat.rhsa:tst:20070044015" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070044003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070044004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="bind-utils is earlier than 20:9.2.4-24.EL4" id="oval:com.redhat.rhsa:tst:20070044016" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070044002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070044004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="samba is earlier than 0:3.0.9-1.3E.12" id="oval:com.redhat.rhsa:tst:20070060001" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060591002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070060001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="samba-swat is earlier than 0:3.0.9-1.3E.12" id="oval:com.redhat.rhsa:tst:20070060003" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060591003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070060003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="samba-client is earlier than 0:3.0.9-1.3E.12" id="oval:com.redhat.rhsa:tst:20070060005" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060591004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070060003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="samba-common is earlier than 0:3.0.9-1.3E.12" id="oval:com.redhat.rhsa:tst:20070060007" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060591001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070060001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="samba-client is earlier than 0:3.0.10-1.4E.11" id="oval:com.redhat.rhsa:tst:20070060010" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060591004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070060005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="samba is earlier than 0:3.0.10-1.4E.11" id="oval:com.redhat.rhsa:tst:20070060011" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060591002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070060005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="samba-swat is earlier than 0:3.0.10-1.4E.11" id="oval:com.redhat.rhsa:tst:20070060012" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060591003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070060005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="samba-common is earlier than 0:3.0.10-1.4E.11" id="oval:com.redhat.rhsa:tst:20070060013" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060591001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070060006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="rh-postgresql-server is earlier than 0:7.3.18-1" id="oval:com.redhat.rhsa:tst:20070064001" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060526003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070064001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="rh-postgresql-devel is earlier than 0:7.3.18-1" id="oval:com.redhat.rhsa:tst:20070064003" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060526009"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070064001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="rh-postgresql-libs is earlier than 0:7.3.18-1" id="oval:com.redhat.rhsa:tst:20070064005" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060526004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070064003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="rh-postgresql-jdbc is earlier than 0:7.3.18-1" id="oval:com.redhat.rhsa:tst:20070064007" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060526006"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070064001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="rh-postgresql-docs is earlier than 0:7.3.18-1" id="oval:com.redhat.rhsa:tst:20070064009" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060526005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070064001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="rh-postgresql-pl is earlier than 0:7.3.18-1" id="oval:com.redhat.rhsa:tst:20070064011" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060526008"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070064001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="rh-postgresql-tcl is earlier than 0:7.3.18-1" id="oval:com.redhat.rhsa:tst:20070064013" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060526010"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070064001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="rh-postgresql is earlier than 0:7.3.18-1" id="oval:com.redhat.rhsa:tst:20070064015" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060526011"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070064001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="rh-postgresql-python is earlier than 0:7.3.18-1" id="oval:com.redhat.rhsa:tst:20070064017" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060526007"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070064001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="rh-postgresql-contrib is earlier than 0:7.3.18-1" id="oval:com.redhat.rhsa:tst:20070064019" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060526001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070064001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="rh-postgresql-test is earlier than 0:7.3.18-1" id="oval:com.redhat.rhsa:tst:20070064021" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060526002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070064001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="postgresql is earlier than 0:7.4.16-1.RHEL4.1" id="oval:com.redhat.rhsa:tst:20070064024" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060526023"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070064005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="postgresql-docs is earlier than 0:7.4.16-1.RHEL4.1" id="oval:com.redhat.rhsa:tst:20070064026" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060526022"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070064005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="postgresql-jdbc is earlier than 0:7.4.16-1.RHEL4.1" id="oval:com.redhat.rhsa:tst:20070064028" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060526021"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070064005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="postgresql-devel is earlier than 0:7.4.16-1.RHEL4.1" id="oval:com.redhat.rhsa:tst:20070064030" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060526017"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070064005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="postgresql-tcl is earlier than 0:7.4.16-1.RHEL4.1" id="oval:com.redhat.rhsa:tst:20070064032" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060526020"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070064005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="postgresql-test is earlier than 0:7.4.16-1.RHEL4.1" id="oval:com.redhat.rhsa:tst:20070064034" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060526014"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070064005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="postgresql-python is earlier than 0:7.4.16-1.RHEL4.1" id="oval:com.redhat.rhsa:tst:20070064036" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060526015"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070064005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="postgresql-pl is earlier than 0:7.4.16-1.RHEL4.1" id="oval:com.redhat.rhsa:tst:20070064038" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060526013"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070064005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="postgresql-server is earlier than 0:7.4.16-1.RHEL4.1" id="oval:com.redhat.rhsa:tst:20070064040" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060526016"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070064005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="postgresql-libs is earlier than 0:7.4.16-1.RHEL4.1" id="oval:com.redhat.rhsa:tst:20070064042" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060526019"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070064006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="postgresql-contrib is earlier than 0:7.4.16-1.RHEL4.1" id="oval:com.redhat.rhsa:tst:20070064044" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060526018"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070064005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="wireshark is earlier than 0:0.99.5-EL3.1" id="oval:com.redhat.rhsa:tst:20070066001" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060602001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="wireshark-gnome is earlier than 0:0.99.5-EL3.1" id="oval:com.redhat.rhsa:tst:20070066003" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060602002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="wireshark is earlier than 0:0.99.5-EL4.1" id="oval:com.redhat.rhsa:tst:20070066006" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060602001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="wireshark-gnome is earlier than 0:0.99.5-EL4.1" id="oval:com.redhat.rhsa:tst:20070066007" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060602002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="wireshark-gnome is earlier than 0:0.99.5-1.el5" id="oval:com.redhat.rhsa:tst:20070066009" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060602002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="wireshark-gnome is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20070066010" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060602002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="wireshark is earlier than 0:0.99.5-1.el5" id="oval:com.redhat.rhsa:tst:20070066011" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060602001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="wireshark is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20070066012" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060602001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="Red Hat Enterprise Linux 5 is installed" id="oval:com.redhat.rhsa:tst:20070066013" version="635">
   <red-def:object object_ref="oval:com.redhat.rhba:obj:20070026002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066008"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-odbc is earlier than 0:4.3.2-39.ent" id="oval:com.redhat.rhsa:tst:20070076001" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070076001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-ldap is earlier than 0:4.3.2-39.ent" id="oval:com.redhat.rhsa:tst:20070076003" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070076001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-imap is earlier than 0:4.3.2-39.ent" id="oval:com.redhat.rhsa:tst:20070076005" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070076001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-devel is earlier than 0:4.3.2-39.ent" id="oval:com.redhat.rhsa:tst:20070076007" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070076001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-mysql is earlier than 0:4.3.2-39.ent" id="oval:com.redhat.rhsa:tst:20070076009" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276007"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070076001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-pgsql is earlier than 0:4.3.2-39.ent" id="oval:com.redhat.rhsa:tst:20070076011" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276006"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070076001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php is earlier than 0:4.3.2-39.ent" id="oval:com.redhat.rhsa:tst:20070076013" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070076001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-ncurses is earlier than 0:4.3.9-3.22.3" id="oval:com.redhat.rhsa:tst:20070076016" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276011"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070076004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-mbstring is earlier than 0:4.3.9-3.22.3" id="oval:com.redhat.rhsa:tst:20070076018" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276013"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070076004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-pear is earlier than 0:4.3.9-3.22.3" id="oval:com.redhat.rhsa:tst:20070076020" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276012"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070076004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-pgsql is earlier than 0:4.3.9-3.22.3" id="oval:com.redhat.rhsa:tst:20070076022" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276006"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070076004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-ldap is earlier than 0:4.3.9-3.22.3" id="oval:com.redhat.rhsa:tst:20070076023" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070076004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-devel is earlier than 0:4.3.9-3.22.3" id="oval:com.redhat.rhsa:tst:20070076024" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070076004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-gd is earlier than 0:4.3.9-3.22.3" id="oval:com.redhat.rhsa:tst:20070076025" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276015"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070076004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-snmp is earlier than 0:4.3.9-3.22.3" id="oval:com.redhat.rhsa:tst:20070076027" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276010"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070076004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-imap is earlier than 0:4.3.9-3.22.3" id="oval:com.redhat.rhsa:tst:20070076029" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070076004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-mysql is earlier than 0:4.3.9-3.22.3" id="oval:com.redhat.rhsa:tst:20070076030" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276007"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070076004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-domxml is earlier than 0:4.3.9-3.22.3" id="oval:com.redhat.rhsa:tst:20070076031" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276014"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070076004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php is earlier than 0:4.3.9-3.22.3" id="oval:com.redhat.rhsa:tst:20070076033" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070076004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-xmlrpc is earlier than 0:4.3.9-3.22.3" id="oval:com.redhat.rhsa:tst:20070076034" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276009"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070076004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-odbc is earlier than 0:4.3.9-3.22.3" id="oval:com.redhat.rhsa:tst:20070076036" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070076004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-js-debugger is earlier than 0:1.0.8-0.2.el3" id="oval:com.redhat.rhsa:tst:20070077001" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070077001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-nspr is earlier than 0:1.0.8-0.2.el3" id="oval:com.redhat.rhsa:tst:20070077003" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070077001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-devel is earlier than 0:1.0.8-0.2.el3" id="oval:com.redhat.rhsa:tst:20070077005" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578007"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070077001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-chat is earlier than 0:1.0.8-0.2.el3" id="oval:com.redhat.rhsa:tst:20070077007" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070077001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-nss is earlier than 0:1.0.8-0.2.el3" id="oval:com.redhat.rhsa:tst:20070077009" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578008"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070077001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey is earlier than 0:1.0.8-0.2.el3" id="oval:com.redhat.rhsa:tst:20070077011" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578009"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070077001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-nspr-devel is earlier than 0:1.0.8-0.2.el3" id="oval:com.redhat.rhsa:tst:20070077013" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070077001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-dom-inspector is earlier than 0:1.0.8-0.2.el3" id="oval:com.redhat.rhsa:tst:20070077015" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070077001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-mail is earlier than 0:1.0.8-0.2.el3" id="oval:com.redhat.rhsa:tst:20070077017" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578010"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070077001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-nss-devel is earlier than 0:1.0.8-0.2.el3" id="oval:com.redhat.rhsa:tst:20070077019" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578006"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070077001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="devhelp-devel is earlier than 0:0.10-0.7.el4" id="oval:com.redhat.rhsa:tst:20070077022" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060329001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070077004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="devhelp is earlier than 0:0.10-0.7.el4" id="oval:com.redhat.rhsa:tst:20070077024" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060329002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070077004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-js-debugger is earlier than 0:1.0.8-0.2.el4" id="oval:com.redhat.rhsa:tst:20070077026" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070077005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-devel is earlier than 0:1.0.8-0.2.el4" id="oval:com.redhat.rhsa:tst:20070077027" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578007"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070077005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-chat is earlier than 0:1.0.8-0.2.el4" id="oval:com.redhat.rhsa:tst:20070077028" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070077005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey is earlier than 0:1.0.8-0.2.el4" id="oval:com.redhat.rhsa:tst:20070077029" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578009"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070077005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-dom-inspector is earlier than 0:1.0.8-0.2.el4" id="oval:com.redhat.rhsa:tst:20070077030" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070077005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-mail is earlier than 0:1.0.8-0.2.el4" id="oval:com.redhat.rhsa:tst:20070077031" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578010"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070077005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="gnomemeeting is earlier than 0:0.96.0-5" id="oval:com.redhat.rhsa:tst:20070086001" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070086001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070086001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="gnomemeeting is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20070086002" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070086001"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="gnomemeeting is earlier than 0:1.0.2-9" id="oval:com.redhat.rhsa:tst:20070086004" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070086001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070086004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="krb5-server is earlier than 0:1.2.7-61" id="oval:com.redhat.rhsa:tst:20070095001" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070095001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070095001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="krb5-server is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20070095002" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070095001"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="krb5-devel is earlier than 0:1.2.7-61" id="oval:com.redhat.rhsa:tst:20070095003" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070095002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070095001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="krb5-devel is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20070095004" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070095002"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="krb5-libs is earlier than 0:1.2.7-61" id="oval:com.redhat.rhsa:tst:20070095005" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070095003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070095003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="krb5-libs is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20070095006" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070095003"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="krb5-workstation is earlier than 0:1.2.7-61" id="oval:com.redhat.rhsa:tst:20070095007" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070095004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070095001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="krb5-workstation is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20070095008" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070095004"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="krb5-server is earlier than 0:1.3.4-46" id="oval:com.redhat.rhsa:tst:20070095010" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070095001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070095005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="krb5-devel is earlier than 0:1.3.4-46" id="oval:com.redhat.rhsa:tst:20070095011" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070095002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070095005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="krb5-workstation is earlier than 0:1.3.4-46" id="oval:com.redhat.rhsa:tst:20070095012" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070095004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070095005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="krb5-libs is earlier than 0:1.3.4-46" id="oval:com.redhat.rhsa:tst:20070095013" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070095003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070095006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="krb5-workstation is earlier than 0:1.5-23" id="oval:com.redhat.rhsa:tst:20070095015" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070095004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070095008"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="krb5-workstation is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20070095016" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070095004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="krb5-libs is earlier than 0:1.5-23" id="oval:com.redhat.rhsa:tst:20070095017" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070095003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070095010"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="krb5-libs is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20070095018" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070095003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="krb5-devel is earlier than 0:1.5-23" id="oval:com.redhat.rhsa:tst:20070095019" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070095002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070095010"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="krb5-devel is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20070095020" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070095002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="krb5-server is earlier than 0:1.5-23" id="oval:com.redhat.rhsa:tst:20070095021" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070095001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070095008"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="krb5-server is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20070095022" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070095001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="gnupg is earlier than 0:1.2.1-20" id="oval:com.redhat.rhsa:tst:20070106001" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060266001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070106001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="gnupg is earlier than 0:1.2.6-9" id="oval:com.redhat.rhsa:tst:20070106004" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060266001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070106004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="cups-libs is earlier than 1:1.1.17-13.3.42" id="oval:com.redhat.rhsa:tst:20070123001" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060163002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070123001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="cups is earlier than 1:1.1.17-13.3.42" id="oval:com.redhat.rhsa:tst:20070123003" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060163003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070123003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="cups-devel is earlier than 1:1.1.17-13.3.42" id="oval:com.redhat.rhsa:tst:20070123005" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060163001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070123003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="cups-devel is earlier than 1:1.1.22-0.rc1.9.18" id="oval:com.redhat.rhsa:tst:20070123008" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060163001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070123005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="cups is earlier than 1:1.1.22-0.rc1.9.18" id="oval:com.redhat.rhsa:tst:20070123009" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060163003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070123005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="cups-libs is earlier than 1:1.1.22-0.rc1.9.18" id="oval:com.redhat.rhsa:tst:20070123010" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060163002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070123006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="cups is earlier than 1:1.2.4-11.5.1.el5" id="oval:com.redhat.rhsa:tst:20070123012" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060163003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070123008"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="cups is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20070123013" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060163003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="cups-devel is earlier than 1:1.2.4-11.5.1.el5" id="oval:com.redhat.rhsa:tst:20070123014" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060163001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070123010"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="cups-devel is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20070123015" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060163001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="cups-libs is earlier than 1:1.2.4-11.5.1.el5" id="oval:com.redhat.rhsa:tst:20070123016" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060163002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070123010"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="cups-libs is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20070123017" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060163002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="cups-lpd is earlier than 1:1.2.4-11.5.1.el5" id="oval:com.redhat.rhsa:tst:20070123018" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070123005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070123008"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="cups-lpd is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20070123019" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070123005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-tools is earlier than 0:4.3.0-120.EL" id="oval:com.redhat.rhsa:tst:20070125001" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635016"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070125001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-xauth is earlier than 0:4.3.0-120.EL" id="oval:com.redhat.rhsa:tst:20070125003" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635009"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070125001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-ISO8859-9-100dpi-fonts is earlier than 0:4.3.0-120.EL" id="oval:com.redhat.rhsa:tst:20070125005" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635030"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070125001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-syriac-fonts is earlier than 0:4.3.0-120.EL" id="oval:com.redhat.rhsa:tst:20070125007" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635012"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070125001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-base-fonts is earlier than 0:4.3.0-120.EL" id="oval:com.redhat.rhsa:tst:20070125009" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070125001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-ISO8859-2-75dpi-fonts is earlier than 0:4.3.0-120.EL" id="oval:com.redhat.rhsa:tst:20070125011" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070125001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86 is earlier than 0:4.3.0-120.EL" id="oval:com.redhat.rhsa:tst:20070125013" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635015"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070125001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-ISO8859-9-75dpi-fonts is earlier than 0:4.3.0-120.EL" id="oval:com.redhat.rhsa:tst:20070125015" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635006"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070125001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-ISO8859-14-100dpi-fonts is earlier than 0:4.3.0-120.EL" id="oval:com.redhat.rhsa:tst:20070125017" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070125001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-twm is earlier than 0:4.3.0-120.EL" id="oval:com.redhat.rhsa:tst:20070125019" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635028"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070125001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-cyrillic-fonts is earlier than 0:4.3.0-120.EL" id="oval:com.redhat.rhsa:tst:20070125021" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635007"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070125001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-ISO8859-2-100dpi-fonts is earlier than 0:4.3.0-120.EL" id="oval:com.redhat.rhsa:tst:20070125023" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635008"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070125001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-truetype-fonts is earlier than 0:4.3.0-120.EL" id="oval:com.redhat.rhsa:tst:20070125025" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635010"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070125001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-75dpi-fonts is earlier than 0:4.3.0-120.EL" id="oval:com.redhat.rhsa:tst:20070125027" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635013"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070125001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-sdk is earlier than 0:4.3.0-120.EL" id="oval:com.redhat.rhsa:tst:20070125029" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635025"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070125003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-xfs is earlier than 0:4.3.0-120.EL" id="oval:com.redhat.rhsa:tst:20070125031" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635026"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070125001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-Xvfb is earlier than 0:4.3.0-120.EL" id="oval:com.redhat.rhsa:tst:20070125033" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635014"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070125001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-xdm is earlier than 0:4.3.0-120.EL" id="oval:com.redhat.rhsa:tst:20070125035" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635011"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070125001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-ISO8859-14-75dpi-fonts is earlier than 0:4.3.0-120.EL" id="oval:com.redhat.rhsa:tst:20070125037" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635017"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070125001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-devel is earlier than 0:4.3.0-120.EL" id="oval:com.redhat.rhsa:tst:20070125039" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635019"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070125004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-doc is earlier than 0:4.3.0-120.EL" id="oval:com.redhat.rhsa:tst:20070125041" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635018"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070125003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-ISO8859-15-75dpi-fonts is earlier than 0:4.3.0-120.EL" id="oval:com.redhat.rhsa:tst:20070125043" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635020"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070125001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-100dpi-fonts is earlier than 0:4.3.0-120.EL" id="oval:com.redhat.rhsa:tst:20070125045" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635024"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070125001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-ISO8859-15-100dpi-fonts is earlier than 0:4.3.0-120.EL" id="oval:com.redhat.rhsa:tst:20070125047" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635022"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070125001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-Mesa-libGLU is earlier than 0:4.3.0-120.EL" id="oval:com.redhat.rhsa:tst:20070125049" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070125004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-libs is earlier than 0:4.3.0-120.EL" id="oval:com.redhat.rhsa:tst:20070125051" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635021"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070125004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-Mesa-libGL is earlier than 0:4.3.0-120.EL" id="oval:com.redhat.rhsa:tst:20070125053" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635023"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070125004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-Xnest is earlier than 0:4.3.0-120.EL" id="oval:com.redhat.rhsa:tst:20070125055" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635029"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070125001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-libs-data is earlier than 0:4.3.0-120.EL" id="oval:com.redhat.rhsa:tst:20070125057" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635027"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070125001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-font-utils is earlier than 0:4.3.0-120.EL" id="oval:com.redhat.rhsa:tst:20070125059" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070125001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="freetype is earlier than 0:2.1.4-6.el3" id="oval:com.redhat.rhsa:tst:20070150001" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060500001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070150001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="freetype-devel is earlier than 0:2.1.4-6.el3" id="oval:com.redhat.rhsa:tst:20070150003" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060500002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070150003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="freetype-utils is earlier than 0:2.1.9-5.el4" id="oval:com.redhat.rhsa:tst:20070150006" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060500005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070150005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="freetype-devel is earlier than 0:2.1.9-5.el4" id="oval:com.redhat.rhsa:tst:20070150008" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060500002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070150005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="freetype-demos is earlier than 0:2.1.9-5.el4" id="oval:com.redhat.rhsa:tst:20070150009" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060500004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070150005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="freetype is earlier than 0:2.1.9-5.el4" id="oval:com.redhat.rhsa:tst:20070150011" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060500001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070150006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="freetype-demos is earlier than 0:2.2.1-17.el5" id="oval:com.redhat.rhsa:tst:20070150013" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060500004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070150008"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="freetype-demos is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20070150014" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060500004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="freetype is earlier than 0:2.2.1-17.el5" id="oval:com.redhat.rhsa:tst:20070150015" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060500001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070150010"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="freetype is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20070150016" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060500001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="freetype-devel is earlier than 0:2.2.1-17.el5" id="oval:com.redhat.rhsa:tst:20070150017" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060500002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070150010"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="freetype-devel is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20070150018" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060500002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-pgsql is earlier than 0:4.3.2-40.ent" id="oval:com.redhat.rhsa:tst:20070155001" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276006"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070155001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-mysql is earlier than 0:4.3.2-40.ent" id="oval:com.redhat.rhsa:tst:20070155003" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276007"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070155001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php is earlier than 0:4.3.2-40.ent" id="oval:com.redhat.rhsa:tst:20070155005" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070155001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-imap is earlier than 0:4.3.2-40.ent" id="oval:com.redhat.rhsa:tst:20070155007" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070155001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-devel is earlier than 0:4.3.2-40.ent" id="oval:com.redhat.rhsa:tst:20070155009" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070155001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-odbc is earlier than 0:4.3.2-40.ent" id="oval:com.redhat.rhsa:tst:20070155011" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070155001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-ldap is earlier than 0:4.3.2-40.ent" id="oval:com.redhat.rhsa:tst:20070155013" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070155001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-mbstring is earlier than 0:4.3.9-3.22.4" id="oval:com.redhat.rhsa:tst:20070155016" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276013"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070155004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-pgsql is earlier than 0:4.3.9-3.22.4" id="oval:com.redhat.rhsa:tst:20070155018" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276006"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070155004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-pear is earlier than 0:4.3.9-3.22.4" id="oval:com.redhat.rhsa:tst:20070155019" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276012"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070155004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-ldap is earlier than 0:4.3.9-3.22.4" id="oval:com.redhat.rhsa:tst:20070155021" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070155004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-devel is earlier than 0:4.3.9-3.22.4" id="oval:com.redhat.rhsa:tst:20070155022" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070155004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-gd is earlier than 0:4.3.9-3.22.4" id="oval:com.redhat.rhsa:tst:20070155023" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276015"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070155004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-snmp is earlier than 0:4.3.9-3.22.4" id="oval:com.redhat.rhsa:tst:20070155025" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276010"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070155004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-imap is earlier than 0:4.3.9-3.22.4" id="oval:com.redhat.rhsa:tst:20070155027" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070155004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-mysql is earlier than 0:4.3.9-3.22.4" id="oval:com.redhat.rhsa:tst:20070155028" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276007"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070155004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php is earlier than 0:4.3.9-3.22.4" id="oval:com.redhat.rhsa:tst:20070155029" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070155004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-domxml is earlier than 0:4.3.9-3.22.4" id="oval:com.redhat.rhsa:tst:20070155030" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276014"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070155004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-xmlrpc is earlier than 0:4.3.9-3.22.4" id="oval:com.redhat.rhsa:tst:20070155032" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276009"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070155004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-odbc is earlier than 0:4.3.9-3.22.4" id="oval:com.redhat.rhsa:tst:20070155034" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070155004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-ncurses is earlier than 0:4.3.9-3.22.4" id="oval:com.redhat.rhsa:tst:20070155035" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276011"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070155004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="xscreensaver is earlier than 1:4.10-21.el3" id="oval:com.redhat.rhsa:tst:20070322001" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060498001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070322001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="xscreensaver is earlier than 1:4.18-5.rhel4.14" id="oval:com.redhat.rhsa:tst:20070322004" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060498001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070322004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="rh-postgresql-server is earlier than 0:7.3.19-1" id="oval:com.redhat.rhsa:tst:20070336001" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060526003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070336001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="rh-postgresql-devel is earlier than 0:7.3.19-1" id="oval:com.redhat.rhsa:tst:20070336003" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060526009"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070336001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="rh-postgresql-libs is earlier than 0:7.3.19-1" id="oval:com.redhat.rhsa:tst:20070336005" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060526004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070336003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="rh-postgresql-docs is earlier than 0:7.3.19-1" id="oval:com.redhat.rhsa:tst:20070336007" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060526005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070336001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="rh-postgresql-jdbc is earlier than 0:7.3.19-1" id="oval:com.redhat.rhsa:tst:20070336009" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060526006"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070336001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="rh-postgresql-pl is earlier than 0:7.3.19-1" id="oval:com.redhat.rhsa:tst:20070336011" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060526008"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070336001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="rh-postgresql-tcl is earlier than 0:7.3.19-1" id="oval:com.redhat.rhsa:tst:20070336013" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060526010"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070336001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="rh-postgresql is earlier than 0:7.3.19-1" id="oval:com.redhat.rhsa:tst:20070336015" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060526011"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070336001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="rh-postgresql-python is earlier than 0:7.3.19-1" id="oval:com.redhat.rhsa:tst:20070336017" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060526007"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070336001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="rh-postgresql-contrib is earlier than 0:7.3.19-1" id="oval:com.redhat.rhsa:tst:20070336019" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060526001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070336001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="rh-postgresql-test is earlier than 0:7.3.19-1" id="oval:com.redhat.rhsa:tst:20070336021" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060526002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070336001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="postgresql-contrib is earlier than 0:7.4.17-1.RHEL4.1" id="oval:com.redhat.rhsa:tst:20070336024" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060526018"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070336005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="postgresql-tcl is earlier than 0:7.4.17-1.RHEL4.1" id="oval:com.redhat.rhsa:tst:20070336026" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060526020"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070336005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="postgresql-devel is earlier than 0:7.4.17-1.RHEL4.1" id="oval:com.redhat.rhsa:tst:20070336028" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060526017"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070336005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="postgresql-server is earlier than 0:7.4.17-1.RHEL4.1" id="oval:com.redhat.rhsa:tst:20070336030" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060526016"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070336005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="postgresql is earlier than 0:7.4.17-1.RHEL4.1" id="oval:com.redhat.rhsa:tst:20070336032" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060526023"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070336005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="postgresql-pl is earlier than 0:7.4.17-1.RHEL4.1" id="oval:com.redhat.rhsa:tst:20070336034" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060526013"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070336005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="postgresql-test is earlier than 0:7.4.17-1.RHEL4.1" id="oval:com.redhat.rhsa:tst:20070336036" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060526014"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070336005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="postgresql-libs is earlier than 0:7.4.17-1.RHEL4.1" id="oval:com.redhat.rhsa:tst:20070336038" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060526019"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070336006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="postgresql-python is earlier than 0:7.4.17-1.RHEL4.1" id="oval:com.redhat.rhsa:tst:20070336040" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060526015"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070336005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="postgresql-docs is earlier than 0:7.4.17-1.RHEL4.1" id="oval:com.redhat.rhsa:tst:20070336042" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060526022"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070336005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="postgresql-jdbc is earlier than 0:7.4.17-1.RHEL4.1" id="oval:com.redhat.rhsa:tst:20070336044" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060526021"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070336005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="postgresql-python is earlier than 0:8.1.9-1.el5" id="oval:com.redhat.rhsa:tst:20070336047" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060526015"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070336008"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="postgresql-python is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20070336048" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060526015"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="postgresql-pl is earlier than 0:8.1.9-1.el5" id="oval:com.redhat.rhsa:tst:20070336049" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060526013"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070336008"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="postgresql-pl is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20070336050" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060526013"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="postgresql-contrib is earlier than 0:8.1.9-1.el5" id="oval:com.redhat.rhsa:tst:20070336051" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060526018"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070336008"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="postgresql-contrib is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20070336052" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060526018"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="postgresql-docs is earlier than 0:8.1.9-1.el5" id="oval:com.redhat.rhsa:tst:20070336053" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060526022"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070336008"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="postgresql-docs is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20070336054" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060526022"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="postgresql is earlier than 0:8.1.9-1.el5" id="oval:com.redhat.rhsa:tst:20070336055" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060526023"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070336010"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="postgresql is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20070336056" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060526023"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="postgresql-tcl is earlier than 0:8.1.9-1.el5" id="oval:com.redhat.rhsa:tst:20070336057" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060526020"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070336008"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="postgresql-tcl is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20070336058" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060526020"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="postgresql-libs is earlier than 0:8.1.9-1.el5" id="oval:com.redhat.rhsa:tst:20070336059" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060526019"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070336011"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="postgresql-libs is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20070336060" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060526019"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="postgresql-devel is earlier than 0:8.1.9-1.el5" id="oval:com.redhat.rhsa:tst:20070336061" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060526017"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070336011"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="postgresql-devel is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20070336062" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060526017"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="postgresql-server is earlier than 0:8.1.9-1.el5" id="oval:com.redhat.rhsa:tst:20070336063" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060526016"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070336008"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="postgresql-server is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20070336064" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060526016"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="postgresql-test is earlier than 0:8.1.9-1.el5" id="oval:com.redhat.rhsa:tst:20070336065" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060526014"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070336008"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="postgresql-test is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20070336066" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060526014"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="freeradius is earlier than 0:1.0.1-2.RHEL3.4" id="oval:com.redhat.rhsa:tst:20070338001" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060271001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070338001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="freeradius is earlier than 0:1.0.1-3.RHEL4.5" id="oval:com.redhat.rhsa:tst:20070338004" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060271001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070338004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="freeradius-mysql is earlier than 0:1.0.1-3.RHEL4.5" id="oval:com.redhat.rhsa:tst:20070338005" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060271003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070338004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="freeradius-unixODBC is earlier than 0:1.0.1-3.RHEL4.5" id="oval:com.redhat.rhsa:tst:20070338007" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060271004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070338004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="freeradius-postgresql is earlier than 0:1.0.1-3.RHEL4.5" id="oval:com.redhat.rhsa:tst:20070338009" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060271005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070338004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="freeradius-mysql is earlier than 0:1.1.3-1.2.el5" id="oval:com.redhat.rhsa:tst:20070338012" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060271003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070338006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="freeradius-mysql is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20070338013" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060271003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="freeradius-postgresql is earlier than 0:1.1.3-1.2.el5" id="oval:com.redhat.rhsa:tst:20070338014" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060271005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070338006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="freeradius-postgresql is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20070338015" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060271005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="freeradius-unixODBC is earlier than 0:1.1.3-1.2.el5" id="oval:com.redhat.rhsa:tst:20070338016" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060271004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070338006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="freeradius-unixODBC is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20070338017" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060271004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="freeradius is earlier than 0:1.1.3-1.2.el5" id="oval:com.redhat.rhsa:tst:20070338018" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060271001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070338006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="freeradius is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20070338019" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060271001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="gimp is earlier than 1:1.2.3-20.3.el3" id="oval:com.redhat.rhsa:tst:20070343001" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070343001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070343001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="gimp is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20070343002" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070343001"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="gimp-devel is earlier than 1:1.2.3-20.3.el3" id="oval:com.redhat.rhsa:tst:20070343003" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070343002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070343001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="gimp-devel is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20070343004" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070343002"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="gimp-perl is earlier than 1:1.2.3-20.3.el3" id="oval:com.redhat.rhsa:tst:20070343005" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070343003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070343001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="gimp-perl is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20070343006" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070343003"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="gimp-devel is earlier than 1:2.0.5-6.2.el4" id="oval:com.redhat.rhsa:tst:20070343008" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070343002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070343004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="gimp is earlier than 1:2.0.5-6.2.el4" id="oval:com.redhat.rhsa:tst:20070343009" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070343001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070343004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="gimp-devel is earlier than 2:2.2.13-2.el5" id="oval:com.redhat.rhsa:tst:20070343011" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070343002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070343006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="gimp-devel is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20070343012" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070343002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="gimp-libs is earlier than 2:2.2.13-2.el5" id="oval:com.redhat.rhsa:tst:20070343013" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070343005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070343006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="gimp-libs is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20070343014" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070343005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="gimp is earlier than 2:2.2.13-2.el5" id="oval:com.redhat.rhsa:tst:20070343015" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070343001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070343008"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="gimp is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20070343016" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070343001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="vixie-cron is earlier than 0:4.1-19.EL3" id="oval:com.redhat.rhsa:tst:20070345001" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060117001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070345001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="vixie-cron is earlier than 4:4.1-47.EL4" id="oval:com.redhat.rhsa:tst:20070345004" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060117001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070345004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="vixie-cron is earlier than 4:4.1-70.el5" id="oval:com.redhat.rhsa:tst:20070345006" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060117001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070345006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="vixie-cron is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20070345007" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060117001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="evolution-devel is earlier than 0:1.4.5-20.el3" id="oval:com.redhat.rhsa:tst:20070353001" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070353001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070353001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="evolution-devel is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20070353002" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070353001"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="evolution is earlier than 0:1.4.5-20.el3" id="oval:com.redhat.rhsa:tst:20070353003" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070353002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070353001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="evolution is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20070353004" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070353002"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="evolution-devel is earlier than 0:2.0.2-35.0.2.el4" id="oval:com.redhat.rhsa:tst:20070353006" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070353001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070353004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="evolution is earlier than 0:2.0.2-35.0.2.el4" id="oval:com.redhat.rhsa:tst:20070353007" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070353002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070353004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="samba is earlier than 0:3.0.9-1.3E.13.2" id="oval:com.redhat.rhsa:tst:20070354001" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060591002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070354001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="samba-common is earlier than 0:3.0.9-1.3E.13.2" id="oval:com.redhat.rhsa:tst:20070354003" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060591001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070354001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="samba-client is earlier than 0:3.0.9-1.3E.13.2" id="oval:com.redhat.rhsa:tst:20070354005" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060591004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070354003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="samba-swat is earlier than 0:3.0.9-1.3E.13.2" id="oval:com.redhat.rhsa:tst:20070354007" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060591003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070354003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="samba is earlier than 0:3.0.10-1.4E.12.2" id="oval:com.redhat.rhsa:tst:20070354010" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060591002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070354005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="samba-swat is earlier than 0:3.0.10-1.4E.12.2" id="oval:com.redhat.rhsa:tst:20070354011" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060591003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070354005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="samba-common is earlier than 0:3.0.10-1.4E.12.2" id="oval:com.redhat.rhsa:tst:20070354012" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060591001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070354006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="samba-client is earlier than 0:3.0.10-1.4E.12.2" id="oval:com.redhat.rhsa:tst:20070354013" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060591004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070354005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="samba-common is earlier than 0:3.0.23c-2.el5.2.0.2" id="oval:com.redhat.rhsa:tst:20070354015" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060591001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070354008"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="samba-common is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20070354016" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060591001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="samba-client is earlier than 0:3.0.23c-2.el5.2.0.2" id="oval:com.redhat.rhsa:tst:20070354017" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060591004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070354010"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="samba-client is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20070354018" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060591004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="samba-swat is earlier than 0:3.0.23c-2.el5.2.0.2" id="oval:com.redhat.rhsa:tst:20070354019" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060591003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070354010"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="samba-swat is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20070354020" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060591003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="samba is earlier than 0:3.0.23c-2.el5.2.0.2" id="oval:com.redhat.rhsa:tst:20070354021" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060591002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070354010"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="samba is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20070354022" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060591002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libpng-devel is earlier than 2:1.2.2-27" id="oval:com.redhat.rhsa:tst:20070356001" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070356001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070356001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libpng-devel is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20070356002" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070356001"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libpng is earlier than 2:1.2.2-27" id="oval:com.redhat.rhsa:tst:20070356003" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070356002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070356003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libpng is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20070356004" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070356002"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libpng10-devel is earlier than 0:1.0.13-17" id="oval:com.redhat.rhsa:tst:20070356005" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070356003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070356004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libpng10-devel is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20070356006" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070356003"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libpng10 is earlier than 0:1.0.13-17" id="oval:com.redhat.rhsa:tst:20070356007" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070356004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070356005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libpng10 is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20070356008" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070356004"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libpng is earlier than 2:1.2.7-3.el4" id="oval:com.redhat.rhsa:tst:20070356010" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070356002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070356007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libpng-devel is earlier than 2:1.2.7-3.el4" id="oval:com.redhat.rhsa:tst:20070356011" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070356001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070356008"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libpng10 is earlier than 0:1.0.16-3" id="oval:com.redhat.rhsa:tst:20070356012" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070356004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070356009"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libpng10-devel is earlier than 0:1.0.16-3" id="oval:com.redhat.rhsa:tst:20070356013" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070356003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070356010"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libpng is earlier than 2:1.2.10-7.0.2" id="oval:com.redhat.rhsa:tst:20070356015" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070356002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070356012"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libpng is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20070356016" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070356002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libpng-devel is earlier than 2:1.2.10-7.0.2" id="oval:com.redhat.rhsa:tst:20070356017" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070356001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070356012"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libpng-devel is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20070356018" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070356001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="squirrelmail is earlier than 0:1.4.8-6.el3" id="oval:com.redhat.rhsa:tst:20070358001" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060283001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070358001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="squirrelmail is earlier than 0:1.4.8-4.0.1.el4" id="oval:com.redhat.rhsa:tst:20070358004" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060283001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070358004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="squirrelmail is earlier than 0:1.4.8-4.0.1.el5" id="oval:com.redhat.rhsa:tst:20070358006" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060283001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070358006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="squirrelmail is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20070358007" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060283001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="krb5-server is earlier than 0:1.2.7-66" id="oval:com.redhat.rhsa:tst:20070384001" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070095001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070384001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="krb5-devel is earlier than 0:1.2.7-66" id="oval:com.redhat.rhsa:tst:20070384003" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070095002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070384001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="krb5-libs is earlier than 0:1.2.7-66" id="oval:com.redhat.rhsa:tst:20070384005" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070095003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070384003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="krb5-workstation is earlier than 0:1.2.7-66" id="oval:com.redhat.rhsa:tst:20070384007" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070095004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070384001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="fetchmail is earlier than 0:6.2.0-3.el3.4" id="oval:com.redhat.rhsa:tst:20070385001" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070018001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070385001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="fetchmail is earlier than 0:6.2.5-6.0.1.el4" id="oval:com.redhat.rhsa:tst:20070385004" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070018001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070385004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="fetchmail is earlier than 0:6.3.6-1.0.1.el5" id="oval:com.redhat.rhsa:tst:20070385006" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070018001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070385006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="fetchmail is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20070385007" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070018001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="mutt is earlier than 5:1.4.1-5.el3" id="oval:com.redhat.rhsa:tst:20070386001" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060577001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070386001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="mutt is earlier than 5:1.4.1-12.0.3.el4" id="oval:com.redhat.rhsa:tst:20070386004" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060577001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070386004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="mutt is earlier than 5:1.4.2.2-3.0.2.el5" id="oval:com.redhat.rhsa:tst:20070386006" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060577001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070386006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="mutt is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20070386007" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060577001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="quagga is earlier than 0:0.96.2-12.3E" id="oval:com.redhat.rhsa:tst:20070389001" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060525001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070389001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="quagga is earlier than 0:0.98.3-2.4.0.1.el4" id="oval:com.redhat.rhsa:tst:20070389004" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060525001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070389004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="quagga-contrib is earlier than 0:0.98.3-2.4.0.1.el4" id="oval:com.redhat.rhsa:tst:20070389005" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060525004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070389004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="quagga-devel is earlier than 0:0.98.3-2.4.0.1.el4" id="oval:com.redhat.rhsa:tst:20070389007" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060525003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070389004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="quagga is earlier than 0:0.98.6-2.1.0.1.el5" id="oval:com.redhat.rhsa:tst:20070389010" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060525001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070389006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="quagga is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20070389011" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060525001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="quagga-contrib is earlier than 0:0.98.6-2.1.0.1.el5" id="oval:com.redhat.rhsa:tst:20070389012" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060525004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070389006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="quagga-contrib is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20070389013" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060525004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="quagga-devel is earlier than 0:0.98.6-2.1.0.1.el5" id="oval:com.redhat.rhsa:tst:20070389014" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060525003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070389008"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="quagga-devel is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20070389015" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060525003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="mod_perl-devel is earlier than 0:1.99_09-12.ent" id="oval:com.redhat.rhsa:tst:20070395001" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070395001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070395001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="mod_perl-devel is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20070395002" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070395001"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="mod_perl is earlier than 0:1.99_09-12.ent" id="oval:com.redhat.rhsa:tst:20070395003" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070395002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070395001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="mod_perl is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20070395004" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070395002"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="mod_perl-devel is earlier than 0:1.99_16-4.5" id="oval:com.redhat.rhsa:tst:20070395006" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070395001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070395004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="mod_perl is earlier than 0:1.99_16-4.5" id="oval:com.redhat.rhsa:tst:20070395007" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070395002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070395004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="mod_perl-devel is earlier than 0:2.0.2-6.3.el5" id="oval:com.redhat.rhsa:tst:20070395009" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070395001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070395006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="mod_perl-devel is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20070395010" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070395001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="mod_perl is earlier than 0:2.0.2-6.3.el5" id="oval:com.redhat.rhsa:tst:20070395011" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070395002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070395008"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="mod_perl is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20070395012" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070395002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-devel is earlier than 0:1.0.9-0.1.el3" id="oval:com.redhat.rhsa:tst:20070402001" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578007"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070402001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.1.el3" id="oval:com.redhat.rhsa:tst:20070402003" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578006"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070402001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-nspr is earlier than 0:1.0.9-0.1.el3" id="oval:com.redhat.rhsa:tst:20070402005" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070402001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-mail is earlier than 0:1.0.9-0.1.el3" id="oval:com.redhat.rhsa:tst:20070402007" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578010"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070402001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.1.el3" id="oval:com.redhat.rhsa:tst:20070402009" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070402001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-nss is earlier than 0:1.0.9-0.1.el3" id="oval:com.redhat.rhsa:tst:20070402011" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578008"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070402001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-chat is earlier than 0:1.0.9-0.1.el3" id="oval:com.redhat.rhsa:tst:20070402013" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070402001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey is earlier than 0:1.0.9-0.1.el3" id="oval:com.redhat.rhsa:tst:20070402015" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578009"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070402001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.1.el3" id="oval:com.redhat.rhsa:tst:20070402017" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070402001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.1.el3" id="oval:com.redhat.rhsa:tst:20070402019" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070402001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-devel is earlier than 0:1.0.9-2.el4" id="oval:com.redhat.rhsa:tst:20070402022" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578007"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070402004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-js-debugger is earlier than 0:1.0.9-2.el4" id="oval:com.redhat.rhsa:tst:20070402023" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070402004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey is earlier than 0:1.0.9-2.el4" id="oval:com.redhat.rhsa:tst:20070402024" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578009"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070402004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-mail is earlier than 0:1.0.9-2.el4" id="oval:com.redhat.rhsa:tst:20070402025" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578010"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070402004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-dom-inspector is earlier than 0:1.0.9-2.el4" id="oval:com.redhat.rhsa:tst:20070402026" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070402004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-chat is earlier than 0:1.0.9-2.el4" id="oval:com.redhat.rhsa:tst:20070402027" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070402004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="devhelp-devel is earlier than 0:0.10-0.8.el4" id="oval:com.redhat.rhsa:tst:20070402028" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060329001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070402005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="devhelp is earlier than 0:0.10-0.8.el4" id="oval:com.redhat.rhsa:tst:20070402030" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060329002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070402005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="freetype is earlier than 0:2.1.4-7.el3" id="oval:com.redhat.rhsa:tst:20070403001" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060500001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070403001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="freetype-devel is earlier than 0:2.1.4-7.el3" id="oval:com.redhat.rhsa:tst:20070403003" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060500002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070403003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="freetype-devel is earlier than 0:2.1.9-6.el4" id="oval:com.redhat.rhsa:tst:20070403006" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060500002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070403005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="freetype-utils is earlier than 0:2.1.9-6.el4" id="oval:com.redhat.rhsa:tst:20070403007" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060500005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070403005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="freetype-demos is earlier than 0:2.1.9-6.el4" id="oval:com.redhat.rhsa:tst:20070403009" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060500004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070403005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="freetype is earlier than 0:2.1.9-6.el4" id="oval:com.redhat.rhsa:tst:20070403011" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060500001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070403006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="freetype-devel is earlier than 0:2.2.1-19.el5" id="oval:com.redhat.rhsa:tst:20070403013" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060500002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070403008"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="freetype is earlier than 0:2.2.1-19.el5" id="oval:com.redhat.rhsa:tst:20070403015" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060500001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070403008"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="freetype-demos is earlier than 0:2.2.1-19.el5" id="oval:com.redhat.rhsa:tst:20070403017" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060500004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070403010"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org is earlier than 0:1.1.2-39.2.0.EL3" id="oval:com.redhat.rhsa:tst:20070406001" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060573003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070406001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-libs is earlier than 0:1.1.2-39.2.0.EL3" id="oval:com.redhat.rhsa:tst:20070406003" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060573002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070406001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-i18n is earlier than 0:1.1.2-39.2.0.EL3" id="oval:com.redhat.rhsa:tst:20070406005" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060573001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070406001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-i18n is earlier than 0:1.1.5-10.6.0.1.EL4" id="oval:com.redhat.rhsa:tst:20070406008" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060573001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070406004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-kde is earlier than 0:1.1.5-10.6.0.1.EL4" id="oval:com.redhat.rhsa:tst:20070406009" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060573005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070406004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-libs is earlier than 0:1.1.5-10.6.0.1.EL4" id="oval:com.redhat.rhsa:tst:20070406011" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060573002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070406004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org is earlier than 0:1.1.5-10.6.0.1.EL4" id="oval:com.redhat.rhsa:tst:20070406012" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060573003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070406004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-bg_BG is earlier than 1:2.0.4-5.7.0.1.0" id="oval:com.redhat.rhsa:tst:20070406013" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406006"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070406005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-bg_BG is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20070406014" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406006"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-de is earlier than 1:2.0.4-5.7.0.1.0" id="oval:com.redhat.rhsa:tst:20070406015" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406007"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070406005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-de is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20070406016" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406007"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-et_EE is earlier than 1:2.0.4-5.7.0.1.0" id="oval:com.redhat.rhsa:tst:20070406017" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406008"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070406005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-et_EE is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20070406018" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406008"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-pt_PT is earlier than 1:2.0.4-5.7.0.1.0" id="oval:com.redhat.rhsa:tst:20070406019" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406009"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070406005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-pt_PT is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20070406020" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406009"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-tr_TR is earlier than 1:2.0.4-5.7.0.1.0" id="oval:com.redhat.rhsa:tst:20070406021" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406010"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070406005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-tr_TR is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20070406022" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406010"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-fi_FI is earlier than 1:2.0.4-5.7.0.1.0" id="oval:com.redhat.rhsa:tst:20070406023" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406011"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070406005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-fi_FI is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20070406024" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406011"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-hu_HU is earlier than 1:2.0.4-5.7.0.1.0" id="oval:com.redhat.rhsa:tst:20070406025" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406012"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070406005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-hu_HU is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20070406026" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406012"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-th_TH is earlier than 1:2.0.4-5.7.0.1.0" id="oval:com.redhat.rhsa:tst:20070406027" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406013"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070406005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-th_TH is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20070406028" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406013"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-ca_ES is earlier than 1:2.0.4-5.7.0.1.0" id="oval:com.redhat.rhsa:tst:20070406029" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406014"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070406005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-ca_ES is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20070406030" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406014"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-pyuno is earlier than 1:2.0.4-5.7.0.1.0" id="oval:com.redhat.rhsa:tst:20070406031" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406015"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070406005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-pyuno is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20070406032" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406015"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-core is earlier than 1:2.0.4-5.7.0.1.0" id="oval:com.redhat.rhsa:tst:20070406033" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406016"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070406005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-core is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20070406034" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406016"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-eu_ES is earlier than 1:2.0.4-5.7.0.1.0" id="oval:com.redhat.rhsa:tst:20070406035" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406017"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070406005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-eu_ES is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20070406036" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406017"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-hi_IN is earlier than 1:2.0.4-5.7.0.1.0" id="oval:com.redhat.rhsa:tst:20070406037" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406018"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070406005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-hi_IN is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20070406038" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406018"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-graphicfilter is earlier than 1:2.0.4-5.7.0.1.0" id="oval:com.redhat.rhsa:tst:20070406039" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406019"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070406005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-graphicfilter is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20070406040" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406019"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-zh_CN is earlier than 1:2.0.4-5.7.0.1.0" id="oval:com.redhat.rhsa:tst:20070406041" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406020"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070406005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-zh_CN is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20070406042" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406020"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-nl is earlier than 1:2.0.4-5.7.0.1.0" id="oval:com.redhat.rhsa:tst:20070406043" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406021"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070406005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-nl is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20070406044" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406021"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-sl_SI is earlier than 1:2.0.4-5.7.0.1.0" id="oval:com.redhat.rhsa:tst:20070406045" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406022"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070406005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-sl_SI is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20070406046" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406022"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-el_GR is earlier than 1:2.0.4-5.7.0.1.0" id="oval:com.redhat.rhsa:tst:20070406047" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406023"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070406005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-el_GR is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20070406048" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406023"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-calc is earlier than 1:2.0.4-5.7.0.1.0" id="oval:com.redhat.rhsa:tst:20070406049" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406024"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070406005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-calc is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20070406050" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406024"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-sr_CS is earlier than 1:2.0.4-5.7.0.1.0" id="oval:com.redhat.rhsa:tst:20070406051" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406025"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070406005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-sr_CS is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20070406052" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406025"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-cs_CZ is earlier than 1:2.0.4-5.7.0.1.0" id="oval:com.redhat.rhsa:tst:20070406053" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406026"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070406005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-cs_CZ is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20070406054" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406026"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-ms_MY is earlier than 1:2.0.4-5.7.0.1.0" id="oval:com.redhat.rhsa:tst:20070406055" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406027"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070406005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-ms_MY is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20070406056" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406027"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-ar is earlier than 1:2.0.4-5.7.0.1.0" id="oval:com.redhat.rhsa:tst:20070406057" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406028"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070406005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-ar is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20070406058" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406028"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-ru is earlier than 1:2.0.4-5.7.0.1.0" id="oval:com.redhat.rhsa:tst:20070406059" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406029"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070406005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-ru is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20070406060" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406029"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-xsltfilter is earlier than 1:2.0.4-5.7.0.1.0" id="oval:com.redhat.rhsa:tst:20070406061" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406030"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070406005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-xsltfilter is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20070406062" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406030"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-gu_IN is earlier than 1:2.0.4-5.7.0.1.0" id="oval:com.redhat.rhsa:tst:20070406063" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406031"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070406005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-gu_IN is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20070406064" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406031"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-he_IL is earlier than 1:2.0.4-5.7.0.1.0" id="oval:com.redhat.rhsa:tst:20070406065" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406032"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070406005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-he_IL is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20070406066" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406032"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-bn is earlier than 1:2.0.4-5.7.0.1.0" id="oval:com.redhat.rhsa:tst:20070406067" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406033"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070406005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-bn is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20070406068" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406033"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-math is earlier than 1:2.0.4-5.7.0.1.0" id="oval:com.redhat.rhsa:tst:20070406069" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406034"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070406005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-math is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20070406070" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406034"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-cy_GB is earlier than 1:2.0.4-5.7.0.1.0" id="oval:com.redhat.rhsa:tst:20070406071" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406035"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070406005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-cy_GB is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20070406072" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406035"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-writer is earlier than 1:2.0.4-5.7.0.1.0" id="oval:com.redhat.rhsa:tst:20070406073" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406036"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070406005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-writer is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20070406074" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406036"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-ja_JP is earlier than 1:2.0.4-5.7.0.1.0" id="oval:com.redhat.rhsa:tst:20070406075" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406037"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070406005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-ja_JP is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20070406076" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406037"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-sk_SK is earlier than 1:2.0.4-5.7.0.1.0" id="oval:com.redhat.rhsa:tst:20070406077" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406038"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070406005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-sk_SK is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20070406078" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406038"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-hr_HR is earlier than 1:2.0.4-5.7.0.1.0" id="oval:com.redhat.rhsa:tst:20070406079" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406039"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070406005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-hr_HR is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20070406080" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406039"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-pl_PL is earlier than 1:2.0.4-5.7.0.1.0" id="oval:com.redhat.rhsa:tst:20070406081" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406040"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070406005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-pl_PL is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20070406082" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406040"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-zh_TW is earlier than 1:2.0.4-5.7.0.1.0" id="oval:com.redhat.rhsa:tst:20070406083" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406041"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070406005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-zh_TW is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20070406084" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406041"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-lt_LT is earlier than 1:2.0.4-5.7.0.1.0" id="oval:com.redhat.rhsa:tst:20070406085" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406042"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070406005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-lt_LT is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20070406086" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406042"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-impress is earlier than 1:2.0.4-5.7.0.1.0" id="oval:com.redhat.rhsa:tst:20070406087" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406043"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070406005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-impress is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20070406088" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406043"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-ko_KR is earlier than 1:2.0.4-5.7.0.1.0" id="oval:com.redhat.rhsa:tst:20070406089" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406044"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070406005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-ko_KR is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20070406090" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406044"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-nb_NO is earlier than 1:2.0.4-5.7.0.1.0" id="oval:com.redhat.rhsa:tst:20070406091" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406045"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070406005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-nb_NO is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20070406092" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406045"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-it is earlier than 1:2.0.4-5.7.0.1.0" id="oval:com.redhat.rhsa:tst:20070406093" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406046"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070406005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-it is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20070406094" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406046"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-pa_IN is earlier than 1:2.0.4-5.7.0.1.0" id="oval:com.redhat.rhsa:tst:20070406095" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406047"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070406005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-pa_IN is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20070406096" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406047"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-ta_IN is earlier than 1:2.0.4-5.7.0.1.0" id="oval:com.redhat.rhsa:tst:20070406097" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406048"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070406005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-ta_IN is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20070406098" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406048"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-da_DK is earlier than 1:2.0.4-5.7.0.1.0" id="oval:com.redhat.rhsa:tst:20070406099" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406049"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070406005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-da_DK is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20070406100" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406049"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-base is earlier than 1:2.0.4-5.7.0.1.0" id="oval:com.redhat.rhsa:tst:20070406101" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406050"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070406005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-base is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20070406102" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406050"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-es is earlier than 1:2.0.4-5.7.0.1.0" id="oval:com.redhat.rhsa:tst:20070406103" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406051"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070406005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-es is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20070406104" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406051"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-emailmerge is earlier than 1:2.0.4-5.7.0.1.0" id="oval:com.redhat.rhsa:tst:20070406105" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406052"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070406005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-emailmerge is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20070406106" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406052"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-pt_BR is earlier than 1:2.0.4-5.7.0.1.0" id="oval:com.redhat.rhsa:tst:20070406107" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406053"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070406005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-pt_BR is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20070406108" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406053"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-af_ZA is earlier than 1:2.0.4-5.7.0.1.0" id="oval:com.redhat.rhsa:tst:20070406109" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406054"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070406005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-af_ZA is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20070406110" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406054"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-zu_ZA is earlier than 1:2.0.4-5.7.0.1.0" id="oval:com.redhat.rhsa:tst:20070406111" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406055"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070406005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-zu_ZA is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20070406112" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406055"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-ga_IE is earlier than 1:2.0.4-5.7.0.1.0" id="oval:com.redhat.rhsa:tst:20070406113" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406056"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070406005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-ga_IE is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20070406114" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406056"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-testtools is earlier than 1:2.0.4-5.7.0.1.0" id="oval:com.redhat.rhsa:tst:20070406115" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406057"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070406005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-testtools is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20070406116" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406057"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-gl_ES is earlier than 1:2.0.4-5.7.0.1.0" id="oval:com.redhat.rhsa:tst:20070406117" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406058"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070406005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-gl_ES is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20070406118" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406058"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-sv is earlier than 1:2.0.4-5.7.0.1.0" id="oval:com.redhat.rhsa:tst:20070406119" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406059"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070406005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-sv is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20070406120" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406059"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-draw is earlier than 1:2.0.4-5.7.0.1.0" id="oval:com.redhat.rhsa:tst:20070406121" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406060"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070406005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-draw is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20070406122" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406060"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-fr is earlier than 1:2.0.4-5.7.0.1.0" id="oval:com.redhat.rhsa:tst:20070406123" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406061"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070406005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-fr is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20070406124" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406061"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-nn_NO is earlier than 1:2.0.4-5.7.0.1.0" id="oval:com.redhat.rhsa:tst:20070406125" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406062"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070406005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-nn_NO is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20070406126" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406062"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-javafilter is earlier than 1:2.0.4-5.7.0.1.0" id="oval:com.redhat.rhsa:tst:20070406127" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406063"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070406005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-javafilter is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20070406128" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406063"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-sk_SK is earlier than 1:2.0.4-5.4.17.2" id="oval:com.redhat.rhsa:tst:20070406130" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406064"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070406007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-sk_SK is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20070406131" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406064"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-pt_BR is earlier than 1:2.0.4-5.4.17.2" id="oval:com.redhat.rhsa:tst:20070406132" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406065"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070406007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-pt_BR is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20070406133" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406065"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-hi_IN is earlier than 1:2.0.4-5.4.17.2" id="oval:com.redhat.rhsa:tst:20070406134" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406066"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070406007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-hi_IN is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20070406135" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406066"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-cs_CZ is earlier than 1:2.0.4-5.4.17.2" id="oval:com.redhat.rhsa:tst:20070406136" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406067"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070406007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-cs_CZ is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20070406137" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406067"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-nr_ZA is earlier than 1:2.0.4-5.4.17.2" id="oval:com.redhat.rhsa:tst:20070406138" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406068"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070406007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-nr_ZA is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20070406139" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406068"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-ve_ZA is earlier than 1:2.0.4-5.4.17.2" id="oval:com.redhat.rhsa:tst:20070406140" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406069"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070406007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-ve_ZA is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20070406141" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406069"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-graphicfilter is earlier than 1:2.0.4-5.4.17.2" id="oval:com.redhat.rhsa:tst:20070406142" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406070"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070406007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-graphicfilter is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20070406143" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406070"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-tr_TR is earlier than 1:2.0.4-5.4.17.2" id="oval:com.redhat.rhsa:tst:20070406144" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406071"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070406007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-tr_TR is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20070406145" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406071"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-writer is earlier than 1:2.0.4-5.4.17.2" id="oval:com.redhat.rhsa:tst:20070406146" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406072"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070406007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-writer is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20070406147" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406072"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-nb_NO is earlier than 1:2.0.4-5.4.17.2" id="oval:com.redhat.rhsa:tst:20070406148" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406073"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070406007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-nb_NO is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20070406149" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406073"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-ss_ZA is earlier than 1:2.0.4-5.4.17.2" id="oval:com.redhat.rhsa:tst:20070406150" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406074"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070406007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-ss_ZA is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20070406151" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406074"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-gl_ES is earlier than 1:2.0.4-5.4.17.2" id="oval:com.redhat.rhsa:tst:20070406152" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406075"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070406007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-gl_ES is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20070406153" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406075"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-zh_CN is earlier than 1:2.0.4-5.4.17.2" id="oval:com.redhat.rhsa:tst:20070406154" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406076"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070406007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-zh_CN is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20070406155" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406076"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-ga_IE is earlier than 1:2.0.4-5.4.17.2" id="oval:com.redhat.rhsa:tst:20070406156" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406077"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070406007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-ga_IE is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20070406157" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406077"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-testtools is earlier than 1:2.0.4-5.4.17.2" id="oval:com.redhat.rhsa:tst:20070406158" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406078"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070406007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-testtools is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20070406159" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406078"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-hu_HU is earlier than 1:2.0.4-5.4.17.2" id="oval:com.redhat.rhsa:tst:20070406160" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406079"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070406007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-hu_HU is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20070406161" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406079"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-hr_HR is earlier than 1:2.0.4-5.4.17.2" id="oval:com.redhat.rhsa:tst:20070406162" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406080"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070406007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-hr_HR is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20070406163" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406080"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-ca_ES is earlier than 1:2.0.4-5.4.17.2" id="oval:com.redhat.rhsa:tst:20070406164" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406081"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070406007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-ca_ES is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20070406165" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406081"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-math is earlier than 1:2.0.4-5.4.17.2" id="oval:com.redhat.rhsa:tst:20070406166" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406082"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070406007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-math is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20070406167" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406082"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-gu_IN is earlier than 1:2.0.4-5.4.17.2" id="oval:com.redhat.rhsa:tst:20070406168" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406083"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070406007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-gu_IN is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20070406169" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406083"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-ms_MY is earlier than 1:2.0.4-5.4.17.2" id="oval:com.redhat.rhsa:tst:20070406170" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406084"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070406007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-ms_MY is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20070406171" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406084"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-ko_KR is earlier than 1:2.0.4-5.4.17.2" id="oval:com.redhat.rhsa:tst:20070406172" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406085"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070406007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-ko_KR is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20070406173" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406085"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-fr is earlier than 1:2.0.4-5.4.17.2" id="oval:com.redhat.rhsa:tst:20070406174" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406086"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070406007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-fr is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20070406175" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406086"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-cy_GB is earlier than 1:2.0.4-5.4.17.2" id="oval:com.redhat.rhsa:tst:20070406176" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406087"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070406007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-cy_GB is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20070406177" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406087"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-xsltfilter is earlier than 1:2.0.4-5.4.17.2" id="oval:com.redhat.rhsa:tst:20070406178" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406088"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070406007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-xsltfilter is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20070406179" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406088"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-base is earlier than 1:2.0.4-5.4.17.2" id="oval:com.redhat.rhsa:tst:20070406180" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406089"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070406007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-base is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20070406181" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406089"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-xh_ZA is earlier than 1:2.0.4-5.4.17.2" id="oval:com.redhat.rhsa:tst:20070406182" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406090"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070406007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-xh_ZA is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20070406183" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406090"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-lt_LT is earlier than 1:2.0.4-5.4.17.2" id="oval:com.redhat.rhsa:tst:20070406184" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406091"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070406007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-lt_LT is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20070406185" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406091"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-nso_ZA is earlier than 1:2.0.4-5.4.17.2" id="oval:com.redhat.rhsa:tst:20070406186" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406092"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070406007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-nso_ZA is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20070406187" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406092"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-ja_JP is earlier than 1:2.0.4-5.4.17.2" id="oval:com.redhat.rhsa:tst:20070406188" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406093"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070406007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-ja_JP is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20070406189" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406093"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-tn_ZA is earlier than 1:2.0.4-5.4.17.2" id="oval:com.redhat.rhsa:tst:20070406190" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406094"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070406007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-tn_ZA is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20070406191" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406094"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-mr_IN is earlier than 1:2.0.4-5.4.17.2" id="oval:com.redhat.rhsa:tst:20070406192" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406095"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070406007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-mr_IN is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20070406193" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406095"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-te_IN is earlier than 1:2.0.4-5.4.17.2" id="oval:com.redhat.rhsa:tst:20070406194" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406096"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070406007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-te_IN is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20070406195" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406096"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-it is earlier than 1:2.0.4-5.4.17.2" id="oval:com.redhat.rhsa:tst:20070406196" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406097"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070406007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-it is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20070406197" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406097"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-et_EE is earlier than 1:2.0.4-5.4.17.2" id="oval:com.redhat.rhsa:tst:20070406198" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406098"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070406007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-et_EE is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20070406199" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406098"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-emailmerge is earlier than 1:2.0.4-5.4.17.2" id="oval:com.redhat.rhsa:tst:20070406200" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406099"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070406007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-emailmerge is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20070406201" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406099"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-pt_PT is earlier than 1:2.0.4-5.4.17.2" id="oval:com.redhat.rhsa:tst:20070406202" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406100"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070406007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-pt_PT is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20070406203" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406100"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-draw is earlier than 1:2.0.4-5.4.17.2" id="oval:com.redhat.rhsa:tst:20070406204" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406101"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070406007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-draw is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20070406205" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406101"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-nl is earlier than 1:2.0.4-5.4.17.2" id="oval:com.redhat.rhsa:tst:20070406206" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406102"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070406007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-nl is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20070406207" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406102"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-zu_ZA is earlier than 1:2.0.4-5.4.17.2" id="oval:com.redhat.rhsa:tst:20070406208" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406103"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070406007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-zu_ZA is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20070406209" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406103"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-bn is earlier than 1:2.0.4-5.4.17.2" id="oval:com.redhat.rhsa:tst:20070406210" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406104"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070406007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-bn is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20070406211" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406104"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-as_IN is earlier than 1:2.0.4-5.4.17.2" id="oval:com.redhat.rhsa:tst:20070406212" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406105"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070406007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-as_IN is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20070406213" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406105"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-pa_IN is earlier than 1:2.0.4-5.4.17.2" id="oval:com.redhat.rhsa:tst:20070406214" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406106"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070406007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-pa_IN is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20070406215" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406106"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-ar is earlier than 1:2.0.4-5.4.17.2" id="oval:com.redhat.rhsa:tst:20070406216" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406107"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070406007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-ar is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20070406217" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406107"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-zh_TW is earlier than 1:2.0.4-5.4.17.2" id="oval:com.redhat.rhsa:tst:20070406218" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406108"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070406007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-zh_TW is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20070406219" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406108"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-de is earlier than 1:2.0.4-5.4.17.2" id="oval:com.redhat.rhsa:tst:20070406220" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406109"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070406007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-de is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20070406221" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406109"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-pl_PL is earlier than 1:2.0.4-5.4.17.2" id="oval:com.redhat.rhsa:tst:20070406222" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406110"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070406007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-pl_PL is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20070406223" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406110"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-nn_NO is earlier than 1:2.0.4-5.4.17.2" id="oval:com.redhat.rhsa:tst:20070406224" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406111"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070406007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-nn_NO is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20070406225" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406111"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-ta_IN is earlier than 1:2.0.4-5.4.17.2" id="oval:com.redhat.rhsa:tst:20070406226" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406112"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070406007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-ta_IN is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20070406227" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406112"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-da_DK is earlier than 1:2.0.4-5.4.17.2" id="oval:com.redhat.rhsa:tst:20070406228" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406113"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070406007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-da_DK is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20070406229" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406113"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-ml_IN is earlier than 1:2.0.4-5.4.17.2" id="oval:com.redhat.rhsa:tst:20070406230" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406114"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070406007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-ml_IN is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20070406231" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406114"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-sr_CS is earlier than 1:2.0.4-5.4.17.2" id="oval:com.redhat.rhsa:tst:20070406232" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406115"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070406007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-sr_CS is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20070406233" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406115"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-th_TH is earlier than 1:2.0.4-5.4.17.2" id="oval:com.redhat.rhsa:tst:20070406234" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406116"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070406007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-th_TH is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20070406235" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406116"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-ur is earlier than 1:2.0.4-5.4.17.2" id="oval:com.redhat.rhsa:tst:20070406236" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406117"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070406007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-ur is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20070406237" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406117"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-pyuno is earlier than 1:2.0.4-5.4.17.2" id="oval:com.redhat.rhsa:tst:20070406238" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406118"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070406007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-pyuno is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20070406239" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406118"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-bg_BG is earlier than 1:2.0.4-5.4.17.2" id="oval:com.redhat.rhsa:tst:20070406240" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406119"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070406007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-bg_BG is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20070406241" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406119"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-he_IL is earlier than 1:2.0.4-5.4.17.2" id="oval:com.redhat.rhsa:tst:20070406242" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406120"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070406007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-he_IL is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20070406243" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406120"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-el_GR is earlier than 1:2.0.4-5.4.17.2" id="oval:com.redhat.rhsa:tst:20070406244" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406121"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070406007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-el_GR is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20070406245" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406121"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-af_ZA is earlier than 1:2.0.4-5.4.17.2" id="oval:com.redhat.rhsa:tst:20070406246" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406122"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070406007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-af_ZA is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20070406247" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406122"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-core is earlier than 1:2.0.4-5.4.17.2" id="oval:com.redhat.rhsa:tst:20070406248" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406123"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070406007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-core is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20070406249" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406123"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-or_IN is earlier than 1:2.0.4-5.4.17.2" id="oval:com.redhat.rhsa:tst:20070406250" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406124"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070406007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-or_IN is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20070406251" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406124"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-ts_ZA is earlier than 1:2.0.4-5.4.17.2" id="oval:com.redhat.rhsa:tst:20070406252" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406125"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070406007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-ts_ZA is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20070406253" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406125"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-fi_FI is earlier than 1:2.0.4-5.4.17.2" id="oval:com.redhat.rhsa:tst:20070406254" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406126"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070406007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-fi_FI is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20070406255" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406126"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-eu_ES is earlier than 1:2.0.4-5.4.17.2" id="oval:com.redhat.rhsa:tst:20070406256" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406127"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070406007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-eu_ES is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20070406257" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406127"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-es is earlier than 1:2.0.4-5.4.17.2" id="oval:com.redhat.rhsa:tst:20070406258" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406128"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070406007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-es is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20070406259" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406128"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-impress is earlier than 1:2.0.4-5.4.17.2" id="oval:com.redhat.rhsa:tst:20070406260" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406129"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070406007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-impress is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20070406261" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406129"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-sv is earlier than 1:2.0.4-5.4.17.2" id="oval:com.redhat.rhsa:tst:20070406262" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406130"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070406007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-sv is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20070406263" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406130"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-calc is earlier than 1:2.0.4-5.4.17.2" id="oval:com.redhat.rhsa:tst:20070406264" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406131"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070406007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-calc is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20070406265" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406131"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-sl_SI is earlier than 1:2.0.4-5.4.17.2" id="oval:com.redhat.rhsa:tst:20070406266" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406132"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070406007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-sl_SI is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20070406267" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406132"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-javafilter is earlier than 1:2.0.4-5.4.17.2" id="oval:com.redhat.rhsa:tst:20070406268" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406133"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070406007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-javafilter is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20070406269" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406133"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-kn_IN is earlier than 1:2.0.4-5.4.17.2" id="oval:com.redhat.rhsa:tst:20070406270" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406134"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070406007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-kn_IN is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20070406271" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406134"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-st_ZA is earlier than 1:2.0.4-5.4.17.2" id="oval:com.redhat.rhsa:tst:20070406272" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406135"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070406007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-st_ZA is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20070406273" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406135"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-ru is earlier than 1:2.0.4-5.4.17.2" id="oval:com.redhat.rhsa:tst:20070406274" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406136"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070406007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-ru is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20070406275" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406136"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openldap is earlier than 0:2.0.27-23" id="oval:com.redhat.rhsa:tst:20070430001" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070430001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070430001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openldap is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20070430002" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070430001"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openldap-clients is earlier than 0:2.0.27-23" id="oval:com.redhat.rhsa:tst:20070430003" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070430002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070430003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openldap-clients is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20070430004" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070430002"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openldap-devel is earlier than 0:2.0.27-23" id="oval:com.redhat.rhsa:tst:20070430005" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070430003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070430003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openldap-devel is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20070430006" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070430003"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openldap-servers is earlier than 0:2.0.27-23" id="oval:com.redhat.rhsa:tst:20070430007" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070430004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070430003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openldap-servers is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20070430008" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070430004"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="shadow-utils is earlier than 2:4.0.3-29.RHEL3" id="oval:com.redhat.rhsa:tst:20070431001" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070431001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070431001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="shadow-utils is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20070431002" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070431001"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="kernel-source is earlier than 0:2.4.21-50.EL" id="oval:com.redhat.rhsa:tst:20070436001" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060140006"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070436001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="kernel-doc is earlier than 0:2.4.21-50.EL" id="oval:com.redhat.rhsa:tst:20070436003" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060140003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070436001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="kernel is earlier than 0:2.4.21-50.EL" id="oval:com.redhat.rhsa:tst:20070436005" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060140005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070436003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="kernel-unsupported is earlier than 0:2.4.21-50.EL" id="oval:com.redhat.rhsa:tst:20070436007" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060140001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070436003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="kernel-smp is earlier than 0:2.4.21-50.EL" id="oval:com.redhat.rhsa:tst:20070436009" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060140004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070436004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="kernel-smp-unsupported is earlier than 0:2.4.21-50.EL" id="oval:com.redhat.rhsa:tst:20070436011" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060140002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070436004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="kernel-hugemem is earlier than 0:2.4.21-50.EL" id="oval:com.redhat.rhsa:tst:20070436013" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060140009"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070436005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-50.EL" id="oval:com.redhat.rhsa:tst:20070436015" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060140007"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070436005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="kernel-BOOT is earlier than 0:2.4.21-50.EL" id="oval:com.redhat.rhsa:tst:20070436017" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060140008"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070436006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="pam-devel is earlier than 0:0.75-72" id="oval:com.redhat.rhsa:tst:20070465001" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070465001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070465001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="pam-devel is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20070465002" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070465001"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="pam is earlier than 0:0.75-72" id="oval:com.redhat.rhsa:tst:20070465003" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070465002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070465001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="pam is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20070465004" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070465002"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="cdrecord is earlier than 8:2.01.0.a32-0.EL3.6" id="oval:com.redhat.rhsa:tst:20070465005" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070465003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070465003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="cdrecord is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20070465006" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070465003"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="cdrecord-devel is earlier than 8:2.01.0.a32-0.EL3.6" id="oval:com.redhat.rhsa:tst:20070465007" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070465004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070465003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="cdrecord-devel is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20070465008" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070465004"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="mkisofs is earlier than 8:2.01.0.a32-0.EL3.6" id="oval:com.redhat.rhsa:tst:20070465009" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070465005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070465003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="mkisofs is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20070465010" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070465005"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="gdb is earlier than 0:6.3.0.0-1.138.el3" id="oval:com.redhat.rhsa:tst:20070469001" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070469001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070469001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="gdb is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20070469002" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070469001"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="gcc-objc is earlier than 0:3.2.3-59" id="oval:com.redhat.rhsa:tst:20070473001" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070473001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070473001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="gcc-objc is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20070473002" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070473001"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="gcc-c++ is earlier than 0:3.2.3-59" id="oval:com.redhat.rhsa:tst:20070473003" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070473002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070473001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="gcc-c++ is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20070473004" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070473002"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libgcj is earlier than 0:3.2.3-59" id="oval:com.redhat.rhsa:tst:20070473005" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070473003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070473003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libgcj is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20070473006" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070473003"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libgnat is earlier than 0:3.2.3-59" id="oval:com.redhat.rhsa:tst:20070473007" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070473004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070473004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libgnat is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20070473008" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070473004"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libobjc is earlier than 0:3.2.3-59" id="oval:com.redhat.rhsa:tst:20070473009" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070473005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070473003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libobjc is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20070473010" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070473005"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libf2c is earlier than 0:3.2.3-59" id="oval:com.redhat.rhsa:tst:20070473011" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070473006"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070473003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libf2c is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20070473012" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070473006"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="gcc is earlier than 0:3.2.3-59" id="oval:com.redhat.rhsa:tst:20070473013" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070473007"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070473001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="gcc is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20070473014" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070473007"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="gcc-g77 is earlier than 0:3.2.3-59" id="oval:com.redhat.rhsa:tst:20070473015" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070473008"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070473001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="gcc-g77 is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20070473016" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070473008"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libgcc is earlier than 0:3.2.3-59" id="oval:com.redhat.rhsa:tst:20070473017" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070473009"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070473003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libgcc is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20070473018" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070473009"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="gcc-java is earlier than 0:3.2.3-59" id="oval:com.redhat.rhsa:tst:20070473019" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070473010"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070473001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="gcc-java is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20070473020" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070473010"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libstdc++-devel is earlier than 0:3.2.3-59" id="oval:com.redhat.rhsa:tst:20070473021" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070473011"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070473003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libstdc++-devel is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20070473022" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070473011"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libgcj-devel is earlier than 0:3.2.3-59" id="oval:com.redhat.rhsa:tst:20070473023" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070473012"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070473001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libgcj-devel is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20070473024" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070473012"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="gcc-gnat is earlier than 0:3.2.3-59" id="oval:com.redhat.rhsa:tst:20070473025" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070473013"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070473004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="gcc-gnat is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20070473026" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070473013"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="cpp is earlier than 0:3.2.3-59" id="oval:com.redhat.rhsa:tst:20070473027" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070473014"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070473001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="cpp is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20070473028" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070473014"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libstdc++ is earlier than 0:3.2.3-59" id="oval:com.redhat.rhsa:tst:20070473029" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070473015"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070473003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libstdc++ is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20070473030" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070473015"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="gcc-c++-ppc32 is earlier than 0:3.2.3-59" id="oval:com.redhat.rhsa:tst:20070473031" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070473016"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070473005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="gcc-c++-ppc32 is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20070473032" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070473016"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="gcc-ppc32 is earlier than 0:3.2.3-59" id="oval:com.redhat.rhsa:tst:20070473033" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070473017"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070473005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="gcc-ppc32 is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20070473034" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070473017"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="kdebase-devel is earlier than 6:3.1.3-5.16" id="oval:com.redhat.rhsa:tst:20070494001" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060576002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070494001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="kdebase is earlier than 6:3.1.3-5.16" id="oval:com.redhat.rhsa:tst:20070494003" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060576001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070494003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="kdebase-devel is earlier than 6:3.3.1-5.19.rhel4" id="oval:com.redhat.rhsa:tst:20070494006" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060576002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070494005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="kdebase is earlier than 6:3.3.1-5.19.rhel4" id="oval:com.redhat.rhsa:tst:20070494007" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060576001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070494006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="kdebase is earlier than 6:3.5.4-13.6.el5" id="oval:com.redhat.rhsa:tst:20070494009" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060576001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070494008"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="kdebase is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20070494010" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060576001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="kdebase-devel is earlier than 6:3.5.4-13.6.el5" id="oval:com.redhat.rhsa:tst:20070494011" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060576002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070494008"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="kdebase-devel is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20070494012" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060576002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="evolution-devel is earlier than 0:1.4.5-21.el3" id="oval:com.redhat.rhsa:tst:20070509001" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070353001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070509001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="evolution is earlier than 0:1.4.5-21.el3" id="oval:com.redhat.rhsa:tst:20070509003" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070353002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070509001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="evolution is earlier than 0:2.0.2-35.0.4.el4" id="oval:com.redhat.rhsa:tst:20070509006" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070353002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070509004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="evolution-devel is earlier than 0:2.0.2-35.0.4.el4" id="oval:com.redhat.rhsa:tst:20070509007" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070353001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070509004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="gimp-perl is earlier than 1:1.2.3-20.9.el3" id="oval:com.redhat.rhsa:tst:20070513001" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070343003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070513001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="gimp is earlier than 1:1.2.3-20.9.el3" id="oval:com.redhat.rhsa:tst:20070513003" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070343001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070513001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="gimp-devel is earlier than 1:1.2.3-20.9.el3" id="oval:com.redhat.rhsa:tst:20070513005" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070343002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070513001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="gimp-devel is earlier than 1:2.0.5-7.0.7.el4" id="oval:com.redhat.rhsa:tst:20070513008" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070343002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070513004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="gimp is earlier than 1:2.0.5-7.0.7.el4" id="oval:com.redhat.rhsa:tst:20070513009" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070343001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070513004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="gimp-devel is earlier than 2:2.2.13-2.0.7.el5" id="oval:com.redhat.rhsa:tst:20070513011" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070343002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070513006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="gimp-libs is earlier than 2:2.2.13-2.0.7.el5" id="oval:com.redhat.rhsa:tst:20070513013" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070343005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070513006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="gimp is earlier than 2:2.2.13-2.0.7.el5" id="oval:com.redhat.rhsa:tst:20070513015" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070343001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070513008"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="httpd is earlier than 0:2.0.46-67.ent" id="oval:com.redhat.rhsa:tst:20070533001" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060159003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070533001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="mod_ssl is earlier than 1:2.0.46-67.ent" id="oval:com.redhat.rhsa:tst:20070533003" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060159001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070533003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="httpd-devel is earlier than 0:2.0.46-67.ent" id="oval:com.redhat.rhsa:tst:20070533005" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060159002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070533001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="httpd-devel is earlier than 0:2.0.46-68.ent" id="oval:com.redhat.rhsa:tst:20070662001" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060159002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070662001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="mod_ssl is earlier than 1:2.0.46-68.ent" id="oval:com.redhat.rhsa:tst:20070662003" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060159001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070662003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="httpd is earlier than 0:2.0.46-68.ent" id="oval:com.redhat.rhsa:tst:20070662005" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060159003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070662001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="httpd is earlier than 0:2.0.52-32.3.ent" id="oval:com.redhat.rhsa:tst:20070662008" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060159003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070662005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="httpd-devel is earlier than 0:2.0.52-32.3.ent" id="oval:com.redhat.rhsa:tst:20070662009" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060159002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070662005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="httpd-suexec is earlier than 0:2.0.52-32.3.ent" id="oval:com.redhat.rhsa:tst:20070662010" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060159005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070662005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="mod_ssl is earlier than 1:2.0.52-32.3.ent" id="oval:com.redhat.rhsa:tst:20070662012" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060159001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070662006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="httpd-manual is earlier than 0:2.0.52-32.3.ent" id="oval:com.redhat.rhsa:tst:20070662013" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060159006"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070662005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="kernel is earlier than 0:2.4.21-51.EL" id="oval:com.redhat.rhsa:tst:20070671001" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060140005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070671001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="kernel-unsupported is earlier than 0:2.4.21-51.EL" id="oval:com.redhat.rhsa:tst:20070671003" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060140001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070671001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="kernel-doc is earlier than 0:2.4.21-51.EL" id="oval:com.redhat.rhsa:tst:20070671005" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060140003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070671003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="kernel-source is earlier than 0:2.4.21-51.EL" id="oval:com.redhat.rhsa:tst:20070671007" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060140006"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070671003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="kernel-smp is earlier than 0:2.4.21-51.EL" id="oval:com.redhat.rhsa:tst:20070671009" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060140004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070671004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="kernel-smp-unsupported is earlier than 0:2.4.21-51.EL" id="oval:com.redhat.rhsa:tst:20070671011" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060140002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070671004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="kernel-hugemem is earlier than 0:2.4.21-51.EL" id="oval:com.redhat.rhsa:tst:20070671013" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060140009"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070671005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="kernel-BOOT is earlier than 0:2.4.21-51.EL" id="oval:com.redhat.rhsa:tst:20070671015" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060140008"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070671006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-51.EL" id="oval:com.redhat.rhsa:tst:20070671017" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060140007"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070671005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="perl-Net-DNS is earlier than 0:0.31-4.el3" id="oval:com.redhat.rhsa:tst:20070674001" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070674001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070674001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="perl-Net-DNS is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20070674002" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070674001"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="perl-Net-DNS is earlier than 0:0.59-3.el5" id="oval:com.redhat.rhsa:tst:20070674004" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070674001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070674004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="perl-Net-DNS is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20070674005" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070674001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="cups-devel is earlier than 1:1.1.17-13.3.45" id="oval:com.redhat.rhsa:tst:20070720001" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060163001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070720001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="cups-libs is earlier than 1:1.1.17-13.3.45" id="oval:com.redhat.rhsa:tst:20070720003" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060163002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070720003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="cups is earlier than 1:1.1.17-13.3.45" id="oval:com.redhat.rhsa:tst:20070720005" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060163003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070720001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="cups is earlier than 1:1.1.22-0.rc1.9.20.2" id="oval:com.redhat.rhsa:tst:20070720008" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060163003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070720005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="cups-libs is earlier than 1:1.1.22-0.rc1.9.20.2" id="oval:com.redhat.rhsa:tst:20070720009" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060163002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070720006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="cups-devel is earlier than 1:1.1.22-0.rc1.9.20.2" id="oval:com.redhat.rhsa:tst:20070720010" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060163001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070720005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="cups-libs is earlier than 1:1.2.4-11.5.3.el5" id="oval:com.redhat.rhsa:tst:20070720012" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060163002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070720008"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="cups-lpd is earlier than 1:1.2.4-11.5.3.el5" id="oval:com.redhat.rhsa:tst:20070720014" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070123005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070720010"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="cups is earlier than 1:1.2.4-11.5.3.el5" id="oval:com.redhat.rhsa:tst:20070720016" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060163003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070720010"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="cups-devel is earlier than 1:1.2.4-11.5.3.el5" id="oval:com.redhat.rhsa:tst:20070720018" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060163001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070720008"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="qt-MySQL is earlier than 1:3.1.2-16.RHEL3" id="oval:com.redhat.rhsa:tst:20070721001" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060725004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070721001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="qt-devel is earlier than 1:3.1.2-16.RHEL3" id="oval:com.redhat.rhsa:tst:20070721003" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060725002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070721001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="qt-designer is earlier than 1:3.1.2-16.RHEL3" id="oval:com.redhat.rhsa:tst:20070721005" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060725005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070721001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="qt is earlier than 1:3.1.2-16.RHEL3" id="oval:com.redhat.rhsa:tst:20070721007" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060725001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070721003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="qt-ODBC is earlier than 1:3.1.2-16.RHEL3" id="oval:com.redhat.rhsa:tst:20070721009" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060725006"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070721001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="qt-config is earlier than 1:3.1.2-16.RHEL3" id="oval:com.redhat.rhsa:tst:20070721011" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060725003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070721001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="qt-ODBC is earlier than 1:3.3.3-11.RHEL4" id="oval:com.redhat.rhsa:tst:20070721014" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060725006"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070721005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="qt-devel is earlier than 1:3.3.3-11.RHEL4" id="oval:com.redhat.rhsa:tst:20070721015" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060725002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070721005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="qt-config is earlier than 1:3.3.3-11.RHEL4" id="oval:com.redhat.rhsa:tst:20070721016" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060725003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070721005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="qt is earlier than 1:3.3.3-11.RHEL4" id="oval:com.redhat.rhsa:tst:20070721017" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060725001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070721006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="qt-designer is earlier than 1:3.3.3-11.RHEL4" id="oval:com.redhat.rhsa:tst:20070721018" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060725005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070721005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="qt-MySQL is earlier than 1:3.3.3-11.RHEL4" id="oval:com.redhat.rhsa:tst:20070721019" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060725004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070721005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="qt-PostgreSQL is earlier than 1:3.3.3-11.RHEL4" id="oval:com.redhat.rhsa:tst:20070721020" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060725008"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070721005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="qt-PostgreSQL is earlier than 1:3.3.6-21.el5" id="oval:com.redhat.rhsa:tst:20070721023" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060725008"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070721008"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="qt-PostgreSQL is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20070721024" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060725008"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="qt-devel is earlier than 1:3.3.6-21.el5" id="oval:com.redhat.rhsa:tst:20070721025" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060725002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070721010"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="qt-devel is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20070721026" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060725002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="qt-devel-docs is earlier than 1:3.3.6-21.el5" id="oval:com.redhat.rhsa:tst:20070721027" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070721009"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070721008"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="qt-devel-docs is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20070721028" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070721009"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="qt-config is earlier than 1:3.3.6-21.el5" id="oval:com.redhat.rhsa:tst:20070721029" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060725003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070721008"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="qt-config is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20070721030" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060725003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="qt-designer is earlier than 1:3.3.6-21.el5" id="oval:com.redhat.rhsa:tst:20070721031" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060725005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070721008"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="qt-designer is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20070721032" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060725005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="qt is earlier than 1:3.3.6-21.el5" id="oval:com.redhat.rhsa:tst:20070721033" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060725001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070721010"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="qt is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20070721034" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060725001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="qt-ODBC is earlier than 1:3.3.6-21.el5" id="oval:com.redhat.rhsa:tst:20070721035" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060725006"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070721008"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="qt-ODBC is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20070721036" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060725006"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="qt-MySQL is earlier than 1:3.3.6-21.el5" id="oval:com.redhat.rhsa:tst:20070721037" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060725004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070721008"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="qt-MySQL is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20070721038" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060725004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.3.el3" id="oval:com.redhat.rhsa:tst:20070722001" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070722001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-devel is earlier than 0:1.0.9-0.3.el3" id="oval:com.redhat.rhsa:tst:20070722003" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578007"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070722001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-chat is earlier than 0:1.0.9-0.3.el3" id="oval:com.redhat.rhsa:tst:20070722005" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070722001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-nss is earlier than 0:1.0.9-0.3.el3" id="oval:com.redhat.rhsa:tst:20070722007" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578008"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070722001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey is earlier than 0:1.0.9-0.3.el3" id="oval:com.redhat.rhsa:tst:20070722009" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578009"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070722001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.3.el3" id="oval:com.redhat.rhsa:tst:20070722011" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070722001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.3.el3" id="oval:com.redhat.rhsa:tst:20070722013" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070722001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-mail is earlier than 0:1.0.9-0.3.el3" id="oval:com.redhat.rhsa:tst:20070722015" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578010"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070722001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.3.el3" id="oval:com.redhat.rhsa:tst:20070722017" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578006"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070722001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-nspr is earlier than 0:1.0.9-0.3.el3" id="oval:com.redhat.rhsa:tst:20070722019" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070722001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-chat is earlier than 0:1.0.9-4.el4" id="oval:com.redhat.rhsa:tst:20070722022" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070722004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-devel is earlier than 0:1.0.9-4.el4" id="oval:com.redhat.rhsa:tst:20070722023" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578007"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070722004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-js-debugger is earlier than 0:1.0.9-4.el4" id="oval:com.redhat.rhsa:tst:20070722024" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070722004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey is earlier than 0:1.0.9-4.el4" id="oval:com.redhat.rhsa:tst:20070722025" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578009"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070722004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-mail is earlier than 0:1.0.9-4.el4" id="oval:com.redhat.rhsa:tst:20070722026" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578010"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070722004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-dom-inspector is earlier than 0:1.0.9-4.el4" id="oval:com.redhat.rhsa:tst:20070722027" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070722004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="tetex-xdvi is earlier than 0:1.0.7-67.10" id="oval:com.redhat.rhsa:tst:20070731001" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060160002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070731001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="tetex-dvips is earlier than 0:1.0.7-67.10" id="oval:com.redhat.rhsa:tst:20070731003" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060160004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070731001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="tetex-fonts is earlier than 0:1.0.7-67.10" id="oval:com.redhat.rhsa:tst:20070731005" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060160006"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070731001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="tetex is earlier than 0:1.0.7-67.10" id="oval:com.redhat.rhsa:tst:20070731007" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060160001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070731001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="tetex-afm is earlier than 0:1.0.7-67.10" id="oval:com.redhat.rhsa:tst:20070731009" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060160005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070731001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="tetex-latex is earlier than 0:1.0.7-67.10" id="oval:com.redhat.rhsa:tst:20070731011" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060160003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070731001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="tetex-afm is earlier than 0:2.0.2-22.0.1.EL4.8" id="oval:com.redhat.rhsa:tst:20070731014" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060160005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070731004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="tetex-xdvi is earlier than 0:2.0.2-22.0.1.EL4.8" id="oval:com.redhat.rhsa:tst:20070731015" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060160002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070731004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="tetex-doc is earlier than 0:2.0.2-22.0.1.EL4.8" id="oval:com.redhat.rhsa:tst:20070731016" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060160008"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070731004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="tetex is earlier than 0:2.0.2-22.0.1.EL4.8" id="oval:com.redhat.rhsa:tst:20070731018" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060160001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070731004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="tetex-fonts is earlier than 0:2.0.2-22.0.1.EL4.8" id="oval:com.redhat.rhsa:tst:20070731019" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060160006"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070731004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="tetex-latex is earlier than 0:2.0.2-22.0.1.EL4.8" id="oval:com.redhat.rhsa:tst:20070731020" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060160003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070731004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="tetex-dvips is earlier than 0:2.0.2-22.0.1.EL4.8" id="oval:com.redhat.rhsa:tst:20070731021" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060160004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070731004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="tetex-dvips is earlier than 0:3.0-33.1.el5" id="oval:com.redhat.rhsa:tst:20070731023" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060160004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070731006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="tetex-dvips is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20070731024" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060160004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="tetex-latex is earlier than 0:3.0-33.1.el5" id="oval:com.redhat.rhsa:tst:20070731025" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060160003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070731006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="tetex-latex is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20070731026" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060160003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="tetex-afm is earlier than 0:3.0-33.1.el5" id="oval:com.redhat.rhsa:tst:20070731027" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060160005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070731006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="tetex-afm is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20070731028" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060160005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="tetex-fonts is earlier than 0:3.0-33.1.el5" id="oval:com.redhat.rhsa:tst:20070731029" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060160006"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070731006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="tetex-fonts is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20070731030" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060160006"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="tetex is earlier than 0:3.0-33.1.el5" id="oval:com.redhat.rhsa:tst:20070731031" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060160001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070731006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="tetex is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20070731032" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060160001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="tetex-doc is earlier than 0:3.0-33.1.el5" id="oval:com.redhat.rhsa:tst:20070731033" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060160008"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070731006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="tetex-doc is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20070731034" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060160008"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="tetex-xdvi is earlier than 0:3.0-33.1.el5" id="oval:com.redhat.rhsa:tst:20070731035" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060160002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070731006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="tetex-xdvi is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20070731036" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060160002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="xpdf is earlier than 1:2.02-10.RHEL3" id="oval:com.redhat.rhsa:tst:20070735001" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070735001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070735001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="xpdf is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20070735002" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070735001"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="xpdf is earlier than 1:3.00-12.RHEL4" id="oval:com.redhat.rhsa:tst:20070735004" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070735001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070735004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="bind-utils is earlier than 20:9.2.4-21.el3" id="oval:com.redhat.rhsa:tst:20070740001" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070044002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070740001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="bind-devel is earlier than 20:9.2.4-21.el3" id="oval:com.redhat.rhsa:tst:20070740003" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070044004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070740001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="bind-chroot is earlier than 20:9.2.4-21.el3" id="oval:com.redhat.rhsa:tst:20070740005" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070044003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070740001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="bind-libs is earlier than 20:9.2.4-21.el3" id="oval:com.redhat.rhsa:tst:20070740007" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070044001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070740001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="bind is earlier than 20:9.2.4-21.el3" id="oval:com.redhat.rhsa:tst:20070740009" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070044005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070740001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="bind-devel is earlier than 20:9.2.4-27.0.1.el4" id="oval:com.redhat.rhsa:tst:20070740012" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070044004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070740004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="bind is earlier than 20:9.2.4-27.0.1.el4" id="oval:com.redhat.rhsa:tst:20070740013" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070044005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070740004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="bind-chroot is earlier than 20:9.2.4-27.0.1.el4" id="oval:com.redhat.rhsa:tst:20070740014" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070044003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070740004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="bind-libs is earlier than 20:9.2.4-27.0.1.el4" id="oval:com.redhat.rhsa:tst:20070740015" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070044001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070740005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="bind-utils is earlier than 20:9.2.4-27.0.1.el4" id="oval:com.redhat.rhsa:tst:20070740016" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070044002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070740004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="bind-utils is earlier than 30:9.3.3-9.0.1.el5" id="oval:com.redhat.rhsa:tst:20070740018" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070044002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070740007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="bind-utils is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20070740019" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070044002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="bind-libbind-devel is earlier than 30:9.3.3-9.0.1.el5" id="oval:com.redhat.rhsa:tst:20070740020" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070740007"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070740009"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="bind-libbind-devel is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20070740021" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070740007"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="bind is earlier than 30:9.3.3-9.0.1.el5" id="oval:com.redhat.rhsa:tst:20070740022" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070044005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070740007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="bind is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20070740023" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070044005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="bind-sdb is earlier than 30:9.3.3-9.0.1.el5" id="oval:com.redhat.rhsa:tst:20070740024" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070740008"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070740007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="bind-sdb is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20070740025" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070740008"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="caching-nameserver is earlier than 30:9.3.3-9.0.1.el5" id="oval:com.redhat.rhsa:tst:20070740026" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070740009"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070740007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="caching-nameserver is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20070740027" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070740009"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="bind-libs is earlier than 30:9.3.3-9.0.1.el5" id="oval:com.redhat.rhsa:tst:20070740028" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070044001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070740009"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="bind-libs is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20070740029" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070044001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="bind-devel is earlier than 30:9.3.3-9.0.1.el5" id="oval:com.redhat.rhsa:tst:20070740030" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070044004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070740009"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="bind-devel is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20070740031" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070044004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="bind-chroot is earlier than 30:9.3.3-9.0.1.el5" id="oval:com.redhat.rhsa:tst:20070740032" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070044003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070740007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="bind-chroot is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20070740033" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070044003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openssl-devel is earlier than 0:0.9.7a-33.24" id="oval:com.redhat.rhsa:tst:20070813001" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060661004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070813001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openssl-perl is earlier than 0:0.9.7a-33.24" id="oval:com.redhat.rhsa:tst:20070813003" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060661002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070813001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openssl is earlier than 0:0.9.7a-33.24" id="oval:com.redhat.rhsa:tst:20070813005" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060661003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070813003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libvorbis is earlier than 1:1.0-8.el3" id="oval:com.redhat.rhsa:tst:20070845001" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070845001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070845001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libvorbis is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20070845002" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070845001"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libvorbis-devel is earlier than 1:1.0-8.el3" id="oval:com.redhat.rhsa:tst:20070845003" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070845002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070845003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libvorbis-devel is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20070845004" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070845002"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libvorbis-devel is earlier than 1:1.1.0-2.el4.5" id="oval:com.redhat.rhsa:tst:20070845006" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070845002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070845005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libvorbis is earlier than 1:1.1.0-2.el4.5" id="oval:com.redhat.rhsa:tst:20070845007" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070845001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070845006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libvorbis is earlier than 1:1.1.2-3.el5.0" id="oval:com.redhat.rhsa:tst:20070845009" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070845001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070845008"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libvorbis is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20070845010" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070845001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libvorbis-devel is earlier than 1:1.1.2-3.el5.0" id="oval:com.redhat.rhsa:tst:20070845011" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070845002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070845008"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libvorbis-devel is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20070845012" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070845002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org is earlier than 0:1.1.2-40.2.0.EL3" id="oval:com.redhat.rhsa:tst:20070848001" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060573003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070848001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-i18n is earlier than 0:1.1.2-40.2.0.EL3" id="oval:com.redhat.rhsa:tst:20070848003" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060573001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070848001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-libs is earlier than 0:1.1.2-40.2.0.EL3" id="oval:com.redhat.rhsa:tst:20070848005" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060573002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070848001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-i18n is earlier than 0:1.1.5-10.6.0.2.EL4" id="oval:com.redhat.rhsa:tst:20070848008" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060573001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070848004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org is earlier than 0:1.1.5-10.6.0.2.EL4" id="oval:com.redhat.rhsa:tst:20070848009" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060573003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070848004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-libs is earlier than 0:1.1.5-10.6.0.2.EL4" id="oval:com.redhat.rhsa:tst:20070848010" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060573002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070848004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-kde is earlier than 0:1.1.5-10.6.0.2.EL4" id="oval:com.redhat.rhsa:tst:20070848011" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060573005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070848004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-pyuno is earlier than 1:2.0.4-5.7.0.2.0" id="oval:com.redhat.rhsa:tst:20070848013" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406015"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070848005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-ca_ES is earlier than 1:2.0.4-5.7.0.2.0" id="oval:com.redhat.rhsa:tst:20070848015" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406014"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070848005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-core is earlier than 1:2.0.4-5.7.0.2.0" id="oval:com.redhat.rhsa:tst:20070848017" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406016"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070848005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-eu_ES is earlier than 1:2.0.4-5.7.0.2.0" id="oval:com.redhat.rhsa:tst:20070848019" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406017"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070848005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-zh_CN is earlier than 1:2.0.4-5.7.0.2.0" id="oval:com.redhat.rhsa:tst:20070848021" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406020"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070848005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-sl_SI is earlier than 1:2.0.4-5.7.0.2.0" id="oval:com.redhat.rhsa:tst:20070848023" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406022"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070848005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-el_GR is earlier than 1:2.0.4-5.7.0.2.0" id="oval:com.redhat.rhsa:tst:20070848025" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406023"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070848005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-graphicfilter is earlier than 1:2.0.4-5.7.0.2.0" id="oval:com.redhat.rhsa:tst:20070848027" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406019"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070848005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-hi_IN is earlier than 1:2.0.4-5.7.0.2.0" id="oval:com.redhat.rhsa:tst:20070848029" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406018"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070848005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-nl is earlier than 1:2.0.4-5.7.0.2.0" id="oval:com.redhat.rhsa:tst:20070848031" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406021"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070848005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-calc is earlier than 1:2.0.4-5.7.0.2.0" id="oval:com.redhat.rhsa:tst:20070848033" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406024"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070848005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-cs_CZ is earlier than 1:2.0.4-5.7.0.2.0" id="oval:com.redhat.rhsa:tst:20070848035" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406026"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070848005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-sr_CS is earlier than 1:2.0.4-5.7.0.2.0" id="oval:com.redhat.rhsa:tst:20070848037" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406025"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070848005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-ar is earlier than 1:2.0.4-5.7.0.2.0" id="oval:com.redhat.rhsa:tst:20070848039" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406028"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070848005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-ru is earlier than 1:2.0.4-5.7.0.2.0" id="oval:com.redhat.rhsa:tst:20070848041" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406029"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070848005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-ms_MY is earlier than 1:2.0.4-5.7.0.2.0" id="oval:com.redhat.rhsa:tst:20070848043" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406027"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070848005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-gu_IN is earlier than 1:2.0.4-5.7.0.2.0" id="oval:com.redhat.rhsa:tst:20070848045" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406031"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070848005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-xsltfilter is earlier than 1:2.0.4-5.7.0.2.0" id="oval:com.redhat.rhsa:tst:20070848047" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406030"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070848005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-he_IL is earlier than 1:2.0.4-5.7.0.2.0" id="oval:com.redhat.rhsa:tst:20070848049" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406032"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070848005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-math is earlier than 1:2.0.4-5.7.0.2.0" id="oval:com.redhat.rhsa:tst:20070848051" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406034"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070848005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-writer is earlier than 1:2.0.4-5.7.0.2.0" id="oval:com.redhat.rhsa:tst:20070848053" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406036"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070848005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-ja_JP is earlier than 1:2.0.4-5.7.0.2.0" id="oval:com.redhat.rhsa:tst:20070848055" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406037"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070848005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-cy_GB is earlier than 1:2.0.4-5.7.0.2.0" id="oval:com.redhat.rhsa:tst:20070848057" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406035"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070848005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-bn is earlier than 1:2.0.4-5.7.0.2.0" id="oval:com.redhat.rhsa:tst:20070848059" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406033"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070848005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-da_DK is earlier than 1:2.0.4-5.7.0.2.0" id="oval:com.redhat.rhsa:tst:20070848061" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406049"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070848005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-zh_TW is earlier than 1:2.0.4-5.7.0.2.0" id="oval:com.redhat.rhsa:tst:20070848063" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406041"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070848005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-lt_LT is earlier than 1:2.0.4-5.7.0.2.0" id="oval:com.redhat.rhsa:tst:20070848065" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406042"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070848005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-hr_HR is earlier than 1:2.0.4-5.7.0.2.0" id="oval:com.redhat.rhsa:tst:20070848067" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406039"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070848005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-sk_SK is earlier than 1:2.0.4-5.7.0.2.0" id="oval:com.redhat.rhsa:tst:20070848069" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406038"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070848005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-pl_PL is earlier than 1:2.0.4-5.7.0.2.0" id="oval:com.redhat.rhsa:tst:20070848071" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406040"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070848005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-it is earlier than 1:2.0.4-5.7.0.2.0" id="oval:com.redhat.rhsa:tst:20070848073" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406046"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070848005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-base is earlier than 1:2.0.4-5.7.0.2.0" id="oval:com.redhat.rhsa:tst:20070848075" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406050"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070848005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-impress is earlier than 1:2.0.4-5.7.0.2.0" id="oval:com.redhat.rhsa:tst:20070848077" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406043"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070848005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-es is earlier than 1:2.0.4-5.7.0.2.0" id="oval:com.redhat.rhsa:tst:20070848079" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406051"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070848005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-ta_IN is earlier than 1:2.0.4-5.7.0.2.0" id="oval:com.redhat.rhsa:tst:20070848081" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406048"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070848005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-pa_IN is earlier than 1:2.0.4-5.7.0.2.0" id="oval:com.redhat.rhsa:tst:20070848083" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406047"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070848005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-ko_KR is earlier than 1:2.0.4-5.7.0.2.0" id="oval:com.redhat.rhsa:tst:20070848085" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406044"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070848005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-emailmerge is earlier than 1:2.0.4-5.7.0.2.0" id="oval:com.redhat.rhsa:tst:20070848087" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406052"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070848005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-nb_NO is earlier than 1:2.0.4-5.7.0.2.0" id="oval:com.redhat.rhsa:tst:20070848089" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406045"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070848005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-af_ZA is earlier than 1:2.0.4-5.7.0.2.0" id="oval:com.redhat.rhsa:tst:20070848091" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406054"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070848005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-ga_IE is earlier than 1:2.0.4-5.7.0.2.0" id="oval:com.redhat.rhsa:tst:20070848093" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406056"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070848005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-gl_ES is earlier than 1:2.0.4-5.7.0.2.0" id="oval:com.redhat.rhsa:tst:20070848095" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406058"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070848005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-zu_ZA is earlier than 1:2.0.4-5.7.0.2.0" id="oval:com.redhat.rhsa:tst:20070848097" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406055"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070848005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-sv is earlier than 1:2.0.4-5.7.0.2.0" id="oval:com.redhat.rhsa:tst:20070848099" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406059"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070848005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-pt_BR is earlier than 1:2.0.4-5.7.0.2.0" id="oval:com.redhat.rhsa:tst:20070848101" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406053"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070848005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-testtools is earlier than 1:2.0.4-5.7.0.2.0" id="oval:com.redhat.rhsa:tst:20070848103" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406057"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070848005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-javafilter is earlier than 1:2.0.4-5.7.0.2.0" id="oval:com.redhat.rhsa:tst:20070848105" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406063"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070848005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-draw is earlier than 1:2.0.4-5.7.0.2.0" id="oval:com.redhat.rhsa:tst:20070848107" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406060"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070848005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-fr is earlier than 1:2.0.4-5.7.0.2.0" id="oval:com.redhat.rhsa:tst:20070848109" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406061"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070848005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-nn_NO is earlier than 1:2.0.4-5.7.0.2.0" id="oval:com.redhat.rhsa:tst:20070848111" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406062"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070848005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-et_EE is earlier than 1:2.0.4-5.7.0.2.0" id="oval:com.redhat.rhsa:tst:20070848113" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406008"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070848005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-de is earlier than 1:2.0.4-5.7.0.2.0" id="oval:com.redhat.rhsa:tst:20070848115" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406007"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070848005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-fi_FI is earlier than 1:2.0.4-5.7.0.2.0" id="oval:com.redhat.rhsa:tst:20070848117" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406011"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070848005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-bg_BG is earlier than 1:2.0.4-5.7.0.2.0" id="oval:com.redhat.rhsa:tst:20070848119" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406006"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070848005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-tr_TR is earlier than 1:2.0.4-5.7.0.2.0" id="oval:com.redhat.rhsa:tst:20070848121" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406010"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070848005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-th_TH is earlier than 1:2.0.4-5.7.0.2.0" id="oval:com.redhat.rhsa:tst:20070848123" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406013"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070848005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-pt_PT is earlier than 1:2.0.4-5.7.0.2.0" id="oval:com.redhat.rhsa:tst:20070848125" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406009"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070848005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-hu_HU is earlier than 1:2.0.4-5.7.0.2.0" id="oval:com.redhat.rhsa:tst:20070848127" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406012"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070848005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-fr is earlier than 1:2.0.4-5.4.17.3" id="oval:com.redhat.rhsa:tst:20070848130" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406086"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070848007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-hu_HU is earlier than 1:2.0.4-5.4.17.3" id="oval:com.redhat.rhsa:tst:20070848132" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406079"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070848007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-hr_HR is earlier than 1:2.0.4-5.4.17.3" id="oval:com.redhat.rhsa:tst:20070848134" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406080"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070848007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-ca_ES is earlier than 1:2.0.4-5.4.17.3" id="oval:com.redhat.rhsa:tst:20070848136" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406081"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070848007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-math is earlier than 1:2.0.4-5.4.17.3" id="oval:com.redhat.rhsa:tst:20070848138" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406082"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070848007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-ms_MY is earlier than 1:2.0.4-5.4.17.3" id="oval:com.redhat.rhsa:tst:20070848140" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406084"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070848007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-gu_IN is earlier than 1:2.0.4-5.4.17.3" id="oval:com.redhat.rhsa:tst:20070848142" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406083"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070848007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-ko_KR is earlier than 1:2.0.4-5.4.17.3" id="oval:com.redhat.rhsa:tst:20070848144" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406085"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070848007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-xsltfilter is earlier than 1:2.0.4-5.4.17.3" id="oval:com.redhat.rhsa:tst:20070848146" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406088"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070848007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-cy_GB is earlier than 1:2.0.4-5.4.17.3" id="oval:com.redhat.rhsa:tst:20070848148" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406087"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070848007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-te_IN is earlier than 1:2.0.4-5.4.17.3" id="oval:com.redhat.rhsa:tst:20070848150" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406096"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070848007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-base is earlier than 1:2.0.4-5.4.17.3" id="oval:com.redhat.rhsa:tst:20070848152" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406089"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070848007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-lt_LT is earlier than 1:2.0.4-5.4.17.3" id="oval:com.redhat.rhsa:tst:20070848154" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406091"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070848007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-nso_ZA is earlier than 1:2.0.4-5.4.17.3" id="oval:com.redhat.rhsa:tst:20070848156" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406092"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070848007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-xh_ZA is earlier than 1:2.0.4-5.4.17.3" id="oval:com.redhat.rhsa:tst:20070848158" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406090"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070848007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-ja_JP is earlier than 1:2.0.4-5.4.17.3" id="oval:com.redhat.rhsa:tst:20070848160" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406093"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070848007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-tn_ZA is earlier than 1:2.0.4-5.4.17.3" id="oval:com.redhat.rhsa:tst:20070848162" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406094"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070848007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-mr_IN is earlier than 1:2.0.4-5.4.17.3" id="oval:com.redhat.rhsa:tst:20070848164" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406095"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070848007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-et_EE is earlier than 1:2.0.4-5.4.17.3" id="oval:com.redhat.rhsa:tst:20070848166" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406098"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070848007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-emailmerge is earlier than 1:2.0.4-5.4.17.3" id="oval:com.redhat.rhsa:tst:20070848168" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406099"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070848007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-it is earlier than 1:2.0.4-5.4.17.3" id="oval:com.redhat.rhsa:tst:20070848170" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406097"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070848007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-pa_IN is earlier than 1:2.0.4-5.4.17.3" id="oval:com.redhat.rhsa:tst:20070848172" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406106"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070848007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-pt_PT is earlier than 1:2.0.4-5.4.17.3" id="oval:com.redhat.rhsa:tst:20070848174" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406100"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070848007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-draw is earlier than 1:2.0.4-5.4.17.3" id="oval:com.redhat.rhsa:tst:20070848176" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406101"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070848007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-nl is earlier than 1:2.0.4-5.4.17.3" id="oval:com.redhat.rhsa:tst:20070848178" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406102"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070848007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-zu_ZA is earlier than 1:2.0.4-5.4.17.3" id="oval:com.redhat.rhsa:tst:20070848180" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406103"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070848007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-bn is earlier than 1:2.0.4-5.4.17.3" id="oval:com.redhat.rhsa:tst:20070848182" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406104"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070848007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-as_IN is earlier than 1:2.0.4-5.4.17.3" id="oval:com.redhat.rhsa:tst:20070848184" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406105"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070848007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-ar is earlier than 1:2.0.4-5.4.17.3" id="oval:com.redhat.rhsa:tst:20070848186" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406107"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070848007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-zh_TW is earlier than 1:2.0.4-5.4.17.3" id="oval:com.redhat.rhsa:tst:20070848188" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406108"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070848007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-de is earlier than 1:2.0.4-5.4.17.3" id="oval:com.redhat.rhsa:tst:20070848190" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406109"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070848007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-pl_PL is earlier than 1:2.0.4-5.4.17.3" id="oval:com.redhat.rhsa:tst:20070848192" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406110"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070848007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-nn_NO is earlier than 1:2.0.4-5.4.17.3" id="oval:com.redhat.rhsa:tst:20070848194" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406111"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070848007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-ta_IN is earlier than 1:2.0.4-5.4.17.3" id="oval:com.redhat.rhsa:tst:20070848196" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406112"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070848007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-da_DK is earlier than 1:2.0.4-5.4.17.3" id="oval:com.redhat.rhsa:tst:20070848198" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406113"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070848007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-ml_IN is earlier than 1:2.0.4-5.4.17.3" id="oval:com.redhat.rhsa:tst:20070848200" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406114"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070848007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-sr_CS is earlier than 1:2.0.4-5.4.17.3" id="oval:com.redhat.rhsa:tst:20070848202" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406115"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070848007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-th_TH is earlier than 1:2.0.4-5.4.17.3" id="oval:com.redhat.rhsa:tst:20070848204" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406116"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070848007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-or_IN is earlier than 1:2.0.4-5.4.17.3" id="oval:com.redhat.rhsa:tst:20070848206" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406124"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070848007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-bg_BG is earlier than 1:2.0.4-5.4.17.3" id="oval:com.redhat.rhsa:tst:20070848208" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406119"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070848007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-pyuno is earlier than 1:2.0.4-5.4.17.3" id="oval:com.redhat.rhsa:tst:20070848210" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406118"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070848007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-he_IL is earlier than 1:2.0.4-5.4.17.3" id="oval:com.redhat.rhsa:tst:20070848212" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406120"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070848007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-el_GR is earlier than 1:2.0.4-5.4.17.3" id="oval:com.redhat.rhsa:tst:20070848214" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406121"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070848007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-af_ZA is earlier than 1:2.0.4-5.4.17.3" id="oval:com.redhat.rhsa:tst:20070848216" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406122"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070848007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-core is earlier than 1:2.0.4-5.4.17.3" id="oval:com.redhat.rhsa:tst:20070848218" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406123"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070848007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-ur is earlier than 1:2.0.4-5.4.17.3" id="oval:com.redhat.rhsa:tst:20070848220" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406117"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070848007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-eu_ES is earlier than 1:2.0.4-5.4.17.3" id="oval:com.redhat.rhsa:tst:20070848222" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406127"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070848007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-ts_ZA is earlier than 1:2.0.4-5.4.17.3" id="oval:com.redhat.rhsa:tst:20070848224" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406125"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070848007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-fi_FI is earlier than 1:2.0.4-5.4.17.3" id="oval:com.redhat.rhsa:tst:20070848226" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406126"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070848007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-es is earlier than 1:2.0.4-5.4.17.3" id="oval:com.redhat.rhsa:tst:20070848228" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406128"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070848007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-impress is earlier than 1:2.0.4-5.4.17.3" id="oval:com.redhat.rhsa:tst:20070848230" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406129"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070848007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-sv is earlier than 1:2.0.4-5.4.17.3" id="oval:com.redhat.rhsa:tst:20070848232" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406130"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070848007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-kn_IN is earlier than 1:2.0.4-5.4.17.3" id="oval:com.redhat.rhsa:tst:20070848234" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406134"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070848007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-calc is earlier than 1:2.0.4-5.4.17.3" id="oval:com.redhat.rhsa:tst:20070848236" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406131"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070848007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-st_ZA is earlier than 1:2.0.4-5.4.17.3" id="oval:com.redhat.rhsa:tst:20070848238" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406135"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070848007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-sl_SI is earlier than 1:2.0.4-5.4.17.3" id="oval:com.redhat.rhsa:tst:20070848240" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406132"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070848007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-javafilter is earlier than 1:2.0.4-5.4.17.3" id="oval:com.redhat.rhsa:tst:20070848242" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406133"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070848007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-ru is earlier than 1:2.0.4-5.4.17.3" id="oval:com.redhat.rhsa:tst:20070848244" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406136"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070848007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-sk_SK is earlier than 1:2.0.4-5.4.17.3" id="oval:com.redhat.rhsa:tst:20070848246" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406064"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070848007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-pt_BR is earlier than 1:2.0.4-5.4.17.3" id="oval:com.redhat.rhsa:tst:20070848248" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406065"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070848007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-hi_IN is earlier than 1:2.0.4-5.4.17.3" id="oval:com.redhat.rhsa:tst:20070848250" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406066"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070848007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-cs_CZ is earlier than 1:2.0.4-5.4.17.3" id="oval:com.redhat.rhsa:tst:20070848252" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406067"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070848007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-nr_ZA is earlier than 1:2.0.4-5.4.17.3" id="oval:com.redhat.rhsa:tst:20070848254" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406068"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070848007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-ve_ZA is earlier than 1:2.0.4-5.4.17.3" id="oval:com.redhat.rhsa:tst:20070848256" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406069"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070848007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-graphicfilter is earlier than 1:2.0.4-5.4.17.3" id="oval:com.redhat.rhsa:tst:20070848258" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406070"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070848007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-tr_TR is earlier than 1:2.0.4-5.4.17.3" id="oval:com.redhat.rhsa:tst:20070848260" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406071"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070848007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-writer is earlier than 1:2.0.4-5.4.17.3" id="oval:com.redhat.rhsa:tst:20070848262" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406072"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070848007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-nb_NO is earlier than 1:2.0.4-5.4.17.3" id="oval:com.redhat.rhsa:tst:20070848264" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406073"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070848007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-ss_ZA is earlier than 1:2.0.4-5.4.17.3" id="oval:com.redhat.rhsa:tst:20070848266" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406074"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070848007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-gl_ES is earlier than 1:2.0.4-5.4.17.3" id="oval:com.redhat.rhsa:tst:20070848268" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406075"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070848007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-zh_CN is earlier than 1:2.0.4-5.4.17.3" id="oval:com.redhat.rhsa:tst:20070848270" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406076"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070848007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-ga_IE is earlier than 1:2.0.4-5.4.17.3" id="oval:com.redhat.rhsa:tst:20070848272" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406077"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070848007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-testtools is earlier than 1:2.0.4-5.4.17.3" id="oval:com.redhat.rhsa:tst:20070848274" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406078"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070848007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="star is earlier than 0:1.5a08-5" id="oval:com.redhat.rhsa:tst:20070873001" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070873001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070873001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="star is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20070873002" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070873001"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="star is earlier than 0:1.5a25-8" id="oval:com.redhat.rhsa:tst:20070873004" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070873001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070873004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="star is earlier than 0:1.5a75-2" id="oval:com.redhat.rhsa:tst:20070873006" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070873001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070873006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="star is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20070873007" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070873001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="cyrus-sasl-plain is earlier than 0:2.1.15-15" id="oval:com.redhat.rhsa:tst:20070878001" version="640">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070878001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070878001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="cyrus-sasl-plain is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20070878002" version="640">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070878001"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="cyrus-sasl-gssapi is earlier than 0:2.1.15-15" id="oval:com.redhat.rhsa:tst:20070878003" version="640">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070878002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070878001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="cyrus-sasl-gssapi is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20070878004" version="640">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070878002"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="cyrus-sasl-devel is earlier than 0:2.1.15-15" id="oval:com.redhat.rhsa:tst:20070878005" version="640">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070878003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070878003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="cyrus-sasl-devel is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20070878006" version="640">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070878003"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="cyrus-sasl is earlier than 0:2.1.15-15" id="oval:com.redhat.rhsa:tst:20070878007" version="640">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070878004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070878001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="cyrus-sasl is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20070878008" version="640">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070878004"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="cyrus-sasl-md5 is earlier than 0:2.1.15-15" id="oval:com.redhat.rhsa:tst:20070878009" version="640">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070878005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070878001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="cyrus-sasl-md5 is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20070878010" version="640">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070878005"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="qt-devel is earlier than 1:3.1.2-17.RHEL3" id="oval:com.redhat.rhsa:tst:20070883001" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060725002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070883001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="qt-designer is earlier than 1:3.1.2-17.RHEL3" id="oval:com.redhat.rhsa:tst:20070883003" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060725005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070883001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="qt-ODBC is earlier than 1:3.1.2-17.RHEL3" id="oval:com.redhat.rhsa:tst:20070883005" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060725006"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070883001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="qt is earlier than 1:3.1.2-17.RHEL3" id="oval:com.redhat.rhsa:tst:20070883007" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060725001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070883003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="qt-config is earlier than 1:3.1.2-17.RHEL3" id="oval:com.redhat.rhsa:tst:20070883009" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060725003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070883001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="qt-MySQL is earlier than 1:3.1.2-17.RHEL3" id="oval:com.redhat.rhsa:tst:20070883011" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060725004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070883001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="qt-MySQL is earlier than 1:3.3.3-13.RHEL4" id="oval:com.redhat.rhsa:tst:20070883014" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060725004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070883005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="qt-ODBC is earlier than 1:3.3.3-13.RHEL4" id="oval:com.redhat.rhsa:tst:20070883015" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060725006"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070883005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="qt-designer is earlier than 1:3.3.3-13.RHEL4" id="oval:com.redhat.rhsa:tst:20070883016" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060725005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070883005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="qt-config is earlier than 1:3.3.3-13.RHEL4" id="oval:com.redhat.rhsa:tst:20070883017" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060725003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070883005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="qt is earlier than 1:3.3.3-13.RHEL4" id="oval:com.redhat.rhsa:tst:20070883018" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060725001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070883006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="qt-PostgreSQL is earlier than 1:3.3.3-13.RHEL4" id="oval:com.redhat.rhsa:tst:20070883019" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060725008"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070883005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="qt-devel is earlier than 1:3.3.3-13.RHEL4" id="oval:com.redhat.rhsa:tst:20070883021" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060725002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070883005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="qt-designer is earlier than 1:3.3.6-23.el5" id="oval:com.redhat.rhsa:tst:20070883023" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060725005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070883008"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="qt-ODBC is earlier than 1:3.3.6-23.el5" id="oval:com.redhat.rhsa:tst:20070883025" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060725006"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070883008"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="qt-MySQL is earlier than 1:3.3.6-23.el5" id="oval:com.redhat.rhsa:tst:20070883027" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060725004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070883008"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="qt-devel-docs is earlier than 1:3.3.6-23.el5" id="oval:com.redhat.rhsa:tst:20070883029" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070721009"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070883008"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="qt-config is earlier than 1:3.3.6-23.el5" id="oval:com.redhat.rhsa:tst:20070883031" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060725003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070883008"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="qt is earlier than 1:3.3.6-23.el5" id="oval:com.redhat.rhsa:tst:20070883033" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060725001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070883010"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="qt-devel is earlier than 1:3.3.6-23.el5" id="oval:com.redhat.rhsa:tst:20070883035" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060725002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070883010"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="qt-PostgreSQL is earlier than 1:3.3.6-23.el5" id="oval:com.redhat.rhsa:tst:20070883037" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060725008"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070883008"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-odbc is earlier than 0:4.3.2-43.ent" id="oval:com.redhat.rhsa:tst:20070889001" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070889001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-ldap is earlier than 0:4.3.2-43.ent" id="oval:com.redhat.rhsa:tst:20070889003" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070889001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-imap is earlier than 0:4.3.2-43.ent" id="oval:com.redhat.rhsa:tst:20070889005" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070889001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-mysql is earlier than 0:4.3.2-43.ent" id="oval:com.redhat.rhsa:tst:20070889007" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276007"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070889001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php is earlier than 0:4.3.2-43.ent" id="oval:com.redhat.rhsa:tst:20070889009" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070889001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-pgsql is earlier than 0:4.3.2-43.ent" id="oval:com.redhat.rhsa:tst:20070889011" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276006"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070889001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-devel is earlier than 0:4.3.2-43.ent" id="oval:com.redhat.rhsa:tst:20070889013" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070889001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="kernel is earlier than 0:2.4.21-52.EL" id="oval:com.redhat.rhsa:tst:20070938001" version="631">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060140005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070938001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="kernel-smp-unsupported is earlier than 0:2.4.21-52.EL" id="oval:com.redhat.rhsa:tst:20070938003" version="631">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060140002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070938003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="kernel-unsupported is earlier than 0:2.4.21-52.EL" id="oval:com.redhat.rhsa:tst:20070938005" version="631">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060140001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070938001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="kernel-doc is earlier than 0:2.4.21-52.EL" id="oval:com.redhat.rhsa:tst:20070938007" version="631">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060140003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070938004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="kernel-source is earlier than 0:2.4.21-52.EL" id="oval:com.redhat.rhsa:tst:20070938009" version="631">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060140006"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070938004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="kernel-smp is earlier than 0:2.4.21-52.EL" id="oval:com.redhat.rhsa:tst:20070938011" version="631">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060140004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070938003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="kernel-hugemem is earlier than 0:2.4.21-52.EL" id="oval:com.redhat.rhsa:tst:20070938013" version="631">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060140009"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070938005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="kernel-BOOT is earlier than 0:2.4.21-52.EL" id="oval:com.redhat.rhsa:tst:20070938015" version="631">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060140008"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070938006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-52.EL" id="oval:com.redhat.rhsa:tst:20070938017" version="631">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060140007"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070938005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="perl-CPAN is earlier than 2:1.61-97.EL3" id="oval:com.redhat.rhsa:tst:20070966001" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070966001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070966001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="perl-CPAN is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20070966002" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070966001"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="perl is earlier than 2:5.8.0-97.EL3" id="oval:com.redhat.rhsa:tst:20070966003" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070966002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070966003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="perl is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20070966004" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070966002"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="perl-CGI is earlier than 2:2.89-97.EL3" id="oval:com.redhat.rhsa:tst:20070966005" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070966003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070966004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="perl-CGI is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20070966006" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070966003"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="perl-DB_File is earlier than 2:1.806-97.EL3" id="oval:com.redhat.rhsa:tst:20070966007" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070966004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070966005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="perl-DB_File is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20070966008" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070966004"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="perl-suidperl is earlier than 2:5.8.0-97.EL3" id="oval:com.redhat.rhsa:tst:20070966009" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070966005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070966003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="perl-suidperl is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20070966010" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070966005"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="perl-suidperl is earlier than 3:5.8.5-36.el4_5.2" id="oval:com.redhat.rhsa:tst:20070966012" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070966005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070966007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="perl is earlier than 3:5.8.5-36.el4_5.2" id="oval:com.redhat.rhsa:tst:20070966013" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070966002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070966007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="perl-suidperl is earlier than 4:5.8.8-10.el5_0.2" id="oval:com.redhat.rhsa:tst:20070966015" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070966005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070966009"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="perl-suidperl is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20070966016" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070966005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="perl is earlier than 4:5.8.8-10.el5_0.2" id="oval:com.redhat.rhsa:tst:20070966017" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070966002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070966009"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="perl is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20070966018" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070966002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="util-linux is earlier than 0:2.11y-31.24" id="oval:com.redhat.rhsa:tst:20070969001" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070969001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070969001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="util-linux is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20070969002" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070969001"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="losetup is earlier than 0:2.11y-31.24" id="oval:com.redhat.rhsa:tst:20070969003" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070969002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070969001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="losetup is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20070969004" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070969002"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="mount is earlier than 0:2.11y-31.24" id="oval:com.redhat.rhsa:tst:20070969005" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070969003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070969001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="mount is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20070969006" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070969003"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="util-linux is earlier than 0:2.12a-17.el4_6.1" id="oval:com.redhat.rhsa:tst:20070969008" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070969001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070969004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="util-linux is earlier than 0:2.13-0.45.el5_1.1" id="oval:com.redhat.rhsa:tst:20070969010" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070969001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070969006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="util-linux is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20070969011" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070969001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-devel is earlier than 0:1.0.9-0.5.el3" id="oval:com.redhat.rhsa:tst:20070980001" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578007"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070980001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-mail is earlier than 0:1.0.9-0.5.el3" id="oval:com.redhat.rhsa:tst:20070980003" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578010"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070980001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.5.el3" id="oval:com.redhat.rhsa:tst:20070980005" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070980001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.5.el3" id="oval:com.redhat.rhsa:tst:20070980007" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070980001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-nss is earlier than 0:1.0.9-0.5.el3" id="oval:com.redhat.rhsa:tst:20070980009" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578008"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070980001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-chat is earlier than 0:1.0.9-0.5.el3" id="oval:com.redhat.rhsa:tst:20070980011" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070980001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey is earlier than 0:1.0.9-0.5.el3" id="oval:com.redhat.rhsa:tst:20070980013" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578009"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070980001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.5.el3" id="oval:com.redhat.rhsa:tst:20070980015" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070980001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.5.el3" id="oval:com.redhat.rhsa:tst:20070980017" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578006"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070980001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-nspr is earlier than 0:1.0.9-0.5.el3" id="oval:com.redhat.rhsa:tst:20070980019" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070980001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-devel is earlier than 0:1.0.9-6.el4" id="oval:com.redhat.rhsa:tst:20070980022" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578007"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070980004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-mail is earlier than 0:1.0.9-6.el4" id="oval:com.redhat.rhsa:tst:20070980023" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578010"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070980004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey is earlier than 0:1.0.9-6.el4" id="oval:com.redhat.rhsa:tst:20070980024" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578009"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070980004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-dom-inspector is earlier than 0:1.0.9-6.el4" id="oval:com.redhat.rhsa:tst:20070980025" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070980004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-chat is earlier than 0:1.0.9-6.el4" id="oval:com.redhat.rhsa:tst:20070980026" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070980004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-js-debugger is earlier than 0:1.0.9-6.el4" id="oval:com.redhat.rhsa:tst:20070980027" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070980004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libpng-devel is earlier than 2:1.2.2-28" id="oval:com.redhat.rhsa:tst:20070992001" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070356001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070992001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libpng is earlier than 2:1.2.2-28" id="oval:com.redhat.rhsa:tst:20070992003" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070356002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070992003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libpng10-devel is earlier than 0:1.0.13-18" id="oval:com.redhat.rhsa:tst:20070992005" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070356003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070992004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libpng10 is earlier than 0:1.0.13-18" id="oval:com.redhat.rhsa:tst:20070992007" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070356004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070992005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libpng-devel is earlier than 2:1.2.7-3.el4_5.1" id="oval:com.redhat.rhsa:tst:20070992010" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070356001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070992007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libpng is earlier than 2:1.2.7-3.el4_5.1" id="oval:com.redhat.rhsa:tst:20070992011" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070356002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070992008"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libpng10 is earlier than 0:1.0.16-3.el4_5.1" id="oval:com.redhat.rhsa:tst:20070992012" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070356004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070992009"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libpng10-devel is earlier than 0:1.0.16-3.el4_5.1" id="oval:com.redhat.rhsa:tst:20070992013" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070356003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070992010"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libpng is earlier than 2:1.2.10-7.1.el5_0.1" id="oval:com.redhat.rhsa:tst:20070992015" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070356002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070992012"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libpng-devel is earlier than 2:1.2.10-7.1.el5_0.1" id="oval:com.redhat.rhsa:tst:20070992017" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070356001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070992012"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="samba is earlier than 0:3.0.9-1.3E.14.1" id="oval:com.redhat.rhsa:tst:20071013001" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060591002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20071013001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="samba-common is earlier than 0:3.0.9-1.3E.14.1" id="oval:com.redhat.rhsa:tst:20071013003" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060591001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20071013001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="samba-client is earlier than 0:3.0.9-1.3E.14.1" id="oval:com.redhat.rhsa:tst:20071013005" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060591004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20071013003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="samba-swat is earlier than 0:3.0.9-1.3E.14.1" id="oval:com.redhat.rhsa:tst:20071013007" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060591003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20071013003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="cups-devel is earlier than 1:1.1.17-13.3.46" id="oval:com.redhat.rhsa:tst:20071023001" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060163001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20071023001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="cups-libs is earlier than 1:1.1.17-13.3.46" id="oval:com.redhat.rhsa:tst:20071023003" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060163002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20071023003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="cups is earlier than 1:1.1.17-13.3.46" id="oval:com.redhat.rhsa:tst:20071023005" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060163003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20071023001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="tetex-xdvi is earlier than 0:1.0.7-67.11" id="oval:com.redhat.rhsa:tst:20071028001" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060160002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20071028001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="tetex-dvips is earlier than 0:1.0.7-67.11" id="oval:com.redhat.rhsa:tst:20071028003" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060160004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20071028001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="tetex-fonts is earlier than 0:1.0.7-67.11" id="oval:com.redhat.rhsa:tst:20071028005" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060160006"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20071028001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="tetex is earlier than 0:1.0.7-67.11" id="oval:com.redhat.rhsa:tst:20071028007" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060160001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20071028001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="tetex-afm is earlier than 0:1.0.7-67.11" id="oval:com.redhat.rhsa:tst:20071028009" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060160005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20071028001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="tetex-latex is earlier than 0:1.0.7-67.11" id="oval:com.redhat.rhsa:tst:20071028011" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060160003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20071028001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="xpdf is earlier than 1:2.02-11.el3" id="oval:com.redhat.rhsa:tst:20071030001" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070735001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20071030001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="net-snmp-utils is earlier than 0:5.0.9-2.30E.23" id="oval:com.redhat.rhsa:tst:20071045001" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20071045001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20071045001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="net-snmp-utils is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20071045002" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20071045001"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="net-snmp-devel is earlier than 0:5.0.9-2.30E.23" id="oval:com.redhat.rhsa:tst:20071045003" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20071045002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20071045001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="net-snmp-devel is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20071045004" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20071045002"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="net-snmp-libs is earlier than 0:5.0.9-2.30E.23" id="oval:com.redhat.rhsa:tst:20071045005" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20071045003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20071045003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="net-snmp-libs is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20071045006" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20071045003"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="net-snmp-perl is earlier than 0:5.0.9-2.30E.23" id="oval:com.redhat.rhsa:tst:20071045007" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20071045004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20071045001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="net-snmp-perl is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20071045008" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20071045004"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="net-snmp is earlier than 0:5.0.9-2.30E.23" id="oval:com.redhat.rhsa:tst:20071045009" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20071045005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20071045001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="net-snmp is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20071045010" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20071045005"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="net-snmp-utils is earlier than 0:5.1.2-11.el4_6.11.1" id="oval:com.redhat.rhsa:tst:20071045012" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20071045001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20071045005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="net-snmp-devel is earlier than 0:5.1.2-11.el4_6.11.1" id="oval:com.redhat.rhsa:tst:20071045013" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20071045002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20071045005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="net-snmp-perl is earlier than 0:5.1.2-11.el4_6.11.1" id="oval:com.redhat.rhsa:tst:20071045014" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20071045004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20071045005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="net-snmp is earlier than 0:5.1.2-11.el4_6.11.1" id="oval:com.redhat.rhsa:tst:20071045015" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20071045005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20071045005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="net-snmp-libs is earlier than 0:5.1.2-11.el4_6.11.1" id="oval:com.redhat.rhsa:tst:20071045016" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20071045003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20071045006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="net-snmp-devel is earlier than 1:5.3.1-19.el5_1.1" id="oval:com.redhat.rhsa:tst:20071045018" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20071045002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20071045008"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="net-snmp-devel is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20071045019" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20071045002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="net-snmp-libs is earlier than 1:5.3.1-19.el5_1.1" id="oval:com.redhat.rhsa:tst:20071045020" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20071045003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20071045008"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="net-snmp-libs is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20071045021" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20071045003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="net-snmp is earlier than 1:5.3.1-19.el5_1.1" id="oval:com.redhat.rhsa:tst:20071045022" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20071045005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20071045010"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="net-snmp is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20071045023" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20071045005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="net-snmp-perl is earlier than 1:5.3.1-19.el5_1.1" id="oval:com.redhat.rhsa:tst:20071045024" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20071045004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20071045010"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="net-snmp-perl is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20071045025" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20071045004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="net-snmp-utils is earlier than 1:5.3.1-19.el5_1.1" id="oval:com.redhat.rhsa:tst:20071045026" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20071045001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20071045010"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="net-snmp-utils is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20071045027" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20071045001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="kernel is earlier than 0:2.4.21-53.EL" id="oval:com.redhat.rhsa:tst:20071049001" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060140005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20071049001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="kernel-doc is earlier than 0:2.4.21-53.EL" id="oval:com.redhat.rhsa:tst:20071049003" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060140003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20071049003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="kernel-unsupported is earlier than 0:2.4.21-53.EL" id="oval:com.redhat.rhsa:tst:20071049005" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060140001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20071049001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="kernel-smp is earlier than 0:2.4.21-53.EL" id="oval:com.redhat.rhsa:tst:20071049007" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060140004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20071049004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="kernel-smp-unsupported is earlier than 0:2.4.21-53.EL" id="oval:com.redhat.rhsa:tst:20071049009" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060140002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20071049004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="kernel-source is earlier than 0:2.4.21-53.EL" id="oval:com.redhat.rhsa:tst:20071049011" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060140006"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20071049003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-53.EL" id="oval:com.redhat.rhsa:tst:20071049013" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060140007"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20071049005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="kernel-BOOT is earlier than 0:2.4.21-53.EL" id="oval:com.redhat.rhsa:tst:20071049015" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060140008"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20071049006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="kernel-hugemem is earlier than 0:2.4.21-53.EL" id="oval:com.redhat.rhsa:tst:20071049017" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060140009"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20071049005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="pcre is earlier than 0:3.9-10.4" id="oval:com.redhat.rhsa:tst:20071063001" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20071063001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20071063001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="pcre is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20071063002" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20071063001"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="pcre-devel is earlier than 0:3.9-10.4" id="oval:com.redhat.rhsa:tst:20071063003" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20071063002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20071063003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="pcre-devel is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20071063004" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20071063002"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="python is earlier than 0:2.2.3-6.8" id="oval:com.redhat.rhsa:tst:20071076001" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060197003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20071076001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="tkinter is earlier than 0:2.2.3-6.8" id="oval:com.redhat.rhsa:tst:20071076003" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060197004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20071076001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="python-tools is earlier than 0:2.2.3-6.8" id="oval:com.redhat.rhsa:tst:20071076005" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060197001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20071076001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="python-devel is earlier than 0:2.2.3-6.8" id="oval:com.redhat.rhsa:tst:20071076007" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060197002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20071076001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="tkinter is earlier than 0:2.3.4-14.4.el4_6.1" id="oval:com.redhat.rhsa:tst:20071076010" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060197004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20071076004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="python is earlier than 0:2.3.4-14.4.el4_6.1" id="oval:com.redhat.rhsa:tst:20071076011" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060197003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20071076004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="python-tools is earlier than 0:2.3.4-14.4.el4_6.1" id="oval:com.redhat.rhsa:tst:20071076012" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060197001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20071076004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="python-devel is earlier than 0:2.3.4-14.4.el4_6.1" id="oval:com.redhat.rhsa:tst:20071076013" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060197002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20071076004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="python-docs is earlier than 0:2.3.4-14.4.el4_6.1" id="oval:com.redhat.rhsa:tst:20071076014" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060197006"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20071076004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.7.el3" id="oval:com.redhat.rhsa:tst:20071084001" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20071084001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-chat is earlier than 0:1.0.9-0.7.el3" id="oval:com.redhat.rhsa:tst:20071084003" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20071084001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-nss is earlier than 0:1.0.9-0.7.el3" id="oval:com.redhat.rhsa:tst:20071084005" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578008"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20071084001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey is earlier than 0:1.0.9-0.7.el3" id="oval:com.redhat.rhsa:tst:20071084007" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578009"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20071084001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.7.el3" id="oval:com.redhat.rhsa:tst:20071084009" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20071084001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-mail is earlier than 0:1.0.9-0.7.el3" id="oval:com.redhat.rhsa:tst:20071084011" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578010"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20071084001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.7.el3" id="oval:com.redhat.rhsa:tst:20071084013" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578006"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20071084001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.7.el3" id="oval:com.redhat.rhsa:tst:20071084015" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20071084001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-nspr is earlier than 0:1.0.9-0.7.el3" id="oval:com.redhat.rhsa:tst:20071084017" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20071084001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-devel is earlier than 0:1.0.9-0.7.el3" id="oval:com.redhat.rhsa:tst:20071084019" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578007"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20071084001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey is earlier than 0:1.0.9-7.el4" id="oval:com.redhat.rhsa:tst:20071084022" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578009"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20071084004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-mail is earlier than 0:1.0.9-7.el4" id="oval:com.redhat.rhsa:tst:20071084023" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578010"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20071084004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-js-debugger is earlier than 0:1.0.9-7.el4" id="oval:com.redhat.rhsa:tst:20071084024" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20071084004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-chat is earlier than 0:1.0.9-7.el4" id="oval:com.redhat.rhsa:tst:20071084025" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20071084004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-dom-inspector is earlier than 0:1.0.9-7.el4" id="oval:com.redhat.rhsa:tst:20071084026" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20071084004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-devel is earlier than 0:1.0.9-7.el4" id="oval:com.redhat.rhsa:tst:20071084027" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578007"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20071084004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="samba-swat is earlier than 0:3.0.9-1.3E.14.3" id="oval:com.redhat.rhsa:tst:20071114001" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060591003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20071114001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="samba-common is earlier than 0:3.0.9-1.3E.14.3" id="oval:com.redhat.rhsa:tst:20071114003" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060591001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20071114003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="samba is earlier than 0:3.0.9-1.3E.14.3" id="oval:com.redhat.rhsa:tst:20071114005" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060591002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20071114003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="samba-client is earlier than 0:3.0.9-1.3E.14.3" id="oval:com.redhat.rhsa:tst:20071114007" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060591004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20071114001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="samba-swat is earlier than 0:3.0.25b-1.el4_6.4" id="oval:com.redhat.rhsa:tst:20071114010" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060591003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20071114005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="samba-client is earlier than 0:3.0.25b-1.el4_6.4" id="oval:com.redhat.rhsa:tst:20071114011" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060591004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20071114005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="samba-common is earlier than 0:3.0.25b-1.el4_6.4" id="oval:com.redhat.rhsa:tst:20071114012" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060591001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20071114006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="samba is earlier than 0:3.0.25b-1.el4_6.4" id="oval:com.redhat.rhsa:tst:20071114013" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060591002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20071114005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="samba-common is earlier than 0:3.0.25b-1.el5_1.4" id="oval:com.redhat.rhsa:tst:20071114015" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060591001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20071114008"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="samba-swat is earlier than 0:3.0.25b-1.el5_1.4" id="oval:com.redhat.rhsa:tst:20071114017" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060591003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20071114010"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="samba-client is earlier than 0:3.0.25b-1.el5_1.4" id="oval:com.redhat.rhsa:tst:20071114019" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060591004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20071114010"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="samba is earlier than 0:3.0.25b-1.el5_1.4" id="oval:com.redhat.rhsa:tst:20071114021" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060591002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20071114010"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="squid is earlier than 7:2.5.STABLE3-8.3E" id="oval:com.redhat.rhsa:tst:20071130001" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060045001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20071130001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="squid is earlier than 7:2.5.STABLE14-1.4E.el4_6.1" id="oval:com.redhat.rhsa:tst:20071130004" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060045001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20071130004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="squid is earlier than 7:2.6.STABLE6-5.el5_1.2" id="oval:com.redhat.rhsa:tst:20071130006" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060045001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20071130006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="squid is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20071130007" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060045001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="e2fsprogs is earlier than 0:1.32-15.4" id="oval:com.redhat.rhsa:tst:20080003001" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080003001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080003001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="e2fsprogs is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20080003002" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080003001"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="e2fsprogs-devel is earlier than 0:1.32-15.4" id="oval:com.redhat.rhsa:tst:20080003003" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080003002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080003003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="e2fsprogs-devel is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20080003004" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080003002"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="e2fsprogs is earlier than 0:1.35-12.11.el4_6.1" id="oval:com.redhat.rhsa:tst:20080003006" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080003001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080003005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="e2fsprogs-devel is earlier than 0:1.35-12.11.el4_6.1" id="oval:com.redhat.rhsa:tst:20080003007" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080003002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080003006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="e2fsprogs is earlier than 0:1.39-10.el5_1.1" id="oval:com.redhat.rhsa:tst:20080003009" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080003001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080003008"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="e2fsprogs is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20080003010" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080003001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="e2fsprogs-libs is earlier than 0:1.39-10.el5_1.1" id="oval:com.redhat.rhsa:tst:20080003011" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080003004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080003010"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="e2fsprogs-libs is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20080003012" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080003004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="e2fsprogs-devel is earlier than 0:1.39-10.el5_1.1" id="oval:com.redhat.rhsa:tst:20080003013" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080003002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080003010"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="e2fsprogs-devel is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20080003014" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080003002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="mod_ssl is earlier than 1:2.0.46-70.ent" id="oval:com.redhat.rhsa:tst:20080005001" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060159001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080005001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="httpd-devel is earlier than 0:2.0.46-70.ent" id="oval:com.redhat.rhsa:tst:20080005003" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060159002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080005003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="httpd is earlier than 0:2.0.46-70.ent" id="oval:com.redhat.rhsa:tst:20080005005" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060159003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080005003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-sdk is earlier than 0:4.3.0-126.EL" id="oval:com.redhat.rhsa:tst:20080029001" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635025"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080029001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-xdm is earlier than 0:4.3.0-126.EL" id="oval:com.redhat.rhsa:tst:20080029003" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635011"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080029003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-xfs is earlier than 0:4.3.0-126.EL" id="oval:com.redhat.rhsa:tst:20080029005" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635026"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080029003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-100dpi-fonts is earlier than 0:4.3.0-126.EL" id="oval:com.redhat.rhsa:tst:20080029007" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635024"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080029003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-font-utils is earlier than 0:4.3.0-126.EL" id="oval:com.redhat.rhsa:tst:20080029009" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080029003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-tools is earlier than 0:4.3.0-126.EL" id="oval:com.redhat.rhsa:tst:20080029011" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635016"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080029003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-Xvfb is earlier than 0:4.3.0-126.EL" id="oval:com.redhat.rhsa:tst:20080029013" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635014"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080029003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-truetype-fonts is earlier than 0:4.3.0-126.EL" id="oval:com.redhat.rhsa:tst:20080029015" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635010"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080029003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-ISO8859-9-100dpi-fonts is earlier than 0:4.3.0-126.EL" id="oval:com.redhat.rhsa:tst:20080029017" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635030"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080029003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-xauth is earlier than 0:4.3.0-126.EL" id="oval:com.redhat.rhsa:tst:20080029019" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635009"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080029003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-ISO8859-14-100dpi-fonts is earlier than 0:4.3.0-126.EL" id="oval:com.redhat.rhsa:tst:20080029021" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080029003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-syriac-fonts is earlier than 0:4.3.0-126.EL" id="oval:com.redhat.rhsa:tst:20080029023" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635012"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080029003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-base-fonts is earlier than 0:4.3.0-126.EL" id="oval:com.redhat.rhsa:tst:20080029025" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080029003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-libs-data is earlier than 0:4.3.0-126.EL" id="oval:com.redhat.rhsa:tst:20080029027" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635027"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080029003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-ISO8859-2-75dpi-fonts is earlier than 0:4.3.0-126.EL" id="oval:com.redhat.rhsa:tst:20080029029" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080029003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-ISO8859-9-75dpi-fonts is earlier than 0:4.3.0-126.EL" id="oval:com.redhat.rhsa:tst:20080029031" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635006"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080029003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86 is earlier than 0:4.3.0-126.EL" id="oval:com.redhat.rhsa:tst:20080029033" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635015"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080029003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-twm is earlier than 0:4.3.0-126.EL" id="oval:com.redhat.rhsa:tst:20080029035" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635028"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080029003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-ISO8859-2-100dpi-fonts is earlier than 0:4.3.0-126.EL" id="oval:com.redhat.rhsa:tst:20080029037" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635008"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080029003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-cyrillic-fonts is earlier than 0:4.3.0-126.EL" id="oval:com.redhat.rhsa:tst:20080029039" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635007"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080029003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-75dpi-fonts is earlier than 0:4.3.0-126.EL" id="oval:com.redhat.rhsa:tst:20080029041" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635013"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080029003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-Xnest is earlier than 0:4.3.0-126.EL" id="oval:com.redhat.rhsa:tst:20080029043" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635029"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080029003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-ISO8859-14-75dpi-fonts is earlier than 0:4.3.0-126.EL" id="oval:com.redhat.rhsa:tst:20080029045" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635017"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080029003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-doc is earlier than 0:4.3.0-126.EL" id="oval:com.redhat.rhsa:tst:20080029047" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635018"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080029001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-ISO8859-15-75dpi-fonts is earlier than 0:4.3.0-126.EL" id="oval:com.redhat.rhsa:tst:20080029049" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635020"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080029003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-devel is earlier than 0:4.3.0-126.EL" id="oval:com.redhat.rhsa:tst:20080029051" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635019"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080029004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-Mesa-libGL is earlier than 0:4.3.0-126.EL" id="oval:com.redhat.rhsa:tst:20080029053" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635023"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080029004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-ISO8859-15-100dpi-fonts is earlier than 0:4.3.0-126.EL" id="oval:com.redhat.rhsa:tst:20080029055" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635022"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080029003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-Mesa-libGLU is earlier than 0:4.3.0-126.EL" id="oval:com.redhat.rhsa:tst:20080029057" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080029004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-libs is earlier than 0:4.3.0-126.EL" id="oval:com.redhat.rhsa:tst:20080029059" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635021"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080029004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libxml2-devel is earlier than 0:2.5.10-8" id="oval:com.redhat.rhsa:tst:20080032001" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080032001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080032001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libxml2-devel is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20080032002" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080032001"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libxml2-python is earlier than 0:2.5.10-8" id="oval:com.redhat.rhsa:tst:20080032003" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080032002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080032001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libxml2-python is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20080032004" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080032002"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libxml2 is earlier than 0:2.5.10-8" id="oval:com.redhat.rhsa:tst:20080032005" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080032003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080032003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libxml2 is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20080032006" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080032003"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libxml2-devel is earlier than 0:2.6.16-10.1" id="oval:com.redhat.rhsa:tst:20080032008" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080032001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080032005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libxml2 is earlier than 0:2.6.16-10.1" id="oval:com.redhat.rhsa:tst:20080032009" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080032003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080032006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libxml2-python is earlier than 0:2.6.16-10.1" id="oval:com.redhat.rhsa:tst:20080032010" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080032002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080032005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libxml2-devel is earlier than 0:2.6.26-2.1.2.1" id="oval:com.redhat.rhsa:tst:20080032012" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080032001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080032008"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libxml2-devel is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20080032013" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080032001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libxml2-python is earlier than 0:2.6.26-2.1.2.1" id="oval:com.redhat.rhsa:tst:20080032014" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080032002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080032010"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libxml2-python is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20080032015" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080032002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libxml2 is earlier than 0:2.6.26-2.1.2.1" id="oval:com.redhat.rhsa:tst:20080032016" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080032003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080032008"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libxml2 is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20080032017" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080032003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="rh-postgresql-jdbc is earlier than 0:7.3.21-1" id="oval:com.redhat.rhsa:tst:20080039001" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060526006"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080039001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="rh-postgresql-pl is earlier than 0:7.3.21-1" id="oval:com.redhat.rhsa:tst:20080039003" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060526008"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080039001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="rh-postgresql-tcl is earlier than 0:7.3.21-1" id="oval:com.redhat.rhsa:tst:20080039005" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060526010"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080039001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="rh-postgresql-server is earlier than 0:7.3.21-1" id="oval:com.redhat.rhsa:tst:20080039007" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060526003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080039001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="rh-postgresql-test is earlier than 0:7.3.21-1" id="oval:com.redhat.rhsa:tst:20080039009" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060526002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080039001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="rh-postgresql-docs is earlier than 0:7.3.21-1" id="oval:com.redhat.rhsa:tst:20080039011" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060526005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080039001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="rh-postgresql-python is earlier than 0:7.3.21-1" id="oval:com.redhat.rhsa:tst:20080039013" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060526007"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080039001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="rh-postgresql-contrib is earlier than 0:7.3.21-1" id="oval:com.redhat.rhsa:tst:20080039015" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060526001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080039001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="rh-postgresql-devel is earlier than 0:7.3.21-1" id="oval:com.redhat.rhsa:tst:20080039017" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060526009"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080039001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="rh-postgresql is earlier than 0:7.3.21-1" id="oval:com.redhat.rhsa:tst:20080039019" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060526011"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080039001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="rh-postgresql-libs is earlier than 0:7.3.21-1" id="oval:com.redhat.rhsa:tst:20080039021" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060526004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080039003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libsmi is earlier than 0:0.4.5-3.el3" id="oval:com.redhat.rhsa:tst:20080059001" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080059001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080059001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libsmi is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20080059002" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080059001"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libsmi-devel is earlier than 0:0.4.5-3.el3" id="oval:com.redhat.rhsa:tst:20080059003" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080059002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080059001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libsmi-devel is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20080059004" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080059002"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="wireshark-gnome is earlier than 0:0.99.7-EL3.1" id="oval:com.redhat.rhsa:tst:20080059005" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060602002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080059003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="wireshark is earlier than 0:0.99.7-EL3.1" id="oval:com.redhat.rhsa:tst:20080059007" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060602001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080059003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey is earlier than 0:1.0.9-0.9.el3" id="oval:com.redhat.rhsa:tst:20080104001" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578009"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080104001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.9.el3" id="oval:com.redhat.rhsa:tst:20080104003" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080104001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.9.el3" id="oval:com.redhat.rhsa:tst:20080104005" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578006"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080104001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-nspr is earlier than 0:1.0.9-0.9.el3" id="oval:com.redhat.rhsa:tst:20080104007" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080104001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-devel is earlier than 0:1.0.9-0.9.el3" id="oval:com.redhat.rhsa:tst:20080104009" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578007"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080104001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-mail is earlier than 0:1.0.9-0.9.el3" id="oval:com.redhat.rhsa:tst:20080104011" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578010"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080104001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.9.el3" id="oval:com.redhat.rhsa:tst:20080104013" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080104001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.9.el3" id="oval:com.redhat.rhsa:tst:20080104015" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080104001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-nss is earlier than 0:1.0.9-0.9.el3" id="oval:com.redhat.rhsa:tst:20080104017" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578008"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080104001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-chat is earlier than 0:1.0.9-0.9.el3" id="oval:com.redhat.rhsa:tst:20080104019" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080104001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey is earlier than 0:1.0.9-9.el4" id="oval:com.redhat.rhsa:tst:20080104022" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578009"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080104004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-mail is earlier than 0:1.0.9-9.el4" id="oval:com.redhat.rhsa:tst:20080104023" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578010"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080104004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-devel is earlier than 0:1.0.9-9.el4" id="oval:com.redhat.rhsa:tst:20080104024" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578007"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080104004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-js-debugger is earlier than 0:1.0.9-9.el4" id="oval:com.redhat.rhsa:tst:20080104025" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080104004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-chat is earlier than 0:1.0.9-9.el4" id="oval:com.redhat.rhsa:tst:20080104026" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080104004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-dom-inspector is earlier than 0:1.0.9-9.el4" id="oval:com.redhat.rhsa:tst:20080104027" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080104004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="netpbm-devel is earlier than 0:9.24-11.30.5" id="oval:com.redhat.rhsa:tst:20080131001" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080131001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080131001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="netpbm-devel is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20080131002" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080131001"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="netpbm-progs is earlier than 0:9.24-11.30.5" id="oval:com.redhat.rhsa:tst:20080131003" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080131002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080131001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="netpbm-progs is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20080131004" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080131002"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="netpbm is earlier than 0:9.24-11.30.5" id="oval:com.redhat.rhsa:tst:20080131005" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080131003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080131003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="netpbm is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20080131006" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080131003"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="netpbm-progs is earlier than 0:10.25-2.EL4.6.el4_6.1" id="oval:com.redhat.rhsa:tst:20080131008" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080131002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080131005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="netpbm is earlier than 0:10.25-2.EL4.6.el4_6.1" id="oval:com.redhat.rhsa:tst:20080131009" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080131003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080131006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="netpbm-devel is earlier than 0:10.25-2.EL4.6.el4_6.1" id="oval:com.redhat.rhsa:tst:20080131010" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080131001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080131005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="expect is earlier than 0:5.38.0-92.8" id="oval:com.redhat.rhsa:tst:20080134001" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080134001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080134001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="expect is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20080134002" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080134001"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="tk-devel is earlier than 0:8.3.5-92.8" id="oval:com.redhat.rhsa:tst:20080134003" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080134002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080134003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="tk-devel is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20080134004" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080134002"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="itcl is earlier than 0:3.2-92.8" id="oval:com.redhat.rhsa:tst:20080134005" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080134003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080134004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="itcl is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20080134006" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080134003"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="tcl is earlier than 0:8.3.5-92.8" id="oval:com.redhat.rhsa:tst:20080134007" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080134004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080134005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="tcl is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20080134008" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080134004"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="tk is earlier than 0:8.3.5-92.8" id="oval:com.redhat.rhsa:tst:20080134009" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080134005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080134005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="tk is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20080134010" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080134005"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="tclx is earlier than 0:8.3-92.8" id="oval:com.redhat.rhsa:tst:20080134011" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080134006"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080134006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="tclx is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20080134012" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080134006"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="expect-devel is earlier than 0:5.38.0-92.8" id="oval:com.redhat.rhsa:tst:20080134013" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080134007"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080134001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="expect-devel is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20080134014" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080134007"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="tix is earlier than 1:8.1.4-92.8" id="oval:com.redhat.rhsa:tst:20080134015" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080134008"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080134007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="tix is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20080134016" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080134008"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="tcl-devel is earlier than 0:8.3.5-92.8" id="oval:com.redhat.rhsa:tst:20080134017" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080134009"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080134003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="tcl-devel is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20080134018" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080134009"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="ImageMagick-devel is earlier than 0:5.5.6-28" id="oval:com.redhat.rhsa:tst:20080145001" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060178001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080145001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="ImageMagick is earlier than 0:5.5.6-28" id="oval:com.redhat.rhsa:tst:20080145003" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060178002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080145003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="ImageMagick-perl is earlier than 0:5.5.6-28" id="oval:com.redhat.rhsa:tst:20080145005" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060178003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080145001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="ImageMagick-c++ is earlier than 0:5.5.6-28" id="oval:com.redhat.rhsa:tst:20080145007" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060178004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080145003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="ImageMagick-c++-devel is earlier than 0:5.5.6-28" id="oval:com.redhat.rhsa:tst:20080145009" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060178005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080145001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="ImageMagick-perl is earlier than 0:6.0.7.1-17.el4_6.1" id="oval:com.redhat.rhsa:tst:20080145012" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060178003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080145005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="ImageMagick is earlier than 0:6.0.7.1-17.el4_6.1" id="oval:com.redhat.rhsa:tst:20080145013" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060178002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080145005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="ImageMagick-c++ is earlier than 0:6.0.7.1-17.el4_6.1" id="oval:com.redhat.rhsa:tst:20080145014" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060178004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080145005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="ImageMagick-devel is earlier than 0:6.0.7.1-17.el4_6.1" id="oval:com.redhat.rhsa:tst:20080145015" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060178001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080145005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="ImageMagick-c++-devel is earlier than 0:6.0.7.1-17.el4_6.1" id="oval:com.redhat.rhsa:tst:20080145016" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060178005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080145005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="ImageMagick-c++-devel is earlier than 0:6.2.8.0-4.el5_1.1" id="oval:com.redhat.rhsa:tst:20080145018" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060178005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080145007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="ImageMagick-c++-devel is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20080145019" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060178005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="ImageMagick is earlier than 0:6.2.8.0-4.el5_1.1" id="oval:com.redhat.rhsa:tst:20080145020" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060178002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080145007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="ImageMagick is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20080145021" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060178002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="ImageMagick-perl is earlier than 0:6.2.8.0-4.el5_1.1" id="oval:com.redhat.rhsa:tst:20080145022" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060178003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080145009"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="ImageMagick-perl is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20080145023" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060178003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="ImageMagick-c++ is earlier than 0:6.2.8.0-4.el5_1.1" id="oval:com.redhat.rhsa:tst:20080145024" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060178004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080145007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="ImageMagick-c++ is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20080145025" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060178004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="ImageMagick-devel is earlier than 0:6.2.8.0-4.el5_1.1" id="oval:com.redhat.rhsa:tst:20080145026" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060178001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080145007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="ImageMagick-devel is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20080145027" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060178001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="cups-devel is earlier than 1:1.1.17-13.3.51" id="oval:com.redhat.rhsa:tst:20080153001" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060163001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080153001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="cups is earlier than 1:1.1.17-13.3.51" id="oval:com.redhat.rhsa:tst:20080153003" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060163003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080153001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="cups-libs is earlier than 1:1.1.17-13.3.51" id="oval:com.redhat.rhsa:tst:20080153005" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060163002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080153003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="ghostscript is earlier than 0:7.05-32.1.13" id="oval:com.redhat.rhsa:tst:20080155001" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080155001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080155001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="ghostscript is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20080155002" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080155001"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="hpijs is earlier than 0:1.3-32.1.13" id="oval:com.redhat.rhsa:tst:20080155003" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080155002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080155003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="hpijs is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20080155004" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080155002"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="ghostscript-devel is earlier than 0:7.05-32.1.13" id="oval:com.redhat.rhsa:tst:20080155005" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080155003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080155004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="ghostscript-devel is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20080155006" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080155003"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="ghostscript-devel is earlier than 0:7.07-33.2.el4_6.1" id="oval:com.redhat.rhsa:tst:20080155008" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080155003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080155006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="ghostscript is earlier than 0:7.07-33.2.el4_6.1" id="oval:com.redhat.rhsa:tst:20080155009" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080155001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080155007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="ghostscript-gtk is earlier than 0:7.07-33.2.el4_6.1" id="oval:com.redhat.rhsa:tst:20080155010" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080155005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080155006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="ghostscript-gtk is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20080155011" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080155005"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="ghostscript is earlier than 0:8.15.2-9.1.el5_1.1" id="oval:com.redhat.rhsa:tst:20080155013" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080155001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080155009"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="ghostscript is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20080155014" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080155001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="ghostscript-gtk is earlier than 0:8.15.2-9.1.el5_1.1" id="oval:com.redhat.rhsa:tst:20080155015" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080155005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080155011"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="ghostscript-gtk is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20080155016" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080155005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="ghostscript-devel is earlier than 0:8.15.2-9.1.el5_1.1" id="oval:com.redhat.rhsa:tst:20080155017" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080155003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080155009"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="ghostscript-devel is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20080155018" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080155003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-i18n is earlier than 0:1.1.2-41.2.0.EL3" id="oval:com.redhat.rhsa:tst:20080176001" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060573001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080176001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org is earlier than 0:1.1.2-41.2.0.EL3" id="oval:com.redhat.rhsa:tst:20080176003" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060573003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080176001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-libs is earlier than 0:1.1.2-41.2.0.EL3" id="oval:com.redhat.rhsa:tst:20080176005" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060573002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080176001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org is earlier than 0:1.1.5-10.6.0.3.EL4" id="oval:com.redhat.rhsa:tst:20080176008" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060573003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080176004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-i18n is earlier than 0:1.1.5-10.6.0.3.EL4" id="oval:com.redhat.rhsa:tst:20080176009" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060573001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080176004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-kde is earlier than 0:1.1.5-10.6.0.3.EL4" id="oval:com.redhat.rhsa:tst:20080176010" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060573005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080176004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-libs is earlier than 0:1.1.5-10.6.0.3.EL4" id="oval:com.redhat.rhsa:tst:20080176012" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060573002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080176004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="krb5-devel is earlier than 0:1.2.7-68" id="oval:com.redhat.rhsa:tst:20080181001" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070095002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080181001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="krb5-libs is earlier than 0:1.2.7-68" id="oval:com.redhat.rhsa:tst:20080181003" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070095003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080181003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="krb5-workstation is earlier than 0:1.2.7-68" id="oval:com.redhat.rhsa:tst:20080181005" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070095004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080181001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="krb5-server is earlier than 0:1.2.7-68" id="oval:com.redhat.rhsa:tst:20080181007" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070095001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080181001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="unzip is earlier than 0:5.50-36.EL3" id="oval:com.redhat.rhsa:tst:20080196001" version="633">
   <red-def:object object_ref="oval:com.redhat.rhba:obj:20070418001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080196001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="cups is earlier than 1:1.1.17-13.3.52" id="oval:com.redhat.rhsa:tst:20080206001" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060163003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080206001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="cups-libs is earlier than 1:1.1.17-13.3.52" id="oval:com.redhat.rhsa:tst:20080206003" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060163002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080206003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="cups-devel is earlier than 1:1.1.17-13.3.52" id="oval:com.redhat.rhsa:tst:20080206005" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060163001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080206001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="cups is earlier than 1:1.1.22-0.rc1.9.20.2.el4_6.6" id="oval:com.redhat.rhsa:tst:20080206008" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060163003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080206005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="cups-libs is earlier than 1:1.1.22-0.rc1.9.20.2.el4_6.6" id="oval:com.redhat.rhsa:tst:20080206009" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060163002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080206006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="cups-devel is earlier than 1:1.1.22-0.rc1.9.20.2.el4_6.6" id="oval:com.redhat.rhsa:tst:20080206010" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060163001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080206005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.16.el3" id="oval:com.redhat.rhsa:tst:20080208001" version="646">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080208001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-chat is earlier than 0:1.0.9-0.16.el3" id="oval:com.redhat.rhsa:tst:20080208003" version="646">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080208001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.16.el3" id="oval:com.redhat.rhsa:tst:20080208005" version="646">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080208001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-mail is earlier than 0:1.0.9-0.16.el3" id="oval:com.redhat.rhsa:tst:20080208007" version="646">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578010"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080208001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey is earlier than 0:1.0.9-0.16.el3" id="oval:com.redhat.rhsa:tst:20080208009" version="646">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578009"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080208001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-nss is earlier than 0:1.0.9-0.16.el3" id="oval:com.redhat.rhsa:tst:20080208011" version="646">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578008"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080208001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.16.el3" id="oval:com.redhat.rhsa:tst:20080208013" version="646">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578006"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080208001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.16.el3" id="oval:com.redhat.rhsa:tst:20080208015" version="646">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080208001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-devel is earlier than 0:1.0.9-0.16.el3" id="oval:com.redhat.rhsa:tst:20080208017" version="646">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578007"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080208001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-nspr is earlier than 0:1.0.9-0.16.el3" id="oval:com.redhat.rhsa:tst:20080208019" version="646">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080208001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-chat is earlier than 0:1.0.9-15.el4" id="oval:com.redhat.rhsa:tst:20080208022" version="646">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080208004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-mail is earlier than 0:1.0.9-15.el4" id="oval:com.redhat.rhsa:tst:20080208023" version="646">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578010"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080208004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-js-debugger is earlier than 0:1.0.9-15.el4" id="oval:com.redhat.rhsa:tst:20080208024" version="646">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080208004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-devel is earlier than 0:1.0.9-15.el4" id="oval:com.redhat.rhsa:tst:20080208025" version="646">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578007"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080208004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-dom-inspector is earlier than 0:1.0.9-15.el4" id="oval:com.redhat.rhsa:tst:20080208026" version="646">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080208004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey is earlier than 0:1.0.9-15.el4" id="oval:com.redhat.rhsa:tst:20080208027" version="646">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578009"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080208004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="kernel-BOOT is earlier than 0:2.4.21-57.EL" id="oval:com.redhat.rhsa:tst:20080211001" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060140008"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080211001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="kernel-source is earlier than 0:2.4.21-57.EL" id="oval:com.redhat.rhsa:tst:20080211003" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060140006"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080211003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-57.EL" id="oval:com.redhat.rhsa:tst:20080211005" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060140007"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080211004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="kernel-smp is earlier than 0:2.4.21-57.EL" id="oval:com.redhat.rhsa:tst:20080211007" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060140004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080211005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="kernel is earlier than 0:2.4.21-57.EL" id="oval:com.redhat.rhsa:tst:20080211009" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060140005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080211006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="kernel-smp-unsupported is earlier than 0:2.4.21-57.EL" id="oval:com.redhat.rhsa:tst:20080211011" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060140002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080211005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="kernel-hugemem is earlier than 0:2.4.21-57.EL" id="oval:com.redhat.rhsa:tst:20080211013" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060140009"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080211004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="kernel-unsupported is earlier than 0:2.4.21-57.EL" id="oval:com.redhat.rhsa:tst:20080211015" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060140001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080211006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="kernel-doc is earlier than 0:2.4.21-57.EL" id="oval:com.redhat.rhsa:tst:20080211017" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060140003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080211003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="squid is earlier than 7:2.5.STABLE3-9.3E" id="oval:com.redhat.rhsa:tst:20080214001" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060045001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080214001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="squid is earlier than 7:2.5.STABLE14-1.4E.el4_6.2" id="oval:com.redhat.rhsa:tst:20080214004" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060045001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080214004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="squid is earlier than 7:2.6.STABLE6-5.el5_1.3" id="oval:com.redhat.rhsa:tst:20080214006" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060045001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080214006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey is earlier than 0:1.0.9-0.17.el3" id="oval:com.redhat.rhsa:tst:20080223001" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578009"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080223001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.17.el3" id="oval:com.redhat.rhsa:tst:20080223003" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080223001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-mail is earlier than 0:1.0.9-0.17.el3" id="oval:com.redhat.rhsa:tst:20080223005" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578010"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080223001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-chat is earlier than 0:1.0.9-0.17.el3" id="oval:com.redhat.rhsa:tst:20080223007" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080223001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-nspr is earlier than 0:1.0.9-0.17.el3" id="oval:com.redhat.rhsa:tst:20080223009" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080223001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-nss is earlier than 0:1.0.9-0.17.el3" id="oval:com.redhat.rhsa:tst:20080223011" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578008"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080223001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-devel is earlier than 0:1.0.9-0.17.el3" id="oval:com.redhat.rhsa:tst:20080223013" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578007"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080223001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.17.el3" id="oval:com.redhat.rhsa:tst:20080223015" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578006"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080223001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.17.el3" id="oval:com.redhat.rhsa:tst:20080223017" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080223001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.17.el3" id="oval:com.redhat.rhsa:tst:20080223019" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080223001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-js-debugger is earlier than 0:1.0.9-16.el4" id="oval:com.redhat.rhsa:tst:20080223022" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080223004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-dom-inspector is earlier than 0:1.0.9-16.el4" id="oval:com.redhat.rhsa:tst:20080223023" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080223004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-mail is earlier than 0:1.0.9-16.el4" id="oval:com.redhat.rhsa:tst:20080223024" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578010"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080223004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-devel is earlier than 0:1.0.9-16.el4" id="oval:com.redhat.rhsa:tst:20080223025" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578007"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080223004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey is earlier than 0:1.0.9-16.el4" id="oval:com.redhat.rhsa:tst:20080223026" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578009"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080223004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-chat is earlier than 0:1.0.9-16.el4" id="oval:com.redhat.rhsa:tst:20080223027" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080223004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libvorbis-devel is earlier than 1:1.0-10.el3" id="oval:com.redhat.rhsa:tst:20080270001" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070845002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080270001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libvorbis is earlier than 1:1.0-10.el3" id="oval:com.redhat.rhsa:tst:20080270003" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070845001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080270003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libvorbis-devel is earlier than 1:1.1.0-3.el4_6.1" id="oval:com.redhat.rhsa:tst:20080270006" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070845002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080270005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libvorbis is earlier than 1:1.1.0-3.el4_6.1" id="oval:com.redhat.rhsa:tst:20080270007" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070845001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080270006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libvorbis-devel is earlier than 1:1.1.2-3.el5_1.2" id="oval:com.redhat.rhsa:tst:20080270009" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070845002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080270008"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libvorbis is earlier than 1:1.1.2-3.el5_1.2" id="oval:com.redhat.rhsa:tst:20080270011" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070845001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080270008"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libxslt-devel is earlier than 0:1.0.33-6" id="oval:com.redhat.rhsa:tst:20080287001" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080287001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080287001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libxslt-devel is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20080287002" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080287001"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libxslt is earlier than 0:1.0.33-6" id="oval:com.redhat.rhsa:tst:20080287003" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080287002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080287003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libxslt is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20080287004" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080287002"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libxslt is earlier than 0:1.1.11-1.el4_6.1" id="oval:com.redhat.rhsa:tst:20080287006" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080287002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080287005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libxslt-python is earlier than 0:1.1.11-1.el4_6.1" id="oval:com.redhat.rhsa:tst:20080287007" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080287004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080287006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libxslt-python is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20080287008" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080287004"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libxslt-devel is earlier than 0:1.1.11-1.el4_6.1" id="oval:com.redhat.rhsa:tst:20080287009" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080287001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080287006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libxslt-python is earlier than 0:1.1.17-2.el5_1.1" id="oval:com.redhat.rhsa:tst:20080287011" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080287004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080287008"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libxslt-python is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20080287012" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080287004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libxslt is earlier than 0:1.1.17-2.el5_1.1" id="oval:com.redhat.rhsa:tst:20080287013" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080287002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080287010"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libxslt is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20080287014" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080287002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libxslt-devel is earlier than 0:1.1.17-2.el5_1.1" id="oval:com.redhat.rhsa:tst:20080287015" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080287001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080287010"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libxslt-devel is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20080287016" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080287001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="samba-swat is earlier than 0:3.0.9-1.3E.15" id="oval:com.redhat.rhsa:tst:20080288001" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060591003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080288001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="samba-client is earlier than 0:3.0.9-1.3E.15" id="oval:com.redhat.rhsa:tst:20080288003" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060591004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080288001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="samba-common is earlier than 0:3.0.9-1.3E.15" id="oval:com.redhat.rhsa:tst:20080288005" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060591001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080288003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="samba is earlier than 0:3.0.9-1.3E.15" id="oval:com.redhat.rhsa:tst:20080288007" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060591002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080288003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="samba-swat is earlier than 0:3.0.25b-1.el4_6.5" id="oval:com.redhat.rhsa:tst:20080288010" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060591003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080288005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="samba-client is earlier than 0:3.0.25b-1.el4_6.5" id="oval:com.redhat.rhsa:tst:20080288011" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060591004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080288005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="samba-common is earlier than 0:3.0.25b-1.el4_6.5" id="oval:com.redhat.rhsa:tst:20080288012" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060591001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080288006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="samba is earlier than 0:3.0.25b-1.el4_6.5" id="oval:com.redhat.rhsa:tst:20080288013" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060591002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080288005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="cups is earlier than 1:1.1.17-13.3.53" id="oval:com.redhat.rhsa:tst:20080498001" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060163003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080498001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="cups-libs is earlier than 1:1.1.17-13.3.53" id="oval:com.redhat.rhsa:tst:20080498003" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060163002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080498003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="cups-devel is earlier than 1:1.1.17-13.3.53" id="oval:com.redhat.rhsa:tst:20080498005" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060163001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080498001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="cups is earlier than 1:1.1.22-0.rc1.9.20.2.el4_6.8" id="oval:com.redhat.rhsa:tst:20080498008" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060163003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080498005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="cups-libs is earlier than 1:1.1.22-0.rc1.9.20.2.el4_6.8" id="oval:com.redhat.rhsa:tst:20080498009" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060163002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080498006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="cups-devel is earlier than 1:1.1.22-0.rc1.9.20.2.el4_6.8" id="oval:com.redhat.rhsa:tst:20080498010" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060163001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080498005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="cups-devel is earlier than 1:1.2.4-11.18.el5_2.1" id="oval:com.redhat.rhsa:tst:20080498012" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060163001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080498008"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="cups-lpd is earlier than 1:1.2.4-11.18.el5_2.1" id="oval:com.redhat.rhsa:tst:20080498014" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070123005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080498010"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="cups is earlier than 1:1.2.4-11.18.el5_2.1" id="oval:com.redhat.rhsa:tst:20080498016" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060163003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080498010"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="cups-libs is earlier than 1:1.2.4-11.18.el5_2.1" id="oval:com.redhat.rhsa:tst:20080498018" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060163002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080498008"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-Mesa-libGLU is earlier than 0:4.3.0-128.EL" id="oval:com.redhat.rhsa:tst:20080502001" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080502001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-xfs is earlier than 0:4.3.0-128.EL" id="oval:com.redhat.rhsa:tst:20080502003" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635026"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080502003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-ISO8859-9-75dpi-fonts is earlier than 0:4.3.0-128.EL" id="oval:com.redhat.rhsa:tst:20080502005" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635006"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080502003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-base-fonts is earlier than 0:4.3.0-128.EL" id="oval:com.redhat.rhsa:tst:20080502007" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080502003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-sdk is earlier than 0:4.3.0-128.EL" id="oval:com.redhat.rhsa:tst:20080502009" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635025"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080502004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-ISO8859-14-75dpi-fonts is earlier than 0:4.3.0-128.EL" id="oval:com.redhat.rhsa:tst:20080502011" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635017"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080502003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-ISO8859-14-100dpi-fonts is earlier than 0:4.3.0-128.EL" id="oval:com.redhat.rhsa:tst:20080502013" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080502003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-Xvfb is earlier than 0:4.3.0-128.EL" id="oval:com.redhat.rhsa:tst:20080502015" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635014"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080502003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-font-utils is earlier than 0:4.3.0-128.EL" id="oval:com.redhat.rhsa:tst:20080502017" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080502003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-cyrillic-fonts is earlier than 0:4.3.0-128.EL" id="oval:com.redhat.rhsa:tst:20080502019" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635007"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080502003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-devel is earlier than 0:4.3.0-128.EL" id="oval:com.redhat.rhsa:tst:20080502021" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635019"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080502001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-truetype-fonts is earlier than 0:4.3.0-128.EL" id="oval:com.redhat.rhsa:tst:20080502023" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635010"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080502003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-ISO8859-15-75dpi-fonts is earlier than 0:4.3.0-128.EL" id="oval:com.redhat.rhsa:tst:20080502025" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635020"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080502003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-xdm is earlier than 0:4.3.0-128.EL" id="oval:com.redhat.rhsa:tst:20080502027" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635011"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080502003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-ISO8859-15-100dpi-fonts is earlier than 0:4.3.0-128.EL" id="oval:com.redhat.rhsa:tst:20080502029" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635022"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080502003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-75dpi-fonts is earlier than 0:4.3.0-128.EL" id="oval:com.redhat.rhsa:tst:20080502031" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635013"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080502003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-syriac-fonts is earlier than 0:4.3.0-128.EL" id="oval:com.redhat.rhsa:tst:20080502033" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635012"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080502003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-libs-data is earlier than 0:4.3.0-128.EL" id="oval:com.redhat.rhsa:tst:20080502035" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635027"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080502003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-doc is earlier than 0:4.3.0-128.EL" id="oval:com.redhat.rhsa:tst:20080502037" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635018"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080502004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86 is earlier than 0:4.3.0-128.EL" id="oval:com.redhat.rhsa:tst:20080502039" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635015"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080502003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-Mesa-libGL is earlier than 0:4.3.0-128.EL" id="oval:com.redhat.rhsa:tst:20080502041" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635023"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080502001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-libs is earlier than 0:4.3.0-128.EL" id="oval:com.redhat.rhsa:tst:20080502043" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635021"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080502001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-xauth is earlier than 0:4.3.0-128.EL" id="oval:com.redhat.rhsa:tst:20080502045" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635009"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080502003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-twm is earlier than 0:4.3.0-128.EL" id="oval:com.redhat.rhsa:tst:20080502047" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635028"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080502003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-100dpi-fonts is earlier than 0:4.3.0-128.EL" id="oval:com.redhat.rhsa:tst:20080502049" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635024"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080502003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-ISO8859-2-75dpi-fonts is earlier than 0:4.3.0-128.EL" id="oval:com.redhat.rhsa:tst:20080502051" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080502003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-Xnest is earlier than 0:4.3.0-128.EL" id="oval:com.redhat.rhsa:tst:20080502053" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635029"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080502003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-tools is earlier than 0:4.3.0-128.EL" id="oval:com.redhat.rhsa:tst:20080502055" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635016"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080502003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-ISO8859-9-100dpi-fonts is earlier than 0:4.3.0-128.EL" id="oval:com.redhat.rhsa:tst:20080502057" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635030"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080502003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="XFree86-ISO8859-2-100dpi-fonts is earlier than 0:4.3.0-128.EL" id="oval:com.redhat.rhsa:tst:20080502059" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060635008"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080502003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="evolution-devel is earlier than 0:1.4.5-22.el3" id="oval:com.redhat.rhsa:tst:20080516001" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070353001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080516001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="evolution is earlier than 0:1.4.5-22.el3" id="oval:com.redhat.rhsa:tst:20080516003" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070353002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080516001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="evolution-devel is earlier than 0:2.0.2-35.0.4.el4_6.2" id="oval:com.redhat.rhsa:tst:20080516006" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070353001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080516004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="evolution is earlier than 0:2.0.2-35.0.4.el4_6.2" id="oval:com.redhat.rhsa:tst:20080516007" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070353002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080516004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="perl is earlier than 2:5.8.0-98.EL3" id="oval:com.redhat.rhsa:tst:20080522001" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070966002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080522001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="perl-suidperl is earlier than 2:5.8.0-98.EL3" id="oval:com.redhat.rhsa:tst:20080522003" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070966005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080522001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="perl-DB_File is earlier than 2:1.806-98.EL3" id="oval:com.redhat.rhsa:tst:20080522005" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070966004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080522003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="perl-CGI is earlier than 2:2.89-98.EL3" id="oval:com.redhat.rhsa:tst:20080522007" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070966003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080522004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="perl-CPAN is earlier than 2:1.61-98.EL3" id="oval:com.redhat.rhsa:tst:20080522009" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070966001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080522005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="perl-suidperl is earlier than 3:5.8.5-36.el4_6.3" id="oval:com.redhat.rhsa:tst:20080522012" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070966005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080522007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="perl is earlier than 3:5.8.5-36.el4_6.3" id="oval:com.redhat.rhsa:tst:20080522013" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070966002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080522007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="perl-suidperl is earlier than 4:5.8.8-10.el5_2.3" id="oval:com.redhat.rhsa:tst:20080522015" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070966005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080522009"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="perl is earlier than 4:5.8.8-10.el5_2.3" id="oval:com.redhat.rhsa:tst:20080522017" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070966002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080522009"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="net-snmp-utils is earlier than 0:5.0.9-2.30E.24" id="oval:com.redhat.rhsa:tst:20080529001" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20071045001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080529001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="net-snmp-devel is earlier than 0:5.0.9-2.30E.24" id="oval:com.redhat.rhsa:tst:20080529003" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20071045002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080529001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="net-snmp-libs is earlier than 0:5.0.9-2.30E.24" id="oval:com.redhat.rhsa:tst:20080529005" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20071045003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080529003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="net-snmp-perl is earlier than 0:5.0.9-2.30E.24" id="oval:com.redhat.rhsa:tst:20080529007" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20071045004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080529001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="net-snmp is earlier than 0:5.0.9-2.30E.24" id="oval:com.redhat.rhsa:tst:20080529009" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20071045005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080529001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="net-snmp-utils is earlier than 0:5.1.2-11.el4_6.11.3" id="oval:com.redhat.rhsa:tst:20080529012" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20071045001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080529005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="net-snmp-devel is earlier than 0:5.1.2-11.el4_6.11.3" id="oval:com.redhat.rhsa:tst:20080529013" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20071045002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080529005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="net-snmp-perl is earlier than 0:5.1.2-11.el4_6.11.3" id="oval:com.redhat.rhsa:tst:20080529014" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20071045004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080529005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="net-snmp is earlier than 0:5.1.2-11.el4_6.11.3" id="oval:com.redhat.rhsa:tst:20080529015" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20071045005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080529005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="net-snmp-libs is earlier than 0:5.1.2-11.el4_6.11.3" id="oval:com.redhat.rhsa:tst:20080529016" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20071045003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080529006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="net-snmp-libs is earlier than 1:5.3.1-24.el5_2.1" id="oval:com.redhat.rhsa:tst:20080529018" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20071045003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080529008"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="net-snmp is earlier than 1:5.3.1-24.el5_2.1" id="oval:com.redhat.rhsa:tst:20080529020" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20071045005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080529010"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="net-snmp-devel is earlier than 1:5.3.1-24.el5_2.1" id="oval:com.redhat.rhsa:tst:20080529022" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20071045002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080529008"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="net-snmp-utils is earlier than 1:5.3.1-24.el5_2.1" id="oval:com.redhat.rhsa:tst:20080529024" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20071045001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080529010"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="net-snmp-perl is earlier than 1:5.3.1-24.el5_2.1" id="oval:com.redhat.rhsa:tst:20080529026" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20071045004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080529010"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="bind-devel is earlier than 20:9.2.4-22.el3" id="oval:com.redhat.rhsa:tst:20080533001" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070044004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080533001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="bind is earlier than 20:9.2.4-22.el3" id="oval:com.redhat.rhsa:tst:20080533003" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070044005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080533001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="bind-libs is earlier than 20:9.2.4-22.el3" id="oval:com.redhat.rhsa:tst:20080533005" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070044001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080533001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="bind-utils is earlier than 20:9.2.4-22.el3" id="oval:com.redhat.rhsa:tst:20080533007" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070044002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080533001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="bind-chroot is earlier than 20:9.2.4-22.el3" id="oval:com.redhat.rhsa:tst:20080533009" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070044003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080533001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="bind is earlier than 20:9.2.4-28.0.1.el4" id="oval:com.redhat.rhsa:tst:20080533012" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070044005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080533004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="bind-libs is earlier than 20:9.2.4-28.0.1.el4" id="oval:com.redhat.rhsa:tst:20080533013" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070044001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080533005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="bind-devel is earlier than 20:9.2.4-28.0.1.el4" id="oval:com.redhat.rhsa:tst:20080533014" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070044004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080533004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="bind-chroot is earlier than 20:9.2.4-28.0.1.el4" id="oval:com.redhat.rhsa:tst:20080533015" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070044003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080533004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="bind-utils is earlier than 20:9.2.4-28.0.1.el4" id="oval:com.redhat.rhsa:tst:20080533016" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070044002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080533004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="selinux-policy-targeted is earlier than 0:1.17.30-2.150.el4" id="oval:com.redhat.rhsa:tst:20080533017" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080533007"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080533006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="selinux-policy-targeted is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20080533018" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080533007"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="selinux-policy-targeted-sources is earlier than 0:1.17.30-2.150.el4" id="oval:com.redhat.rhsa:tst:20080533019" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080533008"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080533006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="selinux-policy-targeted-sources is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20080533020" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080533008"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="selinux-policy-mls is earlier than 0:2.4.6-137.1.el5_2" id="oval:com.redhat.rhsa:tst:20080533022" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080533009"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080533008"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="selinux-policy-mls is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20080533023" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080533009"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="selinux-policy-targeted is earlier than 0:2.4.6-137.1.el5_2" id="oval:com.redhat.rhsa:tst:20080533024" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080533007"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080533008"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="selinux-policy-targeted is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20080533025" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080533007"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="selinux-policy is earlier than 0:2.4.6-137.1.el5_2" id="oval:com.redhat.rhsa:tst:20080533026" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080533010"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080533008"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="selinux-policy is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20080533027" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080533010"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="selinux-policy-strict is earlier than 0:2.4.6-137.1.el5_2" id="oval:com.redhat.rhsa:tst:20080533028" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080533011"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080533008"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="selinux-policy-strict is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20080533029" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080533011"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="selinux-policy-devel is earlier than 0:2.4.6-137.1.el5_2" id="oval:com.redhat.rhsa:tst:20080533030" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080533012"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080533008"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="selinux-policy-devel is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20080533031" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080533012"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="bind-devel is earlier than 30:9.3.4-6.0.2.P1.el5_2" id="oval:com.redhat.rhsa:tst:20080533032" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070044004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080533010"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="bind-sdb is earlier than 30:9.3.4-6.0.2.P1.el5_2" id="oval:com.redhat.rhsa:tst:20080533034" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070740008"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080533011"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="bind-utils is earlier than 30:9.3.4-6.0.2.P1.el5_2" id="oval:com.redhat.rhsa:tst:20080533036" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070044002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080533011"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="bind-libs is earlier than 30:9.3.4-6.0.2.P1.el5_2" id="oval:com.redhat.rhsa:tst:20080533038" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070044001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080533010"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="bind-chroot is earlier than 30:9.3.4-6.0.2.P1.el5_2" id="oval:com.redhat.rhsa:tst:20080533040" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070044003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080533011"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="bind-libbind-devel is earlier than 30:9.3.4-6.0.2.P1.el5_2" id="oval:com.redhat.rhsa:tst:20080533042" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070740007"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080533010"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="bind is earlier than 30:9.3.4-6.0.2.P1.el5_2" id="oval:com.redhat.rhsa:tst:20080533044" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070044005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080533011"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="caching-nameserver is earlier than 30:9.3.4-6.0.2.P1.el5_2" id="oval:com.redhat.rhsa:tst:20080533046" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070740009"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080533011"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-libs is earlier than 0:1.1.2-42.2.0.EL3" id="oval:com.redhat.rhsa:tst:20080538001" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060573002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080538001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org is earlier than 0:1.1.2-42.2.0.EL3" id="oval:com.redhat.rhsa:tst:20080538003" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060573003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080538001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-i18n is earlier than 0:1.1.2-42.2.0.EL3" id="oval:com.redhat.rhsa:tst:20080538005" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060573001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080538001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-libs is earlier than 0:1.1.5-10.6.0.5.EL4" id="oval:com.redhat.rhsa:tst:20080538008" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060573002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080538004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org is earlier than 0:1.1.5-10.6.0.5.EL4" id="oval:com.redhat.rhsa:tst:20080538009" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060573003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080538004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-i18n is earlier than 0:1.1.5-10.6.0.5.EL4" id="oval:com.redhat.rhsa:tst:20080538010" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060573001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080538004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-kde is earlier than 0:1.1.5-10.6.0.5.EL4" id="oval:com.redhat.rhsa:tst:20080538011" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060573005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080538004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php is earlier than 0:4.3.2-48.ent" id="oval:com.redhat.rhsa:tst:20080544001" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080544001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-pgsql is earlier than 0:4.3.2-48.ent" id="oval:com.redhat.rhsa:tst:20080544003" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276006"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080544001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-odbc is earlier than 0:4.3.2-48.ent" id="oval:com.redhat.rhsa:tst:20080544005" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080544001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-ldap is earlier than 0:4.3.2-48.ent" id="oval:com.redhat.rhsa:tst:20080544007" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080544001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-mysql is earlier than 0:4.3.2-48.ent" id="oval:com.redhat.rhsa:tst:20080544009" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276007"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080544001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-imap is earlier than 0:4.3.2-48.ent" id="oval:com.redhat.rhsa:tst:20080544011" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080544001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-devel is earlier than 0:4.3.2-48.ent" id="oval:com.redhat.rhsa:tst:20080544013" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080544001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-snmp is earlier than 0:5.1.6-20.el5_2.1" id="oval:com.redhat.rhsa:tst:20080544016" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276010"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080544004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-snmp is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20080544017" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276010"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-ncurses is earlier than 0:5.1.6-20.el5_2.1" id="oval:com.redhat.rhsa:tst:20080544018" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276011"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080544004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-ncurses is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20080544019" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276011"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-pdo is earlier than 0:5.1.6-20.el5_2.1" id="oval:com.redhat.rhsa:tst:20080544020" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080544011"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080544004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-pdo is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20080544021" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080544011"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-mbstring is earlier than 0:5.1.6-20.el5_2.1" id="oval:com.redhat.rhsa:tst:20080544022" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276013"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080544004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-mbstring is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20080544023" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276013"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-ldap is earlier than 0:5.1.6-20.el5_2.1" id="oval:com.redhat.rhsa:tst:20080544024" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080544004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-ldap is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20080544025" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-devel is earlier than 0:5.1.6-20.el5_2.1" id="oval:com.redhat.rhsa:tst:20080544026" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080544004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-devel is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20080544027" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-odbc is earlier than 0:5.1.6-20.el5_2.1" id="oval:com.redhat.rhsa:tst:20080544028" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080544004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-odbc is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20080544029" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-imap is earlier than 0:5.1.6-20.el5_2.1" id="oval:com.redhat.rhsa:tst:20080544030" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080544004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-imap is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20080544031" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-gd is earlier than 0:5.1.6-20.el5_2.1" id="oval:com.redhat.rhsa:tst:20080544032" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276015"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080544004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-gd is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20080544033" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276015"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-mysql is earlier than 0:5.1.6-20.el5_2.1" id="oval:com.redhat.rhsa:tst:20080544034" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276007"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080544004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-mysql is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20080544035" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276007"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-pgsql is earlier than 0:5.1.6-20.el5_2.1" id="oval:com.redhat.rhsa:tst:20080544036" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276006"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080544004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-pgsql is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20080544037" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276006"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-bcmath is earlier than 0:5.1.6-20.el5_2.1" id="oval:com.redhat.rhsa:tst:20080544038" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080544014"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080544004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-bcmath is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20080544039" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080544014"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-dba is earlier than 0:5.1.6-20.el5_2.1" id="oval:com.redhat.rhsa:tst:20080544040" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080544015"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080544004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-dba is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20080544041" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080544015"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-xmlrpc is earlier than 0:5.1.6-20.el5_2.1" id="oval:com.redhat.rhsa:tst:20080544042" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276009"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080544004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-xmlrpc is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20080544043" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276009"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-common is earlier than 0:5.1.6-20.el5_2.1" id="oval:com.redhat.rhsa:tst:20080544044" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080544017"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080544004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-common is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20080544045" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080544017"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-soap is earlier than 0:5.1.6-20.el5_2.1" id="oval:com.redhat.rhsa:tst:20080544046" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080544018"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080544004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-soap is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20080544047" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080544018"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-cli is earlier than 0:5.1.6-20.el5_2.1" id="oval:com.redhat.rhsa:tst:20080544048" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080544019"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080544004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-cli is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20080544049" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080544019"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-xml is earlier than 0:5.1.6-20.el5_2.1" id="oval:com.redhat.rhsa:tst:20080544050" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080544020"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080544004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-xml is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20080544051" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080544020"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php is earlier than 0:5.1.6-20.el5_2.1" id="oval:com.redhat.rhsa:tst:20080544052" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080544004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20080544053" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.20.el3" id="oval:com.redhat.rhsa:tst:20080547001" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080547001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.20.el3" id="oval:com.redhat.rhsa:tst:20080547003" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080547001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-devel is earlier than 0:1.0.9-0.20.el3" id="oval:com.redhat.rhsa:tst:20080547005" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578007"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080547001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-chat is earlier than 0:1.0.9-0.20.el3" id="oval:com.redhat.rhsa:tst:20080547007" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080547001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-nspr is earlier than 0:1.0.9-0.20.el3" id="oval:com.redhat.rhsa:tst:20080547009" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080547001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.20.el3" id="oval:com.redhat.rhsa:tst:20080547011" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578006"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080547001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.20.el3" id="oval:com.redhat.rhsa:tst:20080547013" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080547001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey is earlier than 0:1.0.9-0.20.el3" id="oval:com.redhat.rhsa:tst:20080547015" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578009"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080547001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-mail is earlier than 0:1.0.9-0.20.el3" id="oval:com.redhat.rhsa:tst:20080547017" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578010"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080547001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-nss is earlier than 0:1.0.9-0.20.el3" id="oval:com.redhat.rhsa:tst:20080547019" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578008"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080547001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-chat is earlier than 0:1.0.9-16.3.el4_6" id="oval:com.redhat.rhsa:tst:20080547022" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080547004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-dom-inspector is earlier than 0:1.0.9-16.3.el4_6" id="oval:com.redhat.rhsa:tst:20080547023" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080547004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-mail is earlier than 0:1.0.9-16.3.el4_6" id="oval:com.redhat.rhsa:tst:20080547024" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578010"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080547004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey is earlier than 0:1.0.9-16.3.el4_6" id="oval:com.redhat.rhsa:tst:20080547025" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578009"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080547004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-js-debugger is earlier than 0:1.0.9-16.3.el4_6" id="oval:com.redhat.rhsa:tst:20080547026" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080547004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-devel is earlier than 0:1.0.9-16.3.el4_6" id="oval:com.redhat.rhsa:tst:20080547027" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578007"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080547004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="freetype-devel is earlier than 0:2.1.4-10.el3" id="oval:com.redhat.rhsa:tst:20080556001" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060500002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080556001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="freetype is earlier than 0:2.1.4-10.el3" id="oval:com.redhat.rhsa:tst:20080556003" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060500001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080556003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="freetype-devel is earlier than 0:2.1.9-8.el4.6" id="oval:com.redhat.rhsa:tst:20080556006" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060500002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080556005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="freetype-demos is earlier than 0:2.1.9-8.el4.6" id="oval:com.redhat.rhsa:tst:20080556007" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060500004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080556005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="freetype is earlier than 0:2.1.9-8.el4.6" id="oval:com.redhat.rhsa:tst:20080556009" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060500001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080556006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="freetype-utils is earlier than 0:2.1.9-8.el4.6" id="oval:com.redhat.rhsa:tst:20080556010" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060500005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080556005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="freetype-demos is earlier than 0:2.2.1-20.el5_2" id="oval:com.redhat.rhsa:tst:20080556013" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060500004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080556008"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="freetype-devel is earlier than 0:2.2.1-20.el5_2" id="oval:com.redhat.rhsa:tst:20080556015" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060500002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080556010"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="freetype is earlier than 0:2.2.1-20.el5_2" id="oval:com.redhat.rhsa:tst:20080556017" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060500001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080556010"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="ruby is earlier than 0:1.6.8-12.el3" id="oval:com.redhat.rhsa:tst:20080562001" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060604005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080562001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="ruby-docs is earlier than 0:1.6.8-12.el3" id="oval:com.redhat.rhsa:tst:20080562003" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060604003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080562001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="ruby-tcltk is earlier than 0:1.6.8-12.el3" id="oval:com.redhat.rhsa:tst:20080562005" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060604004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080562001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="ruby-devel is earlier than 0:1.6.8-12.el3" id="oval:com.redhat.rhsa:tst:20080562007" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060604002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080562001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="irb is earlier than 0:1.6.8-12.el3" id="oval:com.redhat.rhsa:tst:20080562009" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060604007"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080562001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="ruby-mode is earlier than 0:1.6.8-12.el3" id="oval:com.redhat.rhsa:tst:20080562011" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060604006"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080562001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="ruby-libs is earlier than 0:1.6.8-12.el3" id="oval:com.redhat.rhsa:tst:20080562013" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060604001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080562003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="rdesktop is earlier than 0:1.2.0-3" id="oval:com.redhat.rhsa:tst:20080576001" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080576001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080576001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="rdesktop is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20080576002" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080576001"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="vsftpd is earlier than 0:1.2.1-3E.16" id="oval:com.redhat.rhsa:tst:20080579001" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080579001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080579001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="vsftpd is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20080579002" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080579001"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="pidgin is earlier than 0:1.5.1-2.el3" id="oval:com.redhat.rhsa:tst:20080584001" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080584001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080584001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="pidgin is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20080584002" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080584001"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="pidgin is earlier than 0:1.5.1-2.el4" id="oval:com.redhat.rhsa:tst:20080584004" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080584001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080584004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="finch is earlier than 0:2.3.1-2.el5_2" id="oval:com.redhat.rhsa:tst:20080584006" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080584003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080584006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="finch is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20080584007" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080584003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libpurple is earlier than 0:2.3.1-2.el5_2" id="oval:com.redhat.rhsa:tst:20080584008" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080584004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080584006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libpurple is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20080584009" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080584004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="finch-devel is earlier than 0:2.3.1-2.el5_2" id="oval:com.redhat.rhsa:tst:20080584010" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080584005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080584006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="finch-devel is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20080584011" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080584005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="pidgin is earlier than 0:2.3.1-2.el5_2" id="oval:com.redhat.rhsa:tst:20080584012" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080584001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080584006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="pidgin is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20080584013" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080584001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libpurple-tcl is earlier than 0:2.3.1-2.el5_2" id="oval:com.redhat.rhsa:tst:20080584014" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080584006"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080584006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libpurple-tcl is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20080584015" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080584006"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libpurple-perl is earlier than 0:2.3.1-2.el5_2" id="oval:com.redhat.rhsa:tst:20080584016" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080584007"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080584006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libpurple-perl is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20080584017" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080584007"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="pidgin-perl is earlier than 0:2.3.1-2.el5_2" id="oval:com.redhat.rhsa:tst:20080584018" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080584008"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080584006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="pidgin-perl is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20080584019" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080584008"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="pidgin-devel is earlier than 0:2.3.1-2.el5_2" id="oval:com.redhat.rhsa:tst:20080584020" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080584009"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080584006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="pidgin-devel is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20080584021" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080584009"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libpurple-devel is earlier than 0:2.3.1-2.el5_2" id="oval:com.redhat.rhsa:tst:20080584022" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080584010"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080584006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libpurple-devel is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20080584023" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080584010"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.22.el3" id="oval:com.redhat.rhsa:tst:20080599001" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578006"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080599001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-nss is earlier than 0:1.0.9-0.22.el3" id="oval:com.redhat.rhsa:tst:20080599003" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578008"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080599001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.22.el3" id="oval:com.redhat.rhsa:tst:20080599005" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080599001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-devel is earlier than 0:1.0.9-0.22.el3" id="oval:com.redhat.rhsa:tst:20080599007" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578007"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080599001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-nspr is earlier than 0:1.0.9-0.22.el3" id="oval:com.redhat.rhsa:tst:20080599009" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080599001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.22.el3" id="oval:com.redhat.rhsa:tst:20080599011" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080599001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.22.el3" id="oval:com.redhat.rhsa:tst:20080599013" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080599001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-chat is earlier than 0:1.0.9-0.22.el3" id="oval:com.redhat.rhsa:tst:20080599015" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080599001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey is earlier than 0:1.0.9-0.22.el3" id="oval:com.redhat.rhsa:tst:20080599017" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578009"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080599001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-mail is earlier than 0:1.0.9-0.22.el3" id="oval:com.redhat.rhsa:tst:20080599019" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578010"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080599001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey is earlier than 0:1.0.9-16.4.el4_6" id="oval:com.redhat.rhsa:tst:20080599022" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578009"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080599004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-dom-inspector is earlier than 0:1.0.9-16.4.el4_6" id="oval:com.redhat.rhsa:tst:20080599023" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080599004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-mail is earlier than 0:1.0.9-16.4.el4_6" id="oval:com.redhat.rhsa:tst:20080599024" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578010"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080599004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-chat is earlier than 0:1.0.9-16.4.el4_6" id="oval:com.redhat.rhsa:tst:20080599025" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080599004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-js-debugger is earlier than 0:1.0.9-16.4.el4_6" id="oval:com.redhat.rhsa:tst:20080599026" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080599004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-devel is earlier than 0:1.0.9-16.4.el4_6" id="oval:com.redhat.rhsa:tst:20080599027" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578007"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080599004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="devhelp-devel is earlier than 0:0.10-0.8.1.el4" id="oval:com.redhat.rhsa:tst:20080599028" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060329001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080599005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="devhelp is earlier than 0:0.10-0.8.1.el4" id="oval:com.redhat.rhsa:tst:20080599030" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060329002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080599005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="vim-minimal is earlier than 1:6.3.046-0.30E.11" id="oval:com.redhat.rhsa:tst:20080617001" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080617001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080617001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="vim-minimal is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20080617002" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080617001"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="vim-common is earlier than 1:6.3.046-0.30E.11" id="oval:com.redhat.rhsa:tst:20080617003" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080617002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080617001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="vim-common is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20080617004" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080617002"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="vim-X11 is earlier than 1:6.3.046-0.30E.11" id="oval:com.redhat.rhsa:tst:20080617005" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080617003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080617001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="vim-X11 is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20080617006" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080617003"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="vim-enhanced is earlier than 1:6.3.046-0.30E.11" id="oval:com.redhat.rhsa:tst:20080617007" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080617004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080617001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="vim-enhanced is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20080617008" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080617004"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="vim-common is earlier than 1:6.3.046-1.el4_7.5z" id="oval:com.redhat.rhsa:tst:20080617010" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080617002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080617004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="vim-enhanced is earlier than 1:6.3.046-1.el4_7.5z" id="oval:com.redhat.rhsa:tst:20080617011" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080617004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080617004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="vim-minimal is earlier than 1:6.3.046-1.el4_7.5z" id="oval:com.redhat.rhsa:tst:20080617012" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080617001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080617004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="vim-X11 is earlier than 1:6.3.046-1.el4_7.5z" id="oval:com.redhat.rhsa:tst:20080617013" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080617003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080617004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libxml2-python is earlier than 0:2.5.10-11" id="oval:com.redhat.rhsa:tst:20080836001" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080032002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080836001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libxml2-devel is earlier than 0:2.5.10-11" id="oval:com.redhat.rhsa:tst:20080836003" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080032001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080836001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libxml2 is earlier than 0:2.5.10-11" id="oval:com.redhat.rhsa:tst:20080836005" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080032003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080836003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libxml2-devel is earlier than 0:2.6.16-12.3" id="oval:com.redhat.rhsa:tst:20080836008" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080032001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080836005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libxml2 is earlier than 0:2.6.16-12.3" id="oval:com.redhat.rhsa:tst:20080836009" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080032003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080836006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libxml2-python is earlier than 0:2.6.16-12.3" id="oval:com.redhat.rhsa:tst:20080836010" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080032002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080836005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libxml2-devel is earlier than 0:2.6.26-2.1.2.4" id="oval:com.redhat.rhsa:tst:20080836012" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080032001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080836008"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libxml2-python is earlier than 0:2.6.26-2.1.2.4" id="oval:com.redhat.rhsa:tst:20080836014" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080032002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080836010"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libxml2 is earlier than 0:2.6.26-2.1.2.4" id="oval:com.redhat.rhsa:tst:20080836016" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080032003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080836008"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="postfix is earlier than 2:2.0.16-14.1.RHEL3" id="oval:com.redhat.rhsa:tst:20080839001" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080839001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080839001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="postfix is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20080839002" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080839001"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="postfix-pflogsumm is earlier than 2:2.2.10-1.2.1.el4_7" id="oval:com.redhat.rhsa:tst:20080839004" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080839003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080839004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="postfix-pflogsumm is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20080839005" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080839003"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="postfix is earlier than 2:2.2.10-1.2.1.el4_7" id="oval:com.redhat.rhsa:tst:20080839006" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080839001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080839004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="postfix is earlier than 2:2.3.3-2.1.el5_2" id="oval:com.redhat.rhsa:tst:20080839008" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080839001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080839006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="postfix is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20080839009" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080839001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="postfix-pflogsumm is earlier than 2:2.3.3-2.1.el5_2" id="oval:com.redhat.rhsa:tst:20080839010" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080839003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080839006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="postfix-pflogsumm is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20080839011" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080839003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="ipsec-tools is earlier than 0:0.2.5-0.7.rhel3.5" id="oval:com.redhat.rhsa:tst:20080849001" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060267001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080849001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="ipsec-tools is earlier than 0:0.3.3-7.el4_7" id="oval:com.redhat.rhsa:tst:20080849004" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060267001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080849004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="ipsec-tools is earlier than 0:0.6.5-9.el5_2.3" id="oval:com.redhat.rhsa:tst:20080849006" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060267001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080849006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="ipsec-tools is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20080849007" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060267001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libtiff-devel is earlier than 0:3.5.7-31.el3" id="oval:com.redhat.rhsa:tst:20080863001" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060425001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080863001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libtiff is earlier than 0:3.5.7-31.el3" id="oval:com.redhat.rhsa:tst:20080863003" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060425002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080863003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.24.el3" id="oval:com.redhat.rhsa:tst:20080882001" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080882001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.24.el3" id="oval:com.redhat.rhsa:tst:20080882003" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080882001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey is earlier than 0:1.0.9-0.24.el3" id="oval:com.redhat.rhsa:tst:20080882005" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578009"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080882001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-devel is earlier than 0:1.0.9-0.24.el3" id="oval:com.redhat.rhsa:tst:20080882007" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578007"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080882001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-chat is earlier than 0:1.0.9-0.24.el3" id="oval:com.redhat.rhsa:tst:20080882009" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080882001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.24.el3" id="oval:com.redhat.rhsa:tst:20080882011" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578006"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080882001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-nspr is earlier than 0:1.0.9-0.24.el3" id="oval:com.redhat.rhsa:tst:20080882013" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080882001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-mail is earlier than 0:1.0.9-0.24.el3" id="oval:com.redhat.rhsa:tst:20080882015" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578010"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080882001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-nss is earlier than 0:1.0.9-0.24.el3" id="oval:com.redhat.rhsa:tst:20080882017" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578008"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080882001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.24.el3" id="oval:com.redhat.rhsa:tst:20080882019" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080882001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="devhelp-devel is earlier than 0:0.10-0.10.el4" id="oval:com.redhat.rhsa:tst:20080882022" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060329001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080882004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="devhelp is earlier than 0:0.10-0.10.el4" id="oval:com.redhat.rhsa:tst:20080882024" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060329002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080882004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-js-debugger is earlier than 0:1.0.9-26.el4" id="oval:com.redhat.rhsa:tst:20080882026" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080882005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-dom-inspector is earlier than 0:1.0.9-26.el4" id="oval:com.redhat.rhsa:tst:20080882027" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080882005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-mail is earlier than 0:1.0.9-26.el4" id="oval:com.redhat.rhsa:tst:20080882028" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578010"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080882005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-devel is earlier than 0:1.0.9-26.el4" id="oval:com.redhat.rhsa:tst:20080882029" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578007"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080882005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey is earlier than 0:1.0.9-26.el4" id="oval:com.redhat.rhsa:tst:20080882030" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578009"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080882005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-chat is earlier than 0:1.0.9-26.el4" id="oval:com.redhat.rhsa:tst:20080882031" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080882005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libxml2 is earlier than 0:2.5.10-13" id="oval:com.redhat.rhsa:tst:20080884001" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080032003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080884001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libxml2-python is earlier than 0:2.5.10-13" id="oval:com.redhat.rhsa:tst:20080884003" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080032002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080884003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libxml2-devel is earlier than 0:2.5.10-13" id="oval:com.redhat.rhsa:tst:20080884005" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080032001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080884003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libxml2 is earlier than 0:2.6.16-12.5" id="oval:com.redhat.rhsa:tst:20080884008" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080032003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080884005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libxml2-python is earlier than 0:2.6.16-12.5" id="oval:com.redhat.rhsa:tst:20080884009" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080032002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080884006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libxml2-devel is earlier than 0:2.6.16-12.5" id="oval:com.redhat.rhsa:tst:20080884010" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080032001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080884006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libxml2-devel is earlier than 0:2.6.26-2.1.2.6" id="oval:com.redhat.rhsa:tst:20080884012" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080032001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080884008"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libxml2-python is earlier than 0:2.6.26-2.1.2.6" id="oval:com.redhat.rhsa:tst:20080884014" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080032002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080884010"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libxml2 is earlier than 0:2.6.26-2.1.2.6" id="oval:com.redhat.rhsa:tst:20080884016" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080032003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080884008"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="wireshark is earlier than 0:1.0.3-EL3.3" id="oval:com.redhat.rhsa:tst:20080890001" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060602001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080890001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="wireshark-gnome is earlier than 0:1.0.3-EL3.3" id="oval:com.redhat.rhsa:tst:20080890003" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060602002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080890001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="wireshark-gnome is earlier than 0:1.0.3-3.el4_7" id="oval:com.redhat.rhsa:tst:20080890006" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060602002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080890004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="wireshark is earlier than 0:1.0.3-3.el4_7" id="oval:com.redhat.rhsa:tst:20080890007" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060602001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080890004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="wireshark is earlier than 0:1.0.3-4.el5_2" id="oval:com.redhat.rhsa:tst:20080890009" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060602001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080890006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="wireshark-gnome is earlier than 0:1.0.3-4.el5_2" id="oval:com.redhat.rhsa:tst:20080890011" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060602002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080890006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="bzip2-libs is earlier than 0:1.0.2-12.EL3" id="oval:com.redhat.rhsa:tst:20080893001" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080893001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080893001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="bzip2-libs is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20080893002" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080893001"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="bzip2-devel is earlier than 0:1.0.2-12.EL3" id="oval:com.redhat.rhsa:tst:20080893003" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080893002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080893003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="bzip2-devel is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20080893004" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080893002"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="bzip2 is earlier than 0:1.0.2-12.EL3" id="oval:com.redhat.rhsa:tst:20080893005" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080893003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080893003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="bzip2 is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20080893006" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080893003"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="bzip2-libs is earlier than 0:1.0.2-14.el4_7" id="oval:com.redhat.rhsa:tst:20080893008" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080893001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080893005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="bzip2 is earlier than 0:1.0.2-14.el4_7" id="oval:com.redhat.rhsa:tst:20080893009" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080893003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080893006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="bzip2-devel is earlier than 0:1.0.2-14.el4_7" id="oval:com.redhat.rhsa:tst:20080893010" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080893002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080893005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="bzip2-libs is earlier than 0:1.0.3-4.el5_2" id="oval:com.redhat.rhsa:tst:20080893012" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080893001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080893008"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="bzip2-libs is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20080893013" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080893001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="bzip2 is earlier than 0:1.0.3-4.el5_2" id="oval:com.redhat.rhsa:tst:20080893014" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080893003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080890006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="bzip2 is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20080893015" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080893003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="bzip2-devel is earlier than 0:1.0.3-4.el5_2" id="oval:com.redhat.rhsa:tst:20080893016" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080893002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080893008"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="bzip2-devel is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20080893017" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080893002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="ruby-mode is earlier than 0:1.6.8-13.el3" id="oval:com.redhat.rhsa:tst:20080896001" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060604006"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080896001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="irb is earlier than 0:1.6.8-13.el3" id="oval:com.redhat.rhsa:tst:20080896003" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060604007"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080896001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="ruby-tcltk is earlier than 0:1.6.8-13.el3" id="oval:com.redhat.rhsa:tst:20080896005" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060604004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080896001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="ruby is earlier than 0:1.6.8-13.el3" id="oval:com.redhat.rhsa:tst:20080896007" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060604005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080896001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="ruby-libs is earlier than 0:1.6.8-13.el3" id="oval:com.redhat.rhsa:tst:20080896009" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060604001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080896003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="ruby-docs is earlier than 0:1.6.8-13.el3" id="oval:com.redhat.rhsa:tst:20080896011" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060604003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080896001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="ruby-devel is earlier than 0:1.6.8-13.el3" id="oval:com.redhat.rhsa:tst:20080896013" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060604002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080896001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="cups is earlier than 1:1.1.17-13.3.54" id="oval:com.redhat.rhsa:tst:20080937001" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060163003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080937001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="cups-devel is earlier than 1:1.1.17-13.3.54" id="oval:com.redhat.rhsa:tst:20080937003" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060163001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080937001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="cups-libs is earlier than 1:1.1.17-13.3.54" id="oval:com.redhat.rhsa:tst:20080937005" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060163002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080937003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="cups-devel is earlier than 1:1.1.22-0.rc1.9.27.el4_7.1" id="oval:com.redhat.rhsa:tst:20080937008" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060163001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080937005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="cups is earlier than 1:1.1.22-0.rc1.9.27.el4_7.1" id="oval:com.redhat.rhsa:tst:20080937009" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060163003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080937005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="cups-libs is earlier than 1:1.1.22-0.rc1.9.27.el4_7.1" id="oval:com.redhat.rhsa:tst:20080937010" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060163002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080937006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="cups-devel is earlier than 1:1.2.4-11.18.el5_2.2" id="oval:com.redhat.rhsa:tst:20080937012" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060163001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080937008"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="cups-lpd is earlier than 1:1.2.4-11.18.el5_2.2" id="oval:com.redhat.rhsa:tst:20080937014" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070123005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080937010"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="cups is earlier than 1:1.2.4-11.18.el5_2.2" id="oval:com.redhat.rhsa:tst:20080937016" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060163003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080937010"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="cups-libs is earlier than 1:1.2.4-11.18.el5_2.2" id="oval:com.redhat.rhsa:tst:20080937018" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060163002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080937008"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-libs is earlier than 0:1.1.2-43.2.0.EL3" id="oval:com.redhat.rhsa:tst:20080939001" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060573002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080939001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org is earlier than 0:1.1.2-43.2.0.EL3" id="oval:com.redhat.rhsa:tst:20080939003" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060573003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080939001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-i18n is earlier than 0:1.1.2-43.2.0.EL3" id="oval:com.redhat.rhsa:tst:20080939005" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060573001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080939001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-kde is earlier than 0:1.1.5-10.6.0.7.EL4" id="oval:com.redhat.rhsa:tst:20080939008" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060573005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080939004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-libs is earlier than 0:1.1.5-10.6.0.7.EL4" id="oval:com.redhat.rhsa:tst:20080939010" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060573002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080939004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org is earlier than 0:1.1.5-10.6.0.7.EL4" id="oval:com.redhat.rhsa:tst:20080939011" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060573003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080939004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-i18n is earlier than 0:1.1.5-10.6.0.7.EL4" id="oval:com.redhat.rhsa:tst:20080939012" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060573001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080939004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-gu_IN is earlier than 1:2.0.4-5.7.0.6.0" id="oval:com.redhat.rhsa:tst:20080939013" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406031"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080939005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-ru is earlier than 1:2.0.4-5.7.0.6.0" id="oval:com.redhat.rhsa:tst:20080939015" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406029"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080939005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-xsltfilter is earlier than 1:2.0.4-5.7.0.6.0" id="oval:com.redhat.rhsa:tst:20080939017" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406030"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080939005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-ar is earlier than 1:2.0.4-5.7.0.6.0" id="oval:com.redhat.rhsa:tst:20080939019" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406028"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080939005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-ja_JP is earlier than 1:2.0.4-5.7.0.6.0" id="oval:com.redhat.rhsa:tst:20080939021" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406037"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080939005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-math is earlier than 1:2.0.4-5.7.0.6.0" id="oval:com.redhat.rhsa:tst:20080939023" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406034"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080939005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-cy_GB is earlier than 1:2.0.4-5.7.0.6.0" id="oval:com.redhat.rhsa:tst:20080939025" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406035"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080939005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-writer is earlier than 1:2.0.4-5.7.0.6.0" id="oval:com.redhat.rhsa:tst:20080939027" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406036"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080939005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-bn is earlier than 1:2.0.4-5.7.0.6.0" id="oval:com.redhat.rhsa:tst:20080939029" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406033"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080939005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-pl_PL is earlier than 1:2.0.4-5.7.0.6.0" id="oval:com.redhat.rhsa:tst:20080939031" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406040"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080939005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-zh_TW is earlier than 1:2.0.4-5.7.0.6.0" id="oval:com.redhat.rhsa:tst:20080939033" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406041"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080939005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-it is earlier than 1:2.0.4-5.7.0.6.0" id="oval:com.redhat.rhsa:tst:20080939035" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406046"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080939005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-da_DK is earlier than 1:2.0.4-5.7.0.6.0" id="oval:com.redhat.rhsa:tst:20080939037" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406049"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080939005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-hr_HR is earlier than 1:2.0.4-5.7.0.6.0" id="oval:com.redhat.rhsa:tst:20080939039" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406039"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080939005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-sk_SK is earlier than 1:2.0.4-5.7.0.6.0" id="oval:com.redhat.rhsa:tst:20080939041" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406038"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080939005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-lt_LT is earlier than 1:2.0.4-5.7.0.6.0" id="oval:com.redhat.rhsa:tst:20080939043" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406042"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080939005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-ko_KR is earlier than 1:2.0.4-5.7.0.6.0" id="oval:com.redhat.rhsa:tst:20080939045" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406044"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080939005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-pa_IN is earlier than 1:2.0.4-5.7.0.6.0" id="oval:com.redhat.rhsa:tst:20080939047" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406047"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080939005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-impress is earlier than 1:2.0.4-5.7.0.6.0" id="oval:com.redhat.rhsa:tst:20080939049" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406043"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080939005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-es is earlier than 1:2.0.4-5.7.0.6.0" id="oval:com.redhat.rhsa:tst:20080939051" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406051"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080939005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-ta_IN is earlier than 1:2.0.4-5.7.0.6.0" id="oval:com.redhat.rhsa:tst:20080939053" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406048"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080939005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-emailmerge is earlier than 1:2.0.4-5.7.0.6.0" id="oval:com.redhat.rhsa:tst:20080939055" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406052"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080939005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-base is earlier than 1:2.0.4-5.7.0.6.0" id="oval:com.redhat.rhsa:tst:20080939057" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406050"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080939005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-nb_NO is earlier than 1:2.0.4-5.7.0.6.0" id="oval:com.redhat.rhsa:tst:20080939059" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406045"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080939005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-gl_ES is earlier than 1:2.0.4-5.7.0.6.0" id="oval:com.redhat.rhsa:tst:20080939061" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406058"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080939005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-testtools is earlier than 1:2.0.4-5.7.0.6.0" id="oval:com.redhat.rhsa:tst:20080939063" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406057"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080939005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-zu_ZA is earlier than 1:2.0.4-5.7.0.6.0" id="oval:com.redhat.rhsa:tst:20080939065" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406055"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080939005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-ga_IE is earlier than 1:2.0.4-5.7.0.6.0" id="oval:com.redhat.rhsa:tst:20080939067" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406056"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080939005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-sv is earlier than 1:2.0.4-5.7.0.6.0" id="oval:com.redhat.rhsa:tst:20080939069" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406059"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080939005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-pt_BR is earlier than 1:2.0.4-5.7.0.6.0" id="oval:com.redhat.rhsa:tst:20080939071" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406053"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080939005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-af_ZA is earlier than 1:2.0.4-5.7.0.6.0" id="oval:com.redhat.rhsa:tst:20080939073" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406054"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080939005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-draw is earlier than 1:2.0.4-5.7.0.6.0" id="oval:com.redhat.rhsa:tst:20080939075" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406060"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080939005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-javafilter is earlier than 1:2.0.4-5.7.0.6.0" id="oval:com.redhat.rhsa:tst:20080939077" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406063"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080939005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-nn_NO is earlier than 1:2.0.4-5.7.0.6.0" id="oval:com.redhat.rhsa:tst:20080939079" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406062"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080939005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-fr is earlier than 1:2.0.4-5.7.0.6.0" id="oval:com.redhat.rhsa:tst:20080939081" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406061"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080939005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-bg_BG is earlier than 1:2.0.4-5.7.0.6.0" id="oval:com.redhat.rhsa:tst:20080939083" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406006"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080939005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-pt_PT is earlier than 1:2.0.4-5.7.0.6.0" id="oval:com.redhat.rhsa:tst:20080939085" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406009"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080939005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-de is earlier than 1:2.0.4-5.7.0.6.0" id="oval:com.redhat.rhsa:tst:20080939087" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406007"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080939005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-tr_TR is earlier than 1:2.0.4-5.7.0.6.0" id="oval:com.redhat.rhsa:tst:20080939089" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406010"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080939005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-fi_FI is earlier than 1:2.0.4-5.7.0.6.0" id="oval:com.redhat.rhsa:tst:20080939091" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406011"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080939005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-pyuno is earlier than 1:2.0.4-5.7.0.6.0" id="oval:com.redhat.rhsa:tst:20080939093" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406015"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080939005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-et_EE is earlier than 1:2.0.4-5.7.0.6.0" id="oval:com.redhat.rhsa:tst:20080939095" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406008"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080939005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-th_TH is earlier than 1:2.0.4-5.7.0.6.0" id="oval:com.redhat.rhsa:tst:20080939097" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406013"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080939005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-core is earlier than 1:2.0.4-5.7.0.6.0" id="oval:com.redhat.rhsa:tst:20080939099" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406016"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080939005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-hu_HU is earlier than 1:2.0.4-5.7.0.6.0" id="oval:com.redhat.rhsa:tst:20080939101" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406012"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080939005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-ca_ES is earlier than 1:2.0.4-5.7.0.6.0" id="oval:com.redhat.rhsa:tst:20080939103" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406014"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080939005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-eu_ES is earlier than 1:2.0.4-5.7.0.6.0" id="oval:com.redhat.rhsa:tst:20080939105" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406017"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080939005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-graphicfilter is earlier than 1:2.0.4-5.7.0.6.0" id="oval:com.redhat.rhsa:tst:20080939107" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406019"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080939005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-sl_SI is earlier than 1:2.0.4-5.7.0.6.0" id="oval:com.redhat.rhsa:tst:20080939109" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406022"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080939005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-cs_CZ is earlier than 1:2.0.4-5.7.0.6.0" id="oval:com.redhat.rhsa:tst:20080939111" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406026"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080939005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-hi_IN is earlier than 1:2.0.4-5.7.0.6.0" id="oval:com.redhat.rhsa:tst:20080939113" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406018"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080939005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-zh_CN is earlier than 1:2.0.4-5.7.0.6.0" id="oval:com.redhat.rhsa:tst:20080939115" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406020"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080939005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-nl is earlier than 1:2.0.4-5.7.0.6.0" id="oval:com.redhat.rhsa:tst:20080939117" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406021"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080939005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-el_GR is earlier than 1:2.0.4-5.7.0.6.0" id="oval:com.redhat.rhsa:tst:20080939119" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406023"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080939005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-he_IL is earlier than 1:2.0.4-5.7.0.6.0" id="oval:com.redhat.rhsa:tst:20080939121" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406032"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080939005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-ms_MY is earlier than 1:2.0.4-5.7.0.6.0" id="oval:com.redhat.rhsa:tst:20080939123" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406027"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080939005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-calc is earlier than 1:2.0.4-5.7.0.6.0" id="oval:com.redhat.rhsa:tst:20080939125" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406024"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080939005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-sr_CS is earlier than 1:2.0.4-5.7.0.6.0" id="oval:com.redhat.rhsa:tst:20080939127" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406025"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080939005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-ve_ZA is earlier than 1:2.3.0-6.5.4.el5_2" id="oval:com.redhat.rhsa:tst:20080939130" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406069"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080939007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-zh_TW is earlier than 1:2.3.0-6.5.4.el5_2" id="oval:com.redhat.rhsa:tst:20080939132" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406108"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080939007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-headless is earlier than 1:2.3.0-6.5.4.el5_2" id="oval:com.redhat.rhsa:tst:20080939134" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080939066"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080939007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-headless is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20080939135" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080939066"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-testtools is earlier than 1:2.3.0-6.5.4.el5_2" id="oval:com.redhat.rhsa:tst:20080939136" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406078"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080939007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-as_IN is earlier than 1:2.3.0-6.5.4.el5_2" id="oval:com.redhat.rhsa:tst:20080939138" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406105"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080939007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-hu_HU is earlier than 1:2.3.0-6.5.4.el5_2" id="oval:com.redhat.rhsa:tst:20080939140" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406079"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080939007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-ml_IN is earlier than 1:2.3.0-6.5.4.el5_2" id="oval:com.redhat.rhsa:tst:20080939142" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406114"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080939007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-th_TH is earlier than 1:2.3.0-6.5.4.el5_2" id="oval:com.redhat.rhsa:tst:20080939144" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406116"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080939007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-ko_KR is earlier than 1:2.3.0-6.5.4.el5_2" id="oval:com.redhat.rhsa:tst:20080939146" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406085"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080939007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-gu_IN is earlier than 1:2.3.0-6.5.4.el5_2" id="oval:com.redhat.rhsa:tst:20080939148" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406083"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080939007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-de is earlier than 1:2.3.0-6.5.4.el5_2" id="oval:com.redhat.rhsa:tst:20080939150" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406109"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080939007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-pyuno is earlier than 1:2.3.0-6.5.4.el5_2" id="oval:com.redhat.rhsa:tst:20080939152" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406118"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080939007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-lt_LT is earlier than 1:2.3.0-6.5.4.el5_2" id="oval:com.redhat.rhsa:tst:20080939154" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406091"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080939007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-or_IN is earlier than 1:2.3.0-6.5.4.el5_2" id="oval:com.redhat.rhsa:tst:20080939156" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406124"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080939007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-pt_PT is earlier than 1:2.3.0-6.5.4.el5_2" id="oval:com.redhat.rhsa:tst:20080939158" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406100"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080939007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-ta_IN is earlier than 1:2.3.0-6.5.4.el5_2" id="oval:com.redhat.rhsa:tst:20080939160" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406112"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080939007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-javafilter is earlier than 1:2.3.0-6.5.4.el5_2" id="oval:com.redhat.rhsa:tst:20080939162" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406133"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080939007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-ga_IE is earlier than 1:2.3.0-6.5.4.el5_2" id="oval:com.redhat.rhsa:tst:20080939164" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406077"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080939007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-math is earlier than 1:2.3.0-6.5.4.el5_2" id="oval:com.redhat.rhsa:tst:20080939166" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406082"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080939007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-st_ZA is earlier than 1:2.3.0-6.5.4.el5_2" id="oval:com.redhat.rhsa:tst:20080939168" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406135"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080939007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-sdk is earlier than 1:2.3.0-6.5.4.el5_2" id="oval:com.redhat.rhsa:tst:20080939170" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080939084"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080939007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-sdk is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20080939171" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080939084"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-pa_IN is earlier than 1:2.3.0-6.5.4.el5_2" id="oval:com.redhat.rhsa:tst:20080939172" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406106"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080939007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-fr is earlier than 1:2.3.0-6.5.4.el5_2" id="oval:com.redhat.rhsa:tst:20080939174" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406086"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080939007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-emailmerge is earlier than 1:2.3.0-6.5.4.el5_2" id="oval:com.redhat.rhsa:tst:20080939176" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406099"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080939007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-hi_IN is earlier than 1:2.3.0-6.5.4.el5_2" id="oval:com.redhat.rhsa:tst:20080939178" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406066"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080939007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-ss_ZA is earlier than 1:2.3.0-6.5.4.el5_2" id="oval:com.redhat.rhsa:tst:20080939180" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406074"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080939007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-zh_CN is earlier than 1:2.3.0-6.5.4.el5_2" id="oval:com.redhat.rhsa:tst:20080939182" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406076"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080939007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-da_DK is earlier than 1:2.3.0-6.5.4.el5_2" id="oval:com.redhat.rhsa:tst:20080939184" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406113"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080939007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-ar is earlier than 1:2.3.0-6.5.4.el5_2" id="oval:com.redhat.rhsa:tst:20080939186" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406107"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080939007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-xh_ZA is earlier than 1:2.3.0-6.5.4.el5_2" id="oval:com.redhat.rhsa:tst:20080939188" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406090"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080939007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-nl is earlier than 1:2.3.0-6.5.4.el5_2" id="oval:com.redhat.rhsa:tst:20080939190" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406102"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080939007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-ja_JP is earlier than 1:2.3.0-6.5.4.el5_2" id="oval:com.redhat.rhsa:tst:20080939192" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406093"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080939007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-es is earlier than 1:2.3.0-6.5.4.el5_2" id="oval:com.redhat.rhsa:tst:20080939194" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406128"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080939007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-mr_IN is earlier than 1:2.3.0-6.5.4.el5_2" id="oval:com.redhat.rhsa:tst:20080939196" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406095"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080939007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-nso_ZA is earlier than 1:2.3.0-6.5.4.el5_2" id="oval:com.redhat.rhsa:tst:20080939198" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406092"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080939007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-sl_SI is earlier than 1:2.3.0-6.5.4.el5_2" id="oval:com.redhat.rhsa:tst:20080939200" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406132"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080939007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-sr_CS is earlier than 1:2.3.0-6.5.4.el5_2" id="oval:com.redhat.rhsa:tst:20080939202" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406115"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080939007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-pl_PL is earlier than 1:2.3.0-6.5.4.el5_2" id="oval:com.redhat.rhsa:tst:20080939204" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406110"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080939007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-draw is earlier than 1:2.3.0-6.5.4.el5_2" id="oval:com.redhat.rhsa:tst:20080939206" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406101"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080939007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-nb_NO is earlier than 1:2.3.0-6.5.4.el5_2" id="oval:com.redhat.rhsa:tst:20080939208" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406073"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080939007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-bg_BG is earlier than 1:2.3.0-6.5.4.el5_2" id="oval:com.redhat.rhsa:tst:20080939210" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406119"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080939007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-ts_ZA is earlier than 1:2.3.0-6.5.4.el5_2" id="oval:com.redhat.rhsa:tst:20080939212" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406125"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080939007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-el_GR is earlier than 1:2.3.0-6.5.4.el5_2" id="oval:com.redhat.rhsa:tst:20080939214" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406121"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080939007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-calc is earlier than 1:2.3.0-6.5.4.el5_2" id="oval:com.redhat.rhsa:tst:20080939216" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406131"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080939007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-ms_MY is earlier than 1:2.3.0-6.5.4.el5_2" id="oval:com.redhat.rhsa:tst:20080939218" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406084"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080939007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-sv is earlier than 1:2.3.0-6.5.4.el5_2" id="oval:com.redhat.rhsa:tst:20080939220" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406130"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080939007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-zu_ZA is earlier than 1:2.3.0-6.5.4.el5_2" id="oval:com.redhat.rhsa:tst:20080939222" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406103"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080939007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-impress is earlier than 1:2.3.0-6.5.4.el5_2" id="oval:com.redhat.rhsa:tst:20080939224" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406129"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080939007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-eu_ES is earlier than 1:2.3.0-6.5.4.el5_2" id="oval:com.redhat.rhsa:tst:20080939226" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406127"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080939007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-graphicfilter is earlier than 1:2.3.0-6.5.4.el5_2" id="oval:com.redhat.rhsa:tst:20080939228" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406070"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080939007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-af_ZA is earlier than 1:2.3.0-6.5.4.el5_2" id="oval:com.redhat.rhsa:tst:20080939230" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406122"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080939007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-writer is earlier than 1:2.3.0-6.5.4.el5_2" id="oval:com.redhat.rhsa:tst:20080939232" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406072"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080939007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-fi_FI is earlier than 1:2.3.0-6.5.4.el5_2" id="oval:com.redhat.rhsa:tst:20080939234" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406126"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080939007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-base is earlier than 1:2.3.0-6.5.4.el5_2" id="oval:com.redhat.rhsa:tst:20080939236" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406089"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080939007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-kn_IN is earlier than 1:2.3.0-6.5.4.el5_2" id="oval:com.redhat.rhsa:tst:20080939238" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406134"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080939007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-te_IN is earlier than 1:2.3.0-6.5.4.el5_2" id="oval:com.redhat.rhsa:tst:20080939240" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406096"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080939007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-pt_BR is earlier than 1:2.3.0-6.5.4.el5_2" id="oval:com.redhat.rhsa:tst:20080939242" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406065"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080939007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-nr_ZA is earlier than 1:2.3.0-6.5.4.el5_2" id="oval:com.redhat.rhsa:tst:20080939244" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406068"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080939007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-ru is earlier than 1:2.3.0-6.5.4.el5_2" id="oval:com.redhat.rhsa:tst:20080939246" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406136"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080939007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-ur is earlier than 1:2.3.0-6.5.4.el5_2" id="oval:com.redhat.rhsa:tst:20080939248" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406117"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080939007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-gl_ES is earlier than 1:2.3.0-6.5.4.el5_2" id="oval:com.redhat.rhsa:tst:20080939250" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406075"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080939007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-cs_CZ is earlier than 1:2.3.0-6.5.4.el5_2" id="oval:com.redhat.rhsa:tst:20080939252" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406067"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080939007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-cy_GB is earlier than 1:2.3.0-6.5.4.el5_2" id="oval:com.redhat.rhsa:tst:20080939254" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406087"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080939007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-bn is earlier than 1:2.3.0-6.5.4.el5_2" id="oval:com.redhat.rhsa:tst:20080939256" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406104"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080939007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-xsltfilter is earlier than 1:2.3.0-6.5.4.el5_2" id="oval:com.redhat.rhsa:tst:20080939258" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406088"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080939007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-tr_TR is earlier than 1:2.3.0-6.5.4.el5_2" id="oval:com.redhat.rhsa:tst:20080939260" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406071"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080939007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-nn_NO is earlier than 1:2.3.0-6.5.4.el5_2" id="oval:com.redhat.rhsa:tst:20080939262" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406111"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080939007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-ca_ES is earlier than 1:2.3.0-6.5.4.el5_2" id="oval:com.redhat.rhsa:tst:20080939264" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406081"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080939007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-et_EE is earlier than 1:2.3.0-6.5.4.el5_2" id="oval:com.redhat.rhsa:tst:20080939266" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406098"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080939007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-it is earlier than 1:2.3.0-6.5.4.el5_2" id="oval:com.redhat.rhsa:tst:20080939268" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406097"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080939007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-he_IL is earlier than 1:2.3.0-6.5.4.el5_2" id="oval:com.redhat.rhsa:tst:20080939270" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406120"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080939007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-tn_ZA is earlier than 1:2.3.0-6.5.4.el5_2" id="oval:com.redhat.rhsa:tst:20080939272" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406094"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080939007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-core is earlier than 1:2.3.0-6.5.4.el5_2" id="oval:com.redhat.rhsa:tst:20080939274" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406123"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080939007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-sdk-doc is earlier than 1:2.3.0-6.5.4.el5_2" id="oval:com.redhat.rhsa:tst:20080939276" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080939137"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080939007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-sdk-doc is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20080939277" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080939137"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-sk_SK is earlier than 1:2.3.0-6.5.4.el5_2" id="oval:com.redhat.rhsa:tst:20080939278" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406064"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080939007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-hr_HR is earlier than 1:2.3.0-6.5.4.el5_2" id="oval:com.redhat.rhsa:tst:20080939280" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406080"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080939007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="ed is earlier than 0:0.2-33.30E.1" id="oval:com.redhat.rhsa:tst:20080946001" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080946001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080946001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="ed is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20080946002" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080946001"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="ed is earlier than 0:0.2-36.el4_7.1" id="oval:com.redhat.rhsa:tst:20080946004" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080946001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080946004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="ed is earlier than 0:0.2-39.el5_2" id="oval:com.redhat.rhsa:tst:20080946006" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080946001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080946006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="ed is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20080946007" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080946001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="lynx is earlier than 0:2.8.5-11.3" id="oval:com.redhat.rhsa:tst:20080965001" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080965001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080965001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="lynx is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20080965002" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080965001"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="lynx is earlier than 0:2.8.5-18.2.el4_7.1" id="oval:com.redhat.rhsa:tst:20080965004" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080965001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080965004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="lynx is earlier than 0:2.8.5-28.1.el5_2.1" id="oval:com.redhat.rhsa:tst:20080965006" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080965001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080965006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="lynx is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20080965007" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080965001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="httpd-devel is earlier than 0:2.0.46-71.ent" id="oval:com.redhat.rhsa:tst:20080967001" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060159002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080967001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="httpd is earlier than 0:2.0.46-71.ent" id="oval:com.redhat.rhsa:tst:20080967003" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060159003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080967001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="mod_ssl is earlier than 1:2.0.46-71.ent" id="oval:com.redhat.rhsa:tst:20080967005" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060159001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080967003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="mod_ssl is earlier than 1:2.0.52-41.ent.2" id="oval:com.redhat.rhsa:tst:20080967008" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060159001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080967005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="httpd is earlier than 0:2.0.52-41.ent.2" id="oval:com.redhat.rhsa:tst:20080967009" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060159003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080967006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="httpd-manual is earlier than 0:2.0.52-41.ent.2" id="oval:com.redhat.rhsa:tst:20080967010" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060159006"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080967006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="httpd-devel is earlier than 0:2.0.52-41.ent.2" id="oval:com.redhat.rhsa:tst:20080967012" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060159002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080967006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="httpd-suexec is earlier than 0:2.0.52-41.ent.2" id="oval:com.redhat.rhsa:tst:20080967013" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060159005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080967006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="httpd is earlier than 0:2.2.3-11.el5_2.4" id="oval:com.redhat.rhsa:tst:20080967016" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060159003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080967008"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="httpd is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20080967017" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060159003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="mod_ssl is earlier than 1:2.2.3-11.el5_2.4" id="oval:com.redhat.rhsa:tst:20080967018" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060159001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080967010"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="mod_ssl is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20080967019" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060159001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="httpd-devel is earlier than 0:2.2.3-11.el5_2.4" id="oval:com.redhat.rhsa:tst:20080967020" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060159002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080967011"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="httpd-devel is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20080967021" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060159002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="httpd-manual is earlier than 0:2.2.3-11.el5_2.4" id="oval:com.redhat.rhsa:tst:20080967022" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060159006"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080967008"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="httpd-manual is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20080967023" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060159006"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="net-snmp-libs is earlier than 0:5.0.9-2.30E.25" id="oval:com.redhat.rhsa:tst:20080971001" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20071045003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080971001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="net-snmp-perl is earlier than 0:5.0.9-2.30E.25" id="oval:com.redhat.rhsa:tst:20080971003" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20071045004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080971003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="net-snmp is earlier than 0:5.0.9-2.30E.25" id="oval:com.redhat.rhsa:tst:20080971005" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20071045005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080971003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="net-snmp-devel is earlier than 0:5.0.9-2.30E.25" id="oval:com.redhat.rhsa:tst:20080971007" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20071045002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080971003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="net-snmp-utils is earlier than 0:5.0.9-2.30E.25" id="oval:com.redhat.rhsa:tst:20080971009" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20071045001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080971003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="net-snmp-devel is earlier than 0:5.1.2-13.el4_7.2" id="oval:com.redhat.rhsa:tst:20080971012" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20071045002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080971005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="net-snmp-libs is earlier than 0:5.1.2-13.el4_7.2" id="oval:com.redhat.rhsa:tst:20080971013" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20071045003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080971006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="net-snmp-perl is earlier than 0:5.1.2-13.el4_7.2" id="oval:com.redhat.rhsa:tst:20080971014" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20071045004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080971005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="net-snmp is earlier than 0:5.1.2-13.el4_7.2" id="oval:com.redhat.rhsa:tst:20080971015" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20071045005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080971005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="net-snmp-utils is earlier than 0:5.1.2-13.el4_7.2" id="oval:com.redhat.rhsa:tst:20080971016" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20071045001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080971005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="net-snmp-libs is earlier than 1:5.3.1-24.el5_2.2" id="oval:com.redhat.rhsa:tst:20080971018" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20071045003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080971008"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="net-snmp is earlier than 1:5.3.1-24.el5_2.2" id="oval:com.redhat.rhsa:tst:20080971020" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20071045005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080971010"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="net-snmp-devel is earlier than 1:5.3.1-24.el5_2.2" id="oval:com.redhat.rhsa:tst:20080971022" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20071045002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080971008"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="net-snmp-utils is earlier than 1:5.3.1-24.el5_2.2" id="oval:com.redhat.rhsa:tst:20080971024" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20071045001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080971010"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="net-snmp-perl is earlier than 1:5.3.1-24.el5_2.2" id="oval:com.redhat.rhsa:tst:20080971026" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20071045004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080971010"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="kernel-smp-unsupported is earlier than 0:2.4.21-58.EL" id="oval:com.redhat.rhsa:tst:20080973001" version="640">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060140002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080973001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="kernel-source is earlier than 0:2.4.21-58.EL" id="oval:com.redhat.rhsa:tst:20080973003" version="640">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060140006"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080973003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="kernel is earlier than 0:2.4.21-58.EL" id="oval:com.redhat.rhsa:tst:20080973005" version="640">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060140005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080973004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="kernel-unsupported is earlier than 0:2.4.21-58.EL" id="oval:com.redhat.rhsa:tst:20080973007" version="640">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060140001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080973004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="kernel-doc is earlier than 0:2.4.21-58.EL" id="oval:com.redhat.rhsa:tst:20080973009" version="640">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060140003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080973003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="kernel-smp is earlier than 0:2.4.21-58.EL" id="oval:com.redhat.rhsa:tst:20080973011" version="640">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060140004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080973001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="kernel-BOOT is earlier than 0:2.4.21-58.EL" id="oval:com.redhat.rhsa:tst:20080973013" version="640">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060140008"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080973005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="kernel-hugemem is earlier than 0:2.4.21-58.EL" id="oval:com.redhat.rhsa:tst:20080973015" version="640">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060140009"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080973006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-58.EL" id="oval:com.redhat.rhsa:tst:20080973017" version="640">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060140007"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080973006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-nspr is earlier than 0:1.0.9-0.25.el3" id="oval:com.redhat.rhsa:tst:20080977001" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080977001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-mail is earlier than 0:1.0.9-0.25.el3" id="oval:com.redhat.rhsa:tst:20080977003" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578010"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080977001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-chat is earlier than 0:1.0.9-0.25.el3" id="oval:com.redhat.rhsa:tst:20080977005" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080977001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.25.el3" id="oval:com.redhat.rhsa:tst:20080977007" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080977001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.25.el3" id="oval:com.redhat.rhsa:tst:20080977009" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080977001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-devel is earlier than 0:1.0.9-0.25.el3" id="oval:com.redhat.rhsa:tst:20080977011" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578007"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080977001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey is earlier than 0:1.0.9-0.25.el3" id="oval:com.redhat.rhsa:tst:20080977013" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578009"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080977001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-nss is earlier than 0:1.0.9-0.25.el3" id="oval:com.redhat.rhsa:tst:20080977015" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578008"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080977001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.25.el3" id="oval:com.redhat.rhsa:tst:20080977017" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578006"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080977001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.25.el3" id="oval:com.redhat.rhsa:tst:20080977019" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080977001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-js-debugger is earlier than 0:1.0.9-28.el4" id="oval:com.redhat.rhsa:tst:20080977022" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080977004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-devel is earlier than 0:1.0.9-28.el4" id="oval:com.redhat.rhsa:tst:20080977023" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578007"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080977004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-dom-inspector is earlier than 0:1.0.9-28.el4" id="oval:com.redhat.rhsa:tst:20080977024" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080977004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-mail is earlier than 0:1.0.9-28.el4" id="oval:com.redhat.rhsa:tst:20080977025" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578010"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080977004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey is earlier than 0:1.0.9-28.el4" id="oval:com.redhat.rhsa:tst:20080977026" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578009"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080977004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-chat is earlier than 0:1.0.9-28.el4" id="oval:com.redhat.rhsa:tst:20080977027" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080977004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libxml2 is earlier than 0:2.5.10-14" id="oval:com.redhat.rhsa:tst:20080988001" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080032003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080988001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libxml2-python is earlier than 0:2.5.10-14" id="oval:com.redhat.rhsa:tst:20080988003" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080032002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080988003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libxml2-devel is earlier than 0:2.5.10-14" id="oval:com.redhat.rhsa:tst:20080988005" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080032001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080988003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libxml2 is earlier than 0:2.6.16-12.6" id="oval:com.redhat.rhsa:tst:20080988008" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080032003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080988005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libxml2-python is earlier than 0:2.6.16-12.6" id="oval:com.redhat.rhsa:tst:20080988009" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080032002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080988006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libxml2-devel is earlier than 0:2.6.16-12.6" id="oval:com.redhat.rhsa:tst:20080988010" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080032001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080988006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libxml2-python is earlier than 0:2.6.26-2.1.2.7" id="oval:com.redhat.rhsa:tst:20080988012" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080032002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080988008"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libxml2 is earlier than 0:2.6.26-2.1.2.7" id="oval:com.redhat.rhsa:tst:20080988014" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080032003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080988010"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libxml2-devel is earlier than 0:2.6.26-2.1.2.7" id="oval:com.redhat.rhsa:tst:20080988016" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080032001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20080988010"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="enscript is earlier than 0:1.6.1-24.7" id="oval:com.redhat.rhsa:tst:20081021001" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20081021001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20081021001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="enscript is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20081021002" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20081021001"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="enscript is earlier than 0:1.6.1-33.el4_7.1" id="oval:com.redhat.rhsa:tst:20081021004" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20081021001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20081021004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="cups-devel is earlier than 1:1.1.17-13.3.55" id="oval:com.redhat.rhsa:tst:20081028001" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060163001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20081028001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="cups-libs is earlier than 1:1.1.17-13.3.55" id="oval:com.redhat.rhsa:tst:20081028003" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060163002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20081028003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="cups is earlier than 1:1.1.17-13.3.55" id="oval:com.redhat.rhsa:tst:20081028005" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060163003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20081028001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-chat is earlier than 0:1.0.9-0.29.el3" id="oval:com.redhat.rhsa:tst:20081037001" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20081037001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.29.el3" id="oval:com.redhat.rhsa:tst:20081037003" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20081037001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey is earlier than 0:1.0.9-0.29.el3" id="oval:com.redhat.rhsa:tst:20081037005" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578009"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20081037001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-devel is earlier than 0:1.0.9-0.29.el3" id="oval:com.redhat.rhsa:tst:20081037007" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578007"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20081037001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.29.el3" id="oval:com.redhat.rhsa:tst:20081037009" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578006"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20081037001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-nss is earlier than 0:1.0.9-0.29.el3" id="oval:com.redhat.rhsa:tst:20081037011" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578008"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20081037001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.29.el3" id="oval:com.redhat.rhsa:tst:20081037013" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20081037001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-nspr is earlier than 0:1.0.9-0.29.el3" id="oval:com.redhat.rhsa:tst:20081037015" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20081037001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.29.el3" id="oval:com.redhat.rhsa:tst:20081037017" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20081037001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-mail is earlier than 0:1.0.9-0.29.el3" id="oval:com.redhat.rhsa:tst:20081037019" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578010"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20081037001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-js-debugger is earlier than 0:1.0.9-32.el4" id="oval:com.redhat.rhsa:tst:20081037022" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20081037004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-dom-inspector is earlier than 0:1.0.9-32.el4" id="oval:com.redhat.rhsa:tst:20081037023" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20081037004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-devel is earlier than 0:1.0.9-32.el4" id="oval:com.redhat.rhsa:tst:20081037024" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578007"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20081037004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-mail is earlier than 0:1.0.9-32.el4" id="oval:com.redhat.rhsa:tst:20081037025" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578010"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20081037004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey is earlier than 0:1.0.9-32.el4" id="oval:com.redhat.rhsa:tst:20081037026" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578009"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20081037004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-chat is earlier than 0:1.0.9-32.el4" id="oval:com.redhat.rhsa:tst:20081037027" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20081037004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openssl-perl is earlier than 0:0.9.7a-33.25" id="oval:com.redhat.rhsa:tst:20090004001" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060661002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090004001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openssl is earlier than 0:0.9.7a-33.25" id="oval:com.redhat.rhsa:tst:20090004003" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060661003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090004003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openssl-devel is earlier than 0:0.9.7a-33.25" id="oval:com.redhat.rhsa:tst:20090004005" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060661004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090004001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openssl096b is earlier than 0:0.9.6b-16.49" id="oval:com.redhat.rhsa:tst:20090004007" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060661001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090004004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openssl-devel is earlier than 0:0.9.7a-43.17.el4_7.2" id="oval:com.redhat.rhsa:tst:20090004010" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060661004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090004006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openssl-perl is earlier than 0:0.9.7a-43.17.el4_7.2" id="oval:com.redhat.rhsa:tst:20090004011" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060661002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090004007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openssl is earlier than 0:0.9.7a-43.17.el4_7.2" id="oval:com.redhat.rhsa:tst:20090004012" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060661003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090004008"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openssl096b is earlier than 0:0.9.6b-22.46.el4_7" id="oval:com.redhat.rhsa:tst:20090004013" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060661001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090004009"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openssl097a is earlier than 0:0.9.7a-9.el5_2.1" id="oval:com.redhat.rhsa:tst:20090004015" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20090004006"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090004011"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openssl097a is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20090004016" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20090004006"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openssl-devel is earlier than 0:0.9.8b-10.el5_2.1" id="oval:com.redhat.rhsa:tst:20090004017" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060661004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090004013"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openssl-devel is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20090004018" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060661004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openssl-perl is earlier than 0:0.9.8b-10.el5_2.1" id="oval:com.redhat.rhsa:tst:20090004019" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060661002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090004014"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openssl-perl is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20090004020" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060661002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openssl is earlier than 0:0.9.8b-10.el5_2.1" id="oval:com.redhat.rhsa:tst:20090004021" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060661003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090004015"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openssl is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20090004022" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060661003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="gnome-vfs2-devel is earlier than 0:2.2.5-2E.3.3" id="oval:com.redhat.rhsa:tst:20090005001" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20090005001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090005001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="gnome-vfs2-devel is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20090005002" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20090005001"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="gnome-vfs2 is earlier than 0:2.2.5-2E.3.3" id="oval:com.redhat.rhsa:tst:20090005003" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20090005002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090005001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="gnome-vfs2 is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20090005004" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20090005002"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="gnome-vfs2-devel is earlier than 0:2.8.2-8.7.el4_7.2" id="oval:com.redhat.rhsa:tst:20090005006" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20090005001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090005004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="gnome-vfs2-smb is earlier than 0:2.8.2-8.7.el4_7.2" id="oval:com.redhat.rhsa:tst:20090005007" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20090005004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090005004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="gnome-vfs2-smb is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20090005008" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20090005004"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="gnome-vfs2 is earlier than 0:2.8.2-8.7.el4_7.2" id="oval:com.redhat.rhsa:tst:20090005009" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20090005002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090005004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="squirrelmail is earlier than 0:1.4.8-8.el3" id="oval:com.redhat.rhsa:tst:20090010001" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060283001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090010001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="squirrelmail is earlier than 0:1.4.8-5.el4_7.2" id="oval:com.redhat.rhsa:tst:20090010004" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060283001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090010004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="squirrelmail is earlier than 0:1.4.8-5.el5_2.2" id="oval:com.redhat.rhsa:tst:20090010006" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060283001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090010006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="xterm is earlier than 0:179-11.EL3" id="oval:com.redhat.rhsa:tst:20090018001" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20090018001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090018001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="xterm is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20090018002" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20090018001"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="xterm is earlier than 0:192-8.el4_7.2" id="oval:com.redhat.rhsa:tst:20090018004" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20090018001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090018004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="xterm is earlier than 0:215-5.el5_2.2" id="oval:com.redhat.rhsa:tst:20090018006" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20090018001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090018006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="xterm is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20090018007" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20090018001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="bind is earlier than 20:9.2.4-23.el3" id="oval:com.redhat.rhsa:tst:20090020001" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070044005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090020001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="bind-utils is earlier than 20:9.2.4-23.el3" id="oval:com.redhat.rhsa:tst:20090020003" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070044002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090020001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="bind-devel is earlier than 20:9.2.4-23.el3" id="oval:com.redhat.rhsa:tst:20090020005" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070044004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090020001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="bind-chroot is earlier than 20:9.2.4-23.el3" id="oval:com.redhat.rhsa:tst:20090020007" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070044003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090020001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="bind-libs is earlier than 20:9.2.4-23.el3" id="oval:com.redhat.rhsa:tst:20090020009" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070044001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090020001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="bind-libs is earlier than 20:9.2.4-30.el4_7.1" id="oval:com.redhat.rhsa:tst:20090020012" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070044001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090020004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="bind is earlier than 20:9.2.4-30.el4_7.1" id="oval:com.redhat.rhsa:tst:20090020013" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070044005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090020005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="bind-utils is earlier than 20:9.2.4-30.el4_7.1" id="oval:com.redhat.rhsa:tst:20090020014" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070044002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090020005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="bind-devel is earlier than 20:9.2.4-30.el4_7.1" id="oval:com.redhat.rhsa:tst:20090020015" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070044004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090020005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="bind-chroot is earlier than 20:9.2.4-30.el4_7.1" id="oval:com.redhat.rhsa:tst:20090020016" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070044003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090020005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="bind is earlier than 30:9.3.4-6.0.3.P1.el5_2" id="oval:com.redhat.rhsa:tst:20090020018" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070044005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090020007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="bind-utils is earlier than 30:9.3.4-6.0.3.P1.el5_2" id="oval:com.redhat.rhsa:tst:20090020020" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070044002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090020007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="bind-libs is earlier than 30:9.3.4-6.0.3.P1.el5_2" id="oval:com.redhat.rhsa:tst:20090020022" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070044001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090020009"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="bind-chroot is earlier than 30:9.3.4-6.0.3.P1.el5_2" id="oval:com.redhat.rhsa:tst:20090020024" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070044003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090020007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="bind-sdb is earlier than 30:9.3.4-6.0.3.P1.el5_2" id="oval:com.redhat.rhsa:tst:20090020026" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070740008"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090020007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="bind-devel is earlier than 30:9.3.4-6.0.3.P1.el5_2" id="oval:com.redhat.rhsa:tst:20090020028" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070044004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090020009"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="bind-libbind-devel is earlier than 30:9.3.4-6.0.3.P1.el5_2" id="oval:com.redhat.rhsa:tst:20090020030" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070740007"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090020009"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="caching-nameserver is earlier than 30:9.3.4-6.0.3.P1.el5_2" id="oval:com.redhat.rhsa:tst:20090020032" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070740009"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090020007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="squirrelmail is earlier than 0:1.4.8-9.el3" id="oval:com.redhat.rhsa:tst:20090057001" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060283001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090057001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="squirrelmail is earlier than 0:1.4.8-5.el4_7.3" id="oval:com.redhat.rhsa:tst:20090057004" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060283001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090057004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="squirrelmail is earlier than 0:1.4.8-5.el5_2.3" id="oval:com.redhat.rhsa:tst:20090057006" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060283001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090057006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-mail is earlier than 0:1.0.9-0.32.el3" id="oval:com.redhat.rhsa:tst:20090257001" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578010"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090257001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-nss is earlier than 0:1.0.9-0.32.el3" id="oval:com.redhat.rhsa:tst:20090257003" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578008"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090257001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.32.el3" id="oval:com.redhat.rhsa:tst:20090257005" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090257001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-devel is earlier than 0:1.0.9-0.32.el3" id="oval:com.redhat.rhsa:tst:20090257007" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578007"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090257001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.32.el3" id="oval:com.redhat.rhsa:tst:20090257009" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578006"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090257001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-nspr is earlier than 0:1.0.9-0.32.el3" id="oval:com.redhat.rhsa:tst:20090257011" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090257001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.32.el3" id="oval:com.redhat.rhsa:tst:20090257013" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090257001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.32.el3" id="oval:com.redhat.rhsa:tst:20090257015" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090257001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey is earlier than 0:1.0.9-0.32.el3" id="oval:com.redhat.rhsa:tst:20090257017" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578009"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090257001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-chat is earlier than 0:1.0.9-0.32.el3" id="oval:com.redhat.rhsa:tst:20090257019" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090257001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-js-debugger is earlier than 0:1.0.9-35.el4" id="oval:com.redhat.rhsa:tst:20090257022" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090257004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-dom-inspector is earlier than 0:1.0.9-35.el4" id="oval:com.redhat.rhsa:tst:20090257023" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090257004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-mail is earlier than 0:1.0.9-35.el4" id="oval:com.redhat.rhsa:tst:20090257024" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578010"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090257004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey is earlier than 0:1.0.9-35.el4" id="oval:com.redhat.rhsa:tst:20090257025" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578009"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090257004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-chat is earlier than 0:1.0.9-35.el4" id="oval:com.redhat.rhsa:tst:20090257026" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090257004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-devel is earlier than 0:1.0.9-35.el4" id="oval:com.redhat.rhsa:tst:20090257027" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578007"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090257004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="vnc is earlier than 0:4.0-0.beta4.1.8" id="oval:com.redhat.rhsa:tst:20090261001" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20090261001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090261001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="vnc is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20090261002" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20090261001"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="vnc-server is earlier than 0:4.0-0.beta4.1.8" id="oval:com.redhat.rhsa:tst:20090261003" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20090261002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090261001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="vnc-server is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20090261004" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20090261002"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="vnc-server is earlier than 0:4.0-12.el4_7.1" id="oval:com.redhat.rhsa:tst:20090261006" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20090261002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090261004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="vnc is earlier than 0:4.0-12.el4_7.1" id="oval:com.redhat.rhsa:tst:20090261007" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20090261001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090261004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="vnc is earlier than 0:4.1.2-14.el5_3.1" id="oval:com.redhat.rhsa:tst:20090261009" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20090261001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090261006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="vnc is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20090261010" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20090261001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="vnc-server is earlier than 0:4.1.2-14.el5_3.1" id="oval:com.redhat.rhsa:tst:20090261011" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20090261002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090261006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="vnc-server is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20090261012" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20090261002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="gstreamer-plugins-devel is earlier than 0:0.6.0-19" id="oval:com.redhat.rhsa:tst:20090269001" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20090269001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090269001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="gstreamer-plugins-devel is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20090269002" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20090269001"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="gstreamer-plugins is earlier than 0:0.6.0-19" id="oval:com.redhat.rhsa:tst:20090269003" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20090269002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090269001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="gstreamer-plugins is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20090269004" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20090269002"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="imap-devel is earlier than 1:2002d-15" id="oval:com.redhat.rhsa:tst:20090275001" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20090275001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090275001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="imap-devel is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20090275002" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20090275001"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="imap-utils is earlier than 1:2002d-15" id="oval:com.redhat.rhsa:tst:20090275003" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20090275002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090275001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="imap-utils is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20090275004" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20090275002"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="imap is earlier than 1:2002d-15" id="oval:com.redhat.rhsa:tst:20090275005" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20090275003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090275001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="imap is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20090275006" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20090275003"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="net-snmp-libs is earlier than 0:5.0.9-2.30E.27" id="oval:com.redhat.rhsa:tst:20090295001" version="644">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20071045003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090295001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="net-snmp-perl is earlier than 0:5.0.9-2.30E.27" id="oval:com.redhat.rhsa:tst:20090295003" version="644">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20071045004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090295003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="net-snmp is earlier than 0:5.0.9-2.30E.27" id="oval:com.redhat.rhsa:tst:20090295005" version="644">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20071045005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090295003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="net-snmp-devel is earlier than 0:5.0.9-2.30E.27" id="oval:com.redhat.rhsa:tst:20090295007" version="644">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20071045002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090295003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="net-snmp-utils is earlier than 0:5.0.9-2.30E.27" id="oval:com.redhat.rhsa:tst:20090295009" version="644">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20071045001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090295003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="cups-devel is earlier than 1:1.1.17-13.3.56" id="oval:com.redhat.rhsa:tst:20090308001" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060163001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090308001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="cups-libs is earlier than 1:1.1.17-13.3.56" id="oval:com.redhat.rhsa:tst:20090308003" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060163002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090308003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="cups is earlier than 1:1.1.17-13.3.56" id="oval:com.redhat.rhsa:tst:20090308005" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060163003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090308001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="wireshark is earlier than 0:1.0.6-EL3.3" id="oval:com.redhat.rhsa:tst:20090313001" version="631">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060602001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090313001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="wireshark-gnome is earlier than 0:1.0.6-EL3.3" id="oval:com.redhat.rhsa:tst:20090313003" version="631">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060602002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090313001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="wireshark is earlier than 0:1.0.6-2.el4_7" id="oval:com.redhat.rhsa:tst:20090313006" version="631">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060602001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090313004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="wireshark-gnome is earlier than 0:1.0.6-2.el4_7" id="oval:com.redhat.rhsa:tst:20090313007" version="631">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060602002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090313004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="wireshark-gnome is earlier than 0:1.0.6-2.el5_3" id="oval:com.redhat.rhsa:tst:20090313009" version="631">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060602002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090313006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="wireshark is earlier than 0:1.0.6-2.el5_3" id="oval:com.redhat.rhsa:tst:20090313011" version="631">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060602001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090313006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-nspr is earlier than 0:1.0.9-0.34.el3" id="oval:com.redhat.rhsa:tst:20090325001" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090325001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-mail is earlier than 0:1.0.9-0.34.el3" id="oval:com.redhat.rhsa:tst:20090325003" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578010"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090325001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-nss is earlier than 0:1.0.9-0.34.el3" id="oval:com.redhat.rhsa:tst:20090325005" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578008"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090325001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.34.el3" id="oval:com.redhat.rhsa:tst:20090325007" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090325001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.34.el3" id="oval:com.redhat.rhsa:tst:20090325009" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090325001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.34.el3" id="oval:com.redhat.rhsa:tst:20090325011" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090325001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey is earlier than 0:1.0.9-0.34.el3" id="oval:com.redhat.rhsa:tst:20090325013" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578009"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090325001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-devel is earlier than 0:1.0.9-0.34.el3" id="oval:com.redhat.rhsa:tst:20090325015" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578007"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090325001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.34.el3" id="oval:com.redhat.rhsa:tst:20090325017" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578006"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090325001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-chat is earlier than 0:1.0.9-0.34.el3" id="oval:com.redhat.rhsa:tst:20090325019" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090325001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-mail is earlier than 0:1.0.9-38.el4" id="oval:com.redhat.rhsa:tst:20090325022" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578010"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090325004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-js-debugger is earlier than 0:1.0.9-38.el4" id="oval:com.redhat.rhsa:tst:20090325023" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090325004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-devel is earlier than 0:1.0.9-38.el4" id="oval:com.redhat.rhsa:tst:20090325024" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578007"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090325004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-dom-inspector is earlier than 0:1.0.9-38.el4" id="oval:com.redhat.rhsa:tst:20090325025" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090325004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey is earlier than 0:1.0.9-38.el4" id="oval:com.redhat.rhsa:tst:20090325026" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578009"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090325004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-chat is earlier than 0:1.0.9-38.el4" id="oval:com.redhat.rhsa:tst:20090325027" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090325004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="freetype-devel is earlier than 0:2.1.4-12.el3" id="oval:com.redhat.rhsa:tst:20090329001" version="655">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060500002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090329001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="freetype is earlier than 0:2.1.4-12.el3" id="oval:com.redhat.rhsa:tst:20090329003" version="655">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060500001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090329003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="freetype is earlier than 0:2.1.9-10.el4.7" id="oval:com.redhat.rhsa:tst:20090329006" version="655">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060500001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090329005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="freetype-demos is earlier than 0:2.1.9-10.el4.7" id="oval:com.redhat.rhsa:tst:20090329007" version="655">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060500004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090329006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="freetype-devel is earlier than 0:2.1.9-10.el4.7" id="oval:com.redhat.rhsa:tst:20090329009" version="655">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060500002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090329006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="freetype-utils is earlier than 0:2.1.9-10.el4.7" id="oval:com.redhat.rhsa:tst:20090329010" version="655">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060500005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090329006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-pgsql is earlier than 0:4.3.2-51.ent" id="oval:com.redhat.rhsa:tst:20090337001" version="641">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276006"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090337001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-ldap is earlier than 0:4.3.2-51.ent" id="oval:com.redhat.rhsa:tst:20090337003" version="641">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090337001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-devel is earlier than 0:4.3.2-51.ent" id="oval:com.redhat.rhsa:tst:20090337005" version="641">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090337001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-imap is earlier than 0:4.3.2-51.ent" id="oval:com.redhat.rhsa:tst:20090337007" version="641">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090337001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-mysql is earlier than 0:4.3.2-51.ent" id="oval:com.redhat.rhsa:tst:20090337009" version="641">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276007"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090337001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php is earlier than 0:4.3.2-51.ent" id="oval:com.redhat.rhsa:tst:20090337011" version="641">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090337001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-odbc is earlier than 0:4.3.2-51.ent" id="oval:com.redhat.rhsa:tst:20090337013" version="641">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090337001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-pear is earlier than 0:4.3.9-3.22.15" id="oval:com.redhat.rhsa:tst:20090337016" version="641">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276012"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090337004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-ncurses is earlier than 0:4.3.9-3.22.15" id="oval:com.redhat.rhsa:tst:20090337018" version="641">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276011"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090337004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-snmp is earlier than 0:4.3.9-3.22.15" id="oval:com.redhat.rhsa:tst:20090337020" version="641">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276010"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090337004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-xmlrpc is earlier than 0:4.3.9-3.22.15" id="oval:com.redhat.rhsa:tst:20090337022" version="641">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276009"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090337004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-devel is earlier than 0:4.3.9-3.22.15" id="oval:com.redhat.rhsa:tst:20090337024" version="641">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090337004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php is earlier than 0:4.3.9-3.22.15" id="oval:com.redhat.rhsa:tst:20090337025" version="641">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090337004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-mbstring is earlier than 0:4.3.9-3.22.15" id="oval:com.redhat.rhsa:tst:20090337026" version="641">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276013"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090337004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-domxml is earlier than 0:4.3.9-3.22.15" id="oval:com.redhat.rhsa:tst:20090337028" version="641">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276014"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090337004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-pgsql is earlier than 0:4.3.9-3.22.15" id="oval:com.redhat.rhsa:tst:20090337030" version="641">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276006"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090337004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-mysql is earlier than 0:4.3.9-3.22.15" id="oval:com.redhat.rhsa:tst:20090337031" version="641">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276007"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090337004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-imap is earlier than 0:4.3.9-3.22.15" id="oval:com.redhat.rhsa:tst:20090337032" version="641">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090337004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-odbc is earlier than 0:4.3.9-3.22.15" id="oval:com.redhat.rhsa:tst:20090337033" version="641">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090337004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-gd is earlier than 0:4.3.9-3.22.15" id="oval:com.redhat.rhsa:tst:20090337034" version="641">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276015"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090337004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-ldap is earlier than 0:4.3.9-3.22.15" id="oval:com.redhat.rhsa:tst:20090337036" version="641">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090337004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libpng-devel is earlier than 2:1.2.2-29" id="oval:com.redhat.rhsa:tst:20090340001" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070356001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090340001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libpng is earlier than 2:1.2.2-29" id="oval:com.redhat.rhsa:tst:20090340003" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070356002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090340003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libpng10 is earlier than 0:1.0.13-20" id="oval:com.redhat.rhsa:tst:20090340005" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070356004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090340004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libpng10-devel is earlier than 0:1.0.13-20" id="oval:com.redhat.rhsa:tst:20090340007" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070356003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090340005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="curl-devel is earlier than 0:7.10.6-9.rhel3" id="oval:com.redhat.rhsa:tst:20090341001" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20090341001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090341001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="curl-devel is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20090341002" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20090341001"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="curl is earlier than 0:7.10.6-9.rhel3" id="oval:com.redhat.rhsa:tst:20090341003" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20090341002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090341003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="curl is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20090341004" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20090341002"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="curl-devel is earlier than 0:7.12.1-11.1.el4_7.1" id="oval:com.redhat.rhsa:tst:20090341006" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20090341001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090341005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="curl is earlier than 0:7.12.1-11.1.el4_7.1" id="oval:com.redhat.rhsa:tst:20090341007" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20090341002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090341006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="curl is earlier than 0:7.15.5-2.1.el5_3.4" id="oval:com.redhat.rhsa:tst:20090341009" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20090341002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090341008"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="curl is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20090341010" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20090341002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="curl-devel is earlier than 0:7.15.5-2.1.el5_3.4" id="oval:com.redhat.rhsa:tst:20090341011" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20090341001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090341008"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="curl-devel is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20090341012" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20090341001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="ghostscript-devel is earlier than 0:7.05-32.1.17" id="oval:com.redhat.rhsa:tst:20090345001" version="641">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080155003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090345001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="hpijs is earlier than 0:1.3-32.1.17" id="oval:com.redhat.rhsa:tst:20090345003" version="641">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080155002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090345003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="ghostscript is earlier than 0:7.05-32.1.17" id="oval:com.redhat.rhsa:tst:20090345005" version="641">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080155001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090345004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="ghostscript-gtk is earlier than 0:7.07-33.2.el4_7.5" id="oval:com.redhat.rhsa:tst:20090345008" version="641">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080155005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090345006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="ghostscript is earlier than 0:7.07-33.2.el4_7.5" id="oval:com.redhat.rhsa:tst:20090345010" version="641">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080155001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090345007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="ghostscript-devel is earlier than 0:7.07-33.2.el4_7.5" id="oval:com.redhat.rhsa:tst:20090345011" version="641">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080155003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090345006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="ghostscript-devel is earlier than 0:8.15.2-9.4.el5_3.4" id="oval:com.redhat.rhsa:tst:20090345013" version="641">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080155003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090345009"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="ghostscript-gtk is earlier than 0:8.15.2-9.4.el5_3.4" id="oval:com.redhat.rhsa:tst:20090345015" version="641">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080155005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090345011"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="ghostscript is earlier than 0:8.15.2-9.4.el5_3.4" id="oval:com.redhat.rhsa:tst:20090345017" version="641">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080155001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090345009"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="evolution is earlier than 0:1.4.5-25.el3" id="oval:com.redhat.rhsa:tst:20090358001" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070353002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090358001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="evolution-devel is earlier than 0:1.4.5-25.el3" id="oval:com.redhat.rhsa:tst:20090358003" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070353001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090358001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-mail is earlier than 0:1.0.9-0.36.el3" id="oval:com.redhat.rhsa:tst:20090398001" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578010"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090398001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-nspr is earlier than 0:1.0.9-0.36.el3" id="oval:com.redhat.rhsa:tst:20090398003" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090398001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-chat is earlier than 0:1.0.9-0.36.el3" id="oval:com.redhat.rhsa:tst:20090398005" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090398001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-nss is earlier than 0:1.0.9-0.36.el3" id="oval:com.redhat.rhsa:tst:20090398007" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578008"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090398001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-devel is earlier than 0:1.0.9-0.36.el3" id="oval:com.redhat.rhsa:tst:20090398009" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578007"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090398001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.36.el3" id="oval:com.redhat.rhsa:tst:20090398011" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578006"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090398001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.36.el3" id="oval:com.redhat.rhsa:tst:20090398013" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090398001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.36.el3" id="oval:com.redhat.rhsa:tst:20090398015" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090398001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey is earlier than 0:1.0.9-0.36.el3" id="oval:com.redhat.rhsa:tst:20090398017" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578009"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090398001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.36.el3" id="oval:com.redhat.rhsa:tst:20090398019" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090398001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-js-debugger is earlier than 0:1.0.9-40.el4" id="oval:com.redhat.rhsa:tst:20090398022" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090398004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-devel is earlier than 0:1.0.9-40.el4" id="oval:com.redhat.rhsa:tst:20090398023" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578007"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090398004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-dom-inspector is earlier than 0:1.0.9-40.el4" id="oval:com.redhat.rhsa:tst:20090398024" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090398004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey is earlier than 0:1.0.9-40.el4" id="oval:com.redhat.rhsa:tst:20090398025" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578009"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090398004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-mail is earlier than 0:1.0.9-40.el4" id="oval:com.redhat.rhsa:tst:20090398026" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578010"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090398004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-chat is earlier than 0:1.0.9-40.el4" id="oval:com.redhat.rhsa:tst:20090398027" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090398004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="krb5-workstation is earlier than 0:1.2.7-70" id="oval:com.redhat.rhsa:tst:20090410001" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070095004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090410001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="krb5-libs is earlier than 0:1.2.7-70" id="oval:com.redhat.rhsa:tst:20090410003" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070095003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090410003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="krb5-server is earlier than 0:1.2.7-70" id="oval:com.redhat.rhsa:tst:20090410005" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070095001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090410001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="krb5-devel is earlier than 0:1.2.7-70" id="oval:com.redhat.rhsa:tst:20090410007" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070095002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090410001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="ghostscript is earlier than 0:7.05-32.1.20" id="oval:com.redhat.rhsa:tst:20090420001" version="644">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080155001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090420001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="hpijs is earlier than 0:1.3-32.1.20" id="oval:com.redhat.rhsa:tst:20090420003" version="644">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080155002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090420003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="ghostscript-devel is earlier than 0:7.05-32.1.20" id="oval:com.redhat.rhsa:tst:20090420005" version="644">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080155003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090420004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="ghostscript-devel is earlier than 0:7.07-33.2.el4_7.8" id="oval:com.redhat.rhsa:tst:20090420008" version="644">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080155003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090420006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="ghostscript is earlier than 0:7.07-33.2.el4_7.8" id="oval:com.redhat.rhsa:tst:20090420009" version="644">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080155001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090420007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="ghostscript-gtk is earlier than 0:7.07-33.2.el4_7.8" id="oval:com.redhat.rhsa:tst:20090420010" version="644">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080155005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090420006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="cups-devel is earlier than 1:1.1.17-13.3.58" id="oval:com.redhat.rhsa:tst:20090428001" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060163001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090428001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="cups-libs is earlier than 1:1.1.17-13.3.58" id="oval:com.redhat.rhsa:tst:20090428003" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060163002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090428003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="cups is earlier than 1:1.1.17-13.3.58" id="oval:com.redhat.rhsa:tst:20090428005" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060163003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090428001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="xpdf is earlier than 1:2.02-14.el3" id="oval:com.redhat.rhsa:tst:20090430001" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070735001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090430001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="xpdf is earlier than 1:3.00-20.el4" id="oval:com.redhat.rhsa:tst:20090430004" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070735001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090430004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.37.el3" id="oval:com.redhat.rhsa:tst:20090437001" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578006"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090437001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.37.el3" id="oval:com.redhat.rhsa:tst:20090437003" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090437001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey is earlier than 0:1.0.9-0.37.el3" id="oval:com.redhat.rhsa:tst:20090437005" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578009"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090437001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-mail is earlier than 0:1.0.9-0.37.el3" id="oval:com.redhat.rhsa:tst:20090437007" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578010"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090437001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-nss is earlier than 0:1.0.9-0.37.el3" id="oval:com.redhat.rhsa:tst:20090437009" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578008"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090437001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.37.el3" id="oval:com.redhat.rhsa:tst:20090437011" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090437001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.37.el3" id="oval:com.redhat.rhsa:tst:20090437013" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090437001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-chat is earlier than 0:1.0.9-0.37.el3" id="oval:com.redhat.rhsa:tst:20090437015" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090437001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-nspr is earlier than 0:1.0.9-0.37.el3" id="oval:com.redhat.rhsa:tst:20090437017" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090437001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-devel is earlier than 0:1.0.9-0.37.el3" id="oval:com.redhat.rhsa:tst:20090437019" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578007"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090437001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-chat is earlier than 0:1.0.9-41.el4" id="oval:com.redhat.rhsa:tst:20090437022" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090437004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-devel is earlier than 0:1.0.9-41.el4" id="oval:com.redhat.rhsa:tst:20090437023" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578007"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090437004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-dom-inspector is earlier than 0:1.0.9-41.el4" id="oval:com.redhat.rhsa:tst:20090437024" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090437004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-js-debugger is earlier than 0:1.0.9-41.el4" id="oval:com.redhat.rhsa:tst:20090437025" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090437004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey is earlier than 0:1.0.9-41.el4" id="oval:com.redhat.rhsa:tst:20090437026" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578009"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090437004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-mail is earlier than 0:1.0.9-41.el4" id="oval:com.redhat.rhsa:tst:20090437027" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578010"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090437004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="acpid is earlier than 0:1.0.2-4" id="oval:com.redhat.rhsa:tst:20090474001" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20090474001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090474001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="acpid is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20090474002" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20090474001"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="acpid is earlier than 0:1.0.3-2.el4_7.1" id="oval:com.redhat.rhsa:tst:20090474004" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20090474001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090474004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="acpid is earlier than 0:1.0.4-7.el5_3.1" id="oval:com.redhat.rhsa:tst:20090474006" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20090474001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090474006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="acpid is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20090474007" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20090474001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="pango-devel is earlier than 0:1.2.5-8" id="oval:com.redhat.rhsa:tst:20090476001" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20090476001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090476001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="pango-devel is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20090476002" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20090476001"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="pango is earlier than 0:1.2.5-8" id="oval:com.redhat.rhsa:tst:20090476003" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20090476002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090476003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="pango is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20090476004" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20090476002"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="pango is earlier than 0:1.6.0-14.4_7" id="oval:com.redhat.rhsa:tst:20090476006" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20090476002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090476005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="pango-devel is earlier than 0:1.6.0-14.4_7" id="oval:com.redhat.rhsa:tst:20090476007" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20090476001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090476006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="evolution28-pango-devel is earlier than 0:1.14.9-11.el4_7" id="oval:com.redhat.rhsa:tst:20090476008" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20090476004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090476007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="evolution28-pango-devel is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20090476009" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20090476004"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="evolution28-pango is earlier than 0:1.14.9-11.el4_7" id="oval:com.redhat.rhsa:tst:20090476010" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20090476005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090476007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="evolution28-pango is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20090476011" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20090476005"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="pango is earlier than 0:1.14.9-5.el5_3" id="oval:com.redhat.rhsa:tst:20090476013" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20090476002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090476009"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="pango is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20090476014" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20090476002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="pango-devel is earlier than 0:1.14.9-5.el5_3" id="oval:com.redhat.rhsa:tst:20090476015" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20090476001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20090476009"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="pango-devel is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20090476016" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20090476001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="pidgin is earlier than 0:1.5.1-3.el3" id="oval:com.redhat.rhsa:tst:20091059001" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080584001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091059001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="squirrelmail is earlier than 0:1.4.8-13.el3" id="oval:com.redhat.rhsa:tst:20091066001" version="640">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060283001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091066001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="squirrelmail is earlier than 0:1.4.8-5.el4_8.5" id="oval:com.redhat.rhsa:tst:20091066004" version="640">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060283001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091066004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="squirrelmail is earlier than 0:1.4.8-5.el5_3.7" id="oval:com.redhat.rhsa:tst:20091066006" version="640">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060283001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091066006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="cups-devel is earlier than 1:1.1.17-13.3.62" id="oval:com.redhat.rhsa:tst:20091083001" version="649">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060163001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091083001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="cups is earlier than 1:1.1.17-13.3.62" id="oval:com.redhat.rhsa:tst:20091083003" version="649">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060163003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091083001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="cups-libs is earlier than 1:1.1.17-13.3.62" id="oval:com.redhat.rhsa:tst:20091083005" version="649">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060163002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091083003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="cups-libs is earlier than 1:1.1.22-0.rc1.9.32.el4_8.3" id="oval:com.redhat.rhsa:tst:20091083008" version="649">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060163002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091083005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="cups is earlier than 1:1.1.22-0.rc1.9.32.el4_8.3" id="oval:com.redhat.rhsa:tst:20091083009" version="649">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060163003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091083006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="cups-devel is earlier than 1:1.1.22-0.rc1.9.32.el4_8.3" id="oval:com.redhat.rhsa:tst:20091083010" version="649">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060163001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091083006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.38.el3" id="oval:com.redhat.rhsa:tst:20091096001" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091096001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-nspr is earlier than 0:1.0.9-0.38.el3" id="oval:com.redhat.rhsa:tst:20091096003" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091096001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-mail is earlier than 0:1.0.9-0.38.el3" id="oval:com.redhat.rhsa:tst:20091096005" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578010"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091096001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-nss is earlier than 0:1.0.9-0.38.el3" id="oval:com.redhat.rhsa:tst:20091096007" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578008"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091096001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-chat is earlier than 0:1.0.9-0.38.el3" id="oval:com.redhat.rhsa:tst:20091096009" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091096001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.38.el3" id="oval:com.redhat.rhsa:tst:20091096011" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091096001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.38.el3" id="oval:com.redhat.rhsa:tst:20091096013" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091096001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-devel is earlier than 0:1.0.9-0.38.el3" id="oval:com.redhat.rhsa:tst:20091096015" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578007"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091096001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey is earlier than 0:1.0.9-0.38.el3" id="oval:com.redhat.rhsa:tst:20091096017" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578009"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091096001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.38.el3" id="oval:com.redhat.rhsa:tst:20091096019" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578006"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091096001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey is earlier than 0:1.0.9-43.el4_8" id="oval:com.redhat.rhsa:tst:20091096022" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578009"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091096004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-chat is earlier than 0:1.0.9-43.el4_8" id="oval:com.redhat.rhsa:tst:20091096023" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091096004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-mail is earlier than 0:1.0.9-43.el4_8" id="oval:com.redhat.rhsa:tst:20091096024" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578010"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091096004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-js-debugger is earlier than 0:1.0.9-43.el4_8" id="oval:com.redhat.rhsa:tst:20091096025" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091096004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-devel is earlier than 0:1.0.9-43.el4_8" id="oval:com.redhat.rhsa:tst:20091096026" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578007"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091096004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-dom-inspector is earlier than 0:1.0.9-43.el4_8" id="oval:com.redhat.rhsa:tst:20091096027" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091096004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="wireshark-gnome is earlier than 0:1.0.8-EL3.1" id="oval:com.redhat.rhsa:tst:20091100001" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060602002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091100001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="wireshark is earlier than 0:1.0.8-EL3.1" id="oval:com.redhat.rhsa:tst:20091100003" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060602001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091100001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="wireshark is earlier than 0:1.0.8-1.el4_8.1" id="oval:com.redhat.rhsa:tst:20091100006" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060602001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091100004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="wireshark-gnome is earlier than 0:1.0.8-1.el4_8.1" id="oval:com.redhat.rhsa:tst:20091100007" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060602002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091100004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="wireshark is earlier than 0:1.0.8-1.el5_3.1" id="oval:com.redhat.rhsa:tst:20091100009" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060602001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091100006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="wireshark-gnome is earlier than 0:1.0.8-1.el5_3.1" id="oval:com.redhat.rhsa:tst:20091100011" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060602002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091100006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="cscope is earlier than 0:15.5-16.RHEL3" id="oval:com.redhat.rhsa:tst:20091101001" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20091101001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091101001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="cscope is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20091101002" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20091101001"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="cscope is earlier than 0:15.5-10.RHEL4.3" id="oval:com.redhat.rhsa:tst:20091101004" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20091101001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091101004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="httpd is earlier than 0:2.0.46-73.ent" id="oval:com.redhat.rhsa:tst:20091108001" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060159003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091108001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="mod_ssl is earlier than 1:2.0.46-73.ent" id="oval:com.redhat.rhsa:tst:20091108003" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060159001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091108003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="httpd-devel is earlier than 0:2.0.46-73.ent" id="oval:com.redhat.rhsa:tst:20091108005" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060159002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091108001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="net-snmp is earlier than 0:5.0.9-2.30E.28" id="oval:com.redhat.rhsa:tst:20091124001" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20071045005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091124001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="net-snmp-devel is earlier than 0:5.0.9-2.30E.28" id="oval:com.redhat.rhsa:tst:20091124003" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20071045002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091124001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="net-snmp-utils is earlier than 0:5.0.9-2.30E.28" id="oval:com.redhat.rhsa:tst:20091124005" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20071045001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091124001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="net-snmp-libs is earlier than 0:5.0.9-2.30E.28" id="oval:com.redhat.rhsa:tst:20091124007" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20071045003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091124003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="net-snmp-perl is earlier than 0:5.0.9-2.30E.28" id="oval:com.redhat.rhsa:tst:20091124009" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20071045004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091124001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="kdelibs-devel is earlier than 6:3.1.3-6.13" id="oval:com.redhat.rhsa:tst:20091128001" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060720002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091128001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="kdelibs is earlier than 6:3.1.3-6.13" id="oval:com.redhat.rhsa:tst:20091128003" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060720001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091128003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-chat is earlier than 0:1.0.9-0.39.el3" id="oval:com.redhat.rhsa:tst:20091134001" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091134001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.39.el3" id="oval:com.redhat.rhsa:tst:20091134003" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091134001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey is earlier than 0:1.0.9-0.39.el3" id="oval:com.redhat.rhsa:tst:20091134005" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578009"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091134001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-mail is earlier than 0:1.0.9-0.39.el3" id="oval:com.redhat.rhsa:tst:20091134007" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578010"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091134001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-devel is earlier than 0:1.0.9-0.39.el3" id="oval:com.redhat.rhsa:tst:20091134009" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578007"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091134001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.39.el3" id="oval:com.redhat.rhsa:tst:20091134011" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578006"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091134001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-nss is earlier than 0:1.0.9-0.39.el3" id="oval:com.redhat.rhsa:tst:20091134013" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578008"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091134001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.39.el3" id="oval:com.redhat.rhsa:tst:20091134015" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091134001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-nspr is earlier than 0:1.0.9-0.39.el3" id="oval:com.redhat.rhsa:tst:20091134017" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091134001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.39.el3" id="oval:com.redhat.rhsa:tst:20091134019" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091134001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-chat is earlier than 0:1.0.9-44.el4_8" id="oval:com.redhat.rhsa:tst:20091134022" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091134004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey is earlier than 0:1.0.9-44.el4_8" id="oval:com.redhat.rhsa:tst:20091134023" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578009"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091134004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-mail is earlier than 0:1.0.9-44.el4_8" id="oval:com.redhat.rhsa:tst:20091134024" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578010"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091134004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-devel is earlier than 0:1.0.9-44.el4_8" id="oval:com.redhat.rhsa:tst:20091134025" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578007"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091134004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-js-debugger is earlier than 0:1.0.9-44.el4_8" id="oval:com.redhat.rhsa:tst:20091134026" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091134004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-dom-inspector is earlier than 0:1.0.9-44.el4_8" id="oval:com.redhat.rhsa:tst:20091134027" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091134004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="dhclient is earlier than 7:3.0.1-10.2_EL3" id="oval:com.redhat.rhsa:tst:20091154001" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20091154001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091154001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="dhclient is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20091154002" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20091154001"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="dhcp is earlier than 7:3.0.1-10.2_EL3" id="oval:com.redhat.rhsa:tst:20091154003" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20091154002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091154001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="dhcp is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20091154004" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20091154002"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="dhcp-devel is earlier than 7:3.0.1-10.2_EL3" id="oval:com.redhat.rhsa:tst:20091154005" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20091154003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091154001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="dhcp-devel is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20091154006" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20091154003"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libtiff-devel is earlier than 0:3.5.7-33.el3" id="oval:com.redhat.rhsa:tst:20091159001" version="640">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060425001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091159001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libtiff is earlier than 0:3.5.7-33.el3" id="oval:com.redhat.rhsa:tst:20091159003" version="640">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060425002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091159003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libtiff is earlier than 0:3.6.1-12.el4_8.4" id="oval:com.redhat.rhsa:tst:20091159006" version="640">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060425002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091159005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libtiff-devel is earlier than 0:3.6.1-12.el4_8.4" id="oval:com.redhat.rhsa:tst:20091159007" version="640">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060425001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091159006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libtiff-devel is earlier than 0:3.8.2-7.el5_3.4" id="oval:com.redhat.rhsa:tst:20091159009" version="640">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060425001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091159008"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libtiff-devel is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20091159010" version="640">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060425001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libtiff is earlier than 0:3.8.2-7.el5_3.4" id="oval:com.redhat.rhsa:tst:20091159011" version="640">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060425002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091159008"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libtiff is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20091159012" version="640">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060425002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-nss is earlier than 0:1.0.9-0.40.el3" id="oval:com.redhat.rhsa:tst:20091163001" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578008"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091163001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-chat is earlier than 0:1.0.9-0.40.el3" id="oval:com.redhat.rhsa:tst:20091163003" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091163001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.40.el3" id="oval:com.redhat.rhsa:tst:20091163005" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091163001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.40.el3" id="oval:com.redhat.rhsa:tst:20091163007" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091163001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey is earlier than 0:1.0.9-0.40.el3" id="oval:com.redhat.rhsa:tst:20091163009" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578009"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091163001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-devel is earlier than 0:1.0.9-0.40.el3" id="oval:com.redhat.rhsa:tst:20091163011" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578007"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091163001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.40.el3" id="oval:com.redhat.rhsa:tst:20091163013" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578006"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091163001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.40.el3" id="oval:com.redhat.rhsa:tst:20091163015" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091163001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-nspr is earlier than 0:1.0.9-0.40.el3" id="oval:com.redhat.rhsa:tst:20091163017" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091163001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-mail is earlier than 0:1.0.9-0.40.el3" id="oval:com.redhat.rhsa:tst:20091163019" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578010"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091163001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-dom-inspector is earlier than 0:1.0.9-45.el4_8" id="oval:com.redhat.rhsa:tst:20091163022" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091163004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-devel is earlier than 0:1.0.9-45.el4_8" id="oval:com.redhat.rhsa:tst:20091163023" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578007"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091163004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey is earlier than 0:1.0.9-45.el4_8" id="oval:com.redhat.rhsa:tst:20091163024" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578009"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091163004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-js-debugger is earlier than 0:1.0.9-45.el4_8" id="oval:com.redhat.rhsa:tst:20091163025" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091163004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-mail is earlier than 0:1.0.9-45.el4_8" id="oval:com.redhat.rhsa:tst:20091163026" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578010"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091163004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-chat is earlier than 0:1.0.9-45.el4_8" id="oval:com.redhat.rhsa:tst:20091163027" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091163004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="tkinter is earlier than 0:2.2.3-6.11" id="oval:com.redhat.rhsa:tst:20091178001" version="641">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060197004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091178001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="python is earlier than 0:2.2.3-6.11" id="oval:com.redhat.rhsa:tst:20091178003" version="641">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060197003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091178001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="python-tools is earlier than 0:2.2.3-6.11" id="oval:com.redhat.rhsa:tst:20091178005" version="641">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060197001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091178001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="python-devel is earlier than 0:2.2.3-6.11" id="oval:com.redhat.rhsa:tst:20091178007" version="641">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060197002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091178001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="bind-libs is earlier than 20:9.2.4-25.el3" id="oval:com.redhat.rhsa:tst:20091181001" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070044001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091181001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="bind-utils is earlier than 20:9.2.4-25.el3" id="oval:com.redhat.rhsa:tst:20091181003" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070044002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091181001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="bind is earlier than 20:9.2.4-25.el3" id="oval:com.redhat.rhsa:tst:20091181005" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070044005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091181001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="bind-chroot is earlier than 20:9.2.4-25.el3" id="oval:com.redhat.rhsa:tst:20091181007" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070044003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091181001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="bind-devel is earlier than 20:9.2.4-25.el3" id="oval:com.redhat.rhsa:tst:20091181009" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070044004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091181001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.41.el3" id="oval:com.redhat.rhsa:tst:20091185001" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091185001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey is earlier than 0:1.0.9-0.41.el3" id="oval:com.redhat.rhsa:tst:20091185003" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578009"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091185001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-devel is earlier than 0:1.0.9-0.41.el3" id="oval:com.redhat.rhsa:tst:20091185005" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578007"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091185001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-mail is earlier than 0:1.0.9-0.41.el3" id="oval:com.redhat.rhsa:tst:20091185007" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578010"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091185001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.41.el3" id="oval:com.redhat.rhsa:tst:20091185009" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578006"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091185001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-nss is earlier than 0:1.0.9-0.41.el3" id="oval:com.redhat.rhsa:tst:20091185011" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578008"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091185001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.41.el3" id="oval:com.redhat.rhsa:tst:20091185013" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091185001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-nspr is earlier than 0:1.0.9-0.41.el3" id="oval:com.redhat.rhsa:tst:20091185015" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091185001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.41.el3" id="oval:com.redhat.rhsa:tst:20091185017" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091185001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-chat is earlier than 0:1.0.9-0.41.el3" id="oval:com.redhat.rhsa:tst:20091185019" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091185001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="httpd-devel is earlier than 0:2.0.46-75.ent" id="oval:com.redhat.rhsa:tst:20091205001" version="641">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060159002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091205001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="httpd is earlier than 0:2.0.46-75.ent" id="oval:com.redhat.rhsa:tst:20091205003" version="641">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060159003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091205001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="mod_ssl is earlier than 1:2.0.46-75.ent" id="oval:com.redhat.rhsa:tst:20091205005" version="641">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060159001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091205003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libxml is earlier than 1:1.8.17-9.3" id="oval:com.redhat.rhsa:tst:20091206001" version="646">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20091206001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091206001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libxml is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20091206002" version="646">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20091206001"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libxml-devel is earlier than 1:1.8.17-9.3" id="oval:com.redhat.rhsa:tst:20091206003" version="646">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20091206002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091206003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libxml-devel is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20091206004" version="646">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20091206002"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libxml2 is earlier than 0:2.5.10-15" id="oval:com.redhat.rhsa:tst:20091206005" version="646">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080032003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091206004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libxml2-python is earlier than 0:2.5.10-15" id="oval:com.redhat.rhsa:tst:20091206007" version="646">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080032002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091206005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libxml2-devel is earlier than 0:2.5.10-15" id="oval:com.redhat.rhsa:tst:20091206009" version="646">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080032001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091206005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libxml2 is earlier than 0:2.6.16-12.7" id="oval:com.redhat.rhsa:tst:20091206012" version="646">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080032003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091206007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libxml2-python is earlier than 0:2.6.16-12.7" id="oval:com.redhat.rhsa:tst:20091206013" version="646">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080032002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091206008"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libxml2-devel is earlier than 0:2.6.16-12.7" id="oval:com.redhat.rhsa:tst:20091206014" version="646">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080032001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091206008"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libxml2 is earlier than 0:2.6.26-2.1.2.8" id="oval:com.redhat.rhsa:tst:20091206016" version="646">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080032003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091206010"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libxml2-devel is earlier than 0:2.6.26-2.1.2.8" id="oval:com.redhat.rhsa:tst:20091206018" version="646">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080032001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091206010"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libxml2-python is earlier than 0:2.6.26-2.1.2.8" id="oval:com.redhat.rhsa:tst:20091206020" version="646">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080032002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091206012"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="curl-devel is earlier than 0:7.10.6-10.rhel3" id="oval:com.redhat.rhsa:tst:20091209001" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20090341001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091209001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="curl is earlier than 0:7.10.6-10.rhel3" id="oval:com.redhat.rhsa:tst:20091209003" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20090341002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091209003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="curl-devel is earlier than 0:7.12.1-11.1.el4_8.1" id="oval:com.redhat.rhsa:tst:20091209006" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20090341001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091209005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="curl is earlier than 0:7.12.1-11.1.el4_8.1" id="oval:com.redhat.rhsa:tst:20091209007" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20090341002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091209006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="curl is earlier than 0:7.15.5-2.1.el5_3.5" id="oval:com.redhat.rhsa:tst:20091209009" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20090341002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091209008"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="curl-devel is earlier than 0:7.15.5-2.1.el5_3.5" id="oval:com.redhat.rhsa:tst:20091209011" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20090341001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091209008"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="pidgin is earlier than 0:1.5.1-4.el3" id="oval:com.redhat.rhsa:tst:20091218001" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080584001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091218001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="finch is earlier than 0:2.5.9-1.el4" id="oval:com.redhat.rhsa:tst:20091218004" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080584003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091218004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="finch is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20091218005" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080584003"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libpurple-perl is earlier than 0:2.5.9-1.el4" id="oval:com.redhat.rhsa:tst:20091218006" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080584007"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091218004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libpurple-perl is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20091218007" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080584007"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libpurple is earlier than 0:2.5.9-1.el4" id="oval:com.redhat.rhsa:tst:20091218008" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080584004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091218004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libpurple is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20091218009" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080584004"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="pidgin is earlier than 0:2.5.9-1.el4" id="oval:com.redhat.rhsa:tst:20091218010" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080584001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091218004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="pidgin-perl is earlier than 0:2.5.9-1.el4" id="oval:com.redhat.rhsa:tst:20091218011" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080584008"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091218004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="pidgin-perl is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20091218012" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080584008"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="pidgin-devel is earlier than 0:2.5.9-1.el4" id="oval:com.redhat.rhsa:tst:20091218013" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080584009"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091218004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="pidgin-devel is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20091218014" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080584009"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="finch-devel is earlier than 0:2.5.9-1.el4" id="oval:com.redhat.rhsa:tst:20091218015" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080584005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091218004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="finch-devel is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20091218016" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080584005"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libpurple-devel is earlier than 0:2.5.9-1.el4" id="oval:com.redhat.rhsa:tst:20091218017" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080584010"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091218004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libpurple-devel is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20091218018" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080584010"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libpurple-tcl is earlier than 0:2.5.9-1.el4" id="oval:com.redhat.rhsa:tst:20091218019" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080584006"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091218004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libpurple-tcl is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20091218020" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080584006"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libpurple is earlier than 0:2.5.9-1.el5" id="oval:com.redhat.rhsa:tst:20091218022" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080584004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091218006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="pidgin is earlier than 0:2.5.9-1.el5" id="oval:com.redhat.rhsa:tst:20091218024" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080584001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091218006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="pidgin-perl is earlier than 0:2.5.9-1.el5" id="oval:com.redhat.rhsa:tst:20091218026" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080584008"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091218006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="pidgin-devel is earlier than 0:2.5.9-1.el5" id="oval:com.redhat.rhsa:tst:20091218028" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080584009"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091218006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libpurple-devel is earlier than 0:2.5.9-1.el5" id="oval:com.redhat.rhsa:tst:20091218030" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080584010"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091218006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="finch-devel is earlier than 0:2.5.9-1.el5" id="oval:com.redhat.rhsa:tst:20091218032" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080584005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091218006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libpurple-tcl is earlier than 0:2.5.9-1.el5" id="oval:com.redhat.rhsa:tst:20091218034" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080584006"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091218006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="finch is earlier than 0:2.5.9-1.el5" id="oval:com.redhat.rhsa:tst:20091218036" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080584003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091218006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libpurple-perl is earlier than 0:2.5.9-1.el5" id="oval:com.redhat.rhsa:tst:20091218038" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080584007"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091218006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libvorbis is earlier than 1:1.0-11.el3" id="oval:com.redhat.rhsa:tst:20091219001" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070845001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091219001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libvorbis-devel is earlier than 1:1.0-11.el3" id="oval:com.redhat.rhsa:tst:20091219003" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070845002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091219003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libvorbis is earlier than 1:1.1.0-3.el4_8.2" id="oval:com.redhat.rhsa:tst:20091219006" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070845001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091219005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libvorbis-devel is earlier than 1:1.1.0-3.el4_8.2" id="oval:com.redhat.rhsa:tst:20091219007" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070845002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091219006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libvorbis-devel is earlier than 1:1.1.2-3.el5_3.3" id="oval:com.redhat.rhsa:tst:20091219009" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070845002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091219008"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libvorbis is earlier than 1:1.1.2-3.el5_3.3" id="oval:com.redhat.rhsa:tst:20091219011" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070845001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091219008"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="kernel-smp is earlier than 0:2.4.21-60.EL" id="oval:com.redhat.rhsa:tst:20091233001" version="641">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060140004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091233001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="kernel-smp-unsupported is earlier than 0:2.4.21-60.EL" id="oval:com.redhat.rhsa:tst:20091233003" version="641">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060140002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091233001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="kernel is earlier than 0:2.4.21-60.EL" id="oval:com.redhat.rhsa:tst:20091233005" version="641">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060140005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091233003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="kernel-unsupported is earlier than 0:2.4.21-60.EL" id="oval:com.redhat.rhsa:tst:20091233007" version="641">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060140001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091233003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="kernel-doc is earlier than 0:2.4.21-60.EL" id="oval:com.redhat.rhsa:tst:20091233009" version="641">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060140003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091233004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="kernel-BOOT is earlier than 0:2.4.21-60.EL" id="oval:com.redhat.rhsa:tst:20091233011" version="641">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060140008"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091233005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="kernel-source is earlier than 0:2.4.21-60.EL" id="oval:com.redhat.rhsa:tst:20091233013" version="641">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060140006"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091233004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-60.EL" id="oval:com.redhat.rhsa:tst:20091233015" version="641">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060140007"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091233006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="kernel-hugemem is earlier than 0:2.4.21-60.EL" id="oval:com.redhat.rhsa:tst:20091233017" version="641">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060140009"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091233006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-i18n is earlier than 0:1.1.2-44.2.0.EL3" id="oval:com.redhat.rhsa:tst:20091426001" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060573001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091426001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org is earlier than 0:1.1.2-44.2.0.EL3" id="oval:com.redhat.rhsa:tst:20091426003" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060573003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091426001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-libs is earlier than 0:1.1.2-44.2.0.EL3" id="oval:com.redhat.rhsa:tst:20091426005" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060573002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091426001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org is earlier than 0:1.1.5-10.6.0.7.EL4.1" id="oval:com.redhat.rhsa:tst:20091426008" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060573003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091426004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-i18n is earlier than 0:1.1.5-10.6.0.7.EL4.1" id="oval:com.redhat.rhsa:tst:20091426009" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060573001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091426004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-libs is earlier than 0:1.1.5-10.6.0.7.EL4.1" id="oval:com.redhat.rhsa:tst:20091426010" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060573002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091426004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-kde is earlier than 0:1.1.5-10.6.0.7.EL4.1" id="oval:com.redhat.rhsa:tst:20091426011" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060573005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091426004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-testtools is earlier than 1:2.0.4-5.7.0.6.0.1" id="oval:com.redhat.rhsa:tst:20091426013" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406057"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091426005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-ar is earlier than 1:2.0.4-5.7.0.6.0.1" id="oval:com.redhat.rhsa:tst:20091426015" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406028"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091426005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-xsltfilter is earlier than 1:2.0.4-5.7.0.6.0.1" id="oval:com.redhat.rhsa:tst:20091426017" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406030"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091426005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-zu_ZA is earlier than 1:2.0.4-5.7.0.6.0.1" id="oval:com.redhat.rhsa:tst:20091426019" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406055"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091426005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-math is earlier than 1:2.0.4-5.7.0.6.0.1" id="oval:com.redhat.rhsa:tst:20091426021" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406034"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091426005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-fr is earlier than 1:2.0.4-5.7.0.6.0.1" id="oval:com.redhat.rhsa:tst:20091426023" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406061"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091426005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-bn is earlier than 1:2.0.4-5.7.0.6.0.1" id="oval:com.redhat.rhsa:tst:20091426025" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406033"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091426005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-nn_NO is earlier than 1:2.0.4-5.7.0.6.0.1" id="oval:com.redhat.rhsa:tst:20091426027" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406062"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091426005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-ja_JP is earlier than 1:2.0.4-5.7.0.6.0.1" id="oval:com.redhat.rhsa:tst:20091426029" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406037"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091426005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-ko_KR is earlier than 1:2.0.4-5.7.0.6.0.1" id="oval:com.redhat.rhsa:tst:20091426031" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406044"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091426005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-graphicfilter is earlier than 1:2.0.4-5.7.0.6.0.1" id="oval:com.redhat.rhsa:tst:20091426033" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406019"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091426005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-th_TH is earlier than 1:2.0.4-5.7.0.6.0.1" id="oval:com.redhat.rhsa:tst:20091426035" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406013"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091426005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-it is earlier than 1:2.0.4-5.7.0.6.0.1" id="oval:com.redhat.rhsa:tst:20091426037" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406046"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091426005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-zh_TW is earlier than 1:2.0.4-5.7.0.6.0.1" id="oval:com.redhat.rhsa:tst:20091426039" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406041"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091426005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-tr_TR is earlier than 1:2.0.4-5.7.0.6.0.1" id="oval:com.redhat.rhsa:tst:20091426041" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406010"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091426005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-emailmerge is earlier than 1:2.0.4-5.7.0.6.0.1" id="oval:com.redhat.rhsa:tst:20091426043" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406052"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091426005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-de is earlier than 1:2.0.4-5.7.0.6.0.1" id="oval:com.redhat.rhsa:tst:20091426045" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406007"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091426005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-hu_HU is earlier than 1:2.0.4-5.7.0.6.0.1" id="oval:com.redhat.rhsa:tst:20091426047" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406012"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091426005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-da_DK is earlier than 1:2.0.4-5.7.0.6.0.1" id="oval:com.redhat.rhsa:tst:20091426049" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406049"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091426005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-pa_IN is earlier than 1:2.0.4-5.7.0.6.0.1" id="oval:com.redhat.rhsa:tst:20091426051" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406047"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091426005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-gl_ES is earlier than 1:2.0.4-5.7.0.6.0.1" id="oval:com.redhat.rhsa:tst:20091426053" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406058"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091426005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-ta_IN is earlier than 1:2.0.4-5.7.0.6.0.1" id="oval:com.redhat.rhsa:tst:20091426055" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406048"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091426005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-base is earlier than 1:2.0.4-5.7.0.6.0.1" id="oval:com.redhat.rhsa:tst:20091426057" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406050"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091426005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-sv is earlier than 1:2.0.4-5.7.0.6.0.1" id="oval:com.redhat.rhsa:tst:20091426059" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406059"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091426005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-pt_BR is earlier than 1:2.0.4-5.7.0.6.0.1" id="oval:com.redhat.rhsa:tst:20091426061" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406053"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091426005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-af_ZA is earlier than 1:2.0.4-5.7.0.6.0.1" id="oval:com.redhat.rhsa:tst:20091426063" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406054"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091426005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-draw is earlier than 1:2.0.4-5.7.0.6.0.1" id="oval:com.redhat.rhsa:tst:20091426065" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406060"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091426005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-nl is earlier than 1:2.0.4-5.7.0.6.0.1" id="oval:com.redhat.rhsa:tst:20091426067" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406021"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091426005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-sl_SI is earlier than 1:2.0.4-5.7.0.6.0.1" id="oval:com.redhat.rhsa:tst:20091426069" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406022"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091426005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-javafilter is earlier than 1:2.0.4-5.7.0.6.0.1" id="oval:com.redhat.rhsa:tst:20091426071" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406063"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091426005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-lt_LT is earlier than 1:2.0.4-5.7.0.6.0.1" id="oval:com.redhat.rhsa:tst:20091426073" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406042"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091426005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-pl_PL is earlier than 1:2.0.4-5.7.0.6.0.1" id="oval:com.redhat.rhsa:tst:20091426075" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406040"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091426005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-bg_BG is earlier than 1:2.0.4-5.7.0.6.0.1" id="oval:com.redhat.rhsa:tst:20091426077" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406006"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091426005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-he_IL is earlier than 1:2.0.4-5.7.0.6.0.1" id="oval:com.redhat.rhsa:tst:20091426079" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406032"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091426005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-calc is earlier than 1:2.0.4-5.7.0.6.0.1" id="oval:com.redhat.rhsa:tst:20091426081" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406024"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091426005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-sk_SK is earlier than 1:2.0.4-5.7.0.6.0.1" id="oval:com.redhat.rhsa:tst:20091426083" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406038"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091426005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-fi_FI is earlier than 1:2.0.4-5.7.0.6.0.1" id="oval:com.redhat.rhsa:tst:20091426085" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406011"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091426005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-hr_HR is earlier than 1:2.0.4-5.7.0.6.0.1" id="oval:com.redhat.rhsa:tst:20091426087" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406039"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091426005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-pt_PT is earlier than 1:2.0.4-5.7.0.6.0.1" id="oval:com.redhat.rhsa:tst:20091426089" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406009"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091426005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-sr_CS is earlier than 1:2.0.4-5.7.0.6.0.1" id="oval:com.redhat.rhsa:tst:20091426091" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406025"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091426005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-et_EE is earlier than 1:2.0.4-5.7.0.6.0.1" id="oval:com.redhat.rhsa:tst:20091426093" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406008"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091426005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-core is earlier than 1:2.0.4-5.7.0.6.0.1" id="oval:com.redhat.rhsa:tst:20091426095" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406016"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091426005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-cy_GB is earlier than 1:2.0.4-5.7.0.6.0.1" id="oval:com.redhat.rhsa:tst:20091426097" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406035"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091426005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-ca_ES is earlier than 1:2.0.4-5.7.0.6.0.1" id="oval:com.redhat.rhsa:tst:20091426099" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406014"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091426005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-writer is earlier than 1:2.0.4-5.7.0.6.0.1" id="oval:com.redhat.rhsa:tst:20091426101" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406036"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091426005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-eu_ES is earlier than 1:2.0.4-5.7.0.6.0.1" id="oval:com.redhat.rhsa:tst:20091426103" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406017"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091426005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-hi_IN is earlier than 1:2.0.4-5.7.0.6.0.1" id="oval:com.redhat.rhsa:tst:20091426105" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406018"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091426005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-el_GR is earlier than 1:2.0.4-5.7.0.6.0.1" id="oval:com.redhat.rhsa:tst:20091426107" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406023"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091426005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-zh_CN is earlier than 1:2.0.4-5.7.0.6.0.1" id="oval:com.redhat.rhsa:tst:20091426109" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406020"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091426005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-cs_CZ is earlier than 1:2.0.4-5.7.0.6.0.1" id="oval:com.redhat.rhsa:tst:20091426111" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406026"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091426005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-ms_MY is earlier than 1:2.0.4-5.7.0.6.0.1" id="oval:com.redhat.rhsa:tst:20091426113" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406027"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091426005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-impress is earlier than 1:2.0.4-5.7.0.6.0.1" id="oval:com.redhat.rhsa:tst:20091426115" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406043"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091426005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-nb_NO is earlier than 1:2.0.4-5.7.0.6.0.1" id="oval:com.redhat.rhsa:tst:20091426117" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406045"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091426005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-es is earlier than 1:2.0.4-5.7.0.6.0.1" id="oval:com.redhat.rhsa:tst:20091426119" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406051"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091426005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-pyuno is earlier than 1:2.0.4-5.7.0.6.0.1" id="oval:com.redhat.rhsa:tst:20091426121" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406015"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091426005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-ga_IE is earlier than 1:2.0.4-5.7.0.6.0.1" id="oval:com.redhat.rhsa:tst:20091426123" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406056"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091426005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-ru is earlier than 1:2.0.4-5.7.0.6.0.1" id="oval:com.redhat.rhsa:tst:20091426125" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406029"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091426005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-gu_IN is earlier than 1:2.0.4-5.7.0.6.0.1" id="oval:com.redhat.rhsa:tst:20091426127" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406031"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091426005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-nr_ZA is earlier than 1:2.3.0-6.11.el5_4.1" id="oval:com.redhat.rhsa:tst:20091426130" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406068"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091426007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-it is earlier than 1:2.3.0-6.11.el5_4.1" id="oval:com.redhat.rhsa:tst:20091426132" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406097"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091426007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-base is earlier than 1:2.3.0-6.11.el5_4.1" id="oval:com.redhat.rhsa:tst:20091426134" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406089"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091426007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-pt_PT is earlier than 1:2.3.0-6.11.el5_4.1" id="oval:com.redhat.rhsa:tst:20091426136" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406100"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091426007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-emailmerge is earlier than 1:2.3.0-6.11.el5_4.1" id="oval:com.redhat.rhsa:tst:20091426138" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406099"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091426007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-ve_ZA is earlier than 1:2.3.0-6.11.el5_4.1" id="oval:com.redhat.rhsa:tst:20091426140" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406069"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091426007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-ur is earlier than 1:2.3.0-6.11.el5_4.1" id="oval:com.redhat.rhsa:tst:20091426142" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406117"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091426007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-tr_TR is earlier than 1:2.3.0-6.11.el5_4.1" id="oval:com.redhat.rhsa:tst:20091426144" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406071"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091426007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-te_IN is earlier than 1:2.3.0-6.11.el5_4.1" id="oval:com.redhat.rhsa:tst:20091426146" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406096"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091426007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-he_IL is earlier than 1:2.3.0-6.11.el5_4.1" id="oval:com.redhat.rhsa:tst:20091426148" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406120"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091426007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-sl_SI is earlier than 1:2.3.0-6.11.el5_4.1" id="oval:com.redhat.rhsa:tst:20091426150" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406132"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091426007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-ms_MY is earlier than 1:2.3.0-6.11.el5_4.1" id="oval:com.redhat.rhsa:tst:20091426152" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406084"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091426007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-nn_NO is earlier than 1:2.3.0-6.11.el5_4.1" id="oval:com.redhat.rhsa:tst:20091426154" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406111"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091426007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-writer is earlier than 1:2.3.0-6.11.el5_4.1" id="oval:com.redhat.rhsa:tst:20091426156" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406072"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091426007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-kn_IN is earlier than 1:2.3.0-6.11.el5_4.1" id="oval:com.redhat.rhsa:tst:20091426158" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406134"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091426007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-javafilter is earlier than 1:2.3.0-6.11.el5_4.1" id="oval:com.redhat.rhsa:tst:20091426160" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406133"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091426007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-es is earlier than 1:2.3.0-6.11.el5_4.1" id="oval:com.redhat.rhsa:tst:20091426162" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406128"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091426007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-af_ZA is earlier than 1:2.3.0-6.11.el5_4.1" id="oval:com.redhat.rhsa:tst:20091426164" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406122"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091426007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-graphicfilter is earlier than 1:2.3.0-6.11.el5_4.1" id="oval:com.redhat.rhsa:tst:20091426166" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406070"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091426007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-xsltfilter is earlier than 1:2.3.0-6.11.el5_4.1" id="oval:com.redhat.rhsa:tst:20091426168" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406088"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091426007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-bn is earlier than 1:2.3.0-6.11.el5_4.1" id="oval:com.redhat.rhsa:tst:20091426170" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406104"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091426007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-et_EE is earlier than 1:2.3.0-6.11.el5_4.1" id="oval:com.redhat.rhsa:tst:20091426172" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406098"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091426007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-ml_IN is earlier than 1:2.3.0-6.11.el5_4.1" id="oval:com.redhat.rhsa:tst:20091426174" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406114"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091426007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-ar is earlier than 1:2.3.0-6.11.el5_4.1" id="oval:com.redhat.rhsa:tst:20091426176" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406107"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091426007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-zh_TW is earlier than 1:2.3.0-6.11.el5_4.1" id="oval:com.redhat.rhsa:tst:20091426178" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406108"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091426007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-nl is earlier than 1:2.3.0-6.11.el5_4.1" id="oval:com.redhat.rhsa:tst:20091426180" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406102"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091426007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-xh_ZA is earlier than 1:2.3.0-6.11.el5_4.1" id="oval:com.redhat.rhsa:tst:20091426182" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406090"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091426007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-st_ZA is earlier than 1:2.3.0-6.11.el5_4.1" id="oval:com.redhat.rhsa:tst:20091426184" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406135"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091426007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-pyuno is earlier than 1:2.3.0-6.11.el5_4.1" id="oval:com.redhat.rhsa:tst:20091426186" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406118"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091426007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-ta_IN is earlier than 1:2.3.0-6.11.el5_4.1" id="oval:com.redhat.rhsa:tst:20091426188" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406112"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091426007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-cs_CZ is earlier than 1:2.3.0-6.11.el5_4.1" id="oval:com.redhat.rhsa:tst:20091426190" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406067"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091426007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-sr_CS is earlier than 1:2.3.0-6.11.el5_4.1" id="oval:com.redhat.rhsa:tst:20091426192" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406115"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091426007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-ca_ES is earlier than 1:2.3.0-6.11.el5_4.1" id="oval:com.redhat.rhsa:tst:20091426194" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406081"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091426007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-or_IN is earlier than 1:2.3.0-6.11.el5_4.1" id="oval:com.redhat.rhsa:tst:20091426196" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406124"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091426007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-sk_SK is earlier than 1:2.3.0-6.11.el5_4.1" id="oval:com.redhat.rhsa:tst:20091426198" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406064"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091426007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-hi_IN is earlier than 1:2.3.0-6.11.el5_4.1" id="oval:com.redhat.rhsa:tst:20091426200" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406066"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091426007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-impress is earlier than 1:2.3.0-6.11.el5_4.1" id="oval:com.redhat.rhsa:tst:20091426202" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406129"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091426007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-hr_HR is earlier than 1:2.3.0-6.11.el5_4.1" id="oval:com.redhat.rhsa:tst:20091426204" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406080"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091426007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-tn_ZA is earlier than 1:2.3.0-6.11.el5_4.1" id="oval:com.redhat.rhsa:tst:20091426206" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406094"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091426007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-ko_KR is earlier than 1:2.3.0-6.11.el5_4.1" id="oval:com.redhat.rhsa:tst:20091426208" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406085"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091426007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-ja_JP is earlier than 1:2.3.0-6.11.el5_4.1" id="oval:com.redhat.rhsa:tst:20091426210" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406093"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091426007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-ru is earlier than 1:2.3.0-6.11.el5_4.1" id="oval:com.redhat.rhsa:tst:20091426212" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406136"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091426007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-bg_BG is earlier than 1:2.3.0-6.11.el5_4.1" id="oval:com.redhat.rhsa:tst:20091426214" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406119"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091426007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-ts_ZA is earlier than 1:2.3.0-6.11.el5_4.1" id="oval:com.redhat.rhsa:tst:20091426216" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406125"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091426007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-as_IN is earlier than 1:2.3.0-6.11.el5_4.1" id="oval:com.redhat.rhsa:tst:20091426218" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406105"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091426007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-fr is earlier than 1:2.3.0-6.11.el5_4.1" id="oval:com.redhat.rhsa:tst:20091426220" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406086"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091426007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-sdk-doc is earlier than 1:2.3.0-6.11.el5_4.1" id="oval:com.redhat.rhsa:tst:20091426222" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080939137"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091426007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-lt_LT is earlier than 1:2.3.0-6.11.el5_4.1" id="oval:com.redhat.rhsa:tst:20091426224" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406091"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091426007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-fi_FI is earlier than 1:2.3.0-6.11.el5_4.1" id="oval:com.redhat.rhsa:tst:20091426226" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406126"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091426007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-de is earlier than 1:2.3.0-6.11.el5_4.1" id="oval:com.redhat.rhsa:tst:20091426228" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406109"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091426007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-draw is earlier than 1:2.3.0-6.11.el5_4.1" id="oval:com.redhat.rhsa:tst:20091426230" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406101"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091426007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-da_DK is earlier than 1:2.3.0-6.11.el5_4.1" id="oval:com.redhat.rhsa:tst:20091426232" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406113"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091426007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-pt_BR is earlier than 1:2.3.0-6.11.el5_4.1" id="oval:com.redhat.rhsa:tst:20091426234" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406065"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091426007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-nso_ZA is earlier than 1:2.3.0-6.11.el5_4.1" id="oval:com.redhat.rhsa:tst:20091426236" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406092"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091426007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-math is earlier than 1:2.3.0-6.11.el5_4.1" id="oval:com.redhat.rhsa:tst:20091426238" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406082"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091426007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-sv is earlier than 1:2.3.0-6.11.el5_4.1" id="oval:com.redhat.rhsa:tst:20091426240" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406130"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091426007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-el_GR is earlier than 1:2.3.0-6.11.el5_4.1" id="oval:com.redhat.rhsa:tst:20091426242" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406121"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091426007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-gl_ES is earlier than 1:2.3.0-6.11.el5_4.1" id="oval:com.redhat.rhsa:tst:20091426244" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406075"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091426007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-ss_ZA is earlier than 1:2.3.0-6.11.el5_4.1" id="oval:com.redhat.rhsa:tst:20091426246" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406074"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091426007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-sdk is earlier than 1:2.3.0-6.11.el5_4.1" id="oval:com.redhat.rhsa:tst:20091426248" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080939084"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091426007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-eu_ES is earlier than 1:2.3.0-6.11.el5_4.1" id="oval:com.redhat.rhsa:tst:20091426250" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406127"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091426007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-cy_GB is earlier than 1:2.3.0-6.11.el5_4.1" id="oval:com.redhat.rhsa:tst:20091426252" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406087"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091426007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-core is earlier than 1:2.3.0-6.11.el5_4.1" id="oval:com.redhat.rhsa:tst:20091426254" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406123"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091426007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-ga_IE is earlier than 1:2.3.0-6.11.el5_4.1" id="oval:com.redhat.rhsa:tst:20091426256" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406077"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091426007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-th_TH is earlier than 1:2.3.0-6.11.el5_4.1" id="oval:com.redhat.rhsa:tst:20091426258" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406116"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091426007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-pa_IN is earlier than 1:2.3.0-6.11.el5_4.1" id="oval:com.redhat.rhsa:tst:20091426260" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406106"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091426007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-testtools is earlier than 1:2.3.0-6.11.el5_4.1" id="oval:com.redhat.rhsa:tst:20091426262" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406078"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091426007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-headless is earlier than 1:2.3.0-6.11.el5_4.1" id="oval:com.redhat.rhsa:tst:20091426264" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080939066"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091426007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-mr_IN is earlier than 1:2.3.0-6.11.el5_4.1" id="oval:com.redhat.rhsa:tst:20091426266" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406095"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091426007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-hu_HU is earlier than 1:2.3.0-6.11.el5_4.1" id="oval:com.redhat.rhsa:tst:20091426268" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406079"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091426007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-nb_NO is earlier than 1:2.3.0-6.11.el5_4.1" id="oval:com.redhat.rhsa:tst:20091426270" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406073"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091426007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-zu_ZA is earlier than 1:2.3.0-6.11.el5_4.1" id="oval:com.redhat.rhsa:tst:20091426272" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406103"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091426007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-gu_IN is earlier than 1:2.3.0-6.11.el5_4.1" id="oval:com.redhat.rhsa:tst:20091426274" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406083"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091426007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-calc is earlier than 1:2.3.0-6.11.el5_4.1" id="oval:com.redhat.rhsa:tst:20091426276" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406131"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091426007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-pl_PL is earlier than 1:2.3.0-6.11.el5_4.1" id="oval:com.redhat.rhsa:tst:20091426278" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406110"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091426007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-zh_CN is earlier than 1:2.3.0-6.11.el5_4.1" id="oval:com.redhat.rhsa:tst:20091426280" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406076"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091426007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="fetchmail is earlier than 0:6.2.0-3.el3.5" id="oval:com.redhat.rhsa:tst:20091427001" version="646">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070018001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091427001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="fetchmail is earlier than 0:6.2.5-6.0.1.el4_8.1" id="oval:com.redhat.rhsa:tst:20091427004" version="646">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070018001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091427004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="fetchmail is earlier than 0:6.3.6-1.1.el5_3.1" id="oval:com.redhat.rhsa:tst:20091427006" version="646">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070018001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091427006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.45.el3" id="oval:com.redhat.rhsa:tst:20091432001" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091432001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-devel is earlier than 0:1.0.9-0.45.el3" id="oval:com.redhat.rhsa:tst:20091432003" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578007"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091432001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-nspr is earlier than 0:1.0.9-0.45.el3" id="oval:com.redhat.rhsa:tst:20091432005" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091432001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.45.el3" id="oval:com.redhat.rhsa:tst:20091432007" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091432001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-chat is earlier than 0:1.0.9-0.45.el3" id="oval:com.redhat.rhsa:tst:20091432009" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091432001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.45.el3" id="oval:com.redhat.rhsa:tst:20091432011" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091432001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-mail is earlier than 0:1.0.9-0.45.el3" id="oval:com.redhat.rhsa:tst:20091432013" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578010"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091432001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey is earlier than 0:1.0.9-0.45.el3" id="oval:com.redhat.rhsa:tst:20091432015" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578009"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091432001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.45.el3" id="oval:com.redhat.rhsa:tst:20091432017" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578006"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091432001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-nss is earlier than 0:1.0.9-0.45.el3" id="oval:com.redhat.rhsa:tst:20091432019" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578008"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091432001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="newt-devel is earlier than 0:0.51.5-2.el3" id="oval:com.redhat.rhsa:tst:20091463001" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20091463001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091463001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="newt-devel is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20091463002" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20091463001"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="newt is earlier than 0:0.51.5-2.el3" id="oval:com.redhat.rhsa:tst:20091463003" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20091463002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091463003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="newt is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20091463004" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20091463002"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="newt-devel is earlier than 0:0.51.6-10.el4_8.1" id="oval:com.redhat.rhsa:tst:20091463006" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20091463001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091463005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="newt is earlier than 0:0.51.6-10.el4_8.1" id="oval:com.redhat.rhsa:tst:20091463007" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20091463002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091463006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="newt-devel is earlier than 0:0.52.2-12.el5_4.1" id="oval:com.redhat.rhsa:tst:20091463009" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20091463001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091463008"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="newt-devel is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20091463010" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20091463001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="newt is earlier than 0:0.52.2-12.el5_4.1" id="oval:com.redhat.rhsa:tst:20091463011" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20091463002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091463008"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="newt is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20091463012" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20091463002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="rh-postgresql-server is earlier than 0:7.3.21-2" id="oval:com.redhat.rhsa:tst:20091485001" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060526003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091485001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="rh-postgresql-test is earlier than 0:7.3.21-2" id="oval:com.redhat.rhsa:tst:20091485003" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060526002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091485001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="rh-postgresql-docs is earlier than 0:7.3.21-2" id="oval:com.redhat.rhsa:tst:20091485005" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060526005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091485001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="rh-postgresql-python is earlier than 0:7.3.21-2" id="oval:com.redhat.rhsa:tst:20091485007" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060526007"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091485001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="rh-postgresql-contrib is earlier than 0:7.3.21-2" id="oval:com.redhat.rhsa:tst:20091485009" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060526001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091485001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="rh-postgresql-devel is earlier than 0:7.3.21-2" id="oval:com.redhat.rhsa:tst:20091485011" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060526009"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091485001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="rh-postgresql is earlier than 0:7.3.21-2" id="oval:com.redhat.rhsa:tst:20091485013" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060526011"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091485001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="rh-postgresql-libs is earlier than 0:7.3.21-2" id="oval:com.redhat.rhsa:tst:20091485015" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060526004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091485003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="rh-postgresql-jdbc is earlier than 0:7.3.21-2" id="oval:com.redhat.rhsa:tst:20091485017" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060526006"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091485001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="rh-postgresql-pl is earlier than 0:7.3.21-2" id="oval:com.redhat.rhsa:tst:20091485019" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060526008"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091485001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="rh-postgresql-tcl is earlier than 0:7.3.21-2" id="oval:com.redhat.rhsa:tst:20091485021" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060526010"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091485001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="squirrelmail is earlier than 0:1.4.8-16.el3" id="oval:com.redhat.rhsa:tst:20091490001" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060283001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091490001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="squirrelmail is earlier than 0:1.4.8-5.el4_8.8" id="oval:com.redhat.rhsa:tst:20091490004" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060283001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091490004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="squirrelmail is earlier than 0:1.4.8-5.el5_4.10" id="oval:com.redhat.rhsa:tst:20091490006" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060283001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091490006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="xpdf is earlier than 1:2.02-17.el3" id="oval:com.redhat.rhsa:tst:20091500001" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070735001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091500001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="redhat-release is earlier than 0:3Desktop-13.9.7" id="oval:com.redhat.rhsa:tst:20091526001" version="635">
   <red-def:object object_ref="oval:com.redhat.rhba:obj:20070026002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091526001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="redhat-release is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20091526002" version="635">
   <red-def:object object_ref="oval:com.redhat.rhba:obj:20070026002"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="redhat-release is earlier than 0:3WS-13.9.7" id="oval:com.redhat.rhsa:tst:20091526003" version="635">
   <red-def:object object_ref="oval:com.redhat.rhba:obj:20070026002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091526003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="redhat-release is earlier than 0:3ES-13.9.7" id="oval:com.redhat.rhsa:tst:20091526004" version="635">
   <red-def:object object_ref="oval:com.redhat.rhba:obj:20070026002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091526004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="redhat-release is earlier than 0:3AS-13.9.7" id="oval:com.redhat.rhsa:tst:20091526005" version="635">
   <red-def:object object_ref="oval:com.redhat.rhba:obj:20070026002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091526005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="samba-swat is earlier than 0:3.0.9-1.3E.16" id="oval:com.redhat.rhsa:tst:20091528001" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060591003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091528001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="samba-client is earlier than 0:3.0.9-1.3E.16" id="oval:com.redhat.rhsa:tst:20091528003" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060591004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091528001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="samba-common is earlier than 0:3.0.9-1.3E.16" id="oval:com.redhat.rhsa:tst:20091528005" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060591001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091528003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="samba is earlier than 0:3.0.9-1.3E.16" id="oval:com.redhat.rhsa:tst:20091528007" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060591002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091528003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.47.el3" id="oval:com.redhat.rhsa:tst:20091531001" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578006"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091531001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-mail is earlier than 0:1.0.9-0.47.el3" id="oval:com.redhat.rhsa:tst:20091531003" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578010"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091531001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey is earlier than 0:1.0.9-0.47.el3" id="oval:com.redhat.rhsa:tst:20091531005" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578009"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091531001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-nss is earlier than 0:1.0.9-0.47.el3" id="oval:com.redhat.rhsa:tst:20091531007" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578008"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091531001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.47.el3" id="oval:com.redhat.rhsa:tst:20091531009" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091531001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.47.el3" id="oval:com.redhat.rhsa:tst:20091531011" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091531001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.47.el3" id="oval:com.redhat.rhsa:tst:20091531013" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091531001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-devel is earlier than 0:1.0.9-0.47.el3" id="oval:com.redhat.rhsa:tst:20091531015" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578007"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091531001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-nspr is earlier than 0:1.0.9-0.47.el3" id="oval:com.redhat.rhsa:tst:20091531017" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091531001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-chat is earlier than 0:1.0.9-0.47.el3" id="oval:com.redhat.rhsa:tst:20091531019" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091531001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey is earlier than 0:1.0.9-50.el4_8" id="oval:com.redhat.rhsa:tst:20091531022" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578009"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091531004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-js-debugger is earlier than 0:1.0.9-50.el4_8" id="oval:com.redhat.rhsa:tst:20091531023" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091531004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-mail is earlier than 0:1.0.9-50.el4_8" id="oval:com.redhat.rhsa:tst:20091531024" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578010"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091531004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-chat is earlier than 0:1.0.9-50.el4_8" id="oval:com.redhat.rhsa:tst:20091531025" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091531004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-devel is earlier than 0:1.0.9-50.el4_8" id="oval:com.redhat.rhsa:tst:20091531026" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578007"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091531004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-dom-inspector is earlier than 0:1.0.9-50.el4_8" id="oval:com.redhat.rhsa:tst:20091531027" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091531004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="pidgin is earlier than 0:1.5.1-6.el3" id="oval:com.redhat.rhsa:tst:20091535001" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080584001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091535001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="wget is earlier than 0:1.10.2-0.30E.1" id="oval:com.redhat.rhsa:tst:20091549001" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20091549001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091549001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="wget is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20091549002" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20091549001"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="wget is earlier than 0:1.10.2-1.el4_8.1" id="oval:com.redhat.rhsa:tst:20091549004" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20091549001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091549004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="wget is earlier than 0:1.11.4-2.el5_4.1" id="oval:com.redhat.rhsa:tst:20091549006" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20091549001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091549006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="wget is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20091549007" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20091549001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="kernel-doc is earlier than 0:2.4.21-63.EL" id="oval:com.redhat.rhsa:tst:20091550001" version="654">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060140003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091550001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="kernel-source is earlier than 0:2.4.21-63.EL" id="oval:com.redhat.rhsa:tst:20091550003" version="654">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060140006"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091550001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="kernel is earlier than 0:2.4.21-63.EL" id="oval:com.redhat.rhsa:tst:20091550005" version="654">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060140005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091550003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="kernel-unsupported is earlier than 0:2.4.21-63.EL" id="oval:com.redhat.rhsa:tst:20091550007" version="654">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060140001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091550003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="kernel-smp is earlier than 0:2.4.21-63.EL" id="oval:com.redhat.rhsa:tst:20091550009" version="654">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060140004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091550004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="kernel-hugemem-unsupported is earlier than 0:2.4.21-63.EL" id="oval:com.redhat.rhsa:tst:20091550011" version="654">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060140007"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091550005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="kernel-smp-unsupported is earlier than 0:2.4.21-63.EL" id="oval:com.redhat.rhsa:tst:20091550013" version="654">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060140002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091550004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="kernel-hugemem is earlier than 0:2.4.21-63.EL" id="oval:com.redhat.rhsa:tst:20091550015" version="654">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060140009"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091550005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="kernel-BOOT is earlier than 0:2.4.21-63.EL" id="oval:com.redhat.rhsa:tst:20091550017" version="654">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060140008"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091550006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libvorbis-devel is earlier than 1:1.0-12.el3" id="oval:com.redhat.rhsa:tst:20091561001" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070845002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091561001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libvorbis is earlier than 1:1.0-12.el3" id="oval:com.redhat.rhsa:tst:20091561003" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070845001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091561003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libvorbis is earlier than 1:1.1.0-3.el4_8.3" id="oval:com.redhat.rhsa:tst:20091561006" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070845001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091561005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libvorbis-devel is earlier than 1:1.1.0-3.el4_8.3" id="oval:com.redhat.rhsa:tst:20091561007" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070845002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091561006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libvorbis is earlier than 1:1.1.2-3.el5_4.4" id="oval:com.redhat.rhsa:tst:20091561009" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070845001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091561008"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libvorbis-devel is earlier than 1:1.1.2-3.el5_4.4" id="oval:com.redhat.rhsa:tst:20091561011" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070845002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091561008"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="4Suite is earlier than 0:0.11.1-15" id="oval:com.redhat.rhsa:tst:20091572001" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20091572001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091572001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="4Suite is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20091572002" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20091572001"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="4Suite is earlier than 0:1.0-3.el4_8.1" id="oval:com.redhat.rhsa:tst:20091572004" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20091572001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091572004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="httpd is earlier than 0:2.0.46-77.ent" id="oval:com.redhat.rhsa:tst:20091579001" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060159003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091579001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="httpd-devel is earlier than 0:2.0.46-77.ent" id="oval:com.redhat.rhsa:tst:20091579003" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060159002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091579001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="mod_ssl is earlier than 1:2.0.46-77.ent" id="oval:com.redhat.rhsa:tst:20091579005" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060159001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091579003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="httpd-manual is earlier than 0:2.2.3-31.el5_4.2" id="oval:com.redhat.rhsa:tst:20091579008" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060159006"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091579005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="httpd is earlier than 0:2.2.3-31.el5_4.2" id="oval:com.redhat.rhsa:tst:20091579010" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060159003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091579005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="httpd-devel is earlier than 0:2.2.3-31.el5_4.2" id="oval:com.redhat.rhsa:tst:20091579012" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060159002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091579007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="mod_ssl is earlier than 1:2.2.3-31.el5_4.2" id="oval:com.redhat.rhsa:tst:20091579014" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060159001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091579008"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="expat is earlier than 0:1.95.5-6.2" id="oval:com.redhat.rhsa:tst:20091625001" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20091625001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091625001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="expat is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20091625002" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20091625001"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="expat-devel is earlier than 0:1.95.5-6.2" id="oval:com.redhat.rhsa:tst:20091625003" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20091625002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091625003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="expat-devel is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20091625004" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20091625002"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="expat-devel is earlier than 0:1.95.7-4.el4_8.2" id="oval:com.redhat.rhsa:tst:20091625006" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20091625002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091625005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="expat is earlier than 0:1.95.7-4.el4_8.2" id="oval:com.redhat.rhsa:tst:20091625007" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20091625001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091625005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="expat is earlier than 0:1.95.8-8.3.el5_4.2" id="oval:com.redhat.rhsa:tst:20091625009" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20091625001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091625007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="expat is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20091625010" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20091625001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="expat-devel is earlier than 0:1.95.8-8.3.el5_4.2" id="oval:com.redhat.rhsa:tst:20091625011" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20091625002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091625007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="expat-devel is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20091625012" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20091625002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libtool is earlier than 0:1.4.3-7" id="oval:com.redhat.rhsa:tst:20091646001" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20091646001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091646001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libtool is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20091646002" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20091646001"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libtool-libs is earlier than 0:1.4.3-7" id="oval:com.redhat.rhsa:tst:20091646003" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20091646002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091646003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libtool-libs is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20091646004" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20091646002"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libtool-libs is earlier than 0:1.5.6-5.el4_8" id="oval:com.redhat.rhsa:tst:20091646006" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20091646002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091646005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libtool is earlier than 0:1.5.6-5.el4_8" id="oval:com.redhat.rhsa:tst:20091646007" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20091646001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091646006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libtool-ltdl-devel is earlier than 0:1.5.22-7.el5_4" id="oval:com.redhat.rhsa:tst:20091646009" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20091646004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091646008"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libtool-ltdl-devel is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20091646010" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20091646004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libtool-ltdl is earlier than 0:1.5.22-7.el5_4" id="oval:com.redhat.rhsa:tst:20091646011" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20091646005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091646008"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libtool-ltdl is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20091646012" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20091646005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libtool is earlier than 0:1.5.22-7.el5_4" id="oval:com.redhat.rhsa:tst:20091646013" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20091646001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091646010"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libtool is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20091646014" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20091646001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="ntp is earlier than 0:4.1.2-6.el3" id="oval:com.redhat.rhsa:tst:20091651001" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20091651001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091651001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="ntp is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20091651002" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20091651001"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.48.el3" id="oval:com.redhat.rhsa:tst:20091673001" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091673001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.48.el3" id="oval:com.redhat.rhsa:tst:20091673003" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091673001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-devel is earlier than 0:1.0.9-0.48.el3" id="oval:com.redhat.rhsa:tst:20091673005" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578007"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091673001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey is earlier than 0:1.0.9-0.48.el3" id="oval:com.redhat.rhsa:tst:20091673007" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578009"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091673001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.48.el3" id="oval:com.redhat.rhsa:tst:20091673009" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578006"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091673001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.48.el3" id="oval:com.redhat.rhsa:tst:20091673011" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091673001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-nspr is earlier than 0:1.0.9-0.48.el3" id="oval:com.redhat.rhsa:tst:20091673013" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091673001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-mail is earlier than 0:1.0.9-0.48.el3" id="oval:com.redhat.rhsa:tst:20091673015" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578010"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091673001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-chat is earlier than 0:1.0.9-0.48.el3" id="oval:com.redhat.rhsa:tst:20091673017" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091673001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-nss is earlier than 0:1.0.9-0.48.el3" id="oval:com.redhat.rhsa:tst:20091673019" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578008"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091673001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-devel is earlier than 0:1.0.9-51.el4_8" id="oval:com.redhat.rhsa:tst:20091673022" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578007"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091673004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-dom-inspector is earlier than 0:1.0.9-51.el4_8" id="oval:com.redhat.rhsa:tst:20091673023" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091673004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey is earlier than 0:1.0.9-51.el4_8" id="oval:com.redhat.rhsa:tst:20091673024" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578009"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091673004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-chat is earlier than 0:1.0.9-51.el4_8" id="oval:com.redhat.rhsa:tst:20091673025" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091673004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-mail is earlier than 0:1.0.9-51.el4_8" id="oval:com.redhat.rhsa:tst:20091673026" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578010"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091673004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-js-debugger is earlier than 0:1.0.9-51.el4_8" id="oval:com.redhat.rhsa:tst:20091673027" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20091673004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="krb5-workstation is earlier than 0:1.2.7-71" id="oval:com.redhat.rhsa:tst:20100029001" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070095004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100029001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="krb5-libs is earlier than 0:1.2.7-71" id="oval:com.redhat.rhsa:tst:20100029003" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070095003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100029003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="krb5-server is earlier than 0:1.2.7-71" id="oval:com.redhat.rhsa:tst:20100029005" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070095001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100029001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="krb5-devel is earlier than 0:1.2.7-71" id="oval:com.redhat.rhsa:tst:20100029007" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070095002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100029001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="krb5-libs is earlier than 0:1.3.4-62.el4_8.1" id="oval:com.redhat.rhsa:tst:20100029010" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070095003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100029005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="krb5-workstation is earlier than 0:1.3.4-62.el4_8.1" id="oval:com.redhat.rhsa:tst:20100029011" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070095004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100029006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="krb5-devel is earlier than 0:1.3.4-62.el4_8.1" id="oval:com.redhat.rhsa:tst:20100029012" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070095002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100029006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="krb5-server is earlier than 0:1.3.4-62.el4_8.1" id="oval:com.redhat.rhsa:tst:20100029013" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070095001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100029006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="krb5-libs is earlier than 0:1.6.1-36.el5_4.1" id="oval:com.redhat.rhsa:tst:20100029015" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070095003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100029008"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="krb5-devel is earlier than 0:1.6.1-36.el5_4.1" id="oval:com.redhat.rhsa:tst:20100029017" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070095002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100029008"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="krb5-server is earlier than 0:1.6.1-36.el5_4.1" id="oval:com.redhat.rhsa:tst:20100029019" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070095001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100029010"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="krb5-workstation is earlier than 0:1.6.1-36.el5_4.1" id="oval:com.redhat.rhsa:tst:20100029021" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070095004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100029010"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="gcc-objc is earlier than 0:3.2.3-60" id="oval:com.redhat.rhsa:tst:20100039001" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070473001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100039001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="gcc-c++ is earlier than 0:3.2.3-60" id="oval:com.redhat.rhsa:tst:20100039003" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070473002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100039001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libgcj is earlier than 0:3.2.3-60" id="oval:com.redhat.rhsa:tst:20100039005" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070473003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100039003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libgnat is earlier than 0:3.2.3-60" id="oval:com.redhat.rhsa:tst:20100039007" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070473004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100039004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libobjc is earlier than 0:3.2.3-60" id="oval:com.redhat.rhsa:tst:20100039009" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070473005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100039003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libf2c is earlier than 0:3.2.3-60" id="oval:com.redhat.rhsa:tst:20100039011" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070473006"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100039003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="gcc is earlier than 0:3.2.3-60" id="oval:com.redhat.rhsa:tst:20100039013" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070473007"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100039001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="gcc-java is earlier than 0:3.2.3-60" id="oval:com.redhat.rhsa:tst:20100039015" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070473010"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100039001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="gcc-g77 is earlier than 0:3.2.3-60" id="oval:com.redhat.rhsa:tst:20100039017" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070473008"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100039001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libgcj-devel is earlier than 0:3.2.3-60" id="oval:com.redhat.rhsa:tst:20100039019" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070473012"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100039001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libstdc++-devel is earlier than 0:3.2.3-60" id="oval:com.redhat.rhsa:tst:20100039021" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070473011"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100039003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libgcc is earlier than 0:3.2.3-60" id="oval:com.redhat.rhsa:tst:20100039023" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070473009"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100039003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="cpp is earlier than 0:3.2.3-60" id="oval:com.redhat.rhsa:tst:20100039025" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070473014"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100039001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="gcc-gnat is earlier than 0:3.2.3-60" id="oval:com.redhat.rhsa:tst:20100039027" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070473013"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100039004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libstdc++ is earlier than 0:3.2.3-60" id="oval:com.redhat.rhsa:tst:20100039029" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070473015"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100039003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="gcc-c++-ppc32 is earlier than 0:3.2.3-60" id="oval:com.redhat.rhsa:tst:20100039031" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070473016"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100039005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="gcc-ppc32 is earlier than 0:3.2.3-60" id="oval:com.redhat.rhsa:tst:20100039033" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070473017"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100039005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libgfortran is earlier than 0:4.1.2-44.EL4_8.1" id="oval:com.redhat.rhsa:tst:20100039036" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20100039019"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100039007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libgfortran is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20100039037" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20100039019"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libgcj4-src is earlier than 0:4.1.2-44.EL4_8.1" id="oval:com.redhat.rhsa:tst:20100039038" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20100039020"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100039008"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libgcj4-src is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20100039039" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20100039020"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="gcc4-java is earlier than 0:4.1.2-44.EL4_8.1" id="oval:com.redhat.rhsa:tst:20100039040" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20100039021"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100039008"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="gcc4-java is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20100039041" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20100039021"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libgcj4 is earlier than 0:4.1.2-44.EL4_8.1" id="oval:com.redhat.rhsa:tst:20100039042" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20100039022"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100039007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libgcj4 is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20100039043" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20100039022"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libgomp is earlier than 0:4.1.2-44.EL4_8.1" id="oval:com.redhat.rhsa:tst:20100039044" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20100039023"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100039007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libgomp is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20100039045" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20100039023"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libmudflap is earlier than 0:4.1.2-44.EL4_8.1" id="oval:com.redhat.rhsa:tst:20100039046" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20100039024"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100039007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libmudflap is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20100039047" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20100039024"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="gcc4-gfortran is earlier than 0:4.1.2-44.EL4_8.1" id="oval:com.redhat.rhsa:tst:20100039048" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20100039025"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100039008"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="gcc4-gfortran is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20100039049" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20100039025"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="gcc4 is earlier than 0:4.1.2-44.EL4_8.1" id="oval:com.redhat.rhsa:tst:20100039050" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20100039026"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100039008"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="gcc4 is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20100039051" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20100039026"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libmudflap-devel is earlier than 0:4.1.2-44.EL4_8.1" id="oval:com.redhat.rhsa:tst:20100039052" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20100039027"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100039008"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libmudflap-devel is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20100039053" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20100039027"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="gcc4-c++ is earlier than 0:4.1.2-44.EL4_8.1" id="oval:com.redhat.rhsa:tst:20100039054" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20100039028"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100039008"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="gcc4-c++ is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20100039055" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20100039028"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libgcj4-devel is earlier than 0:4.1.2-44.EL4_8.1" id="oval:com.redhat.rhsa:tst:20100039056" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20100039029"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100039008"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libgcj4-devel is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20100039057" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20100039029"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libgcj-devel is earlier than 0:3.4.6-11.el4_8.1" id="oval:com.redhat.rhsa:tst:20100039058" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070473012"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100039009"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libgnat is earlier than 0:3.4.6-11.el4_8.1" id="oval:com.redhat.rhsa:tst:20100039059" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070473004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100039010"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="gcc-gnat is earlier than 0:3.4.6-11.el4_8.1" id="oval:com.redhat.rhsa:tst:20100039060" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070473013"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100039010"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libstdc++ is earlier than 0:3.4.6-11.el4_8.1" id="oval:com.redhat.rhsa:tst:20100039061" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070473015"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100039011"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libobjc is earlier than 0:3.4.6-11.el4_8.1" id="oval:com.redhat.rhsa:tst:20100039062" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070473005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100039011"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="cpp is earlier than 0:3.4.6-11.el4_8.1" id="oval:com.redhat.rhsa:tst:20100039063" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070473014"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100039009"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="gcc-objc is earlier than 0:3.4.6-11.el4_8.1" id="oval:com.redhat.rhsa:tst:20100039064" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070473001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100039009"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libf2c is earlier than 0:3.4.6-11.el4_8.1" id="oval:com.redhat.rhsa:tst:20100039065" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070473006"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100039011"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="gcc-java is earlier than 0:3.4.6-11.el4_8.1" id="oval:com.redhat.rhsa:tst:20100039066" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070473010"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100039009"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libgcj is earlier than 0:3.4.6-11.el4_8.1" id="oval:com.redhat.rhsa:tst:20100039067" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070473003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100039011"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="gcc is earlier than 0:3.4.6-11.el4_8.1" id="oval:com.redhat.rhsa:tst:20100039068" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070473007"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100039009"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="gcc-c++ is earlier than 0:3.4.6-11.el4_8.1" id="oval:com.redhat.rhsa:tst:20100039069" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070473002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100039009"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="gcc-g77 is earlier than 0:3.4.6-11.el4_8.1" id="oval:com.redhat.rhsa:tst:20100039070" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070473008"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100039009"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libstdc++-devel is earlier than 0:3.4.6-11.el4_8.1" id="oval:com.redhat.rhsa:tst:20100039071" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070473011"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100039011"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libgcc is earlier than 0:3.4.6-11.el4_8.1" id="oval:com.redhat.rhsa:tst:20100039072" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070473009"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100039011"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="gcc-c++-ppc32 is earlier than 0:3.4.6-11.el4_8.1" id="oval:com.redhat.rhsa:tst:20100039073" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070473016"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100039012"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="gcc-ppc32 is earlier than 0:3.4.6-11.el4_8.1" id="oval:com.redhat.rhsa:tst:20100039074" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070473017"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100039012"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libstdc++-devel is earlier than 0:4.1.2-46.el5_4.2" id="oval:com.redhat.rhsa:tst:20100039076" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070473011"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100039014"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libstdc++-devel is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20100039077" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070473011"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libstdc++ is earlier than 0:4.1.2-46.el5_4.2" id="oval:com.redhat.rhsa:tst:20100039078" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070473015"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100039014"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libstdc++ is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20100039079" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070473015"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libmudflap-devel is earlier than 0:4.1.2-46.el5_4.2" id="oval:com.redhat.rhsa:tst:20100039080" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20100039027"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100039014"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libmudflap-devel is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20100039081" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20100039027"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libobjc is earlier than 0:4.1.2-46.el5_4.2" id="oval:com.redhat.rhsa:tst:20100039082" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070473005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100039014"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libobjc is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20100039083" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070473005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libgnat is earlier than 0:4.1.2-46.el5_4.2" id="oval:com.redhat.rhsa:tst:20100039084" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070473004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100039016"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libgnat is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20100039085" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070473004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="gcc-gnat is earlier than 0:4.1.2-46.el5_4.2" id="oval:com.redhat.rhsa:tst:20100039086" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070473013"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100039016"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="gcc-gnat is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20100039087" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070473013"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="gcc-objc++ is earlier than 0:4.1.2-46.el5_4.2" id="oval:com.redhat.rhsa:tst:20100039088" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20100039030"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100039017"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="gcc-objc++ is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20100039089" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20100039030"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="gcc-objc is earlier than 0:4.1.2-46.el5_4.2" id="oval:com.redhat.rhsa:tst:20100039090" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070473001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100039017"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="gcc-objc is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20100039091" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070473001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="gcc-java is earlier than 0:4.1.2-46.el5_4.2" id="oval:com.redhat.rhsa:tst:20100039092" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070473010"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100039017"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="gcc-java is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20100039093" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070473010"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libgcj is earlier than 0:4.1.2-46.el5_4.2" id="oval:com.redhat.rhsa:tst:20100039094" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070473003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100039014"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libgcj is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20100039095" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070473003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="cpp is earlier than 0:4.1.2-46.el5_4.2" id="oval:com.redhat.rhsa:tst:20100039096" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070473014"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100039017"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="cpp is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20100039097" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070473014"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libgcj-src is earlier than 0:4.1.2-46.el5_4.2" id="oval:com.redhat.rhsa:tst:20100039098" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20100039031"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100039017"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libgcj-src is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20100039099" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20100039031"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libmudflap is earlier than 0:4.1.2-46.el5_4.2" id="oval:com.redhat.rhsa:tst:20100039100" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20100039024"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100039014"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libmudflap is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20100039101" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20100039024"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libgcc is earlier than 0:4.1.2-46.el5_4.2" id="oval:com.redhat.rhsa:tst:20100039102" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070473009"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100039014"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libgcc is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20100039103" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070473009"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libgcj-devel is earlier than 0:4.1.2-46.el5_4.2" id="oval:com.redhat.rhsa:tst:20100039104" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070473012"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100039014"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libgcj-devel is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20100039105" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070473012"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="gcc is earlier than 0:4.1.2-46.el5_4.2" id="oval:com.redhat.rhsa:tst:20100039106" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070473007"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100039017"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="gcc is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20100039107" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070473007"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libgfortran is earlier than 0:4.1.2-46.el5_4.2" id="oval:com.redhat.rhsa:tst:20100039108" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20100039019"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100039014"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libgfortran is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20100039109" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20100039019"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="gcc-c++ is earlier than 0:4.1.2-46.el5_4.2" id="oval:com.redhat.rhsa:tst:20100039110" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070473002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100039017"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="gcc-c++ is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20100039111" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070473002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="gcc-gfortran is earlier than 0:4.1.2-46.el5_4.2" id="oval:com.redhat.rhsa:tst:20100039112" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20100039032"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100039017"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="gcc-gfortran is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20100039113" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20100039032"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-imap is earlier than 0:4.3.2-54.ent" id="oval:com.redhat.rhsa:tst:20100040001" version="643">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100040001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-devel is earlier than 0:4.3.2-54.ent" id="oval:com.redhat.rhsa:tst:20100040003" version="643">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100040001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php is earlier than 0:4.3.2-54.ent" id="oval:com.redhat.rhsa:tst:20100040005" version="643">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100040001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-pgsql is earlier than 0:4.3.2-54.ent" id="oval:com.redhat.rhsa:tst:20100040007" version="643">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276006"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100040001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-odbc is earlier than 0:4.3.2-54.ent" id="oval:com.redhat.rhsa:tst:20100040009" version="643">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100040001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-mysql is earlier than 0:4.3.2-54.ent" id="oval:com.redhat.rhsa:tst:20100040011" version="643">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276007"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100040001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-ldap is earlier than 0:4.3.2-54.ent" id="oval:com.redhat.rhsa:tst:20100040013" version="643">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100040001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-snmp is earlier than 0:4.3.9-3.29" id="oval:com.redhat.rhsa:tst:20100040016" version="643">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276010"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100040004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-ncurses is earlier than 0:4.3.9-3.29" id="oval:com.redhat.rhsa:tst:20100040018" version="643">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276011"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100040004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-domxml is earlier than 0:4.3.9-3.29" id="oval:com.redhat.rhsa:tst:20100040020" version="643">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276014"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100040004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-pear is earlier than 0:4.3.9-3.29" id="oval:com.redhat.rhsa:tst:20100040022" version="643">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276012"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100040004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-mbstring is earlier than 0:4.3.9-3.29" id="oval:com.redhat.rhsa:tst:20100040024" version="643">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276013"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100040004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-gd is earlier than 0:4.3.9-3.29" id="oval:com.redhat.rhsa:tst:20100040026" version="643">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276015"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100040004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-ldap is earlier than 0:4.3.9-3.29" id="oval:com.redhat.rhsa:tst:20100040028" version="643">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100040004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-devel is earlier than 0:4.3.9-3.29" id="oval:com.redhat.rhsa:tst:20100040029" version="643">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100040004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-imap is earlier than 0:4.3.9-3.29" id="oval:com.redhat.rhsa:tst:20100040030" version="643">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100040004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-pgsql is earlier than 0:4.3.9-3.29" id="oval:com.redhat.rhsa:tst:20100040031" version="643">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276006"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100040004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-xmlrpc is earlier than 0:4.3.9-3.29" id="oval:com.redhat.rhsa:tst:20100040032" version="643">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276009"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100040004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-odbc is earlier than 0:4.3.9-3.29" id="oval:com.redhat.rhsa:tst:20100040034" version="643">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100040004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php is earlier than 0:4.3.9-3.29" id="oval:com.redhat.rhsa:tst:20100040035" version="643">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100040004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-mysql is earlier than 0:4.3.9-3.29" id="oval:com.redhat.rhsa:tst:20100040036" version="643">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276007"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100040004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-devel is earlier than 0:5.1.6-24.el5_4.5" id="oval:com.redhat.rhsa:tst:20100040038" version="643">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100040006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-dba is earlier than 0:5.1.6-24.el5_4.5" id="oval:com.redhat.rhsa:tst:20100040040" version="643">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080544015"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100040006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-xmlrpc is earlier than 0:5.1.6-24.el5_4.5" id="oval:com.redhat.rhsa:tst:20100040042" version="643">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276009"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100040006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-snmp is earlier than 0:5.1.6-24.el5_4.5" id="oval:com.redhat.rhsa:tst:20100040044" version="643">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276010"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100040006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-bcmath is earlier than 0:5.1.6-24.el5_4.5" id="oval:com.redhat.rhsa:tst:20100040046" version="643">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080544014"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100040006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-mbstring is earlier than 0:5.1.6-24.el5_4.5" id="oval:com.redhat.rhsa:tst:20100040048" version="643">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276013"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100040006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-pdo is earlier than 0:5.1.6-24.el5_4.5" id="oval:com.redhat.rhsa:tst:20100040050" version="643">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080544011"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100040006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-gd is earlier than 0:5.1.6-24.el5_4.5" id="oval:com.redhat.rhsa:tst:20100040052" version="643">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276015"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100040006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-cli is earlier than 0:5.1.6-24.el5_4.5" id="oval:com.redhat.rhsa:tst:20100040054" version="643">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080544019"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100040006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-soap is earlier than 0:5.1.6-24.el5_4.5" id="oval:com.redhat.rhsa:tst:20100040056" version="643">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080544018"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100040006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-ldap is earlier than 0:5.1.6-24.el5_4.5" id="oval:com.redhat.rhsa:tst:20100040058" version="643">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100040006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-imap is earlier than 0:5.1.6-24.el5_4.5" id="oval:com.redhat.rhsa:tst:20100040060" version="643">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100040006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-xml is earlier than 0:5.1.6-24.el5_4.5" id="oval:com.redhat.rhsa:tst:20100040062" version="643">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080544020"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100040006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-odbc is earlier than 0:5.1.6-24.el5_4.5" id="oval:com.redhat.rhsa:tst:20100040064" version="643">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100040006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-common is earlier than 0:5.1.6-24.el5_4.5" id="oval:com.redhat.rhsa:tst:20100040066" version="643">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080544017"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100040006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-ncurses is earlier than 0:5.1.6-24.el5_4.5" id="oval:com.redhat.rhsa:tst:20100040068" version="643">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276011"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100040006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php is earlier than 0:5.1.6-24.el5_4.5" id="oval:com.redhat.rhsa:tst:20100040070" version="643">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100040006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-pgsql is earlier than 0:5.1.6-24.el5_4.5" id="oval:com.redhat.rhsa:tst:20100040072" version="643">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276006"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100040006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="php-mysql is earlier than 0:5.1.6-24.el5_4.5" id="oval:com.redhat.rhsa:tst:20100040074" version="643">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060276007"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100040006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="gzip is earlier than 0:1.3.3-15.rhel3" id="oval:com.redhat.rhsa:tst:20100061001" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060667001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100061001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="gzip is earlier than 0:1.3.3-18.el4_8.1" id="oval:com.redhat.rhsa:tst:20100061004" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060667001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100061004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="gzip is earlier than 0:1.3.5-11.el5_4.1" id="oval:com.redhat.rhsa:tst:20100061006" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060667001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100061006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="gzip is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20100061007" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060667001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-libs is earlier than 0:1.1.2-46.2.0.EL3" id="oval:com.redhat.rhsa:tst:20100101001" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060573002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100101001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org is earlier than 0:1.1.2-46.2.0.EL3" id="oval:com.redhat.rhsa:tst:20100101003" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060573003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100101001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-i18n is earlier than 0:1.1.2-46.2.0.EL3" id="oval:com.redhat.rhsa:tst:20100101005" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060573001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100101001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org is earlier than 0:1.1.5-10.6.0.7.EL4.3" id="oval:com.redhat.rhsa:tst:20100101008" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060573003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100101004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-i18n is earlier than 0:1.1.5-10.6.0.7.EL4.3" id="oval:com.redhat.rhsa:tst:20100101009" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060573001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100101004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-kde is earlier than 0:1.1.5-10.6.0.7.EL4.3" id="oval:com.redhat.rhsa:tst:20100101010" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060573005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100101004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-libs is earlier than 0:1.1.5-10.6.0.7.EL4.3" id="oval:com.redhat.rhsa:tst:20100101012" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060573002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100101004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-bn is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" id="oval:com.redhat.rhsa:tst:20100101013" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406033"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100101005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-cy_GB is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" id="oval:com.redhat.rhsa:tst:20100101015" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406035"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100101005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-graphicfilter is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" id="oval:com.redhat.rhsa:tst:20100101017" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406019"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100101005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-el_GR is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" id="oval:com.redhat.rhsa:tst:20100101019" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406023"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100101005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-de is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" id="oval:com.redhat.rhsa:tst:20100101021" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406007"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100101005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-it is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" id="oval:com.redhat.rhsa:tst:20100101023" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406046"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100101005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-hi_IN is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" id="oval:com.redhat.rhsa:tst:20100101025" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406018"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100101005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-bg_BG is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" id="oval:com.redhat.rhsa:tst:20100101027" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406006"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100101005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-sk_SK is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" id="oval:com.redhat.rhsa:tst:20100101029" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406038"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100101005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-da_DK is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" id="oval:com.redhat.rhsa:tst:20100101031" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406049"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100101005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-pl_PL is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" id="oval:com.redhat.rhsa:tst:20100101033" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406040"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100101005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-emailmerge is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" id="oval:com.redhat.rhsa:tst:20100101035" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406052"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100101005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-pa_IN is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" id="oval:com.redhat.rhsa:tst:20100101037" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406047"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100101005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-base is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" id="oval:com.redhat.rhsa:tst:20100101039" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406050"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100101005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-ko_KR is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" id="oval:com.redhat.rhsa:tst:20100101041" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406044"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100101005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-xsltfilter is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" id="oval:com.redhat.rhsa:tst:20100101043" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406030"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100101005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-ru is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" id="oval:com.redhat.rhsa:tst:20100101045" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406029"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100101005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-ga_IE is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" id="oval:com.redhat.rhsa:tst:20100101047" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406056"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100101005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-zu_ZA is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" id="oval:com.redhat.rhsa:tst:20100101049" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406055"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100101005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-sv is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" id="oval:com.redhat.rhsa:tst:20100101051" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406059"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100101005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-eu_ES is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" id="oval:com.redhat.rhsa:tst:20100101053" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406017"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100101005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-draw is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" id="oval:com.redhat.rhsa:tst:20100101055" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406060"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100101005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-nl is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" id="oval:com.redhat.rhsa:tst:20100101057" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406021"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100101005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-fr is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" id="oval:com.redhat.rhsa:tst:20100101059" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406061"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100101005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-sl_SI is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" id="oval:com.redhat.rhsa:tst:20100101061" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406022"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100101005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-nn_NO is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" id="oval:com.redhat.rhsa:tst:20100101063" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406062"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100101005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-hu_HU is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" id="oval:com.redhat.rhsa:tst:20100101065" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406012"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100101005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-hr_HR is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" id="oval:com.redhat.rhsa:tst:20100101067" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406039"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100101005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-pt_PT is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" id="oval:com.redhat.rhsa:tst:20100101069" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406009"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100101005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-fi_FI is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" id="oval:com.redhat.rhsa:tst:20100101071" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406011"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100101005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-et_EE is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" id="oval:com.redhat.rhsa:tst:20100101073" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406008"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100101005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-zh_TW is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" id="oval:com.redhat.rhsa:tst:20100101075" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406041"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100101005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-cs_CZ is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" id="oval:com.redhat.rhsa:tst:20100101077" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406026"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100101005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-th_TH is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" id="oval:com.redhat.rhsa:tst:20100101079" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406013"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100101005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-lt_LT is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" id="oval:com.redhat.rhsa:tst:20100101081" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406042"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100101005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-tr_TR is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" id="oval:com.redhat.rhsa:tst:20100101083" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406010"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100101005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-gl_ES is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" id="oval:com.redhat.rhsa:tst:20100101085" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406058"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100101005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-core is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" id="oval:com.redhat.rhsa:tst:20100101087" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406016"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100101005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-pyuno is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" id="oval:com.redhat.rhsa:tst:20100101089" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406015"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100101005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-ms_MY is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" id="oval:com.redhat.rhsa:tst:20100101091" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406027"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100101005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-ca_ES is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" id="oval:com.redhat.rhsa:tst:20100101093" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406014"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100101005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-ar is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" id="oval:com.redhat.rhsa:tst:20100101095" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406028"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100101005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-ja_JP is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" id="oval:com.redhat.rhsa:tst:20100101097" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406037"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100101005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-writer is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" id="oval:com.redhat.rhsa:tst:20100101099" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406036"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100101005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-zh_CN is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" id="oval:com.redhat.rhsa:tst:20100101101" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406020"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100101005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-impress is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" id="oval:com.redhat.rhsa:tst:20100101103" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406043"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100101005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-ta_IN is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" id="oval:com.redhat.rhsa:tst:20100101105" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406048"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100101005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-sr_CS is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" id="oval:com.redhat.rhsa:tst:20100101107" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406025"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100101005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-es is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" id="oval:com.redhat.rhsa:tst:20100101109" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406051"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100101005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-nb_NO is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" id="oval:com.redhat.rhsa:tst:20100101111" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406045"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100101005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-calc is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" id="oval:com.redhat.rhsa:tst:20100101113" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406024"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100101005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-gu_IN is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" id="oval:com.redhat.rhsa:tst:20100101115" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406031"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100101005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-he_IL is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" id="oval:com.redhat.rhsa:tst:20100101117" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406032"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100101005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-af_ZA is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" id="oval:com.redhat.rhsa:tst:20100101119" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406054"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100101005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-testtools is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" id="oval:com.redhat.rhsa:tst:20100101121" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406057"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100101005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-pt_BR is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" id="oval:com.redhat.rhsa:tst:20100101123" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406053"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100101005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-math is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" id="oval:com.redhat.rhsa:tst:20100101125" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406034"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100101005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-javafilter is earlier than 1:2.0.4-5.7.0.6.1.el4_8.3" id="oval:com.redhat.rhsa:tst:20100101127" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406063"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100101005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-bn is earlier than 1:2.3.0-6.11.el5_4.4" id="oval:com.redhat.rhsa:tst:20100101130" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406104"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100101007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-nl is earlier than 1:2.3.0-6.11.el5_4.4" id="oval:com.redhat.rhsa:tst:20100101132" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406102"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100101007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-graphicfilter is earlier than 1:2.3.0-6.11.el5_4.4" id="oval:com.redhat.rhsa:tst:20100101134" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406070"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100101007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-xsltfilter is earlier than 1:2.3.0-6.11.el5_4.4" id="oval:com.redhat.rhsa:tst:20100101136" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406088"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100101007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-xh_ZA is earlier than 1:2.3.0-6.11.el5_4.4" id="oval:com.redhat.rhsa:tst:20100101138" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406090"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100101007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-et_EE is earlier than 1:2.3.0-6.11.el5_4.4" id="oval:com.redhat.rhsa:tst:20100101140" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406098"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100101007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-ml_IN is earlier than 1:2.3.0-6.11.el5_4.4" id="oval:com.redhat.rhsa:tst:20100101142" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406114"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100101007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-ar is earlier than 1:2.3.0-6.11.el5_4.4" id="oval:com.redhat.rhsa:tst:20100101144" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406107"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100101007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-zh_TW is earlier than 1:2.3.0-6.11.el5_4.4" id="oval:com.redhat.rhsa:tst:20100101146" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406108"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100101007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-ta_IN is earlier than 1:2.3.0-6.11.el5_4.4" id="oval:com.redhat.rhsa:tst:20100101148" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406112"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100101007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-pyuno is earlier than 1:2.3.0-6.11.el5_4.4" id="oval:com.redhat.rhsa:tst:20100101150" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406118"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100101007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-cs_CZ is earlier than 1:2.3.0-6.11.el5_4.4" id="oval:com.redhat.rhsa:tst:20100101152" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406067"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100101007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-st_ZA is earlier than 1:2.3.0-6.11.el5_4.4" id="oval:com.redhat.rhsa:tst:20100101154" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406135"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100101007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-sr_CS is earlier than 1:2.3.0-6.11.el5_4.4" id="oval:com.redhat.rhsa:tst:20100101156" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406115"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100101007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-ca_ES is earlier than 1:2.3.0-6.11.el5_4.4" id="oval:com.redhat.rhsa:tst:20100101158" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406081"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100101007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-or_IN is earlier than 1:2.3.0-6.11.el5_4.4" id="oval:com.redhat.rhsa:tst:20100101160" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406124"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100101007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-sk_SK is earlier than 1:2.3.0-6.11.el5_4.4" id="oval:com.redhat.rhsa:tst:20100101162" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406064"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100101007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-hi_IN is earlier than 1:2.3.0-6.11.el5_4.4" id="oval:com.redhat.rhsa:tst:20100101164" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406066"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100101007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-impress is earlier than 1:2.3.0-6.11.el5_4.4" id="oval:com.redhat.rhsa:tst:20100101166" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406129"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100101007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-hr_HR is earlier than 1:2.3.0-6.11.el5_4.4" id="oval:com.redhat.rhsa:tst:20100101168" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406080"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100101007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-ts_ZA is earlier than 1:2.3.0-6.11.el5_4.4" id="oval:com.redhat.rhsa:tst:20100101170" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406125"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100101007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-ko_KR is earlier than 1:2.3.0-6.11.el5_4.4" id="oval:com.redhat.rhsa:tst:20100101172" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406085"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100101007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-tn_ZA is earlier than 1:2.3.0-6.11.el5_4.4" id="oval:com.redhat.rhsa:tst:20100101174" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406094"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100101007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-ru is earlier than 1:2.3.0-6.11.el5_4.4" id="oval:com.redhat.rhsa:tst:20100101176" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406136"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100101007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-bg_BG is earlier than 1:2.3.0-6.11.el5_4.4" id="oval:com.redhat.rhsa:tst:20100101178" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406119"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100101007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-ja_JP is earlier than 1:2.3.0-6.11.el5_4.4" id="oval:com.redhat.rhsa:tst:20100101180" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406093"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100101007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-sdk-doc is earlier than 1:2.3.0-6.11.el5_4.4" id="oval:com.redhat.rhsa:tst:20100101182" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080939137"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100101007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-fr is earlier than 1:2.3.0-6.11.el5_4.4" id="oval:com.redhat.rhsa:tst:20100101184" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406086"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100101007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-as_IN is earlier than 1:2.3.0-6.11.el5_4.4" id="oval:com.redhat.rhsa:tst:20100101186" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406105"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100101007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-lt_LT is earlier than 1:2.3.0-6.11.el5_4.4" id="oval:com.redhat.rhsa:tst:20100101188" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406091"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100101007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-da_DK is earlier than 1:2.3.0-6.11.el5_4.4" id="oval:com.redhat.rhsa:tst:20100101190" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406113"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100101007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-de is earlier than 1:2.3.0-6.11.el5_4.4" id="oval:com.redhat.rhsa:tst:20100101192" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406109"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100101007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-draw is earlier than 1:2.3.0-6.11.el5_4.4" id="oval:com.redhat.rhsa:tst:20100101194" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406101"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100101007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-fi_FI is earlier than 1:2.3.0-6.11.el5_4.4" id="oval:com.redhat.rhsa:tst:20100101196" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406126"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100101007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-pt_BR is earlier than 1:2.3.0-6.11.el5_4.4" id="oval:com.redhat.rhsa:tst:20100101198" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406065"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100101007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-nso_ZA is earlier than 1:2.3.0-6.11.el5_4.4" id="oval:com.redhat.rhsa:tst:20100101200" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406092"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100101007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-math is earlier than 1:2.3.0-6.11.el5_4.4" id="oval:com.redhat.rhsa:tst:20100101202" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406082"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100101007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-gl_ES is earlier than 1:2.3.0-6.11.el5_4.4" id="oval:com.redhat.rhsa:tst:20100101204" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406075"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100101007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-sv is earlier than 1:2.3.0-6.11.el5_4.4" id="oval:com.redhat.rhsa:tst:20100101206" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406130"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100101007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-el_GR is earlier than 1:2.3.0-6.11.el5_4.4" id="oval:com.redhat.rhsa:tst:20100101208" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406121"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100101007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-ss_ZA is earlier than 1:2.3.0-6.11.el5_4.4" id="oval:com.redhat.rhsa:tst:20100101210" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406074"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100101007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-sdk is earlier than 1:2.3.0-6.11.el5_4.4" id="oval:com.redhat.rhsa:tst:20100101212" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080939084"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100101007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-eu_ES is earlier than 1:2.3.0-6.11.el5_4.4" id="oval:com.redhat.rhsa:tst:20100101214" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406127"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100101007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-cy_GB is earlier than 1:2.3.0-6.11.el5_4.4" id="oval:com.redhat.rhsa:tst:20100101216" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406087"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100101007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-core is earlier than 1:2.3.0-6.11.el5_4.4" id="oval:com.redhat.rhsa:tst:20100101218" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406123"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100101007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-ga_IE is earlier than 1:2.3.0-6.11.el5_4.4" id="oval:com.redhat.rhsa:tst:20100101220" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406077"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100101007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-th_TH is earlier than 1:2.3.0-6.11.el5_4.4" id="oval:com.redhat.rhsa:tst:20100101222" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406116"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100101007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-pa_IN is earlier than 1:2.3.0-6.11.el5_4.4" id="oval:com.redhat.rhsa:tst:20100101224" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406106"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100101007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-testtools is earlier than 1:2.3.0-6.11.el5_4.4" id="oval:com.redhat.rhsa:tst:20100101226" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406078"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100101007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-headless is earlier than 1:2.3.0-6.11.el5_4.4" id="oval:com.redhat.rhsa:tst:20100101228" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080939066"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100101007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-mr_IN is earlier than 1:2.3.0-6.11.el5_4.4" id="oval:com.redhat.rhsa:tst:20100101230" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406095"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100101007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-hu_HU is earlier than 1:2.3.0-6.11.el5_4.4" id="oval:com.redhat.rhsa:tst:20100101232" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406079"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100101007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-nb_NO is earlier than 1:2.3.0-6.11.el5_4.4" id="oval:com.redhat.rhsa:tst:20100101234" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406073"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100101007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-gu_IN is earlier than 1:2.3.0-6.11.el5_4.4" id="oval:com.redhat.rhsa:tst:20100101236" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406083"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100101007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-zu_ZA is earlier than 1:2.3.0-6.11.el5_4.4" id="oval:com.redhat.rhsa:tst:20100101238" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406103"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100101007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-pl_PL is earlier than 1:2.3.0-6.11.el5_4.4" id="oval:com.redhat.rhsa:tst:20100101240" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406110"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100101007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-calc is earlier than 1:2.3.0-6.11.el5_4.4" id="oval:com.redhat.rhsa:tst:20100101242" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406131"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100101007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-zh_CN is earlier than 1:2.3.0-6.11.el5_4.4" id="oval:com.redhat.rhsa:tst:20100101244" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406076"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100101007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-it is earlier than 1:2.3.0-6.11.el5_4.4" id="oval:com.redhat.rhsa:tst:20100101246" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406097"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100101007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-ur is earlier than 1:2.3.0-6.11.el5_4.4" id="oval:com.redhat.rhsa:tst:20100101248" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406117"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100101007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-nr_ZA is earlier than 1:2.3.0-6.11.el5_4.4" id="oval:com.redhat.rhsa:tst:20100101250" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406068"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100101007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-base is earlier than 1:2.3.0-6.11.el5_4.4" id="oval:com.redhat.rhsa:tst:20100101252" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406089"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100101007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-ve_ZA is earlier than 1:2.3.0-6.11.el5_4.4" id="oval:com.redhat.rhsa:tst:20100101254" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406069"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100101007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-emailmerge is earlier than 1:2.3.0-6.11.el5_4.4" id="oval:com.redhat.rhsa:tst:20100101256" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406099"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100101007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-pt_PT is earlier than 1:2.3.0-6.11.el5_4.4" id="oval:com.redhat.rhsa:tst:20100101258" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406100"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100101007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-kn_IN is earlier than 1:2.3.0-6.11.el5_4.4" id="oval:com.redhat.rhsa:tst:20100101260" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406134"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100101007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-javafilter is earlier than 1:2.3.0-6.11.el5_4.4" id="oval:com.redhat.rhsa:tst:20100101262" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406133"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100101007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-tr_TR is earlier than 1:2.3.0-6.11.el5_4.4" id="oval:com.redhat.rhsa:tst:20100101264" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406071"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100101007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-te_IN is earlier than 1:2.3.0-6.11.el5_4.4" id="oval:com.redhat.rhsa:tst:20100101266" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406096"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100101007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-he_IL is earlier than 1:2.3.0-6.11.el5_4.4" id="oval:com.redhat.rhsa:tst:20100101268" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406120"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100101007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-sl_SI is earlier than 1:2.3.0-6.11.el5_4.4" id="oval:com.redhat.rhsa:tst:20100101270" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406132"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100101007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-ms_MY is earlier than 1:2.3.0-6.11.el5_4.4" id="oval:com.redhat.rhsa:tst:20100101272" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406084"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100101007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-nn_NO is earlier than 1:2.3.0-6.11.el5_4.4" id="oval:com.redhat.rhsa:tst:20100101274" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406111"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100101007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-writer is earlier than 1:2.3.0-6.11.el5_4.4" id="oval:com.redhat.rhsa:tst:20100101276" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406072"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100101007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-es is earlier than 1:2.3.0-6.11.el5_4.4" id="oval:com.redhat.rhsa:tst:20100101278" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406128"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100101007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-langpack-af_ZA is earlier than 1:2.3.0-6.11.el5_4.4" id="oval:com.redhat.rhsa:tst:20100101280" version="645">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406122"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100101007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-mail is earlier than 0:1.0.9-0.50.el3" id="oval:com.redhat.rhsa:tst:20100113001" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578010"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100113001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-nss is earlier than 0:1.0.9-0.50.el3" id="oval:com.redhat.rhsa:tst:20100113003" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578008"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100113001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-chat is earlier than 0:1.0.9-0.50.el3" id="oval:com.redhat.rhsa:tst:20100113005" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100113001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.50.el3" id="oval:com.redhat.rhsa:tst:20100113007" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100113001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.50.el3" id="oval:com.redhat.rhsa:tst:20100113009" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100113001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-devel is earlier than 0:1.0.9-0.50.el3" id="oval:com.redhat.rhsa:tst:20100113011" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578007"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100113001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey is earlier than 0:1.0.9-0.50.el3" id="oval:com.redhat.rhsa:tst:20100113013" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578009"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100113001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.50.el3" id="oval:com.redhat.rhsa:tst:20100113015" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578006"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100113001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.50.el3" id="oval:com.redhat.rhsa:tst:20100113017" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100113001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-nspr is earlier than 0:1.0.9-0.50.el3" id="oval:com.redhat.rhsa:tst:20100113019" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100113001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-chat is earlier than 0:1.0.9-52.el4_8" id="oval:com.redhat.rhsa:tst:20100113022" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100113004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-devel is earlier than 0:1.0.9-52.el4_8" id="oval:com.redhat.rhsa:tst:20100113023" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578007"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100113004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey is earlier than 0:1.0.9-52.el4_8" id="oval:com.redhat.rhsa:tst:20100113024" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578009"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100113004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-js-debugger is earlier than 0:1.0.9-52.el4_8" id="oval:com.redhat.rhsa:tst:20100113025" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100113004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-dom-inspector is earlier than 0:1.0.9-52.el4_8" id="oval:com.redhat.rhsa:tst:20100113026" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100113004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-mail is earlier than 0:1.0.9-52.el4_8" id="oval:com.redhat.rhsa:tst:20100113027" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578010"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100113004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="pango-devel is earlier than 0:1.2.5-10" id="oval:com.redhat.rhsa:tst:20100140001" version="640">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20090476001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100140001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="pango is earlier than 0:1.2.5-10" id="oval:com.redhat.rhsa:tst:20100140003" version="640">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20090476002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100140003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="evolution28-pango is earlier than 0:1.14.9-13.el4_8" id="oval:com.redhat.rhsa:tst:20100140006" version="640">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20090476005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100140005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="evolution28-pango-devel is earlier than 0:1.14.9-13.el4_8" id="oval:com.redhat.rhsa:tst:20100140008" version="640">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20090476004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100140005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="pango-devel is earlier than 0:1.6.0-16.el4_8" id="oval:com.redhat.rhsa:tst:20100140010" version="640">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20090476001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100140006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="pango is earlier than 0:1.6.0-16.el4_8" id="oval:com.redhat.rhsa:tst:20100140011" version="640">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20090476002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100140007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="pango-devel is earlier than 0:1.14.9-8.el5" id="oval:com.redhat.rhsa:tst:20100140013" version="640">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20090476001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100140009"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="pango is earlier than 0:1.14.9-8.el5" id="oval:com.redhat.rhsa:tst:20100140015" version="640">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20090476002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100140009"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="tar is earlier than 0:1.13.25-16.RHEL3" id="oval:com.redhat.rhsa:tst:20100142001" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060195001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100142001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="cpio is earlier than 0:2.5-6.RHEL3" id="oval:com.redhat.rhsa:tst:20100145001" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20100145001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100145001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="cpio is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20100145002" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20100145001"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openssl-perl is earlier than 0:0.9.7a-33.26" id="oval:com.redhat.rhsa:tst:20100163001" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060661002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100163001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openssl is earlier than 0:0.9.7a-33.26" id="oval:com.redhat.rhsa:tst:20100163003" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060661003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100163003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openssl-devel is earlier than 0:0.9.7a-33.26" id="oval:com.redhat.rhsa:tst:20100163005" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060661004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100163001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openssl-perl is earlier than 0:0.9.7a-43.17.el4_8.5" id="oval:com.redhat.rhsa:tst:20100163008" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060661002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100163005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openssl is earlier than 0:0.9.7a-43.17.el4_8.5" id="oval:com.redhat.rhsa:tst:20100163009" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060661003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100163006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openssl-devel is earlier than 0:0.9.7a-43.17.el4_8.5" id="oval:com.redhat.rhsa:tst:20100163010" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060661004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100163007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openssl096b is earlier than 0:0.9.6b-16.50" id="oval:com.redhat.rhsa:tst:20100173001" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060661001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100173001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openssl096b is earlier than 0:0.9.6b-22.46.el4_8.1" id="oval:com.redhat.rhsa:tst:20100173004" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060661001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100173004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="curl-devel is earlier than 0:7.10.6-11.rhel3" id="oval:com.redhat.rhsa:tst:20100329001" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20090341001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100329001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="curl is earlier than 0:7.10.6-11.rhel3" id="oval:com.redhat.rhsa:tst:20100329003" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20090341002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100329003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="curl is earlier than 0:7.12.1-11.1.el4_8.3" id="oval:com.redhat.rhsa:tst:20100329006" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20090341002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100329005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="curl-devel is earlier than 0:7.12.1-11.1.el4_8.3" id="oval:com.redhat.rhsa:tst:20100329007" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20090341001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100329006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-devel is earlier than 0:1.0.9-0.52.el3" id="oval:com.redhat.rhsa:tst:20100333001" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578007"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100333001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.52.el3" id="oval:com.redhat.rhsa:tst:20100333003" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578006"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100333001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.52.el3" id="oval:com.redhat.rhsa:tst:20100333005" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100333001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.52.el3" id="oval:com.redhat.rhsa:tst:20100333007" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100333001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey is earlier than 0:1.0.9-0.52.el3" id="oval:com.redhat.rhsa:tst:20100333009" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578009"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100333001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.52.el3" id="oval:com.redhat.rhsa:tst:20100333011" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100333001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-mail is earlier than 0:1.0.9-0.52.el3" id="oval:com.redhat.rhsa:tst:20100333013" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578010"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100333001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-nspr is earlier than 0:1.0.9-0.52.el3" id="oval:com.redhat.rhsa:tst:20100333015" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100333001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-chat is earlier than 0:1.0.9-0.52.el3" id="oval:com.redhat.rhsa:tst:20100333017" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100333001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-nss is earlier than 0:1.0.9-0.52.el3" id="oval:com.redhat.rhsa:tst:20100333019" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578008"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100333001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-mail is earlier than 0:1.0.9-54.el4_8" id="oval:com.redhat.rhsa:tst:20100333022" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578010"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100333004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-js-debugger is earlier than 0:1.0.9-54.el4_8" id="oval:com.redhat.rhsa:tst:20100333023" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100333004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-dom-inspector is earlier than 0:1.0.9-54.el4_8" id="oval:com.redhat.rhsa:tst:20100333024" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100333004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-devel is earlier than 0:1.0.9-54.el4_8" id="oval:com.redhat.rhsa:tst:20100333025" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578007"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100333004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey is earlier than 0:1.0.9-54.el4_8" id="oval:com.redhat.rhsa:tst:20100333026" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578009"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100333004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-chat is earlier than 0:1.0.9-54.el4_8" id="oval:com.redhat.rhsa:tst:20100333027" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100333004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="wireshark-gnome is earlier than 0:1.0.11-EL3.6" id="oval:com.redhat.rhsa:tst:20100360001" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060602002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100360001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="wireshark is earlier than 0:1.0.11-EL3.6" id="oval:com.redhat.rhsa:tst:20100360003" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060602001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100360001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="wireshark is earlier than 0:1.0.11-1.el4_8.5" id="oval:com.redhat.rhsa:tst:20100360006" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060602001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100360004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="wireshark-gnome is earlier than 0:1.0.11-1.el4_8.5" id="oval:com.redhat.rhsa:tst:20100360007" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060602002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100360004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="wireshark is earlier than 0:1.0.11-1.el5_5.5" id="oval:com.redhat.rhsa:tst:20100360009" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060602001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100360006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="wireshark-gnome is earlier than 0:1.0.11-1.el5_5.5" id="oval:com.redhat.rhsa:tst:20100360011" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060602002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100360006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="redhat-release is earlier than 0:3AS-13.9.8" id="oval:com.redhat.rhsa:tst:20100386001" version="633">
   <red-def:object object_ref="oval:com.redhat.rhba:obj:20070026002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100386001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="redhat-release is earlier than 0:3ES-13.9.8" id="oval:com.redhat.rhsa:tst:20100386003" version="633">
   <red-def:object object_ref="oval:com.redhat.rhba:obj:20070026002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100386003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="redhat-release is earlier than 0:3WS-13.9.8" id="oval:com.redhat.rhsa:tst:20100386004" version="633">
   <red-def:object object_ref="oval:com.redhat.rhba:obj:20070026002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100386004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="redhat-release is earlier than 0:3Desktop-13.9.8" id="oval:com.redhat.rhsa:tst:20100386005" version="633">
   <red-def:object object_ref="oval:com.redhat.rhba:obj:20070026002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100386005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="tetex-xdvi is earlier than 0:1.0.7-67.19" id="oval:com.redhat.rhsa:tst:20100401001" version="640">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060160002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100401001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="tetex-fonts is earlier than 0:1.0.7-67.19" id="oval:com.redhat.rhsa:tst:20100401003" version="640">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060160006"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100401001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="tetex-dvips is earlier than 0:1.0.7-67.19" id="oval:com.redhat.rhsa:tst:20100401005" version="640">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060160004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100401001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="tetex is earlier than 0:1.0.7-67.19" id="oval:com.redhat.rhsa:tst:20100401007" version="640">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060160001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100401001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="tetex-afm is earlier than 0:1.0.7-67.19" id="oval:com.redhat.rhsa:tst:20100401009" version="640">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060160005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100401001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="tetex-latex is earlier than 0:1.0.7-67.19" id="oval:com.redhat.rhsa:tst:20100401011" version="640">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060160003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100401001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="krb5-server is earlier than 0:1.2.7-72" id="oval:com.redhat.rhsa:tst:20100423001" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070095001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100423001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="krb5-devel is earlier than 0:1.2.7-72" id="oval:com.redhat.rhsa:tst:20100423003" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070095002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100423001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="krb5-workstation is earlier than 0:1.2.7-72" id="oval:com.redhat.rhsa:tst:20100423005" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070095004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100423001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="krb5-libs is earlier than 0:1.2.7-72" id="oval:com.redhat.rhsa:tst:20100423007" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070095003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100423003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="krb5-libs is earlier than 0:1.3.4-62.el4_8.2" id="oval:com.redhat.rhsa:tst:20100423010" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070095003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100423005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="krb5-devel is earlier than 0:1.3.4-62.el4_8.2" id="oval:com.redhat.rhsa:tst:20100423011" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070095002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100423006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="krb5-workstation is earlier than 0:1.3.4-62.el4_8.2" id="oval:com.redhat.rhsa:tst:20100423012" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070095004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100423006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="krb5-server is earlier than 0:1.3.4-62.el4_8.2" id="oval:com.redhat.rhsa:tst:20100423013" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070095001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100423006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="krb5-libs is earlier than 0:1.6.1-36.el5_5.4" id="oval:com.redhat.rhsa:tst:20100423015" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070095003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100423008"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="krb5-devel is earlier than 0:1.6.1-36.el5_5.4" id="oval:com.redhat.rhsa:tst:20100423017" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070095002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100423008"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="krb5-server is earlier than 0:1.6.1-36.el5_5.4" id="oval:com.redhat.rhsa:tst:20100423019" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070095001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100423010"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="krb5-workstation is earlier than 0:1.6.1-36.el5_5.4" id="oval:com.redhat.rhsa:tst:20100423021" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070095004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100423010"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="rh-postgresql-pl is earlier than 0:7.3.21-3" id="oval:com.redhat.rhsa:tst:20100427001" version="641">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060526008"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100427001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="rh-postgresql-tcl is earlier than 0:7.3.21-3" id="oval:com.redhat.rhsa:tst:20100427003" version="641">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060526010"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100427001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="rh-postgresql-server is earlier than 0:7.3.21-3" id="oval:com.redhat.rhsa:tst:20100427005" version="641">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060526003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100427001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="rh-postgresql-test is earlier than 0:7.3.21-3" id="oval:com.redhat.rhsa:tst:20100427007" version="641">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060526002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100427001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="rh-postgresql-docs is earlier than 0:7.3.21-3" id="oval:com.redhat.rhsa:tst:20100427009" version="641">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060526005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100427001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="rh-postgresql-contrib is earlier than 0:7.3.21-3" id="oval:com.redhat.rhsa:tst:20100427011" version="641">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060526001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100427001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="rh-postgresql-python is earlier than 0:7.3.21-3" id="oval:com.redhat.rhsa:tst:20100427013" version="641">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060526007"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100427001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="rh-postgresql-devel is earlier than 0:7.3.21-3" id="oval:com.redhat.rhsa:tst:20100427015" version="641">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060526009"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100427001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="rh-postgresql is earlier than 0:7.3.21-3" id="oval:com.redhat.rhsa:tst:20100427017" version="641">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060526011"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100427001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="rh-postgresql-libs is earlier than 0:7.3.21-3" id="oval:com.redhat.rhsa:tst:20100427019" version="641">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060526004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100427003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="rh-postgresql-jdbc is earlier than 0:7.3.21-3" id="oval:com.redhat.rhsa:tst:20100427021" version="641">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060526006"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100427001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="perl-CGI is earlier than 2:2.89-101.EL3" id="oval:com.redhat.rhsa:tst:20100457001" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070966003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100457001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="perl is earlier than 2:5.8.0-101.EL3" id="oval:com.redhat.rhsa:tst:20100457003" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070966002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100457003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="perl-CPAN is earlier than 2:1.61-101.EL3" id="oval:com.redhat.rhsa:tst:20100457005" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070966001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100457004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="perl-suidperl is earlier than 2:5.8.0-101.EL3" id="oval:com.redhat.rhsa:tst:20100457007" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070966005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100457003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="perl-DB_File is earlier than 2:1.806-101.EL3" id="oval:com.redhat.rhsa:tst:20100457009" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070966004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100457005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="perl-suidperl is earlier than 3:5.8.5-53.el4" id="oval:com.redhat.rhsa:tst:20100457012" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070966005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100457007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="perl is earlier than 3:5.8.5-53.el4" id="oval:com.redhat.rhsa:tst:20100457013" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070966002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100457007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="samba-swat is earlier than 0:3.0.9-1.3E.17" id="oval:com.redhat.rhsa:tst:20100488001" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060591003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100488001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="samba-client is earlier than 0:3.0.9-1.3E.17" id="oval:com.redhat.rhsa:tst:20100488003" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060591004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100488001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="samba-common is earlier than 0:3.0.9-1.3E.17" id="oval:com.redhat.rhsa:tst:20100488005" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060591001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100488003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="samba is earlier than 0:3.0.9-1.3E.17" id="oval:com.redhat.rhsa:tst:20100488007" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060591002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100488003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="samba is earlier than 0:3.0.33-0.19.el4_8.1" id="oval:com.redhat.rhsa:tst:20100488010" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060591002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100488005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="samba-common is earlier than 0:3.0.33-0.19.el4_8.1" id="oval:com.redhat.rhsa:tst:20100488011" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060591001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100488006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="samba-client is earlier than 0:3.0.33-0.19.el4_8.1" id="oval:com.redhat.rhsa:tst:20100488012" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060591004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100488005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="samba-swat is earlier than 0:3.0.33-0.19.el4_8.1" id="oval:com.redhat.rhsa:tst:20100488013" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060591003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100488005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libsmbclient-devel is earlier than 0:3.0.33-3.29.el5_5" id="oval:com.redhat.rhsa:tst:20100488015" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20100488006"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100488008"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libsmbclient-devel is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20100488016" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20100488006"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="samba-swat is earlier than 0:3.0.33-3.29.el5_5" id="oval:com.redhat.rhsa:tst:20100488017" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060591003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100488010"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="samba-client is earlier than 0:3.0.33-3.29.el5_5" id="oval:com.redhat.rhsa:tst:20100488019" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060591004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100488010"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="samba is earlier than 0:3.0.33-3.29.el5_5" id="oval:com.redhat.rhsa:tst:20100488021" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060591002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100488010"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="samba-common is earlier than 0:3.0.33-3.29.el5_5" id="oval:com.redhat.rhsa:tst:20100488023" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060591001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100488008"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libsmbclient is earlier than 0:3.0.33-3.29.el5_5" id="oval:com.redhat.rhsa:tst:20100488025" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20100488007"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100488008"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libsmbclient is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20100488026" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20100488007"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="samba3x-doc is earlier than 0:3.3.8-0.52.el5_5" id="oval:com.redhat.rhsa:tst:20100488027" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20100488008"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100488011"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="samba3x-doc is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20100488028" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20100488008"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="samba3x-common is earlier than 0:3.3.8-0.52.el5_5" id="oval:com.redhat.rhsa:tst:20100488029" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20100488009"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100488011"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="samba3x-common is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20100488030" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20100488009"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libtalloc is earlier than 0:1.2.0-52.el5_5" id="oval:com.redhat.rhsa:tst:20100488031" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20100488010"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100488012"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libtalloc is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20100488032" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20100488010"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="samba3x-client is earlier than 0:3.3.8-0.52.el5_5" id="oval:com.redhat.rhsa:tst:20100488033" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20100488011"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100488011"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="samba3x-client is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20100488034" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20100488011"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libtdb is earlier than 0:1.1.2-52.el5_5" id="oval:com.redhat.rhsa:tst:20100488035" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20100488012"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100488013"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libtdb is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20100488036" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20100488012"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="samba3x-swat is earlier than 0:3.3.8-0.52.el5_5" id="oval:com.redhat.rhsa:tst:20100488037" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20100488013"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100488011"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="samba3x-swat is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20100488038" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20100488013"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="samba3x-winbind is earlier than 0:3.3.8-0.52.el5_5" id="oval:com.redhat.rhsa:tst:20100488039" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20100488014"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100488014"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="samba3x-winbind is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20100488040" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20100488014"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libtdb-devel is earlier than 0:1.1.2-52.el5_5" id="oval:com.redhat.rhsa:tst:20100488041" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20100488015"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100488013"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libtdb-devel is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20100488042" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20100488015"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="samba3x-domainjoin-gui is earlier than 0:3.3.8-0.52.el5_5" id="oval:com.redhat.rhsa:tst:20100488043" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20100488016"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100488011"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="samba3x-domainjoin-gui is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20100488044" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20100488016"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="samba3x is earlier than 0:3.3.8-0.52.el5_5" id="oval:com.redhat.rhsa:tst:20100488045" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20100488017"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100488011"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="samba3x is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20100488046" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20100488017"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="samba3x-winbind-devel is earlier than 0:3.3.8-0.52.el5_5" id="oval:com.redhat.rhsa:tst:20100488047" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20100488018"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100488014"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="samba3x-winbind-devel is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20100488048" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20100488018"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="tdb-tools is earlier than 0:1.1.2-52.el5_5" id="oval:com.redhat.rhsa:tst:20100488049" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20100488019"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100488015"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="tdb-tools is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20100488050" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20100488019"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libtalloc-devel is earlier than 0:1.2.0-52.el5_5" id="oval:com.redhat.rhsa:tst:20100488051" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20100488020"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100488012"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libtalloc-devel is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20100488052" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20100488020"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="cups is earlier than 1:1.1.17-13.3.65" id="oval:com.redhat.rhsa:tst:20100490001" version="642">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060163003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100490001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="cups-devel is earlier than 1:1.1.17-13.3.65" id="oval:com.redhat.rhsa:tst:20100490003" version="642">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060163001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100490001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="cups-libs is earlier than 1:1.1.17-13.3.65" id="oval:com.redhat.rhsa:tst:20100490005" version="642">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060163002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100490003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="cups is earlier than 1:1.1.22-0.rc1.9.32.el4_8.6" id="oval:com.redhat.rhsa:tst:20100490008" version="642">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060163003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100490005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="cups-devel is earlier than 1:1.1.22-0.rc1.9.32.el4_8.6" id="oval:com.redhat.rhsa:tst:20100490009" version="642">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060163001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100490005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="cups-libs is earlier than 1:1.1.22-0.rc1.9.32.el4_8.6" id="oval:com.redhat.rhsa:tst:20100490010" version="642">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060163002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100490006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="cups-devel is earlier than 1:1.3.7-18.el5_5.4" id="oval:com.redhat.rhsa:tst:20100490012" version="642">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060163001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100490008"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="cups is earlier than 1:1.3.7-18.el5_5.4" id="oval:com.redhat.rhsa:tst:20100490014" version="642">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060163003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100490010"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="cups-libs is earlier than 1:1.3.7-18.el5_5.4" id="oval:com.redhat.rhsa:tst:20100490016" version="642">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060163002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100490008"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="cups-lpd is earlier than 1:1.3.7-18.el5_5.4" id="oval:com.redhat.rhsa:tst:20100490018" version="642">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070123005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100490010"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-nss is earlier than 0:1.0.9-0.55.el3" id="oval:com.redhat.rhsa:tst:20100499001" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578008"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100499001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.55.el3" id="oval:com.redhat.rhsa:tst:20100499003" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100499001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-devel is earlier than 0:1.0.9-0.55.el3" id="oval:com.redhat.rhsa:tst:20100499005" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578007"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100499001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.55.el3" id="oval:com.redhat.rhsa:tst:20100499007" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578006"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100499001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-nspr is earlier than 0:1.0.9-0.55.el3" id="oval:com.redhat.rhsa:tst:20100499009" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100499001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.55.el3" id="oval:com.redhat.rhsa:tst:20100499011" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100499001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.55.el3" id="oval:com.redhat.rhsa:tst:20100499013" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100499001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey is earlier than 0:1.0.9-0.55.el3" id="oval:com.redhat.rhsa:tst:20100499015" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578009"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100499001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-chat is earlier than 0:1.0.9-0.55.el3" id="oval:com.redhat.rhsa:tst:20100499017" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100499001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-mail is earlier than 0:1.0.9-0.55.el3" id="oval:com.redhat.rhsa:tst:20100499019" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578010"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100499001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey is earlier than 0:1.0.9-58.el4_8" id="oval:com.redhat.rhsa:tst:20100499022" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578009"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100499004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-mail is earlier than 0:1.0.9-58.el4_8" id="oval:com.redhat.rhsa:tst:20100499023" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578010"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100499004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-devel is earlier than 0:1.0.9-58.el4_8" id="oval:com.redhat.rhsa:tst:20100499024" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578007"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100499004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-js-debugger is earlier than 0:1.0.9-58.el4_8" id="oval:com.redhat.rhsa:tst:20100499025" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100499004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-dom-inspector is earlier than 0:1.0.9-58.el4_8" id="oval:com.redhat.rhsa:tst:20100499026" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100499004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-chat is earlier than 0:1.0.9-58.el4_8" id="oval:com.redhat.rhsa:tst:20100499027" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100499004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libtiff is earlier than 0:3.5.7-34.el3" id="oval:com.redhat.rhsa:tst:20100520001" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060425002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100520001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libtiff-devel is earlier than 0:3.5.7-34.el3" id="oval:com.redhat.rhsa:tst:20100520003" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060425001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100520003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libpng is earlier than 2:1.2.2-30" id="oval:com.redhat.rhsa:tst:20100534001" version="641">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070356002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100534001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libpng-devel is earlier than 2:1.2.2-30" id="oval:com.redhat.rhsa:tst:20100534003" version="641">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070356001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100534003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libpng10 is earlier than 0:1.0.13-21" id="oval:com.redhat.rhsa:tst:20100534005" version="641">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070356004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100534004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libpng10-devel is earlier than 0:1.0.13-21" id="oval:com.redhat.rhsa:tst:20100534007" version="641">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070356003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100534005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libpng-devel is earlier than 2:1.2.7-3.el4_8.3" id="oval:com.redhat.rhsa:tst:20100534010" version="641">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070356001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100534007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libpng is earlier than 2:1.2.7-3.el4_8.3" id="oval:com.redhat.rhsa:tst:20100534011" version="641">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070356002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100534008"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libpng10-devel is earlier than 0:1.0.16-3.el4_8.4" id="oval:com.redhat.rhsa:tst:20100534012" version="641">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070356003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100534009"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libpng10 is earlier than 0:1.0.16-3.el4_8.4" id="oval:com.redhat.rhsa:tst:20100534013" version="641">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070356004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100534010"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libpng is earlier than 2:1.2.10-7.1.el5_5.3" id="oval:com.redhat.rhsa:tst:20100534015" version="641">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070356002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100534012"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libpng-devel is earlier than 2:1.2.10-7.1.el5_5.3" id="oval:com.redhat.rhsa:tst:20100534017" version="641">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070356001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100534012"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-mail is earlier than 0:1.0.9-0.57.el3" id="oval:com.redhat.rhsa:tst:20100546001" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578010"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100546001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-nss is earlier than 0:1.0.9-0.57.el3" id="oval:com.redhat.rhsa:tst:20100546003" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578008"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100546001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.57.el3" id="oval:com.redhat.rhsa:tst:20100546005" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100546001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.57.el3" id="oval:com.redhat.rhsa:tst:20100546007" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100546001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.57.el3" id="oval:com.redhat.rhsa:tst:20100546009" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100546001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey is earlier than 0:1.0.9-0.57.el3" id="oval:com.redhat.rhsa:tst:20100546011" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578009"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100546001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-devel is earlier than 0:1.0.9-0.57.el3" id="oval:com.redhat.rhsa:tst:20100546013" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578007"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100546001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.57.el3" id="oval:com.redhat.rhsa:tst:20100546015" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578006"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100546001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-nspr is earlier than 0:1.0.9-0.57.el3" id="oval:com.redhat.rhsa:tst:20100546017" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100546001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-chat is earlier than 0:1.0.9-0.57.el3" id="oval:com.redhat.rhsa:tst:20100546019" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100546001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-dom-inspector is earlier than 0:1.0.9-60.el4" id="oval:com.redhat.rhsa:tst:20100546022" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100546004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-js-debugger is earlier than 0:1.0.9-60.el4" id="oval:com.redhat.rhsa:tst:20100546023" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100546004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-mail is earlier than 0:1.0.9-60.el4" id="oval:com.redhat.rhsa:tst:20100546024" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578010"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100546004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey is earlier than 0:1.0.9-60.el4" id="oval:com.redhat.rhsa:tst:20100546025" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578009"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100546004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-devel is earlier than 0:1.0.9-60.el4" id="oval:com.redhat.rhsa:tst:20100546026" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578007"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100546004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-chat is earlier than 0:1.0.9-60.el4" id="oval:com.redhat.rhsa:tst:20100546027" version="633">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100546004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.58.el3" id="oval:com.redhat.rhsa:tst:20100557001" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100557001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-nspr is earlier than 0:1.0.9-0.58.el3" id="oval:com.redhat.rhsa:tst:20100557003" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100557001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.58.el3" id="oval:com.redhat.rhsa:tst:20100557005" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100557001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-mail is earlier than 0:1.0.9-0.58.el3" id="oval:com.redhat.rhsa:tst:20100557007" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578010"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100557001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-chat is earlier than 0:1.0.9-0.58.el3" id="oval:com.redhat.rhsa:tst:20100557009" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100557001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.58.el3" id="oval:com.redhat.rhsa:tst:20100557011" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100557001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-devel is earlier than 0:1.0.9-0.58.el3" id="oval:com.redhat.rhsa:tst:20100557013" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578007"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100557001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey is earlier than 0:1.0.9-0.58.el3" id="oval:com.redhat.rhsa:tst:20100557015" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578009"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100557001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.58.el3" id="oval:com.redhat.rhsa:tst:20100557017" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578006"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100557001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-nss is earlier than 0:1.0.9-0.58.el3" id="oval:com.redhat.rhsa:tst:20100557019" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578008"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100557001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-js-debugger is earlier than 0:1.0.9-61.el4" id="oval:com.redhat.rhsa:tst:20100557022" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100557004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-dom-inspector is earlier than 0:1.0.9-61.el4" id="oval:com.redhat.rhsa:tst:20100557023" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100557004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey is earlier than 0:1.0.9-61.el4" id="oval:com.redhat.rhsa:tst:20100557024" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578009"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100557004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-mail is earlier than 0:1.0.9-61.el4" id="oval:com.redhat.rhsa:tst:20100557025" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578010"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100557004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-devel is earlier than 0:1.0.9-61.el4" id="oval:com.redhat.rhsa:tst:20100557026" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578007"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100557004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-chat is earlier than 0:1.0.9-61.el4" id="oval:com.redhat.rhsa:tst:20100557027" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100557004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="redhat-release is earlier than 0:3Desktop-13.9.9" id="oval:com.redhat.rhsa:tst:20100576001" version="632">
   <red-def:object object_ref="oval:com.redhat.rhba:obj:20070026002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100576001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="redhat-release is earlier than 0:3ES-13.9.9" id="oval:com.redhat.rhsa:tst:20100576003" version="632">
   <red-def:object object_ref="oval:com.redhat.rhba:obj:20070026002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100576003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="redhat-release is earlier than 0:3WS-13.9.9" id="oval:com.redhat.rhsa:tst:20100576004" version="632">
   <red-def:object object_ref="oval:com.redhat.rhba:obj:20070026002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100576004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="redhat-release is earlier than 0:3AS-13.9.9" id="oval:com.redhat.rhsa:tst:20100576005" version="632">
   <red-def:object object_ref="oval:com.redhat.rhba:obj:20070026002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100576005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="freetype is earlier than 0:2.1.4-15.el3" id="oval:com.redhat.rhsa:tst:20100577001" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060500001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100577001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="freetype-devel is earlier than 0:2.1.4-15.el3" id="oval:com.redhat.rhsa:tst:20100577003" version="639">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060500002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100577003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="freetype-devel is earlier than 0:2.1.4-16.el3" id="oval:com.redhat.rhsa:tst:20100607001" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060500002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100607001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="freetype is earlier than 0:2.1.4-16.el3" id="oval:com.redhat.rhsa:tst:20100607003" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060500001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100607003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="freetype-devel is earlier than 0:2.1.9-15.el4.8" id="oval:com.redhat.rhsa:tst:20100607006" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060500002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100607005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="freetype-utils is earlier than 0:2.1.9-15.el4.8" id="oval:com.redhat.rhsa:tst:20100607007" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060500005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100607005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="freetype is earlier than 0:2.1.9-15.el4.8" id="oval:com.redhat.rhsa:tst:20100607009" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060500001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100607006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="freetype-demos is earlier than 0:2.1.9-15.el4.8" id="oval:com.redhat.rhsa:tst:20100607010" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060500004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100607005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="freetype is earlier than 0:2.2.1-26.el5_5" id="oval:com.redhat.rhsa:tst:20100607013" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060500001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100607008"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="freetype-demos is earlier than 0:2.2.1-26.el5_5" id="oval:com.redhat.rhsa:tst:20100607015" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060500004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100607010"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="freetype-devel is earlier than 0:2.2.1-26.el5_5" id="oval:com.redhat.rhsa:tst:20100607017" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060500002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100607008"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="wireshark-gnome is earlier than 0:1.0.15-EL3.1" id="oval:com.redhat.rhsa:tst:20100625001" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060602002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100625001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="wireshark is earlier than 0:1.0.15-EL3.1" id="oval:com.redhat.rhsa:tst:20100625003" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060602001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100625001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="wireshark-gnome is earlier than 0:1.0.15-1.el4_8.1" id="oval:com.redhat.rhsa:tst:20100625006" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060602002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100625004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="wireshark is earlier than 0:1.0.15-1.el4_8.1" id="oval:com.redhat.rhsa:tst:20100625007" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060602001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100625004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="wireshark is earlier than 0:1.0.15-1.el5_5.1" id="oval:com.redhat.rhsa:tst:20100625009" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060602001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100625006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="wireshark-gnome is earlier than 0:1.0.15-1.el5_5.1" id="oval:com.redhat.rhsa:tst:20100625011" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060602002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100625006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-i18n is earlier than 0:1.1.2-48.2.0.EL3" id="oval:com.redhat.rhsa:tst:20100643001" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060573001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100643001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-libs is earlier than 0:1.1.2-48.2.0.EL3" id="oval:com.redhat.rhsa:tst:20100643003" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060573002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100643001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org is earlier than 0:1.1.2-48.2.0.EL3" id="oval:com.redhat.rhsa:tst:20100643005" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060573003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100643001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-math is earlier than 1:2.0.4-5.7.0.6.1.el4_8.6" id="oval:com.redhat.rhsa:tst:20100643008" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406034"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100643004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-javafilter is earlier than 1:2.0.4-5.7.0.6.1.el4_8.6" id="oval:com.redhat.rhsa:tst:20100643010" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406063"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100643004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-bn is earlier than 1:2.0.4-5.7.0.6.1.el4_8.6" id="oval:com.redhat.rhsa:tst:20100643012" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406033"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100643004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-graphicfilter is earlier than 1:2.0.4-5.7.0.6.1.el4_8.6" id="oval:com.redhat.rhsa:tst:20100643014" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406019"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100643004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-el_GR is earlier than 1:2.0.4-5.7.0.6.1.el4_8.6" id="oval:com.redhat.rhsa:tst:20100643016" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406023"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100643004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-de is earlier than 1:2.0.4-5.7.0.6.1.el4_8.6" id="oval:com.redhat.rhsa:tst:20100643018" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406007"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100643004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-it is earlier than 1:2.0.4-5.7.0.6.1.el4_8.6" id="oval:com.redhat.rhsa:tst:20100643020" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406046"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100643004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-sk_SK is earlier than 1:2.0.4-5.7.0.6.1.el4_8.6" id="oval:com.redhat.rhsa:tst:20100643022" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406038"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100643004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-bg_BG is earlier than 1:2.0.4-5.7.0.6.1.el4_8.6" id="oval:com.redhat.rhsa:tst:20100643024" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406006"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100643004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-hi_IN is earlier than 1:2.0.4-5.7.0.6.1.el4_8.6" id="oval:com.redhat.rhsa:tst:20100643026" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406018"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100643004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-da_DK is earlier than 1:2.0.4-5.7.0.6.1.el4_8.6" id="oval:com.redhat.rhsa:tst:20100643028" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406049"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100643004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-pl_PL is earlier than 1:2.0.4-5.7.0.6.1.el4_8.6" id="oval:com.redhat.rhsa:tst:20100643030" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406040"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100643004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-ko_KR is earlier than 1:2.0.4-5.7.0.6.1.el4_8.6" id="oval:com.redhat.rhsa:tst:20100643032" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406044"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100643004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-emailmerge is earlier than 1:2.0.4-5.7.0.6.1.el4_8.6" id="oval:com.redhat.rhsa:tst:20100643034" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406052"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100643004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-pa_IN is earlier than 1:2.0.4-5.7.0.6.1.el4_8.6" id="oval:com.redhat.rhsa:tst:20100643036" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406047"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100643004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-base is earlier than 1:2.0.4-5.7.0.6.1.el4_8.6" id="oval:com.redhat.rhsa:tst:20100643038" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406050"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100643004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-xsltfilter is earlier than 1:2.0.4-5.7.0.6.1.el4_8.6" id="oval:com.redhat.rhsa:tst:20100643040" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406030"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100643004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-ga_IE is earlier than 1:2.0.4-5.7.0.6.1.el4_8.6" id="oval:com.redhat.rhsa:tst:20100643042" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406056"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100643004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-ru is earlier than 1:2.0.4-5.7.0.6.1.el4_8.6" id="oval:com.redhat.rhsa:tst:20100643044" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406029"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100643004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-zu_ZA is earlier than 1:2.0.4-5.7.0.6.1.el4_8.6" id="oval:com.redhat.rhsa:tst:20100643046" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406055"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100643004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-sv is earlier than 1:2.0.4-5.7.0.6.1.el4_8.6" id="oval:com.redhat.rhsa:tst:20100643048" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406059"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100643004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-eu_ES is earlier than 1:2.0.4-5.7.0.6.1.el4_8.6" id="oval:com.redhat.rhsa:tst:20100643050" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406017"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100643004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-draw is earlier than 1:2.0.4-5.7.0.6.1.el4_8.6" id="oval:com.redhat.rhsa:tst:20100643052" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406060"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100643004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-nl is earlier than 1:2.0.4-5.7.0.6.1.el4_8.6" id="oval:com.redhat.rhsa:tst:20100643054" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406021"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100643004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-fr is earlier than 1:2.0.4-5.7.0.6.1.el4_8.6" id="oval:com.redhat.rhsa:tst:20100643056" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406061"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100643004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-sl_SI is earlier than 1:2.0.4-5.7.0.6.1.el4_8.6" id="oval:com.redhat.rhsa:tst:20100643058" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406022"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100643004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-nn_NO is earlier than 1:2.0.4-5.7.0.6.1.el4_8.6" id="oval:com.redhat.rhsa:tst:20100643060" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406062"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100643004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-cs_CZ is earlier than 1:2.0.4-5.7.0.6.1.el4_8.6" id="oval:com.redhat.rhsa:tst:20100643062" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406026"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100643004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-hu_HU is earlier than 1:2.0.4-5.7.0.6.1.el4_8.6" id="oval:com.redhat.rhsa:tst:20100643064" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406012"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100643004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-zh_TW is earlier than 1:2.0.4-5.7.0.6.1.el4_8.6" id="oval:com.redhat.rhsa:tst:20100643066" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406041"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100643004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-tr_TR is earlier than 1:2.0.4-5.7.0.6.1.el4_8.6" id="oval:com.redhat.rhsa:tst:20100643068" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406010"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100643004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-core is earlier than 1:2.0.4-5.7.0.6.1.el4_8.6" id="oval:com.redhat.rhsa:tst:20100643070" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406016"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100643004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-hr_HR is earlier than 1:2.0.4-5.7.0.6.1.el4_8.6" id="oval:com.redhat.rhsa:tst:20100643072" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406039"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100643004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-pyuno is earlier than 1:2.0.4-5.7.0.6.1.el4_8.6" id="oval:com.redhat.rhsa:tst:20100643074" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406015"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100643004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-ms_MY is earlier than 1:2.0.4-5.7.0.6.1.el4_8.6" id="oval:com.redhat.rhsa:tst:20100643076" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406027"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100643004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-fi_FI is earlier than 1:2.0.4-5.7.0.6.1.el4_8.6" id="oval:com.redhat.rhsa:tst:20100643078" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406011"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100643004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-pt_PT is earlier than 1:2.0.4-5.7.0.6.1.el4_8.6" id="oval:com.redhat.rhsa:tst:20100643080" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406009"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100643004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-et_EE is earlier than 1:2.0.4-5.7.0.6.1.el4_8.6" id="oval:com.redhat.rhsa:tst:20100643082" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406008"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100643004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-lt_LT is earlier than 1:2.0.4-5.7.0.6.1.el4_8.6" id="oval:com.redhat.rhsa:tst:20100643084" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406042"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100643004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-th_TH is earlier than 1:2.0.4-5.7.0.6.1.el4_8.6" id="oval:com.redhat.rhsa:tst:20100643086" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406013"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100643004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-ar is earlier than 1:2.0.4-5.7.0.6.1.el4_8.6" id="oval:com.redhat.rhsa:tst:20100643088" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406028"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100643004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-ca_ES is earlier than 1:2.0.4-5.7.0.6.1.el4_8.6" id="oval:com.redhat.rhsa:tst:20100643090" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406014"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100643004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-gl_ES is earlier than 1:2.0.4-5.7.0.6.1.el4_8.6" id="oval:com.redhat.rhsa:tst:20100643092" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406058"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100643004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-ja_JP is earlier than 1:2.0.4-5.7.0.6.1.el4_8.6" id="oval:com.redhat.rhsa:tst:20100643094" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406037"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100643004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-writer is earlier than 1:2.0.4-5.7.0.6.1.el4_8.6" id="oval:com.redhat.rhsa:tst:20100643096" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406036"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100643004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-zh_CN is earlier than 1:2.0.4-5.7.0.6.1.el4_8.6" id="oval:com.redhat.rhsa:tst:20100643098" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406020"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100643004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-ta_IN is earlier than 1:2.0.4-5.7.0.6.1.el4_8.6" id="oval:com.redhat.rhsa:tst:20100643100" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406048"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100643004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-impress is earlier than 1:2.0.4-5.7.0.6.1.el4_8.6" id="oval:com.redhat.rhsa:tst:20100643102" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406043"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100643004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-nb_NO is earlier than 1:2.0.4-5.7.0.6.1.el4_8.6" id="oval:com.redhat.rhsa:tst:20100643104" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406045"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100643004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-he_IL is earlier than 1:2.0.4-5.7.0.6.1.el4_8.6" id="oval:com.redhat.rhsa:tst:20100643106" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406032"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100643004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-sr_CS is earlier than 1:2.0.4-5.7.0.6.1.el4_8.6" id="oval:com.redhat.rhsa:tst:20100643108" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406025"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100643004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-es is earlier than 1:2.0.4-5.7.0.6.1.el4_8.6" id="oval:com.redhat.rhsa:tst:20100643110" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406051"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100643004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-calc is earlier than 1:2.0.4-5.7.0.6.1.el4_8.6" id="oval:com.redhat.rhsa:tst:20100643112" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406024"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100643004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-gu_IN is earlier than 1:2.0.4-5.7.0.6.1.el4_8.6" id="oval:com.redhat.rhsa:tst:20100643114" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406031"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100643004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-pt_BR is earlier than 1:2.0.4-5.7.0.6.1.el4_8.6" id="oval:com.redhat.rhsa:tst:20100643116" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406053"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100643004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-af_ZA is earlier than 1:2.0.4-5.7.0.6.1.el4_8.6" id="oval:com.redhat.rhsa:tst:20100643118" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406054"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100643004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-testtools is earlier than 1:2.0.4-5.7.0.6.1.el4_8.6" id="oval:com.redhat.rhsa:tst:20100643120" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406057"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100643004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org2-langpack-cy_GB is earlier than 1:2.0.4-5.7.0.6.1.el4_8.6" id="oval:com.redhat.rhsa:tst:20100643122" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070406035"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100643004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org is earlier than 0:1.1.5-10.6.0.7.EL4.5" id="oval:com.redhat.rhsa:tst:20100643124" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060573003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100643005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-i18n is earlier than 0:1.1.5-10.6.0.7.EL4.5" id="oval:com.redhat.rhsa:tst:20100643125" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060573001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100643005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-libs is earlier than 0:1.1.5-10.6.0.7.EL4.5" id="oval:com.redhat.rhsa:tst:20100643126" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060573002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100643005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="openoffice.org-kde is earlier than 0:1.1.5-10.6.0.7.EL4.5" id="oval:com.redhat.rhsa:tst:20100643127" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060573005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100643005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-mail is earlier than 0:1.0.9-0.60.el3" id="oval:com.redhat.rhsa:tst:20100680001" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578010"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100680001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-chat is earlier than 0:1.0.9-0.60.el3" id="oval:com.redhat.rhsa:tst:20100680003" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100680001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.60.el3" id="oval:com.redhat.rhsa:tst:20100680005" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100680001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.60.el3" id="oval:com.redhat.rhsa:tst:20100680007" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100680001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-devel is earlier than 0:1.0.9-0.60.el3" id="oval:com.redhat.rhsa:tst:20100680009" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578007"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100680001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey is earlier than 0:1.0.9-0.60.el3" id="oval:com.redhat.rhsa:tst:20100680011" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578009"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100680001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-nss is earlier than 0:1.0.9-0.60.el3" id="oval:com.redhat.rhsa:tst:20100680013" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578008"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100680001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.60.el3" id="oval:com.redhat.rhsa:tst:20100680015" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578006"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100680001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.60.el3" id="oval:com.redhat.rhsa:tst:20100680017" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100680001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-nspr is earlier than 0:1.0.9-0.60.el3" id="oval:com.redhat.rhsa:tst:20100680019" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100680001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-js-debugger is earlier than 0:1.0.9-63.el4" id="oval:com.redhat.rhsa:tst:20100680022" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100680004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-devel is earlier than 0:1.0.9-63.el4" id="oval:com.redhat.rhsa:tst:20100680023" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578007"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100680004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-dom-inspector is earlier than 0:1.0.9-63.el4" id="oval:com.redhat.rhsa:tst:20100680024" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100680004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-mail is earlier than 0:1.0.9-63.el4" id="oval:com.redhat.rhsa:tst:20100680025" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578010"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100680004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey is earlier than 0:1.0.9-63.el4" id="oval:com.redhat.rhsa:tst:20100680026" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578009"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100680004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-chat is earlier than 0:1.0.9-63.el4" id="oval:com.redhat.rhsa:tst:20100680027" version="634">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100680004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="samba-client is earlier than 0:3.0.9-1.3E.18" id="oval:com.redhat.rhsa:tst:20100697001" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060591004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100697001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="samba-common is earlier than 0:3.0.9-1.3E.18" id="oval:com.redhat.rhsa:tst:20100697003" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060591001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100697003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="samba is earlier than 0:3.0.9-1.3E.18" id="oval:com.redhat.rhsa:tst:20100697005" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060591002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100697003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="samba-swat is earlier than 0:3.0.9-1.3E.18" id="oval:com.redhat.rhsa:tst:20100697007" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060591003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100697001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="samba-common is earlier than 0:3.0.33-0.19.el4_8.3" id="oval:com.redhat.rhsa:tst:20100697010" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060591001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100697005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="samba-client is earlier than 0:3.0.33-0.19.el4_8.3" id="oval:com.redhat.rhsa:tst:20100697011" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060591004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100697006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="samba-swat is earlier than 0:3.0.33-0.19.el4_8.3" id="oval:com.redhat.rhsa:tst:20100697012" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060591003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100697006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="samba is earlier than 0:3.0.33-0.19.el4_8.3" id="oval:com.redhat.rhsa:tst:20100697013" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060591002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100697006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="samba-common is earlier than 0:3.0.33-3.29.el5_5.1" id="oval:com.redhat.rhsa:tst:20100697015" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060591001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100697008"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="samba-client is earlier than 0:3.0.33-3.29.el5_5.1" id="oval:com.redhat.rhsa:tst:20100697017" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060591004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100697010"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libsmbclient is earlier than 0:3.0.33-3.29.el5_5.1" id="oval:com.redhat.rhsa:tst:20100697019" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20100488007"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100697008"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="samba-swat is earlier than 0:3.0.33-3.29.el5_5.1" id="oval:com.redhat.rhsa:tst:20100697021" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060591003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100697010"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="samba is earlier than 0:3.0.33-3.29.el5_5.1" id="oval:com.redhat.rhsa:tst:20100697023" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060591002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100697010"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="libsmbclient-devel is earlier than 0:3.0.33-3.29.el5_5.1" id="oval:com.redhat.rhsa:tst:20100697025" version="638">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20100488006"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100697008"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="bzip2 is earlier than 0:1.0.2-14.EL3" id="oval:com.redhat.rhsa:tst:20100703001" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080893003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100703001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="bzip2-libs is earlier than 0:1.0.2-14.EL3" id="oval:com.redhat.rhsa:tst:20100703003" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080893001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100703003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="bzip2-devel is earlier than 0:1.0.2-14.EL3" id="oval:com.redhat.rhsa:tst:20100703005" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080893002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100703001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="bzip2-devel is earlier than 0:1.0.2-16.el4_8" id="oval:com.redhat.rhsa:tst:20100703008" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080893002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100703005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="bzip2-libs is earlier than 0:1.0.2-16.el4_8" id="oval:com.redhat.rhsa:tst:20100703009" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080893001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100703005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="bzip2 is earlier than 0:1.0.2-16.el4_8" id="oval:com.redhat.rhsa:tst:20100703010" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080893003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100703006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="bzip2-libs is earlier than 0:1.0.3-6.el5_5" id="oval:com.redhat.rhsa:tst:20100703012" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080893001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100703008"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="bzip2-devel is earlier than 0:1.0.3-6.el5_5" id="oval:com.redhat.rhsa:tst:20100703014" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080893002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100703008"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="bzip2 is earlier than 0:1.0.3-6.el5_5" id="oval:com.redhat.rhsa:tst:20100703016" version="636">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20080893003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100703010"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="mikmod is earlier than 0:3.1.6-23.el3" id="oval:com.redhat.rhsa:tst:20100720001" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20100720001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100720001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="mikmod is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20100720002" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20100720001"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="mikmod-devel is earlier than 0:3.1.6-23.el3" id="oval:com.redhat.rhsa:tst:20100720003" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20100720002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100720003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="mikmod-devel is signed with Red Hat master key" id="oval:com.redhat.rhsa:tst:20100720004" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20100720002"/>
   <red-def:state state_ref="oval:com.redhat.rhba:ste:20070026002"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="mikmod is earlier than 0:3.1.6-33.el4_8.1" id="oval:com.redhat.rhsa:tst:20100720006" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20100720001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100720005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="mikmod-devel is earlier than 0:3.1.6-33.el4_8.1" id="oval:com.redhat.rhsa:tst:20100720007" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20100720002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100720006"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="mikmod-devel is earlier than 0:3.1.6-39.el5_5.1" id="oval:com.redhat.rhsa:tst:20100720009" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20100720002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100720008"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="mikmod-devel is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20100720010" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20100720002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="mikmod is earlier than 0:3.1.6-39.el5_5.1" id="oval:com.redhat.rhsa:tst:20100720011" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20100720001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100720008"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="mikmod is signed with Red Hat redhatrelease key" id="oval:com.redhat.rhsa:tst:20100720012" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20100720001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20070066007"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="redhat-release is earlier than 0:3AS-13.9.10" id="oval:com.redhat.rhsa:tst:20100734001" version="634">
   <red-def:object object_ref="oval:com.redhat.rhba:obj:20070026002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100734001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="redhat-release is earlier than 0:3WS-13.9.10" id="oval:com.redhat.rhsa:tst:20100734003" version="634">
   <red-def:object object_ref="oval:com.redhat.rhba:obj:20070026002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100734003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="redhat-release is earlier than 0:3Desktop-13.9.10" id="oval:com.redhat.rhsa:tst:20100734004" version="634">
   <red-def:object object_ref="oval:com.redhat.rhba:obj:20070026002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100734004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="redhat-release is earlier than 0:3ES-13.9.10" id="oval:com.redhat.rhsa:tst:20100734005" version="634">
   <red-def:object object_ref="oval:com.redhat.rhba:obj:20070026002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100734005"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="freetype-devel is earlier than 0:2.1.4-18.el3" id="oval:com.redhat.rhsa:tst:20100736001" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060500002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100736001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="freetype is earlier than 0:2.1.4-18.el3" id="oval:com.redhat.rhsa:tst:20100736003" version="637">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060500001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100736003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="xpdf is earlier than 1:2.02-19.el3" id="oval:com.redhat.rhsa:tst:20100750001" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20070735001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100750001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="cups-devel is earlier than 1:1.1.17-13.3.70" id="oval:com.redhat.rhsa:tst:20100754001" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060163001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100754001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="cups is earlier than 1:1.1.17-13.3.70" id="oval:com.redhat.rhsa:tst:20100754003" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060163003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100754001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="cups-libs is earlier than 1:1.1.17-13.3.70" id="oval:com.redhat.rhsa:tst:20100754005" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060163002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100754003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey is earlier than 0:1.0.9-0.61.el3" id="oval:com.redhat.rhsa:tst:20100781001" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578009"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100781001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-chat is earlier than 0:1.0.9-0.61.el3" id="oval:com.redhat.rhsa:tst:20100781003" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100781001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-mail is earlier than 0:1.0.9-0.61.el3" id="oval:com.redhat.rhsa:tst:20100781005" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578010"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100781001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-nss is earlier than 0:1.0.9-0.61.el3" id="oval:com.redhat.rhsa:tst:20100781007" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578008"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100781001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.61.el3" id="oval:com.redhat.rhsa:tst:20100781009" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100781001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-devel is earlier than 0:1.0.9-0.61.el3" id="oval:com.redhat.rhsa:tst:20100781011" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578007"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100781001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.61.el3" id="oval:com.redhat.rhsa:tst:20100781013" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578006"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100781001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-nspr is earlier than 0:1.0.9-0.61.el3" id="oval:com.redhat.rhsa:tst:20100781015" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100781001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.61.el3" id="oval:com.redhat.rhsa:tst:20100781017" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100781001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.61.el3" id="oval:com.redhat.rhsa:tst:20100781019" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100781001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-devel is earlier than 0:1.0.9-64.el4" id="oval:com.redhat.rhsa:tst:20100781022" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578007"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100781004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-dom-inspector is earlier than 0:1.0.9-64.el4" id="oval:com.redhat.rhsa:tst:20100781023" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100781004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-js-debugger is earlier than 0:1.0.9-64.el4" id="oval:com.redhat.rhsa:tst:20100781024" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100781004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey is earlier than 0:1.0.9-64.el4" id="oval:com.redhat.rhsa:tst:20100781025" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578009"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100781004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-mail is earlier than 0:1.0.9-64.el4" id="oval:com.redhat.rhsa:tst:20100781026" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578010"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100781004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-chat is earlier than 0:1.0.9-64.el4" id="oval:com.redhat.rhsa:tst:20100781027" version="635">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100781004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-nspr-devel is earlier than 0:1.0.9-0.62.el3" id="oval:com.redhat.rhsa:tst:20100810001" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100810001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey is earlier than 0:1.0.9-0.62.el3" id="oval:com.redhat.rhsa:tst:20100810003" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578009"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100810001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-nss is earlier than 0:1.0.9-0.62.el3" id="oval:com.redhat.rhsa:tst:20100810005" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578008"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100810001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-js-debugger is earlier than 0:1.0.9-0.62.el3" id="oval:com.redhat.rhsa:tst:20100810007" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100810001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-dom-inspector is earlier than 0:1.0.9-0.62.el3" id="oval:com.redhat.rhsa:tst:20100810009" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100810001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-mail is earlier than 0:1.0.9-0.62.el3" id="oval:com.redhat.rhsa:tst:20100810011" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578010"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100810001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-nspr is earlier than 0:1.0.9-0.62.el3" id="oval:com.redhat.rhsa:tst:20100810013" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578005"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100810001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-chat is earlier than 0:1.0.9-0.62.el3" id="oval:com.redhat.rhsa:tst:20100810015" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100810001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-devel is earlier than 0:1.0.9-0.62.el3" id="oval:com.redhat.rhsa:tst:20100810017" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578007"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100810001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-nss-devel is earlier than 0:1.0.9-0.62.el3" id="oval:com.redhat.rhsa:tst:20100810019" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578006"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100810001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey is earlier than 0:1.0.9-65.el4_8" id="oval:com.redhat.rhsa:tst:20100810022" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578009"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100810004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-chat is earlier than 0:1.0.9-65.el4_8" id="oval:com.redhat.rhsa:tst:20100810023" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578003"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100810004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-mail is earlier than 0:1.0.9-65.el4_8" id="oval:com.redhat.rhsa:tst:20100810024" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578010"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100810004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-js-debugger is earlier than 0:1.0.9-65.el4_8" id="oval:com.redhat.rhsa:tst:20100810025" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578004"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100810004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-devel is earlier than 0:1.0.9-65.el4_8" id="oval:com.redhat.rhsa:tst:20100810026" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578007"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100810004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="seamonkey-dom-inspector is earlier than 0:1.0.9-65.el4_8" id="oval:com.redhat.rhsa:tst:20100810027" version="632">
   <red-def:object object_ref="oval:com.redhat.rhsa:obj:20060578001"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100810004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="redhat-release is earlier than 0:3AS-13.9.11" id="oval:com.redhat.rhsa:tst:20100817001" version="632">
   <red-def:object object_ref="oval:com.redhat.rhba:obj:20070026002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100817001"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="redhat-release is earlier than 0:3ES-13.9.11" id="oval:com.redhat.rhsa:tst:20100817003" version="632">
   <red-def:object object_ref="oval:com.redhat.rhba:obj:20070026002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100817003"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="redhat-release is earlier than 0:3Desktop-13.9.11" id="oval:com.redhat.rhsa:tst:20100817004" version="632">
   <red-def:object object_ref="oval:com.redhat.rhba:obj:20070026002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100817004"/>
  </red-def:rpminfo_test>
  <red-def:rpminfo_test check="at least one" comment="redhat-release is earlier than 0:3WS-13.9.11" id="oval:com.redhat.rhsa:tst:20100817005" version="632">
   <red-def:object object_ref="oval:com.redhat.rhba:obj:20070026002"/>
   <red-def:state state_ref="oval:com.redhat.rhsa:ste:20100817005"/>
  </red-def:rpminfo_test>
 </tests>
 <objects>
  <red-def:rpminfo_object id="oval:com.redhat.rhba:obj:20070026001" version="634">
   <red-def:name>htdig</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhba:obj:20070026002" version="634">
   <red-def:name>redhat-release</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhba:obj:20070418001" version="632">
   <red-def:name>unzip</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060015001" version="644">
   <red-def:name>initscripts</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060045001" version="638">
   <red-def:name>squid</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060117001" version="637">
   <red-def:name>vixie-cron</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060140001" version="639">
   <red-def:name>kernel-unsupported</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060140002" version="639">
   <red-def:name>kernel-smp-unsupported</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060140003" version="639">
   <red-def:name>kernel-doc</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060140004" version="639">
   <red-def:name>kernel-smp</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060140005" version="639">
   <red-def:name>kernel</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060140006" version="639">
   <red-def:name>kernel-source</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060140007" version="639">
   <red-def:name>kernel-hugemem-unsupported</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060140008" version="639">
   <red-def:name>kernel-BOOT</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060140009" version="639">
   <red-def:name>kernel-hugemem</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060156001" version="636">
   <red-def:name>ethereal</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060156002" version="636">
   <red-def:name>ethereal-gnome</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060159001" version="638">
   <red-def:name>mod_ssl</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060159002" version="638">
   <red-def:name>httpd-devel</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060159003" version="638">
   <red-def:name>httpd</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060159005" version="638">
   <red-def:name>httpd-suexec</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060159006" version="638">
   <red-def:name>httpd-manual</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060160001" version="644">
   <red-def:name>tetex</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060160002" version="644">
   <red-def:name>tetex-xdvi</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060160003" version="644">
   <red-def:name>tetex-latex</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060160004" version="644">
   <red-def:name>tetex-dvips</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060160005" version="644">
   <red-def:name>tetex-afm</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060160006" version="644">
   <red-def:name>tetex-fonts</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060160008" version="644">
   <red-def:name>tetex-doc</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060163001" version="632">
   <red-def:name>cups-devel</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060163002" version="632">
   <red-def:name>cups-libs</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060163003" version="632">
   <red-def:name>cups</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060164001" version="637">
   <red-def:name>mod_auth_pgsql</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060178001" version="634">
   <red-def:name>ImageMagick-devel</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060178002" version="634">
   <red-def:name>ImageMagick</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060178003" version="634">
   <red-def:name>ImageMagick-perl</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060178004" version="634">
   <red-def:name>ImageMagick-c++</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060178005" version="634">
   <red-def:name>ImageMagick-c++-devel</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060195001" version="638">
   <red-def:name>tar</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060197001" version="635">
   <red-def:name>python-tools</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060197002" version="635">
   <red-def:name>python-devel</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060197003" version="635">
   <red-def:name>python</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060197004" version="635">
   <red-def:name>tkinter</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060197006" version="635">
   <red-def:name>python-docs</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060204001" version="640">
   <red-def:name>mailman</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060264001" version="638">
   <red-def:name>sendmail-cf</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060264002" version="638">
   <red-def:name>sendmail-devel</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060264003" version="638">
   <red-def:name>sendmail-doc</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060264004" version="638">
   <red-def:name>sendmail</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060266001" version="639">
   <red-def:name>gnupg</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060267001" version="641">
   <red-def:name>ipsec-tools</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060271001" version="642">
   <red-def:name>freeradius</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060271003" version="642">
   <red-def:name>freeradius-mysql</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060271004" version="642">
   <red-def:name>freeradius-unixODBC</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060271005" version="642">
   <red-def:name>freeradius-postgresql</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060272001" version="638">
   <red-def:name>openmotif-devel</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060272002" version="638">
   <red-def:name>openmotif</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060272003" version="638">
   <red-def:name>openmotif21</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060276001" version="639">
   <red-def:name>php</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060276002" version="639">
   <red-def:name>php-odbc</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060276003" version="639">
   <red-def:name>php-ldap</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060276004" version="639">
   <red-def:name>php-devel</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060276005" version="639">
   <red-def:name>php-imap</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060276006" version="639">
   <red-def:name>php-pgsql</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060276007" version="639">
   <red-def:name>php-mysql</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060276009" version="639">
   <red-def:name>php-xmlrpc</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060276010" version="639">
   <red-def:name>php-snmp</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060276011" version="639">
   <red-def:name>php-ncurses</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060276012" version="639">
   <red-def:name>php-pear</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060276013" version="639">
   <red-def:name>php-mbstring</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060276014" version="639">
   <red-def:name>php-domxml</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060276015" version="639">
   <red-def:name>php-gd</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060283001" version="636">
   <red-def:name>squirrelmail</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060298001" version="634">
   <red-def:name>openssh-askpass-gnome</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060298002" version="634">
   <red-def:name>openssh-server</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060298003" version="634">
   <red-def:name>openssh</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060298004" version="634">
   <red-def:name>openssh-clients</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060298005" version="634">
   <red-def:name>openssh-askpass</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060329001" version="643">
   <red-def:name>devhelp-devel</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060329002" version="643">
   <red-def:name>devhelp</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060368001" version="637">
   <red-def:name>elfutils-libelf-devel</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060368002" version="637">
   <red-def:name>elfutils</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060368003" version="637">
   <red-def:name>elfutils-libelf</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060368004" version="637">
   <red-def:name>elfutils-devel</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060425001" version="635">
   <red-def:name>libtiff-devel</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060425002" version="635">
   <red-def:name>libtiff</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060498001" version="635">
   <red-def:name>xscreensaver</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060500001" version="640">
   <red-def:name>freetype</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060500002" version="640">
   <red-def:name>freetype-devel</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060500004" version="640">
   <red-def:name>freetype-demos</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060500005" version="640">
   <red-def:name>freetype-utils</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060525001" version="635">
   <red-def:name>quagga</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060525003" version="635">
   <red-def:name>quagga-devel</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060525004" version="635">
   <red-def:name>quagga-contrib</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060526001" version="638">
   <red-def:name>rh-postgresql-contrib</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060526002" version="638">
   <red-def:name>rh-postgresql-test</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060526003" version="638">
   <red-def:name>rh-postgresql-server</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060526004" version="638">
   <red-def:name>rh-postgresql-libs</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060526005" version="638">
   <red-def:name>rh-postgresql-docs</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060526006" version="638">
   <red-def:name>rh-postgresql-jdbc</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060526007" version="638">
   <red-def:name>rh-postgresql-python</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060526008" version="638">
   <red-def:name>rh-postgresql-pl</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060526009" version="638">
   <red-def:name>rh-postgresql-devel</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060526010" version="638">
   <red-def:name>rh-postgresql-tcl</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060526011" version="638">
   <red-def:name>rh-postgresql</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060526013" version="638">
   <red-def:name>postgresql-pl</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060526014" version="638">
   <red-def:name>postgresql-test</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060526015" version="638">
   <red-def:name>postgresql-python</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060526016" version="638">
   <red-def:name>postgresql-server</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060526017" version="638">
   <red-def:name>postgresql-devel</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060526018" version="638">
   <red-def:name>postgresql-contrib</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060526019" version="638">
   <red-def:name>postgresql-libs</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060526020" version="638">
   <red-def:name>postgresql-tcl</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060526021" version="638">
   <red-def:name>postgresql-jdbc</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060526022" version="638">
   <red-def:name>postgresql-docs</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060526023" version="638">
   <red-def:name>postgresql</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060573001" version="640">
   <red-def:name>openoffice.org-i18n</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060573002" version="640">
   <red-def:name>openoffice.org-libs</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060573003" version="640">
   <red-def:name>openoffice.org</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060573005" version="640">
   <red-def:name>openoffice.org-kde</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060576001" version="637">
   <red-def:name>kdebase</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060576002" version="637">
   <red-def:name>kdebase-devel</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060577001" version="633">
   <red-def:name>mutt</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060578001" version="640">
   <red-def:name>seamonkey-dom-inspector</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060578002" version="640">
   <red-def:name>seamonkey-nspr-devel</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060578003" version="640">
   <red-def:name>seamonkey-chat</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060578004" version="640">
   <red-def:name>seamonkey-js-debugger</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060578005" version="640">
   <red-def:name>seamonkey-nspr</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060578006" version="640">
   <red-def:name>seamonkey-nss-devel</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060578007" version="640">
   <red-def:name>seamonkey-devel</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060578008" version="640">
   <red-def:name>seamonkey-nss</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060578009" version="640">
   <red-def:name>seamonkey</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060578010" version="640">
   <red-def:name>seamonkey-mail</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060591001" version="636">
   <red-def:name>samba-common</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060591002" version="636">
   <red-def:name>samba</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060591003" version="636">
   <red-def:name>samba-swat</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060591004" version="636">
   <red-def:name>samba-client</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060602001" version="634">
   <red-def:name>wireshark</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060602002" version="634">
   <red-def:name>wireshark-gnome</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060604001" version="635">
   <red-def:name>ruby-libs</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060604002" version="635">
   <red-def:name>ruby-devel</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060604003" version="635">
   <red-def:name>ruby-docs</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060604004" version="635">
   <red-def:name>ruby-tcltk</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060604005" version="635">
   <red-def:name>ruby</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060604006" version="635">
   <red-def:name>ruby-mode</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060604007" version="635">
   <red-def:name>irb</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060635001" version="632">
   <red-def:name>XFree86-Mesa-libGLU</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060635002" version="632">
   <red-def:name>XFree86-ISO8859-2-75dpi-fonts</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060635003" version="632">
   <red-def:name>XFree86-font-utils</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060635004" version="632">
   <red-def:name>XFree86-base-fonts</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060635005" version="632">
   <red-def:name>XFree86-ISO8859-14-100dpi-fonts</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060635006" version="632">
   <red-def:name>XFree86-ISO8859-9-75dpi-fonts</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060635007" version="632">
   <red-def:name>XFree86-cyrillic-fonts</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060635008" version="632">
   <red-def:name>XFree86-ISO8859-2-100dpi-fonts</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060635009" version="632">
   <red-def:name>XFree86-xauth</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060635010" version="632">
   <red-def:name>XFree86-truetype-fonts</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060635011" version="632">
   <red-def:name>XFree86-xdm</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060635012" version="632">
   <red-def:name>XFree86-syriac-fonts</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060635013" version="632">
   <red-def:name>XFree86-75dpi-fonts</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060635014" version="632">
   <red-def:name>XFree86-Xvfb</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060635015" version="632">
   <red-def:name>XFree86</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060635016" version="632">
   <red-def:name>XFree86-tools</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060635017" version="632">
   <red-def:name>XFree86-ISO8859-14-75dpi-fonts</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060635018" version="632">
   <red-def:name>XFree86-doc</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060635019" version="632">
   <red-def:name>XFree86-devel</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060635020" version="632">
   <red-def:name>XFree86-ISO8859-15-75dpi-fonts</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060635021" version="632">
   <red-def:name>XFree86-libs</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060635022" version="632">
   <red-def:name>XFree86-ISO8859-15-100dpi-fonts</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060635023" version="632">
   <red-def:name>XFree86-Mesa-libGL</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060635024" version="632">
   <red-def:name>XFree86-100dpi-fonts</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060635025" version="632">
   <red-def:name>XFree86-sdk</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060635026" version="632">
   <red-def:name>XFree86-xfs</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060635027" version="632">
   <red-def:name>XFree86-libs-data</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060635028" version="632">
   <red-def:name>XFree86-twm</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060635029" version="632">
   <red-def:name>XFree86-Xnest</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060635030" version="632">
   <red-def:name>XFree86-ISO8859-9-100dpi-fonts</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060648001" version="634">
   <red-def:name>kdegraphics</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060648002" version="634">
   <red-def:name>kdegraphics-devel</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060661001" version="638">
   <red-def:name>openssl096b</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060661002" version="638">
   <red-def:name>openssl-perl</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060661003" version="638">
   <red-def:name>openssl</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060661004" version="638">
   <red-def:name>openssl-devel</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060663001" version="643">
   <red-def:name>ncompress</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060667001" version="633">
   <red-def:name>gzip</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060720001" version="635">
   <red-def:name>kdelibs</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060720002" version="635">
   <red-def:name>kdelibs-devel</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060725001" version="633">
   <red-def:name>qt</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060725002" version="633">
   <red-def:name>qt-devel</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060725003" version="633">
   <red-def:name>qt-config</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060725004" version="633">
   <red-def:name>qt-MySQL</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060725005" version="633">
   <red-def:name>qt-designer</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060725006" version="633">
   <red-def:name>qt-ODBC</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060725008" version="633">
   <red-def:name>qt-PostgreSQL</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060727001" version="636">
   <red-def:name>texinfo</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20060727002" version="636">
   <red-def:name>info</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070011001" version="633">
   <red-def:name>libgsf</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070011002" version="633">
   <red-def:name>libgsf-devel</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070018001" version="640">
   <red-def:name>fetchmail</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070044001" version="633">
   <red-def:name>bind-libs</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070044002" version="633">
   <red-def:name>bind-utils</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070044003" version="633">
   <red-def:name>bind-chroot</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070044004" version="633">
   <red-def:name>bind-devel</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070044005" version="633">
   <red-def:name>bind</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070086001" version="633">
   <red-def:name>gnomemeeting</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070095001" version="634">
   <red-def:name>krb5-server</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070095002" version="634">
   <red-def:name>krb5-devel</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070095003" version="634">
   <red-def:name>krb5-libs</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070095004" version="634">
   <red-def:name>krb5-workstation</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070123005" version="638">
   <red-def:name>cups-lpd</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070343001" version="633">
   <red-def:name>gimp</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070343002" version="633">
   <red-def:name>gimp-devel</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070343003" version="633">
   <red-def:name>gimp-perl</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070343005" version="633">
   <red-def:name>gimp-libs</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070353001" version="633">
   <red-def:name>evolution-devel</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070353002" version="633">
   <red-def:name>evolution</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070356001" version="632">
   <red-def:name>libpng-devel</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070356002" version="632">
   <red-def:name>libpng</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070356003" version="632">
   <red-def:name>libpng10-devel</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070356004" version="632">
   <red-def:name>libpng10</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070395001" version="638">
   <red-def:name>mod_perl-devel</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070395002" version="638">
   <red-def:name>mod_perl</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070406006" version="635">
   <red-def:name>openoffice.org2-langpack-bg_BG</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070406007" version="635">
   <red-def:name>openoffice.org2-langpack-de</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070406008" version="635">
   <red-def:name>openoffice.org2-langpack-et_EE</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070406009" version="635">
   <red-def:name>openoffice.org2-langpack-pt_PT</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070406010" version="635">
   <red-def:name>openoffice.org2-langpack-tr_TR</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070406011" version="635">
   <red-def:name>openoffice.org2-langpack-fi_FI</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070406012" version="635">
   <red-def:name>openoffice.org2-langpack-hu_HU</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070406013" version="635">
   <red-def:name>openoffice.org2-langpack-th_TH</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070406014" version="635">
   <red-def:name>openoffice.org2-langpack-ca_ES</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070406015" version="635">
   <red-def:name>openoffice.org2-pyuno</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070406016" version="635">
   <red-def:name>openoffice.org2-core</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070406017" version="635">
   <red-def:name>openoffice.org2-langpack-eu_ES</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070406018" version="635">
   <red-def:name>openoffice.org2-langpack-hi_IN</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070406019" version="635">
   <red-def:name>openoffice.org2-graphicfilter</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070406020" version="635">
   <red-def:name>openoffice.org2-langpack-zh_CN</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070406021" version="635">
   <red-def:name>openoffice.org2-langpack-nl</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070406022" version="635">
   <red-def:name>openoffice.org2-langpack-sl_SI</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070406023" version="635">
   <red-def:name>openoffice.org2-langpack-el_GR</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070406024" version="635">
   <red-def:name>openoffice.org2-calc</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070406025" version="635">
   <red-def:name>openoffice.org2-langpack-sr_CS</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070406026" version="635">
   <red-def:name>openoffice.org2-langpack-cs_CZ</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070406027" version="635">
   <red-def:name>openoffice.org2-langpack-ms_MY</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070406028" version="635">
   <red-def:name>openoffice.org2-langpack-ar</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070406029" version="635">
   <red-def:name>openoffice.org2-langpack-ru</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070406030" version="635">
   <red-def:name>openoffice.org2-xsltfilter</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070406031" version="635">
   <red-def:name>openoffice.org2-langpack-gu_IN</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070406032" version="635">
   <red-def:name>openoffice.org2-langpack-he_IL</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070406033" version="635">
   <red-def:name>openoffice.org2-langpack-bn</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070406034" version="635">
   <red-def:name>openoffice.org2-math</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070406035" version="635">
   <red-def:name>openoffice.org2-langpack-cy_GB</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070406036" version="635">
   <red-def:name>openoffice.org2-writer</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070406037" version="635">
   <red-def:name>openoffice.org2-langpack-ja_JP</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070406038" version="635">
   <red-def:name>openoffice.org2-langpack-sk_SK</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070406039" version="635">
   <red-def:name>openoffice.org2-langpack-hr_HR</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070406040" version="635">
   <red-def:name>openoffice.org2-langpack-pl_PL</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070406041" version="635">
   <red-def:name>openoffice.org2-langpack-zh_TW</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070406042" version="635">
   <red-def:name>openoffice.org2-langpack-lt_LT</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070406043" version="635">
   <red-def:name>openoffice.org2-impress</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070406044" version="635">
   <red-def:name>openoffice.org2-langpack-ko_KR</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070406045" version="635">
   <red-def:name>openoffice.org2-langpack-nb_NO</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070406046" version="635">
   <red-def:name>openoffice.org2-langpack-it</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070406047" version="635">
   <red-def:name>openoffice.org2-langpack-pa_IN</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070406048" version="635">
   <red-def:name>openoffice.org2-langpack-ta_IN</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070406049" version="635">
   <red-def:name>openoffice.org2-langpack-da_DK</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070406050" version="635">
   <red-def:name>openoffice.org2-base</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070406051" version="635">
   <red-def:name>openoffice.org2-langpack-es</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070406052" version="635">
   <red-def:name>openoffice.org2-emailmerge</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070406053" version="635">
   <red-def:name>openoffice.org2-langpack-pt_BR</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070406054" version="635">
   <red-def:name>openoffice.org2-langpack-af_ZA</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070406055" version="635">
   <red-def:name>openoffice.org2-langpack-zu_ZA</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070406056" version="635">
   <red-def:name>openoffice.org2-langpack-ga_IE</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070406057" version="635">
   <red-def:name>openoffice.org2-testtools</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070406058" version="635">
   <red-def:name>openoffice.org2-langpack-gl_ES</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070406059" version="635">
   <red-def:name>openoffice.org2-langpack-sv</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070406060" version="635">
   <red-def:name>openoffice.org2-draw</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070406061" version="635">
   <red-def:name>openoffice.org2-langpack-fr</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070406062" version="635">
   <red-def:name>openoffice.org2-langpack-nn_NO</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070406063" version="635">
   <red-def:name>openoffice.org2-javafilter</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070406064" version="635">
   <red-def:name>openoffice.org-langpack-sk_SK</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070406065" version="635">
   <red-def:name>openoffice.org-langpack-pt_BR</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070406066" version="635">
   <red-def:name>openoffice.org-langpack-hi_IN</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070406067" version="635">
   <red-def:name>openoffice.org-langpack-cs_CZ</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070406068" version="635">
   <red-def:name>openoffice.org-langpack-nr_ZA</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070406069" version="635">
   <red-def:name>openoffice.org-langpack-ve_ZA</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070406070" version="635">
   <red-def:name>openoffice.org-graphicfilter</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070406071" version="635">
   <red-def:name>openoffice.org-langpack-tr_TR</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070406072" version="635">
   <red-def:name>openoffice.org-writer</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070406073" version="635">
   <red-def:name>openoffice.org-langpack-nb_NO</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070406074" version="635">
   <red-def:name>openoffice.org-langpack-ss_ZA</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070406075" version="635">
   <red-def:name>openoffice.org-langpack-gl_ES</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070406076" version="635">
   <red-def:name>openoffice.org-langpack-zh_CN</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070406077" version="635">
   <red-def:name>openoffice.org-langpack-ga_IE</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070406078" version="635">
   <red-def:name>openoffice.org-testtools</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070406079" version="635">
   <red-def:name>openoffice.org-langpack-hu_HU</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070406080" version="635">
   <red-def:name>openoffice.org-langpack-hr_HR</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070406081" version="635">
   <red-def:name>openoffice.org-langpack-ca_ES</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070406082" version="635">
   <red-def:name>openoffice.org-math</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070406083" version="635">
   <red-def:name>openoffice.org-langpack-gu_IN</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070406084" version="635">
   <red-def:name>openoffice.org-langpack-ms_MY</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070406085" version="635">
   <red-def:name>openoffice.org-langpack-ko_KR</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070406086" version="635">
   <red-def:name>openoffice.org-langpack-fr</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070406087" version="635">
   <red-def:name>openoffice.org-langpack-cy_GB</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070406088" version="635">
   <red-def:name>openoffice.org-xsltfilter</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070406089" version="635">
   <red-def:name>openoffice.org-base</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070406090" version="635">
   <red-def:name>openoffice.org-langpack-xh_ZA</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070406091" version="635">
   <red-def:name>openoffice.org-langpack-lt_LT</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070406092" version="635">
   <red-def:name>openoffice.org-langpack-nso_ZA</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070406093" version="635">
   <red-def:name>openoffice.org-langpack-ja_JP</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070406094" version="635">
   <red-def:name>openoffice.org-langpack-tn_ZA</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070406095" version="635">
   <red-def:name>openoffice.org-langpack-mr_IN</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070406096" version="635">
   <red-def:name>openoffice.org-langpack-te_IN</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070406097" version="635">
   <red-def:name>openoffice.org-langpack-it</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070406098" version="635">
   <red-def:name>openoffice.org-langpack-et_EE</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070406099" version="635">
   <red-def:name>openoffice.org-emailmerge</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070406100" version="635">
   <red-def:name>openoffice.org-langpack-pt_PT</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070406101" version="635">
   <red-def:name>openoffice.org-draw</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070406102" version="635">
   <red-def:name>openoffice.org-langpack-nl</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070406103" version="635">
   <red-def:name>openoffice.org-langpack-zu_ZA</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070406104" version="635">
   <red-def:name>openoffice.org-langpack-bn</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070406105" version="635">
   <red-def:name>openoffice.org-langpack-as_IN</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070406106" version="635">
   <red-def:name>openoffice.org-langpack-pa_IN</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070406107" version="635">
   <red-def:name>openoffice.org-langpack-ar</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070406108" version="635">
   <red-def:name>openoffice.org-langpack-zh_TW</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070406109" version="635">
   <red-def:name>openoffice.org-langpack-de</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070406110" version="635">
   <red-def:name>openoffice.org-langpack-pl_PL</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070406111" version="635">
   <red-def:name>openoffice.org-langpack-nn_NO</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070406112" version="635">
   <red-def:name>openoffice.org-langpack-ta_IN</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070406113" version="635">
   <red-def:name>openoffice.org-langpack-da_DK</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070406114" version="635">
   <red-def:name>openoffice.org-langpack-ml_IN</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070406115" version="635">
   <red-def:name>openoffice.org-langpack-sr_CS</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070406116" version="635">
   <red-def:name>openoffice.org-langpack-th_TH</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070406117" version="635">
   <red-def:name>openoffice.org-langpack-ur</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070406118" version="635">
   <red-def:name>openoffice.org-pyuno</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070406119" version="635">
   <red-def:name>openoffice.org-langpack-bg_BG</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070406120" version="635">
   <red-def:name>openoffice.org-langpack-he_IL</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070406121" version="635">
   <red-def:name>openoffice.org-langpack-el_GR</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070406122" version="635">
   <red-def:name>openoffice.org-langpack-af_ZA</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070406123" version="635">
   <red-def:name>openoffice.org-core</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070406124" version="635">
   <red-def:name>openoffice.org-langpack-or_IN</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070406125" version="635">
   <red-def:name>openoffice.org-langpack-ts_ZA</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070406126" version="635">
   <red-def:name>openoffice.org-langpack-fi_FI</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070406127" version="635">
   <red-def:name>openoffice.org-langpack-eu_ES</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070406128" version="635">
   <red-def:name>openoffice.org-langpack-es</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070406129" version="635">
   <red-def:name>openoffice.org-impress</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070406130" version="635">
   <red-def:name>openoffice.org-langpack-sv</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070406131" version="635">
   <red-def:name>openoffice.org-calc</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070406132" version="635">
   <red-def:name>openoffice.org-langpack-sl_SI</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070406133" version="635">
   <red-def:name>openoffice.org-javafilter</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070406134" version="635">
   <red-def:name>openoffice.org-langpack-kn_IN</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070406135" version="635">
   <red-def:name>openoffice.org-langpack-st_ZA</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070406136" version="635">
   <red-def:name>openoffice.org-langpack-ru</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070430001" version="632">
   <red-def:name>openldap</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070430002" version="632">
   <red-def:name>openldap-clients</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070430003" version="632">
   <red-def:name>openldap-devel</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070430004" version="632">
   <red-def:name>openldap-servers</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070431001" version="634">
   <red-def:name>shadow-utils</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070465001" version="635">
   <red-def:name>pam-devel</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070465002" version="635">
   <red-def:name>pam</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070465003" version="635">
   <red-def:name>cdrecord</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070465004" version="635">
   <red-def:name>cdrecord-devel</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070465005" version="635">
   <red-def:name>mkisofs</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070469001" version="632">
   <red-def:name>gdb</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070473001" version="632">
   <red-def:name>gcc-objc</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070473002" version="632">
   <red-def:name>gcc-c++</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070473003" version="632">
   <red-def:name>libgcj</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070473004" version="632">
   <red-def:name>libgnat</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070473005" version="632">
   <red-def:name>libobjc</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070473006" version="632">
   <red-def:name>libf2c</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070473007" version="632">
   <red-def:name>gcc</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070473008" version="632">
   <red-def:name>gcc-g77</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070473009" version="632">
   <red-def:name>libgcc</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070473010" version="632">
   <red-def:name>gcc-java</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070473011" version="632">
   <red-def:name>libstdc++-devel</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070473012" version="632">
   <red-def:name>libgcj-devel</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070473013" version="632">
   <red-def:name>gcc-gnat</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070473014" version="632">
   <red-def:name>cpp</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070473015" version="632">
   <red-def:name>libstdc++</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070473016" version="632">
   <red-def:name>gcc-c++-ppc32</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070473017" version="632">
   <red-def:name>gcc-ppc32</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070674001" version="633">
   <red-def:name>perl-Net-DNS</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070721009" version="632">
   <red-def:name>qt-devel-docs</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070735001" version="632">
   <red-def:name>xpdf</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070740007" version="632">
   <red-def:name>bind-libbind-devel</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070740008" version="632">
   <red-def:name>bind-sdb</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070740009" version="632">
   <red-def:name>caching-nameserver</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070845001" version="634">
   <red-def:name>libvorbis</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070845002" version="634">
   <red-def:name>libvorbis-devel</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070873001" version="632">
   <red-def:name>star</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070878001" version="640">
   <red-def:name>cyrus-sasl-plain</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070878002" version="640">
   <red-def:name>cyrus-sasl-gssapi</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070878003" version="640">
   <red-def:name>cyrus-sasl-devel</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070878004" version="640">
   <red-def:name>cyrus-sasl</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070878005" version="640">
   <red-def:name>cyrus-sasl-md5</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070966001" version="635">
   <red-def:name>perl-CPAN</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070966002" version="635">
   <red-def:name>perl</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070966003" version="635">
   <red-def:name>perl-CGI</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070966004" version="635">
   <red-def:name>perl-DB_File</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070966005" version="635">
   <red-def:name>perl-suidperl</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070969001" version="635">
   <red-def:name>util-linux</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070969002" version="635">
   <red-def:name>losetup</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20070969003" version="635">
   <red-def:name>mount</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20071045001" version="633">
   <red-def:name>net-snmp-utils</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20071045002" version="633">
   <red-def:name>net-snmp-devel</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20071045003" version="633">
   <red-def:name>net-snmp-libs</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20071045004" version="633">
   <red-def:name>net-snmp-perl</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20071045005" version="633">
   <red-def:name>net-snmp</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20071063001" version="634">
   <red-def:name>pcre</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20071063002" version="634">
   <red-def:name>pcre-devel</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20080003001" version="635">
   <red-def:name>e2fsprogs</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20080003002" version="635">
   <red-def:name>e2fsprogs-devel</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20080003004" version="635">
   <red-def:name>e2fsprogs-libs</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20080032001" version="633">
   <red-def:name>libxml2-devel</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20080032002" version="633">
   <red-def:name>libxml2-python</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20080032003" version="633">
   <red-def:name>libxml2</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20080059001" version="636">
   <red-def:name>libsmi</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20080059002" version="636">
   <red-def:name>libsmi-devel</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20080131001" version="632">
   <red-def:name>netpbm-devel</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20080131002" version="632">
   <red-def:name>netpbm-progs</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20080131003" version="632">
   <red-def:name>netpbm</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20080134001" version="633">
   <red-def:name>expect</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20080134002" version="633">
   <red-def:name>tk-devel</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20080134003" version="633">
   <red-def:name>itcl</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20080134004" version="633">
   <red-def:name>tcl</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20080134005" version="633">
   <red-def:name>tk</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20080134006" version="633">
   <red-def:name>tclx</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20080134007" version="633">
   <red-def:name>expect-devel</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20080134008" version="633">
   <red-def:name>tix</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20080134009" version="633">
   <red-def:name>tcl-devel</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20080155001" version="633">
   <red-def:name>ghostscript</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20080155002" version="633">
   <red-def:name>hpijs</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20080155003" version="633">
   <red-def:name>ghostscript-devel</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20080155005" version="633">
   <red-def:name>ghostscript-gtk</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20080287001" version="632">
   <red-def:name>libxslt-devel</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20080287002" version="632">
   <red-def:name>libxslt</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20080287004" version="632">
   <red-def:name>libxslt-python</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20080533007" version="633">
   <red-def:name>selinux-policy-targeted</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20080533008" version="633">
   <red-def:name>selinux-policy-targeted-sources</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20080533009" version="633">
   <red-def:name>selinux-policy-mls</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20080533010" version="633">
   <red-def:name>selinux-policy</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20080533011" version="633">
   <red-def:name>selinux-policy-strict</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20080533012" version="633">
   <red-def:name>selinux-policy-devel</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20080544011" version="636">
   <red-def:name>php-pdo</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20080544014" version="636">
   <red-def:name>php-bcmath</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20080544015" version="636">
   <red-def:name>php-dba</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20080544017" version="636">
   <red-def:name>php-common</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20080544018" version="636">
   <red-def:name>php-soap</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20080544019" version="636">
   <red-def:name>php-cli</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20080544020" version="636">
   <red-def:name>php-xml</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20080576001" version="633">
   <red-def:name>rdesktop</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20080579001" version="632">
   <red-def:name>vsftpd</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20080584001" version="632">
   <red-def:name>pidgin</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20080584003" version="632">
   <red-def:name>finch</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20080584004" version="632">
   <red-def:name>libpurple</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20080584005" version="632">
   <red-def:name>finch-devel</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20080584006" version="632">
   <red-def:name>libpurple-tcl</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20080584007" version="632">
   <red-def:name>libpurple-perl</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20080584008" version="632">
   <red-def:name>pidgin-perl</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20080584009" version="632">
   <red-def:name>pidgin-devel</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20080584010" version="632">
   <red-def:name>libpurple-devel</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20080617001" version="645">
   <red-def:name>vim-minimal</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20080617002" version="645">
   <red-def:name>vim-common</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20080617003" version="645">
   <red-def:name>vim-X11</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20080617004" version="645">
   <red-def:name>vim-enhanced</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20080839001" version="633">
   <red-def:name>postfix</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20080839003" version="633">
   <red-def:name>postfix-pflogsumm</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20080893001" version="632">
   <red-def:name>bzip2-libs</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20080893002" version="632">
   <red-def:name>bzip2-devel</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20080893003" version="632">
   <red-def:name>bzip2</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20080939066" version="636">
   <red-def:name>openoffice.org-headless</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20080939084" version="636">
   <red-def:name>openoffice.org-sdk</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20080939137" version="636">
   <red-def:name>openoffice.org-sdk-doc</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20080946001" version="633">
   <red-def:name>ed</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20080965001" version="639">
   <red-def:name>lynx</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20081021001" version="632">
   <red-def:name>enscript</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20090004006" version="634">
   <red-def:name>openssl097a</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20090005001" version="636">
   <red-def:name>gnome-vfs2-devel</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20090005002" version="636">
   <red-def:name>gnome-vfs2</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20090005004" version="636">
   <red-def:name>gnome-vfs2-smb</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20090018001" version="638">
   <red-def:name>xterm</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20090261001" version="635">
   <red-def:name>vnc</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20090261002" version="635">
   <red-def:name>vnc-server</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20090269001" version="639">
   <red-def:name>gstreamer-plugins-devel</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20090269002" version="639">
   <red-def:name>gstreamer-plugins</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20090275001" version="635">
   <red-def:name>imap-devel</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20090275002" version="635">
   <red-def:name>imap-utils</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20090275003" version="635">
   <red-def:name>imap</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20090341001" version="635">
   <red-def:name>curl-devel</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20090341002" version="635">
   <red-def:name>curl</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20090474001" version="635">
   <red-def:name>acpid</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20090476001" version="635">
   <red-def:name>pango-devel</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20090476002" version="635">
   <red-def:name>pango</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20090476004" version="635">
   <red-def:name>evolution28-pango-devel</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20090476005" version="635">
   <red-def:name>evolution28-pango</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20091101001" version="635">
   <red-def:name>cscope</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20091154001" version="635">
   <red-def:name>dhclient</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20091154002" version="635">
   <red-def:name>dhcp</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20091154003" version="635">
   <red-def:name>dhcp-devel</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20091206001" version="646">
   <red-def:name>libxml</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20091206002" version="646">
   <red-def:name>libxml-devel</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20091463001" version="639">
   <red-def:name>newt-devel</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20091463002" version="639">
   <red-def:name>newt</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20091549001" version="632">
   <red-def:name>wget</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20091572001" version="635">
   <red-def:name>4Suite</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20091625001" version="639">
   <red-def:name>expat</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20091625002" version="639">
   <red-def:name>expat-devel</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20091646001" version="636">
   <red-def:name>libtool</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20091646002" version="636">
   <red-def:name>libtool-libs</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20091646004" version="636">
   <red-def:name>libtool-ltdl-devel</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20091646005" version="636">
   <red-def:name>libtool-ltdl</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20091651001" version="634">
   <red-def:name>ntp</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20100039019" version="639">
   <red-def:name>libgfortran</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20100039020" version="639">
   <red-def:name>libgcj4-src</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20100039021" version="639">
   <red-def:name>gcc4-java</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20100039022" version="639">
   <red-def:name>libgcj4</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20100039023" version="639">
   <red-def:name>libgomp</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20100039024" version="639">
   <red-def:name>libmudflap</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20100039025" version="639">
   <red-def:name>gcc4-gfortran</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20100039026" version="639">
   <red-def:name>gcc4</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20100039027" version="639">
   <red-def:name>libmudflap-devel</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20100039028" version="639">
   <red-def:name>gcc4-c++</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20100039029" version="639">
   <red-def:name>libgcj4-devel</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20100039030" version="639">
   <red-def:name>gcc-objc++</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20100039031" version="639">
   <red-def:name>libgcj-src</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20100039032" version="639">
   <red-def:name>gcc-gfortran</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20100145001" version="634">
   <red-def:name>cpio</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20100488006" version="637">
   <red-def:name>libsmbclient-devel</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20100488007" version="637">
   <red-def:name>libsmbclient</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20100488008" version="637">
   <red-def:name>samba3x-doc</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20100488009" version="637">
   <red-def:name>samba3x-common</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20100488010" version="637">
   <red-def:name>libtalloc</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20100488011" version="637">
   <red-def:name>samba3x-client</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20100488012" version="637">
   <red-def:name>libtdb</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20100488013" version="637">
   <red-def:name>samba3x-swat</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20100488014" version="637">
   <red-def:name>samba3x-winbind</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20100488015" version="637">
   <red-def:name>libtdb-devel</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20100488016" version="637">
   <red-def:name>samba3x-domainjoin-gui</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20100488017" version="637">
   <red-def:name>samba3x</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20100488018" version="637">
   <red-def:name>samba3x-winbind-devel</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20100488019" version="637">
   <red-def:name>tdb-tools</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20100488020" version="637">
   <red-def:name>libtalloc-devel</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20100720001" version="632">
   <red-def:name>mikmod</red-def:name>
  </red-def:rpminfo_object>
  <red-def:rpminfo_object id="oval:com.redhat.rhsa:obj:20100720002" version="632">
   <red-def:name>mikmod-devel</red-def:name>
  </red-def:rpminfo_object>
 </objects>
 <states>
  <red-def:rpminfo_state id="oval:com.redhat.rhba:ste:20070026001" version="634">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">2:3.1.6-7.el3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhba:ste:20070026002" version="634">
   <red-def:signature_keyid operation="equals">219180cddb42a60e</red-def:signature_keyid>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhba:ste:20070026003" version="634">
   <red-def:version operation="pattern match">^3[^\d]</red-def:version>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhba:ste:20070418001" version="632">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:5.50-35.EL3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060015001" version="644">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:7.31.30.EL-1</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060045001" version="638">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">7:2.5.STABLE3-6.3E.16</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060117001" version="637">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:4.1-10.EL3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060140001" version="639">
   <red-def:arch datatype="string" operation="pattern match">athlon|i686|ia32e|ia64|ppc64iseries|ppc64pseries|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.4.21-37.0.1.EL</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060140003" version="639">
   <red-def:arch datatype="string" operation="pattern match">athlon|i686|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.4.21-37.0.1.EL</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060140004" version="639">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.4.21-37.0.1.EL</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060140005" version="639">
   <red-def:arch datatype="string" operation="equals">i686</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.4.21-37.0.1.EL</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060140006" version="639">
   <red-def:arch datatype="string" operation="equals">i386</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.4.21-37.0.1.EL</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060144001" version="640">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.4.21-40.EL</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060144003" version="640">
   <red-def:arch datatype="string" operation="pattern match">athlon|i686|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.4.21-40.EL</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060144004" version="640">
   <red-def:arch datatype="string" operation="pattern match">athlon|i686|ia32e|ia64|ppc64iseries|ppc64pseries|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.4.21-40.EL</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060144005" version="640">
   <red-def:arch datatype="string" operation="equals">i686</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.4.21-40.EL</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060144006" version="640">
   <red-def:arch datatype="string" operation="equals">i386</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.4.21-40.EL</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060156001" version="636">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:0.10.14-1.EL3.1</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060159001" version="638">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">1:2.0.46-56.ent</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060159003" version="638">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.0.46-56.ent</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060159005" version="638">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.0.52-22.ent</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060159006" version="638">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">1:2.0.52-22.ent</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060159007" version="638">
   <red-def:version operation="pattern match">^4[^\d]</red-def:version>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060160001" version="644">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.0.7-67.9</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060160004" version="644">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.0.2-22.EL4.7</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060163001" version="632">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">1:1.1.17-13.3.36</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060163003" version="632">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">1:1.1.17-13.3.36</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060163005" version="632">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">1:1.1.22-0.rc1.9.10</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060163006" version="632">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">1:1.1.22-0.rc1.9.10</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060164001" version="637">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.0.1-4.ent.1</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060164004" version="637">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.0.1-7.1</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060178001" version="634">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:5.5.6-18</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060178003" version="634">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:5.5.6-18</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060178005" version="634">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:6.0.7.1-14</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060195001" version="638">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.13.25-14.RHEL3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060197001" version="635">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.2.3-6.2</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060197004" version="635">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.3.4-14.2</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060204001" version="640">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">3:2.1.5.1-25.rhel3.4</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060204004" version="640">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">3:2.1.5.1-34.rhel4.2</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060264001" version="638">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:8.12.11-4.RHEL3.4</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060264004" version="638">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:8.13.1-3.RHEL4.3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060266001" version="639">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.2.1-15</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060266004" version="639">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.2.6-3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060267001" version="641">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:0.2.5-0.7.rhel3.3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060267004" version="641">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:0.3.3-6.rhel4.1</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060271001" version="642">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.0.1-2.RHEL3.2</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060271004" version="642">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.0.1-3.RHEL4.3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060272001" version="638">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.2.3-5.RHEL3.3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060272003" version="638">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.2.3-5.RHEL3.3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060272004" version="638">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.1.30-9.RHEL3.7</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060272006" version="638">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.1.30-11.RHEL4.5</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060272007" version="638">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.2.3-10.RHEL4.1</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060276001" version="639">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:4.3.2-30.ent</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060276004" version="639">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:4.3.9-3.12</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060283001" version="636">
   <red-def:evr datatype="evr_string" operation="less than">0:1.4.6-5.el3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060283004" version="636">
   <red-def:evr datatype="evr_string" operation="less than">0:1.4.6-5.el4</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060298001" version="634">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:3.6.1p2-33.30.9</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060329001" version="643">
   <red-def:arch datatype="string" operation="pattern match">i386|ppc|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:0.9.2-2.4.8</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060368001" version="637">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:0.94.1-2</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060368003" version="637">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:0.94.1-2</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060420001" version="638">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:0.99.0-EL3.2</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060425001" version="635">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:3.5.7-25.el3.1</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060425003" version="635">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:3.5.7-25.el3.1</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060425005" version="635">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:3.6.1-10</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060425006" version="635">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:3.6.1-10</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060437001" version="652">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.4.21-47.EL</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060437003" version="652">
   <red-def:arch datatype="string" operation="pattern match">athlon|i686|ia32e|ia64|ppc64iseries|ppc64pseries|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.4.21-47.EL</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060437004" version="652">
   <red-def:arch datatype="string" operation="pattern match">athlon|i686|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.4.21-47.EL</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060437005" version="652">
   <red-def:arch datatype="string" operation="equals">i686</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.4.21-47.EL</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060437006" version="652">
   <red-def:arch datatype="string" operation="equals">i386</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.4.21-47.EL</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060486001" version="634">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">3:2.1.5.1-25.rhel3.5</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060486004" version="634">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">3:2.1.5.1-34.rhel4.3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060498001" version="635">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">1:4.10-20</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060500001" version="640">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.1.4-4.0.rhel3.2</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060500003" version="640">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.1.4-4.0.rhel3.2</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060500005" version="640">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.1.9-1.rhel4.4</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060500006" version="640">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.1.9-1.rhel4.4</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060515001" version="644">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:8.12.11-4.RHEL3.6</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060515004" version="644">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:8.13.1-3.RHEL4.5</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060525001" version="635">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:0.96.2-11.3E</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060525004" version="635">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:0.98.3-2.4E</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060526001" version="638">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:7.3.15-2</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060526003" version="638">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:7.3.15-2</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060526005" version="638">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:7.4.13-2.RHEL4.1</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060526006" version="638">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:7.4.13-2.RHEL4.1</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060547001" version="635">
   <red-def:evr datatype="evr_string" operation="less than">0:1.4.6-7.el3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060547004" version="635">
   <red-def:evr datatype="evr_string" operation="less than">0:1.4.6-7.el4</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060568001" version="638">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:4.3.2-33.ent</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060568004" version="638">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:4.3.9-3.15</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060571001" version="634">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.2.1-16</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060571004" version="634">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.2.6-5</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060573001" version="640">
   <red-def:arch datatype="string" operation="equals">i386</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.1.2-34.2.0.EL3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060573004" version="640">
   <red-def:arch datatype="string" operation="pattern match">i386|ppc</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.1.2-34.6.0.EL4</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060576001" version="637">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">6:3.1.3-5.11</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060576003" version="637">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">6:3.1.3-5.11</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060577001" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">5:1.4.1-3.5.rhel3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060577004" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">5:1.4.1-11.rhel4</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060578001" version="640">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.0.2-0.1.0.EL3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060591001" version="636">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:3.0.9-1.3E.10</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060591003" version="636">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:3.0.9-1.3E.10</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060591005" version="636">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:3.0.10-1.4E.6.2</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060591006" version="636">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:3.0.10-1.4E.6.2</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060600001" version="641">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">3:2.1.5.1-25.rhel3.7</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060600004" version="641">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">3:2.1.5.1-34.rhel4.5</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060602001" version="634">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:0.99.2-EL3.1</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060602004" version="634">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:0.99.2-EL4.1</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060603001" version="634">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:3.5.7-25.el3.4</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060603003" version="634">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:3.5.7-25.el3.4</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060603005" version="634">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:3.6.1-12</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060603006" version="634">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:3.6.1-12</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060604001" version="635">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.6.8-9.EL3.6</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060604003" version="635">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.6.8-9.EL3.6</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060604005" version="635">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.8.1-7.EL4.6</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060604006" version="635">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.8.1-7.EL4.6</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060608001" version="636">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.0.3-0.el3.1</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060615001" version="634">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.2.1-17</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060615004" version="634">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.2.6-6</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060619001" version="639">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.0.46-61.ent</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060619003" version="639">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">1:2.0.46-61.ent</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060619005" version="639">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.0.52-28.ent</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060619006" version="639">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">1:2.0.52-28.ent</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060633001" version="635">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:5.5.6-20</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060633003" version="635">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:5.5.6-20</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060633005" version="635">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:6.0.7.1-16</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060635001" version="632">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:4.3.0-111.EL</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060635003" version="632">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:4.3.0-111.EL</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060635004" version="632">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:4.3.0-111.EL</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060648001" version="634">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">7:3.1.3-3.10</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060658001" version="644">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:0.99.3-EL3.2</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060658004" version="644">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:0.99.3-EL4.2</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060661001" version="638">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:0.9.6b-16.43</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060661003" version="638">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:0.9.7a-33.18</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060661004" version="638">
   <red-def:arch datatype="string" operation="pattern match">i386|i686|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:0.9.7a-33.18</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060661006" version="638">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:0.9.6b-22.43</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060661007" version="638">
   <red-def:arch datatype="string" operation="pattern match">i386|i686|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:0.9.7a-43.11</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060661008" version="638">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:0.9.7a-43.11</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060661009" version="638">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:0.9.7a-43.11</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060663001" version="643">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:4.2.4-39.rhel3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060663004" version="643">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:4.2.4-43.rhel4</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060666001" version="634">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:4.3.0-113.EL</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060666003" version="634">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:4.3.0-113.EL</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060666004" version="634">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:4.3.0-113.EL</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060667001" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.3.3-13.rhel3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060667004" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.3.3-16.rhel4</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060668001" version="639">
   <red-def:evr datatype="evr_string" operation="less than">0:1.4.8-2.el3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060668004" version="639">
   <red-def:evr datatype="evr_string" operation="less than">0:1.4.8-2.el4</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060669001" version="642">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:4.3.2-36.ent</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060669004" version="642">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:4.3.9-3.18</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060676001" version="640">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.0.5-0.1.el3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060676004" version="640">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.0.5-0.1.el4</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060676005" version="640">
   <red-def:arch datatype="string" operation="pattern match">i386|ppc|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:0.10-0.4.el4</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060695001" version="642">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:0.9.7a-33.21</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060695003" version="642">
   <red-def:arch datatype="string" operation="pattern match">i386|i686|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:0.9.7a-33.21</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060695004" version="642">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:0.9.6b-16.46</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060695006" version="642">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:0.9.7a-43.14</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060695007" version="642">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:0.9.7a-43.14</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060695008" version="642">
   <red-def:arch datatype="string" operation="pattern match">i386|i686|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:0.9.7a-43.14</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060695009" version="642">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:0.9.6b-22.46</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060697001" version="639">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:3.6.1p2-33.30.12</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060697004" version="639">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:3.9p1-8.RHEL4.17</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060710001" version="637">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.4.21-47.0.1.EL</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060710003" version="637">
   <red-def:arch datatype="string" operation="pattern match">athlon|i686|ia32e|ia64|ppc64iseries|ppc64pseries|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.4.21-47.0.1.EL</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060710004" version="637">
   <red-def:arch datatype="string" operation="pattern match">athlon|i686|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.4.21-47.0.1.EL</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060710005" version="637">
   <red-def:arch datatype="string" operation="equals">i686</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.4.21-47.0.1.EL</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060710006" version="637">
   <red-def:arch datatype="string" operation="equals">i386</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.4.21-47.0.1.EL</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060713001" version="636">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.2.3-6.5</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060713004" version="636">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.3.4-14.3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060720001" version="635">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">6:3.1.3-6.12</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060720003" version="635">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">6:3.1.3-6.12</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060720005" version="635">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">6:3.3.1-6.RHEL4</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060720006" version="635">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">6:3.3.1-6.RHEL4</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060725001" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">1:3.1.2-14.RHEL3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060725003" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">1:3.1.2-14.RHEL3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060725005" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">1:3.3.3-10.RHEL4</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060725006" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">1:3.3.3-10.RHEL4</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060726001" version="636">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:0.99.4-EL3.1</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060726004" version="636">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:0.99.4-EL4.1</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060727001" version="636">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:4.5-3.el3.1</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060727004" version="636">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:4.7-5.el4.2</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060729001" version="636">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.6.8-9.EL3.8</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060729003" version="636">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.6.8-9.EL3.8</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060729005" version="636">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.8.1-7.EL4.8</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060729006" version="636">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.8.1-7.EL4.8</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060730001" version="636">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:4.3.2-37.ent</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060730004" version="636">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:4.3.9-3.22</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060734001" version="635">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.0.6-0.1.el3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060734004" version="635">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.0.6-0.1.el4</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060734005" version="635">
   <red-def:arch datatype="string" operation="pattern match">i386|ppc|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:0.10-0.5.el4</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060738001" version="634">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:3.6.1p2-33.30.13</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060738004" version="634">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:3.9p1-8.RHEL4.17.1</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060749001" version="632">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.13.25-15.RHEL3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060749004" version="632">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.14-12.RHEL4</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060754001" version="632">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.2.1-19</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060754004" version="632">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.2.6-8</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060759001" version="635">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.0.7-0.1.el3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060759004" version="635">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.0.7-0.1.el4</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20060759005" version="635">
   <red-def:arch datatype="string" operation="pattern match">i386|ppc|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:0.10-0.6.el4</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070001001" version="633">
   <red-def:arch datatype="string" operation="equals">i386</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.1.2-35.2.0.EL3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070001004" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ppc</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.1.5-6.6.0.EL4</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070002001" version="634">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:4.3.0-115.EL</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070002003" version="634">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:4.3.0-115.EL</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070002004" version="634">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:4.3.0-115.EL</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070011001" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.6.0-7</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070011004" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.10.1-2</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070015001" version="635">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:5.5.6-24</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070015003" version="635">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:5.5.6-24</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070015005" version="635">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:6.0.7.1-16.0.3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070018001" version="640">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:6.2.0-3.el3.3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070018004" version="640">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:6.2.5-6.el4.5</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070022001" version="633">
   <red-def:evr datatype="evr_string" operation="less than">0:1.4.8-4.el3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070022004" version="633">
   <red-def:evr datatype="evr_string" operation="less than">0:1.4.8-4.el4</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070033001" version="634">
   <red-def:arch datatype="string" operation="equals">i386</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.1.2-38.2.0.EL3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070033004" version="634">
   <red-def:arch datatype="string" operation="pattern match">i386|ppc</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.1.5-10.6.0.EL4</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070044001" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">20:9.2.4-20.EL3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070044004" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">20:9.2.4-24.EL4</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070044005" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">20:9.2.4-24.EL4</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070060001" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:3.0.9-1.3E.12</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070060003" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:3.0.9-1.3E.12</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070060005" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:3.0.10-1.4E.11</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070060006" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:3.0.10-1.4E.11</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070064001" version="632">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:7.3.18-1</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070064003" version="632">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:7.3.18-1</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070064005" version="632">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:7.4.16-1.RHEL4.1</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070064006" version="632">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:7.4.16-1.RHEL4.1</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070066001" version="635">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:0.99.5-EL3.1</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070066004" version="635">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:0.99.5-EL4.1</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070066006" version="635">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:0.99.5-1.el5</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070066007" version="635">
   <red-def:signature_keyid operation="equals">5326810137017186</red-def:signature_keyid>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070066008" version="635">
   <red-def:version operation="pattern match">^5[^\d]</red-def:version>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070076001" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:4.3.2-39.ent</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070076004" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:4.3.9-3.22.3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070077001" version="636">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.0.8-0.2.el3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070077004" version="636">
   <red-def:arch datatype="string" operation="pattern match">i386|ppc|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:0.10-0.7.el4</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070077005" version="636">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.0.8-0.2.el4</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070086001" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:0.96.0-5</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070086004" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.0.2-9</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070095001" version="634">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.2.7-61</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070095003" version="634">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.2.7-61</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070095005" version="634">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.3.4-46</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070095006" version="634">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.3.4-46</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070095008" version="634">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.5-23</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070095010" version="634">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.5-23</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070106001" version="632">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.2.1-20</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070106004" version="632">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.2.6-9</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070123001" version="638">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">1:1.1.17-13.3.42</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070123003" version="638">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">1:1.1.17-13.3.42</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070123005" version="638">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">1:1.1.22-0.rc1.9.18</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070123006" version="638">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">1:1.1.22-0.rc1.9.18</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070123008" version="638">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">1:1.2.4-11.5.1.el5</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070123010" version="638">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">1:1.2.4-11.5.1.el5</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070125001" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:4.3.0-120.EL</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070125003" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:4.3.0-120.EL</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070125004" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:4.3.0-120.EL</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070150001" version="632">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.1.4-6.el3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070150003" version="632">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.1.4-6.el3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070150005" version="632">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.1.9-5.el4</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070150006" version="632">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.1.9-5.el4</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070150008" version="632">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.2.1-17.el5</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070150010" version="632">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.2.1-17.el5</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070155001" version="632">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:4.3.2-40.ent</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070155004" version="632">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:4.3.9-3.22.4</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070322001" version="634">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">1:4.10-21.el3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070322004" version="634">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">1:4.18-5.rhel4.14</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070336001" version="632">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:7.3.19-1</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070336003" version="632">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:7.3.19-1</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070336005" version="632">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:7.4.17-1.RHEL4.1</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070336006" version="632">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:7.4.17-1.RHEL4.1</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070336008" version="632">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:8.1.9-1.el5</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070336010" version="632">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:8.1.9-1.el5</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070336011" version="632">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:8.1.9-1.el5</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070338001" version="632">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.0.1-2.RHEL3.4</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070338004" version="632">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.0.1-3.RHEL4.5</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070338006" version="632">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.1.3-1.2.el5</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070343001" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">1:1.2.3-20.3.el3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070343004" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">1:2.0.5-6.2.el4</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070343006" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">2:2.2.13-2.el5</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070343008" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">2:2.2.13-2.el5</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070345001" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:4.1-19.EL3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070345004" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">4:4.1-47.EL4</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070345006" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">4:4.1-70.el5</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070353001" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.4.5-20.el3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070353004" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.0.2-35.0.2.el4</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070354001" version="634">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:3.0.9-1.3E.13.2</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070354003" version="634">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:3.0.9-1.3E.13.2</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070354005" version="634">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:3.0.10-1.4E.12.2</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070354006" version="634">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:3.0.10-1.4E.12.2</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070354008" version="634">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:3.0.23c-2.el5.2.0.2</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070354010" version="634">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:3.0.23c-2.el5.2.0.2</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070356001" version="632">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">2:1.2.2-27</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070356003" version="632">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">2:1.2.2-27</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070356004" version="632">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.0.13-17</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070356005" version="632">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.0.13-17</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070356007" version="632">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">2:1.2.7-3.el4</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070356008" version="632">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">2:1.2.7-3.el4</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070356009" version="632">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.0.16-3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070356010" version="632">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.0.16-3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070356012" version="632">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">2:1.2.10-7.0.2</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070358001" version="632">
   <red-def:evr datatype="evr_string" operation="less than">0:1.4.8-6.el3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070358004" version="632">
   <red-def:evr datatype="evr_string" operation="less than">0:1.4.8-4.0.1.el4</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070358006" version="632">
   <red-def:evr datatype="evr_string" operation="less than">0:1.4.8-4.0.1.el5</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070384001" version="634">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.2.7-66</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070384003" version="634">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.2.7-66</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070385001" version="634">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:6.2.0-3.el3.4</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070385004" version="634">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:6.2.5-6.0.1.el4</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070385006" version="634">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:6.3.6-1.0.1.el5</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070386001" version="634">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">5:1.4.1-5.el3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070386004" version="634">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">5:1.4.1-12.0.3.el4</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070386006" version="634">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">5:1.4.2.2-3.0.2.el5</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070389001" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:0.96.2-12.3E</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070389004" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:0.98.3-2.4.0.1.el4</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070389006" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:0.98.6-2.1.0.1.el5</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070389008" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:0.98.6-2.1.0.1.el5</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070395001" version="638">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.99_09-12.ent</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070395004" version="638">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.99_16-4.5</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070395006" version="638">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.0.2-6.3.el5</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070395008" version="638">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.0.2-6.3.el5</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070402001" version="634">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.0.9-0.1.el3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070402004" version="634">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.0.9-2.el4</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070402005" version="634">
   <red-def:arch datatype="string" operation="pattern match">i386|ppc|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:0.10-0.8.el4</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070403001" version="634">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.1.4-7.el3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070403003" version="634">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.1.4-7.el3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070403005" version="634">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.1.9-6.el4</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070403006" version="634">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.1.9-6.el4</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070403008" version="634">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.2.1-19.el5</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070403010" version="634">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.2.1-19.el5</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070406001" version="635">
   <red-def:arch datatype="string" operation="equals">i386</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.1.2-39.2.0.EL3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070406004" version="635">
   <red-def:arch datatype="string" operation="pattern match">i386|ppc</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.1.5-10.6.0.1.EL4</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070406005" version="635">
   <red-def:arch datatype="string" operation="pattern match">i386|ppc</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">1:2.0.4-5.7.0.1.0</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070406007" version="635">
   <red-def:arch datatype="string" operation="pattern match">i386|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">1:2.0.4-5.4.17.2</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070430001" version="632">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.0.27-23</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070430003" version="632">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.0.27-23</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070431001" version="634">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">2:4.0.3-29.RHEL3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070436001" version="634">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.4.21-50.EL</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070436003" version="634">
   <red-def:arch datatype="string" operation="pattern match">athlon|i686|ia32e|ia64|ppc64iseries|ppc64pseries|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.4.21-50.EL</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070436004" version="634">
   <red-def:arch datatype="string" operation="pattern match">athlon|i686|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.4.21-50.EL</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070436005" version="634">
   <red-def:arch datatype="string" operation="equals">i686</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.4.21-50.EL</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070436006" version="634">
   <red-def:arch datatype="string" operation="equals">i386</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.4.21-50.EL</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070465001" version="635">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:0.75-72</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070465003" version="635">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">8:2.01.0.a32-0.EL3.6</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070469001" version="632">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:6.3.0.0-1.138.el3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070473001" version="632">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:3.2.3-59</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070473003" version="632">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:3.2.3-59</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070473004" version="632">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:3.2.3-59</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070473005" version="632">
   <red-def:arch datatype="string" operation="equals">ppc</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:3.2.3-59</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070494001" version="632">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">6:3.1.3-5.16</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070494003" version="632">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">6:3.1.3-5.16</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070494005" version="632">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">6:3.3.1-5.19.rhel4</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070494006" version="632">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">6:3.3.1-5.19.rhel4</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070494008" version="632">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">6:3.5.4-13.6.el5</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070509001" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.4.5-21.el3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070509004" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.0.2-35.0.4.el4</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070513001" version="638">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">1:1.2.3-20.9.el3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070513004" version="638">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">1:2.0.5-7.0.7.el4</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070513006" version="638">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">2:2.2.13-2.0.7.el5</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070513008" version="638">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">2:2.2.13-2.0.7.el5</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070533001" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.0.46-67.ent</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070533003" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">1:2.0.46-67.ent</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070662001" version="632">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.0.46-68.ent</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070662003" version="632">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">1:2.0.46-68.ent</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070662005" version="632">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.0.52-32.3.ent</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070662006" version="632">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">1:2.0.52-32.3.ent</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070671001" version="632">
   <red-def:arch datatype="string" operation="pattern match">athlon|i686|ia32e|ia64|ppc64iseries|ppc64pseries|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.4.21-51.EL</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070671003" version="632">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.4.21-51.EL</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070671004" version="632">
   <red-def:arch datatype="string" operation="pattern match">athlon|i686|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.4.21-51.EL</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070671005" version="632">
   <red-def:arch datatype="string" operation="equals">i686</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.4.21-51.EL</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070671006" version="632">
   <red-def:arch datatype="string" operation="equals">i386</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.4.21-51.EL</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070674001" version="633">
   <red-def:evr datatype="evr_string" operation="less than">0:0.31-4.el3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070674004" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:0.59-3.el5</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070720001" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">1:1.1.17-13.3.45</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070720003" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">1:1.1.17-13.3.45</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070720005" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">1:1.1.22-0.rc1.9.20.2</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070720006" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">1:1.1.22-0.rc1.9.20.2</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070720008" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">1:1.2.4-11.5.3.el5</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070720010" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">1:1.2.4-11.5.3.el5</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070721001" version="632">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">1:3.1.2-16.RHEL3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070721003" version="632">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">1:3.1.2-16.RHEL3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070721005" version="632">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">1:3.3.3-11.RHEL4</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070721006" version="632">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">1:3.3.3-11.RHEL4</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070721008" version="632">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">1:3.3.6-21.el5</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070721010" version="632">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">1:3.3.6-21.el5</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070722001" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.0.9-0.3.el3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070722004" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.0.9-4.el4</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070731001" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.0.7-67.10</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070731004" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.0.2-22.0.1.EL4.8</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070731006" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:3.0-33.1.el5</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070735001" version="632">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">1:2.02-10.RHEL3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070735004" version="632">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">1:3.00-12.RHEL4</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070740001" version="632">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">20:9.2.4-21.el3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070740004" version="632">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">20:9.2.4-27.0.1.el4</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070740005" version="632">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">20:9.2.4-27.0.1.el4</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070740007" version="632">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">30:9.3.3-9.0.1.el5</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070740009" version="632">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">30:9.3.3-9.0.1.el5</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070813001" version="632">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:0.9.7a-33.24</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070813003" version="632">
   <red-def:arch datatype="string" operation="pattern match">i386|i686|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:0.9.7a-33.24</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070845001" version="634">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">1:1.0-8.el3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070845003" version="634">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">1:1.0-8.el3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070845005" version="634">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">1:1.1.0-2.el4.5</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070845006" version="634">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">1:1.1.0-2.el4.5</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070845008" version="634">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">1:1.1.2-3.el5.0</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070848001" version="638">
   <red-def:arch datatype="string" operation="equals">i386</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.1.2-40.2.0.EL3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070848004" version="638">
   <red-def:arch datatype="string" operation="pattern match">i386|ppc</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.1.5-10.6.0.2.EL4</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070848005" version="638">
   <red-def:arch datatype="string" operation="pattern match">i386|ppc</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">1:2.0.4-5.7.0.2.0</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070848007" version="638">
   <red-def:arch datatype="string" operation="pattern match">i386|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">1:2.0.4-5.4.17.3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070873001" version="632">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.5a08-5</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070873004" version="632">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.5a25-8</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070873006" version="632">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.5a75-2</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070878001" version="640">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.1.15-15</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070878003" version="640">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.1.15-15</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070883001" version="632">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">1:3.1.2-17.RHEL3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070883003" version="632">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">1:3.1.2-17.RHEL3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070883005" version="632">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">1:3.3.3-13.RHEL4</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070883006" version="632">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">1:3.3.3-13.RHEL4</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070883008" version="632">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">1:3.3.6-23.el5</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070883010" version="632">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">1:3.3.6-23.el5</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070889001" version="635">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:4.3.2-43.ent</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070938001" version="631">
   <red-def:arch datatype="string" operation="pattern match">athlon|i686|ia32e|ia64|ppc64iseries|ppc64pseries|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.4.21-52.EL</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070938003" version="631">
   <red-def:arch datatype="string" operation="pattern match">athlon|i686|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.4.21-52.EL</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070938004" version="631">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.4.21-52.EL</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070938005" version="631">
   <red-def:arch datatype="string" operation="equals">i686</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.4.21-52.EL</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070938006" version="631">
   <red-def:arch datatype="string" operation="equals">i386</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.4.21-52.EL</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070966001" version="635">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">2:1.61-97.EL3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070966003" version="635">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">2:5.8.0-97.EL3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070966004" version="635">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">2:2.89-97.EL3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070966005" version="635">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">2:1.806-97.EL3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070966007" version="635">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">3:5.8.5-36.el4_5.2</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070966009" version="635">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">4:5.8.8-10.el5_0.2</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070969001" version="635">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.11y-31.24</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070969004" version="635">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.12a-17.el4_6.1</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070969006" version="635">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.13-0.45.el5_1.1</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070980001" version="632">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.0.9-0.5.el3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070980004" version="632">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.0.9-6.el4</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070992001" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">2:1.2.2-28</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070992003" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">2:1.2.2-28</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070992004" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.0.13-18</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070992005" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.0.13-18</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070992007" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">2:1.2.7-3.el4_5.1</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070992008" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">2:1.2.7-3.el4_5.1</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070992009" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.0.16-3.el4_5.1</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070992010" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.0.16-3.el4_5.1</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20070992012" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">2:1.2.10-7.1.el5_0.1</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20071013001" version="637">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:3.0.9-1.3E.14.1</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20071013003" version="637">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:3.0.9-1.3E.14.1</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20071023001" version="632">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">1:1.1.17-13.3.46</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20071023003" version="632">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">1:1.1.17-13.3.46</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20071028001" version="635">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.0.7-67.11</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20071030001" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">1:2.02-11.el3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20071045001" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:5.0.9-2.30E.23</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20071045003" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:5.0.9-2.30E.23</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20071045005" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:5.1.2-11.el4_6.11.1</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20071045006" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:5.1.2-11.el4_6.11.1</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20071045008" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">1:5.3.1-19.el5_1.1</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20071045010" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">1:5.3.1-19.el5_1.1</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20071049001" version="638">
   <red-def:arch datatype="string" operation="pattern match">athlon|i686|ia32e|ia64|ppc64iseries|ppc64pseries|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.4.21-53.EL</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20071049003" version="638">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.4.21-53.EL</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20071049004" version="638">
   <red-def:arch datatype="string" operation="pattern match">athlon|i686|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.4.21-53.EL</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20071049005" version="638">
   <red-def:arch datatype="string" operation="equals">i686</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.4.21-53.EL</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20071049006" version="638">
   <red-def:arch datatype="string" operation="equals">i386</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.4.21-53.EL</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20071063001" version="634">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:3.9-10.4</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20071063003" version="634">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:3.9-10.4</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20071076001" version="636">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.2.3-6.8</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20071076004" version="636">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.3.4-14.4.el4_6.1</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20071084001" version="638">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.0.9-0.7.el3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20071084004" version="638">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.0.9-7.el4</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20071114001" version="635">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:3.0.9-1.3E.14.3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20071114003" version="635">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:3.0.9-1.3E.14.3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20071114005" version="635">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:3.0.25b-1.el4_6.4</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20071114006" version="635">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:3.0.25b-1.el4_6.4</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20071114008" version="635">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:3.0.25b-1.el5_1.4</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20071114010" version="635">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:3.0.25b-1.el5_1.4</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20071130001" version="634">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">7:2.5.STABLE3-8.3E</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20071130004" version="634">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">7:2.5.STABLE14-1.4E.el4_6.1</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20071130006" version="634">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">7:2.6.STABLE6-5.el5_1.2</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080003001" version="635">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.32-15.4</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080003003" version="635">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.32-15.4</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080003005" version="635">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.35-12.11.el4_6.1</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080003006" version="635">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.35-12.11.el4_6.1</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080003008" version="635">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.39-10.el5_1.1</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080003010" version="635">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.39-10.el5_1.1</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080005001" version="634">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">1:2.0.46-70.ent</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080005003" version="634">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.0.46-70.ent</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080029001" version="639">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:4.3.0-126.EL</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080029003" version="639">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:4.3.0-126.EL</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080029004" version="639">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:4.3.0-126.EL</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080032001" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.5.10-8</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080032003" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.5.10-8</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080032005" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.6.16-10.1</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080032006" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.6.16-10.1</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080032008" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.6.26-2.1.2.1</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080032010" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.6.26-2.1.2.1</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080039001" version="634">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:7.3.21-1</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080039003" version="634">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:7.3.21-1</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080059001" version="636">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:0.4.5-3.el3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080059003" version="636">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:0.99.7-EL3.1</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080104001" version="634">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.0.9-0.9.el3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080104004" version="634">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.0.9-9.el4</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080131001" version="632">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:9.24-11.30.5</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080131003" version="632">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:9.24-11.30.5</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080131005" version="632">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:10.25-2.EL4.6.el4_6.1</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080131006" version="632">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:10.25-2.EL4.6.el4_6.1</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080134001" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:5.38.0-92.8</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080134003" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:8.3.5-92.8</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080134004" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:3.2-92.8</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080134005" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:8.3.5-92.8</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080134006" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:8.3-92.8</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080134007" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">1:8.1.4-92.8</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080145001" version="638">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:5.5.6-28</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080145003" version="638">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:5.5.6-28</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080145005" version="638">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:6.0.7.1-17.el4_6.1</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080145007" version="638">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:6.2.8.0-4.el5_1.1</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080145009" version="638">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:6.2.8.0-4.el5_1.1</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080153001" version="635">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">1:1.1.17-13.3.51</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080153003" version="635">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">1:1.1.17-13.3.51</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080155001" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:7.05-32.1.13</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080155003" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.3-32.1.13</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080155004" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:7.05-32.1.13</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080155006" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:7.07-33.2.el4_6.1</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080155007" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:7.07-33.2.el4_6.1</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080155009" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:8.15.2-9.1.el5_1.1</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080155011" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:8.15.2-9.1.el5_1.1</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080176001" version="637">
   <red-def:arch datatype="string" operation="equals">i386</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.1.2-41.2.0.EL3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080176004" version="637">
   <red-def:arch datatype="string" operation="pattern match">i386|ppc</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.1.5-10.6.0.3.EL4</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080181001" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.2.7-68</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080181003" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.2.7-68</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080196001" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:5.50-36.EL3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080206001" version="634">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">1:1.1.17-13.3.52</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080206003" version="634">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">1:1.1.17-13.3.52</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080206005" version="634">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">1:1.1.22-0.rc1.9.20.2.el4_6.6</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080206006" version="634">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">1:1.1.22-0.rc1.9.20.2.el4_6.6</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080208001" version="646">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.0.9-0.16.el3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080208004" version="646">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.0.9-15.el4</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080211001" version="638">
   <red-def:arch datatype="string" operation="equals">i386</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.4.21-57.EL</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080211003" version="638">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.4.21-57.EL</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080211004" version="638">
   <red-def:arch datatype="string" operation="equals">i686</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.4.21-57.EL</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080211005" version="638">
   <red-def:arch datatype="string" operation="pattern match">athlon|i686|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.4.21-57.EL</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080211006" version="638">
   <red-def:arch datatype="string" operation="pattern match">athlon|i686|ia32e|ia64|ppc64iseries|ppc64pseries|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.4.21-57.EL</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080214001" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">7:2.5.STABLE3-9.3E</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080214004" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">7:2.5.STABLE14-1.4E.el4_6.2</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080214006" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">7:2.6.STABLE6-5.el5_1.3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080223001" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.0.9-0.17.el3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080223004" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.0.9-16.el4</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080270001" version="635">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">1:1.0-10.el3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080270003" version="635">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">1:1.0-10.el3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080270005" version="635">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">1:1.1.0-3.el4_6.1</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080270006" version="635">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">1:1.1.0-3.el4_6.1</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080270008" version="635">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">1:1.1.2-3.el5_1.2</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080287001" version="632">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.0.33-6</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080287003" version="632">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.0.33-6</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080287005" version="632">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.1.11-1.el4_6.1</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080287006" version="632">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.1.11-1.el4_6.1</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080287008" version="632">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.1.17-2.el5_1.1</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080287010" version="632">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.1.17-2.el5_1.1</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080288001" version="634">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:3.0.9-1.3E.15</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080288003" version="634">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:3.0.9-1.3E.15</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080288005" version="634">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:3.0.25b-1.el4_6.5</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080288006" version="634">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:3.0.25b-1.el4_6.5</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080498001" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">1:1.1.17-13.3.53</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080498003" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">1:1.1.17-13.3.53</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080498005" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">1:1.1.22-0.rc1.9.20.2.el4_6.8</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080498006" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">1:1.1.22-0.rc1.9.20.2.el4_6.8</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080498008" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">1:1.2.4-11.18.el5_2.1</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080498010" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">1:1.2.4-11.18.el5_2.1</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080502001" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:4.3.0-128.EL</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080502003" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:4.3.0-128.EL</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080502004" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:4.3.0-128.EL</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080516001" version="638">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.4.5-22.el3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080516004" version="638">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.0.2-35.0.4.el4_6.2</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080522001" version="634">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">2:5.8.0-98.EL3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080522003" version="634">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">2:1.806-98.EL3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080522004" version="634">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">2:2.89-98.EL3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080522005" version="634">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">2:1.61-98.EL3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080522007" version="634">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">3:5.8.5-36.el4_6.3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080522009" version="634">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">4:5.8.8-10.el5_2.3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080529001" version="634">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:5.0.9-2.30E.24</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080529003" version="634">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:5.0.9-2.30E.24</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080529005" version="634">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:5.1.2-11.el4_6.11.3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080529006" version="634">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:5.1.2-11.el4_6.11.3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080529008" version="634">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">1:5.3.1-24.el5_2.1</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080529010" version="634">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">1:5.3.1-24.el5_2.1</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080533001" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">20:9.2.4-22.el3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080533004" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">20:9.2.4-28.0.1.el4</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080533005" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">20:9.2.4-28.0.1.el4</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080533006" version="633">
   <red-def:evr datatype="evr_string" operation="less than">0:1.17.30-2.150.el4</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080533008" version="633">
   <red-def:evr datatype="evr_string" operation="less than">0:2.4.6-137.1.el5_2</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080533010" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">30:9.3.4-6.0.2.P1.el5_2</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080533011" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">30:9.3.4-6.0.2.P1.el5_2</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080538001" version="637">
   <red-def:arch datatype="string" operation="equals">i386</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.1.2-42.2.0.EL3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080538004" version="637">
   <red-def:arch datatype="string" operation="pattern match">i386|ppc</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.1.5-10.6.0.5.EL4</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080544001" version="636">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:4.3.2-48.ent</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080544004" version="636">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:5.1.6-20.el5_2.1</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080547001" version="635">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.0.9-0.20.el3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080547004" version="635">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.0.9-16.3.el4_6</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080556001" version="638">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.1.4-10.el3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080556003" version="638">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.1.4-10.el3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080556005" version="638">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.1.9-8.el4.6</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080556006" version="638">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.1.9-8.el4.6</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080556008" version="638">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.2.1-20.el5_2</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080556010" version="638">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.2.1-20.el5_2</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080562001" version="635">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.6.8-12.el3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080562003" version="635">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.6.8-12.el3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080576001" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.2.0-3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080579001" version="632">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.2.1-3E.16</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080584001" version="632">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.5.1-2.el3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080584004" version="632">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.5.1-2.el4</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080584006" version="632">
   <red-def:arch datatype="string" operation="pattern match">i386|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.3.1-2.el5_2</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080599001" version="637">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.0.9-0.22.el3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080599004" version="637">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.0.9-16.4.el4_6</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080599005" version="637">
   <red-def:arch datatype="string" operation="pattern match">i386|ppc|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:0.10-0.8.1.el4</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080617001" version="645">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">1:6.3.046-0.30E.11</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080617004" version="645">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">1:6.3.046-1.el4_7.5z</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080836001" version="637">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.5.10-11</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080836003" version="637">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.5.10-11</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080836005" version="637">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.6.16-12.3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080836006" version="637">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.6.16-12.3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080836008" version="637">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.6.26-2.1.2.4</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080836010" version="637">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.6.26-2.1.2.4</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080839001" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">2:2.0.16-14.1.RHEL3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080839004" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">2:2.2.10-1.2.1.el4_7</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080839006" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">2:2.3.3-2.1.el5_2</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080849001" version="635">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:0.2.5-0.7.rhel3.5</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080849004" version="635">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:0.3.3-7.el4_7</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080849006" version="635">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:0.6.5-9.el5_2.3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080863001" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:3.5.7-31.el3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080863003" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:3.5.7-31.el3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080882001" version="634">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.0.9-0.24.el3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080882004" version="634">
   <red-def:arch datatype="string" operation="pattern match">i386|ppc|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:0.10-0.10.el4</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080882005" version="634">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.0.9-26.el4</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080884001" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.5.10-13</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080884003" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.5.10-13</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080884005" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.6.16-12.5</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080884006" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.6.16-12.5</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080884008" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.6.26-2.1.2.6</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080884010" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.6.26-2.1.2.6</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080890001" version="632">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.0.3-EL3.3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080890004" version="632">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.0.3-3.el4_7</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080890006" version="632">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.0.3-4.el5_2</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080893001" version="632">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.0.2-12.EL3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080893003" version="632">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.0.2-12.EL3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080893005" version="632">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.0.2-14.el4_7</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080893006" version="632">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.0.2-14.el4_7</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080893008" version="632">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.0.3-4.el5_2</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080896001" version="635">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.6.8-13.el3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080896003" version="635">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.6.8-13.el3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080937001" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">1:1.1.17-13.3.54</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080937003" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">1:1.1.17-13.3.54</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080937005" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">1:1.1.22-0.rc1.9.27.el4_7.1</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080937006" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">1:1.1.22-0.rc1.9.27.el4_7.1</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080937008" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">1:1.2.4-11.18.el5_2.2</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080937010" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">1:1.2.4-11.18.el5_2.2</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080939001" version="636">
   <red-def:arch datatype="string" operation="equals">i386</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.1.2-43.2.0.EL3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080939004" version="636">
   <red-def:arch datatype="string" operation="pattern match">i386|ppc</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.1.5-10.6.0.7.EL4</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080939005" version="636">
   <red-def:arch datatype="string" operation="pattern match">i386|ppc</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">1:2.0.4-5.7.0.6.0</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080939007" version="636">
   <red-def:arch datatype="string" operation="pattern match">i386|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">1:2.3.0-6.5.4.el5_2</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080946001" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:0.2-33.30E.1</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080946004" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:0.2-36.el4_7.1</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080946006" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:0.2-39.el5_2</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080965001" version="639">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.8.5-11.3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080965004" version="639">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.8.5-18.2.el4_7.1</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080965006" version="639">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.8.5-28.1.el5_2.1</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080967001" version="634">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.0.46-71.ent</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080967003" version="634">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">1:2.0.46-71.ent</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080967005" version="634">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">1:2.0.52-41.ent.2</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080967006" version="634">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.0.52-41.ent.2</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080967008" version="634">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.2.3-11.el5_2.4</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080967010" version="634">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">1:2.2.3-11.el5_2.4</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080967011" version="634">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.2.3-11.el5_2.4</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080971001" version="636">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:5.0.9-2.30E.25</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080971003" version="636">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:5.0.9-2.30E.25</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080971005" version="636">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:5.1.2-13.el4_7.2</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080971006" version="636">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:5.1.2-13.el4_7.2</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080971008" version="636">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">1:5.3.1-24.el5_2.2</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080971010" version="636">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">1:5.3.1-24.el5_2.2</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080973001" version="640">
   <red-def:arch datatype="string" operation="pattern match">athlon|i686|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.4.21-58.EL</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080973003" version="640">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.4.21-58.EL</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080973004" version="640">
   <red-def:arch datatype="string" operation="pattern match">athlon|i686|ia32e|ia64|ppc64iseries|ppc64pseries|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.4.21-58.EL</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080973005" version="640">
   <red-def:arch datatype="string" operation="equals">i386</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.4.21-58.EL</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080973006" version="640">
   <red-def:arch datatype="string" operation="equals">i686</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.4.21-58.EL</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080977001" version="636">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.0.9-0.25.el3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080977004" version="636">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.0.9-28.el4</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080988001" version="636">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.5.10-14</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080988003" version="636">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.5.10-14</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080988005" version="636">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.6.16-12.6</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080988006" version="636">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.6.16-12.6</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080988008" version="636">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.6.26-2.1.2.7</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20080988010" version="636">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.6.26-2.1.2.7</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20081021001" version="632">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.6.1-24.7</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20081021004" version="632">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.6.1-33.el4_7.1</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20081028001" version="637">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">1:1.1.17-13.3.55</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20081028003" version="637">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">1:1.1.17-13.3.55</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20081037001" version="637">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.0.9-0.29.el3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20081037004" version="637">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.0.9-32.el4</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20090004001" version="634">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:0.9.7a-33.25</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20090004003" version="634">
   <red-def:arch datatype="string" operation="pattern match">i386|i686|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:0.9.7a-33.25</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20090004004" version="634">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:0.9.6b-16.49</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20090004006" version="634">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:0.9.7a-43.17.el4_7.2</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20090004007" version="634">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:0.9.7a-43.17.el4_7.2</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20090004008" version="634">
   <red-def:arch datatype="string" operation="pattern match">i386|i686|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:0.9.7a-43.17.el4_7.2</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20090004009" version="634">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:0.9.6b-22.46.el4_7</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20090004011" version="634">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:0.9.7a-9.el5_2.1</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20090004013" version="634">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:0.9.8b-10.el5_2.1</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20090004014" version="634">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:0.9.8b-10.el5_2.1</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20090004015" version="634">
   <red-def:arch datatype="string" operation="pattern match">i386|i686|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:0.9.8b-10.el5_2.1</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20090005001" version="636">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.2.5-2E.3.3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20090005004" version="636">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.8.2-8.7.el4_7.2</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20090010001" version="636">
   <red-def:evr datatype="evr_string" operation="less than">0:1.4.8-8.el3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20090010004" version="636">
   <red-def:evr datatype="evr_string" operation="less than">0:1.4.8-5.el4_7.2</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20090010006" version="636">
   <red-def:evr datatype="evr_string" operation="less than">0:1.4.8-5.el5_2.2</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20090018001" version="638">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:179-11.EL3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20090018004" version="638">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:192-8.el4_7.2</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20090018006" version="638">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:215-5.el5_2.2</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20090020001" version="636">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">20:9.2.4-23.el3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20090020004" version="636">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">20:9.2.4-30.el4_7.1</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20090020005" version="636">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">20:9.2.4-30.el4_7.1</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20090020007" version="636">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">30:9.3.4-6.0.3.P1.el5_2</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20090020009" version="636">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">30:9.3.4-6.0.3.P1.el5_2</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20090057001" version="633">
   <red-def:evr datatype="evr_string" operation="less than">0:1.4.8-9.el3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20090057004" version="633">
   <red-def:evr datatype="evr_string" operation="less than">0:1.4.8-5.el4_7.3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20090057006" version="633">
   <red-def:evr datatype="evr_string" operation="less than">0:1.4.8-5.el5_2.3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20090257001" version="634">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.0.9-0.32.el3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20090257004" version="634">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.0.9-35.el4</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20090261001" version="635">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:4.0-0.beta4.1.8</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20090261004" version="635">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:4.0-12.el4_7.1</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20090261006" version="635">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:4.1.2-14.el5_3.1</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20090269001" version="639">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:0.6.0-19</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20090275001" version="635">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">1:2002d-15</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20090295001" version="644">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:5.0.9-2.30E.27</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20090295003" version="644">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:5.0.9-2.30E.27</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20090308001" version="634">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">1:1.1.17-13.3.56</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20090308003" version="634">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">1:1.1.17-13.3.56</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20090313001" version="631">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.0.6-EL3.3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20090313004" version="631">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.0.6-2.el4_7</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20090313006" version="631">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.0.6-2.el5_3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20090325001" version="634">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.0.9-0.34.el3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20090325004" version="634">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.0.9-38.el4</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20090329001" version="655">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.1.4-12.el3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20090329003" version="655">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.1.4-12.el3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20090329005" version="655">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.1.9-10.el4.7</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20090329006" version="655">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.1.9-10.el4.7</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20090337001" version="641">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:4.3.2-51.ent</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20090337004" version="641">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:4.3.9-3.22.15</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20090340001" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">2:1.2.2-29</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20090340003" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">2:1.2.2-29</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20090340004" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.0.13-20</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20090340005" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.0.13-20</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20090341001" version="635">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:7.10.6-9.rhel3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20090341003" version="635">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:7.10.6-9.rhel3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20090341005" version="635">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:7.12.1-11.1.el4_7.1</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20090341006" version="635">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:7.12.1-11.1.el4_7.1</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20090341008" version="635">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:7.15.5-2.1.el5_3.4</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20090345001" version="641">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:7.05-32.1.17</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20090345003" version="641">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.3-32.1.17</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20090345004" version="641">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:7.05-32.1.17</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20090345006" version="641">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:7.07-33.2.el4_7.5</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20090345007" version="641">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:7.07-33.2.el4_7.5</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20090345009" version="641">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:8.15.2-9.4.el5_3.4</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20090345011" version="641">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:8.15.2-9.4.el5_3.4</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20090358001" version="639">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.4.5-25.el3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20090398001" version="637">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.0.9-0.36.el3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20090398004" version="637">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.0.9-40.el4</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20090410001" version="632">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.2.7-70</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20090410003" version="632">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.2.7-70</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20090420001" version="644">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:7.05-32.1.20</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20090420003" version="644">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.3-32.1.20</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20090420004" version="644">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:7.05-32.1.20</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20090420006" version="644">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:7.07-33.2.el4_7.8</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20090420007" version="644">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:7.07-33.2.el4_7.8</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20090428001" version="637">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">1:1.1.17-13.3.58</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20090428003" version="637">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">1:1.1.17-13.3.58</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20090430001" version="637">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">1:2.02-14.el3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20090430004" version="637">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">1:3.00-20.el4</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20090437001" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.0.9-0.37.el3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20090437004" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.0.9-41.el4</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20090474001" version="635">
   <red-def:arch datatype="string" operation="pattern match">ia64|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.0.2-4</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20090474004" version="635">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.0.3-2.el4_7.1</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20090474006" version="635">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.0.4-7.el5_3.1</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20090476001" version="635">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.2.5-8</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20090476003" version="635">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.2.5-8</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20090476005" version="635">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.6.0-14.4_7</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20090476006" version="635">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.6.0-14.4_7</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20090476007" version="635">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.14.9-11.el4_7</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20090476009" version="635">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.14.9-5.el5_3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20091059001" version="639">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.5.1-3.el3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20091066001" version="640">
   <red-def:evr datatype="evr_string" operation="less than">0:1.4.8-13.el3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20091066004" version="640">
   <red-def:evr datatype="evr_string" operation="less than">0:1.4.8-5.el4_8.5</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20091066006" version="640">
   <red-def:evr datatype="evr_string" operation="less than">0:1.4.8-5.el5_3.7</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20091083001" version="649">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">1:1.1.17-13.3.62</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20091083003" version="649">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">1:1.1.17-13.3.62</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20091083005" version="649">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">1:1.1.22-0.rc1.9.32.el4_8.3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20091083006" version="649">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">1:1.1.22-0.rc1.9.32.el4_8.3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20091096001" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.0.9-0.38.el3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20091096004" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.0.9-43.el4_8</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20091100001" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.0.8-EL3.1</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20091100004" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.0.8-1.el4_8.1</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20091100006" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.0.8-1.el5_3.1</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20091101001" version="635">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:15.5-16.RHEL3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20091101004" version="635">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:15.5-10.RHEL4.3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20091108001" version="637">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.0.46-73.ent</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20091108003" version="637">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">1:2.0.46-73.ent</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20091124001" version="632">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:5.0.9-2.30E.28</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20091124003" version="632">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:5.0.9-2.30E.28</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20091128001" version="635">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">6:3.1.3-6.13</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20091128003" version="635">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">6:3.1.3-6.13</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20091134001" version="635">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.0.9-0.39.el3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20091134004" version="635">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.0.9-44.el4_8</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20091154001" version="635">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">7:3.0.1-10.2_EL3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20091159001" version="640">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:3.5.7-33.el3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20091159003" version="640">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:3.5.7-33.el3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20091159005" version="640">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:3.6.1-12.el4_8.4</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20091159006" version="640">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:3.6.1-12.el4_8.4</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20091159008" version="640">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:3.8.2-7.el5_3.4</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20091163001" version="632">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.0.9-0.40.el3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20091163004" version="632">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.0.9-45.el4_8</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20091178001" version="641">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.2.3-6.11</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20091181001" version="636">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">20:9.2.4-25.el3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20091185001" version="637">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.0.9-0.41.el3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20091205001" version="641">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.0.46-75.ent</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20091205003" version="641">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">1:2.0.46-75.ent</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20091206001" version="646">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">1:1.8.17-9.3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20091206003" version="646">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">1:1.8.17-9.3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20091206004" version="646">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.5.10-15</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20091206005" version="646">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.5.10-15</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20091206007" version="646">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.6.16-12.7</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20091206008" version="646">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.6.16-12.7</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20091206010" version="646">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.6.26-2.1.2.8</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20091206012" version="646">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.6.26-2.1.2.8</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20091209001" version="638">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:7.10.6-10.rhel3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20091209003" version="638">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:7.10.6-10.rhel3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20091209005" version="638">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:7.12.1-11.1.el4_8.1</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20091209006" version="638">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:7.12.1-11.1.el4_8.1</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20091209008" version="638">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:7.15.5-2.1.el5_3.5</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20091218001" version="638">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.5.1-4.el3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20091218004" version="638">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.5.9-1.el4</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20091218006" version="638">
   <red-def:arch datatype="string" operation="pattern match">i386|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.5.9-1.el5</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20091219001" version="635">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">1:1.0-11.el3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20091219003" version="635">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">1:1.0-11.el3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20091219005" version="635">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">1:1.1.0-3.el4_8.2</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20091219006" version="635">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">1:1.1.0-3.el4_8.2</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20091219008" version="635">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">1:1.1.2-3.el5_3.3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20091233001" version="641">
   <red-def:arch datatype="string" operation="pattern match">athlon|i686|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.4.21-60.EL</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20091233003" version="641">
   <red-def:arch datatype="string" operation="pattern match">athlon|i686|ia32e|ia64|ppc64iseries|ppc64pseries|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.4.21-60.EL</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20091233004" version="641">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.4.21-60.EL</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20091233005" version="641">
   <red-def:arch datatype="string" operation="equals">i386</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.4.21-60.EL</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20091233006" version="641">
   <red-def:arch datatype="string" operation="equals">i686</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.4.21-60.EL</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20091426001" version="637">
   <red-def:arch datatype="string" operation="equals">i386</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.1.2-44.2.0.EL3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20091426004" version="637">
   <red-def:arch datatype="string" operation="pattern match">i386|ppc</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.1.5-10.6.0.7.EL4.1</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20091426005" version="637">
   <red-def:arch datatype="string" operation="pattern match">i386|ppc</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">1:2.0.4-5.7.0.6.0.1</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20091426007" version="637">
   <red-def:arch datatype="string" operation="pattern match">i386|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">1:2.3.0-6.11.el5_4.1</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20091427001" version="646">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:6.2.0-3.el3.5</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20091427004" version="646">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:6.2.5-6.0.1.el4_8.1</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20091427006" version="646">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:6.3.6-1.1.el5_3.1</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20091432001" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.0.9-0.45.el3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20091463001" version="639">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:0.51.5-2.el3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20091463003" version="639">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:0.51.5-2.el3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20091463005" version="639">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:0.51.6-10.el4_8.1</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20091463006" version="639">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:0.51.6-10.el4_8.1</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20091463008" version="639">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:0.52.2-12.el5_4.1</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20091485001" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:7.3.21-2</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20091485003" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:7.3.21-2</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20091490001" version="638">
   <red-def:evr datatype="evr_string" operation="less than">0:1.4.8-16.el3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20091490004" version="638">
   <red-def:evr datatype="evr_string" operation="less than">0:1.4.8-5.el4_8.8</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20091490006" version="638">
   <red-def:evr datatype="evr_string" operation="less than">0:1.4.8-5.el5_4.10</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20091500001" version="635">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">1:2.02-17.el3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20091526001" version="635">
   <red-def:arch datatype="string" operation="pattern match">i386|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:3Desktop-13.9.7</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20091526003" version="635">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:3WS-13.9.7</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20091526004" version="635">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:3ES-13.9.7</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20091526005" version="635">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:3AS-13.9.7</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20091528001" version="635">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:3.0.9-1.3E.16</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20091528003" version="635">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:3.0.9-1.3E.16</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20091531001" version="636">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.0.9-0.47.el3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20091531004" version="636">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.0.9-50.el4_8</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20091535001" version="635">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.5.1-6.el3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20091549001" version="632">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.10.2-0.30E.1</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20091549004" version="632">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.10.2-1.el4_8.1</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20091549006" version="632">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.11.4-2.el5_4.1</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20091550001" version="654">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.4.21-63.EL</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20091550003" version="654">
   <red-def:arch datatype="string" operation="pattern match">athlon|i686|ia32e|ia64|ppc64iseries|ppc64pseries|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.4.21-63.EL</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20091550004" version="654">
   <red-def:arch datatype="string" operation="pattern match">athlon|i686|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.4.21-63.EL</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20091550005" version="654">
   <red-def:arch datatype="string" operation="equals">i686</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.4.21-63.EL</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20091550006" version="654">
   <red-def:arch datatype="string" operation="equals">i386</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.4.21-63.EL</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20091561001" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">1:1.0-12.el3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20091561003" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">1:1.0-12.el3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20091561005" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">1:1.1.0-3.el4_8.3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20091561006" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">1:1.1.0-3.el4_8.3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20091561008" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">1:1.1.2-3.el5_4.4</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20091572001" version="635">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:0.11.1-15</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20091572004" version="635">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.0-3.el4_8.1</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20091579001" version="645">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.0.46-77.ent</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20091579003" version="645">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">1:2.0.46-77.ent</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20091579005" version="645">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.2.3-31.el5_4.2</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20091579007" version="645">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.2.3-31.el5_4.2</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20091579008" version="645">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">1:2.2.3-31.el5_4.2</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20091625001" version="639">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.95.5-6.2</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20091625003" version="639">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.95.5-6.2</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20091625005" version="639">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.95.7-4.el4_8.2</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20091625007" version="639">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.95.8-8.3.el5_4.2</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20091646001" version="636">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.4.3-7</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20091646003" version="636">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.4.3-7</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20091646005" version="636">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.5.6-5.el4_8</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20091646006" version="636">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.5.6-5.el4_8</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20091646008" version="636">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.5.22-7.el5_4</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20091646010" version="636">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.5.22-7.el5_4</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20091651001" version="634">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:4.1.2-6.el3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20091673001" version="637">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.0.9-0.48.el3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20091673004" version="637">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.0.9-51.el4_8</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100029001" version="638">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.2.7-71</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100029003" version="638">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.2.7-71</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100029005" version="638">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.3.4-62.el4_8.1</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100029006" version="638">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.3.4-62.el4_8.1</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100029008" version="638">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.6.1-36.el5_4.1</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100029010" version="638">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.6.1-36.el5_4.1</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100039001" version="639">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:3.2.3-60</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100039003" version="639">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:3.2.3-60</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100039004" version="639">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:3.2.3-60</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100039005" version="639">
   <red-def:arch datatype="string" operation="equals">ppc</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:3.2.3-60</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100039007" version="639">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:4.1.2-44.EL4_8.1</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100039008" version="639">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:4.1.2-44.EL4_8.1</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100039009" version="639">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:3.4.6-11.el4_8.1</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100039010" version="639">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:3.4.6-11.el4_8.1</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100039011" version="639">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:3.4.6-11.el4_8.1</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100039012" version="639">
   <red-def:arch datatype="string" operation="equals">ppc</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:3.4.6-11.el4_8.1</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100039014" version="639">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:4.1.2-46.el5_4.2</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100039016" version="639">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:4.1.2-46.el5_4.2</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100039017" version="639">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:4.1.2-46.el5_4.2</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100040001" version="643">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:4.3.2-54.ent</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100040004" version="643">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:4.3.9-3.29</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100040006" version="643">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:5.1.6-24.el5_4.5</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100061001" version="635">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.3.3-15.rhel3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100061004" version="635">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.3.3-18.el4_8.1</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100061006" version="635">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.3.5-11.el5_4.1</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100101001" version="645">
   <red-def:arch datatype="string" operation="equals">i386</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.1.2-46.2.0.EL3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100101004" version="645">
   <red-def:arch datatype="string" operation="pattern match">i386|ppc</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.1.5-10.6.0.7.EL4.3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100101005" version="645">
   <red-def:arch datatype="string" operation="pattern match">i386|ppc</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">1:2.0.4-5.7.0.6.1.el4_8.3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100101007" version="645">
   <red-def:arch datatype="string" operation="pattern match">i386|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">1:2.3.0-6.11.el5_4.4</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100113001" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.0.9-0.50.el3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100113004" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.0.9-52.el4_8</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100140001" version="640">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.2.5-10</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100140003" version="640">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.2.5-10</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100140005" version="640">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.14.9-13.el4_8</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100140006" version="640">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.6.0-16.el4_8</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100140007" version="640">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.6.0-16.el4_8</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100140009" version="640">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.14.9-8.el5</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100142001" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.13.25-16.RHEL3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100145001" version="634">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.5-6.RHEL3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100163001" version="635">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:0.9.7a-33.26</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100163003" version="635">
   <red-def:arch datatype="string" operation="pattern match">i386|i686|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:0.9.7a-33.26</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100163005" version="635">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:0.9.7a-43.17.el4_8.5</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100163006" version="635">
   <red-def:arch datatype="string" operation="pattern match">i386|i686|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:0.9.7a-43.17.el4_8.5</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100163007" version="635">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:0.9.7a-43.17.el4_8.5</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100173001" version="632">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:0.9.6b-16.50</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100173004" version="632">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:0.9.6b-22.46.el4_8.1</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100329001" version="636">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:7.10.6-11.rhel3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100329003" version="636">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:7.10.6-11.rhel3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100329005" version="636">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:7.12.1-11.1.el4_8.3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100329006" version="636">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:7.12.1-11.1.el4_8.3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100333001" version="636">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.0.9-0.52.el3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100333004" version="636">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.0.9-54.el4_8</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100360001" version="636">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.0.11-EL3.6</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100360004" version="636">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.0.11-1.el4_8.5</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100360006" version="636">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.0.11-1.el5_5.5</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100386001" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:3AS-13.9.8</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100386003" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:3ES-13.9.8</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100386004" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:3WS-13.9.8</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100386005" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:3Desktop-13.9.8</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100401001" version="640">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.0.7-67.19</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100423001" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.2.7-72</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100423003" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.2.7-72</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100423005" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.3.4-62.el4_8.2</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100423006" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.3.4-62.el4_8.2</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100423008" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.6.1-36.el5_5.4</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100423010" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.6.1-36.el5_5.4</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100427001" version="641">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:7.3.21-3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100427003" version="641">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:7.3.21-3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100457001" version="639">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">2:2.89-101.EL3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100457003" version="639">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">2:5.8.0-101.EL3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100457004" version="639">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">2:1.61-101.EL3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100457005" version="639">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">2:1.806-101.EL3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100457007" version="639">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">3:5.8.5-53.el4</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100488001" version="637">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:3.0.9-1.3E.17</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100488003" version="637">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:3.0.9-1.3E.17</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100488005" version="637">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:3.0.33-0.19.el4_8.1</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100488006" version="637">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:3.0.33-0.19.el4_8.1</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100488008" version="637">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:3.0.33-3.29.el5_5</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100488010" version="637">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:3.0.33-3.29.el5_5</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100488011" version="637">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:3.3.8-0.52.el5_5</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100488012" version="637">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.2.0-52.el5_5</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100488013" version="637">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.1.2-52.el5_5</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100488014" version="637">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:3.3.8-0.52.el5_5</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100488015" version="637">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.1.2-52.el5_5</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100490001" version="642">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">1:1.1.17-13.3.65</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100490003" version="642">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">1:1.1.17-13.3.65</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100490005" version="642">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">1:1.1.22-0.rc1.9.32.el4_8.6</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100490006" version="642">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">1:1.1.22-0.rc1.9.32.el4_8.6</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100490008" version="642">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">1:1.3.7-18.el5_5.4</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100490010" version="642">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">1:1.3.7-18.el5_5.4</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100499001" version="634">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.0.9-0.55.el3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100499004" version="634">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.0.9-58.el4_8</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100520001" version="632">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:3.5.7-34.el3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100520003" version="632">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:3.5.7-34.el3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100534001" version="641">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">2:1.2.2-30</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100534003" version="641">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">2:1.2.2-30</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100534004" version="641">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.0.13-21</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100534005" version="641">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.0.13-21</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100534007" version="641">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">2:1.2.7-3.el4_8.3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100534008" version="641">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">2:1.2.7-3.el4_8.3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100534009" version="641">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.0.16-3.el4_8.4</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100534010" version="641">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.0.16-3.el4_8.4</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100534012" version="641">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">2:1.2.10-7.1.el5_5.3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100546001" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.0.9-0.57.el3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100546004" version="633">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.0.9-60.el4</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100557001" version="632">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.0.9-0.58.el3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100557004" version="632">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.0.9-61.el4</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100576001" version="632">
   <red-def:arch datatype="string" operation="pattern match">i386|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:3Desktop-13.9.9</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100576003" version="632">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:3ES-13.9.9</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100576004" version="632">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:3WS-13.9.9</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100576005" version="632">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:3AS-13.9.9</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100577001" version="639">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.1.4-15.el3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100577003" version="639">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.1.4-15.el3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100607001" version="637">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.1.4-16.el3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100607003" version="637">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.1.4-16.el3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100607005" version="637">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.1.9-15.el4.8</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100607006" version="637">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.1.9-15.el4.8</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100607008" version="637">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.2.1-26.el5_5</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100607010" version="637">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.2.1-26.el5_5</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100625001" version="637">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.0.15-EL3.1</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100625004" version="637">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.0.15-1.el4_8.1</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100625006" version="637">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.0.15-1.el5_5.1</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100643001" version="636">
   <red-def:arch datatype="string" operation="equals">i386</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.1.2-48.2.0.EL3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100643004" version="636">
   <red-def:arch datatype="string" operation="pattern match">i386|ppc</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">1:2.0.4-5.7.0.6.1.el4_8.6</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100643005" version="636">
   <red-def:arch datatype="string" operation="pattern match">i386|ppc</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.1.5-10.6.0.7.EL4.5</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100680001" version="634">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.0.9-0.60.el3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100680004" version="634">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.0.9-63.el4</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100697001" version="638">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:3.0.9-1.3E.18</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100697003" version="638">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:3.0.9-1.3E.18</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100697005" version="638">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:3.0.33-0.19.el4_8.3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100697006" version="638">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:3.0.33-0.19.el4_8.3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100697008" version="638">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:3.0.33-3.29.el5_5.1</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100697010" version="638">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:3.0.33-3.29.el5_5.1</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100703001" version="636">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.0.2-14.EL3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100703003" version="636">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.0.2-14.EL3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100703005" version="636">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.0.2-16.el4_8</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100703006" version="636">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.0.2-16.el4_8</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100703008" version="636">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.0.3-6.el5_5</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100703010" version="636">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.0.3-6.el5_5</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100720001" version="632">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:3.1.6-23.el3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100720003" version="632">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:3.1.6-23.el3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100720005" version="632">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:3.1.6-33.el4_8.1</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100720006" version="632">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:3.1.6-33.el4_8.1</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100720008" version="632">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:3.1.6-39.el5_5.1</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100734001" version="634">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:3AS-13.9.10</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100734003" version="634">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:3WS-13.9.10</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100734004" version="634">
   <red-def:arch datatype="string" operation="pattern match">i386|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:3Desktop-13.9.10</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100734005" version="634">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:3ES-13.9.10</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100736001" version="637">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.1.4-18.el3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100736003" version="637">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:2.1.4-18.el3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100750001" version="635">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">1:2.02-19.el3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100754001" version="635">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">1:1.1.17-13.3.70</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100754003" version="635">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|ppc64|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">1:1.1.17-13.3.70</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100781001" version="635">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.0.9-0.61.el3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100781004" version="635">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.0.9-64.el4</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100810001" version="632">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.0.9-0.62.el3</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100810004" version="632">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:1.0.9-65.el4_8</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100817001" version="632">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|ppc|s390|s390x|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:3AS-13.9.11</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100817003" version="632">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:3ES-13.9.11</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100817004" version="632">
   <red-def:arch datatype="string" operation="pattern match">i386|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:3Desktop-13.9.11</red-def:evr>
  </red-def:rpminfo_state>
  <red-def:rpminfo_state id="oval:com.redhat.rhsa:ste:20100817005" version="632">
   <red-def:arch datatype="string" operation="pattern match">i386|ia64|x86_64</red-def:arch>
   <red-def:evr datatype="evr_string" operation="less than">0:3WS-13.9.11</red-def:evr>
  </red-def:rpminfo_state>
 </states>
</oval_definitions>