<oval_definitions xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" xmlns:oval="http://oval.mitre.org/XMLSchema/oval-common-5" xmlns:oval-def="http://oval.mitre.org/XMLSchema/oval-definitions-5" xmlns:unix-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" xmlns:red-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" xmlns:ind-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://oval.mitre.org/XMLSchema/oval-common-5 oval-common-schema.xsd http://oval.mitre.org/XMLSchema/oval-definitions-5 oval-definitions-schema.xsd http://oval.mitre.org/XMLSchema/oval-definitions-5#unix unix-definitions-schema.xsd http://oval.mitre.org/XMLSchema/oval-definitions-5#linux linux-definitions-schema.xsd">
<generator>
<oval:product_name>Oracle Errata System</oval:product_name>
<oval:product_version>Oracle Linux</oval:product_version>
<oval:schema_version>5.11</oval:schema_version>
<oval:timestamp>2024-09-21T18:56:28</oval:timestamp>
</generator>
<definitions>
<definition id="oval:com.oracle.elsa:def:20163624" version="501" class="patch">
<metadata>
<title>
ELSA-2016-3624: Unbreakable Enterprise kernel security and bugfix update (IMPORTANT)
</title>
<affected family="unix">
<platform>Oracle Linux 5</platform>
<platform>Oracle Linux 6</platform>

</affected>
<reference source="elsa" ref_id="ELSA-2016-3624" ref_url="https://linux.oracle.com/errata/ELSA-2016-3624.html"/>
<reference source="CVE" ref_id="CVE-2016-3134" ref_url="https://linux.oracle.com/cve/CVE-2016-3134.html"/>
<reference source="CVE" ref_id="CVE-2016-5829" ref_url="https://linux.oracle.com/cve/CVE-2016-5829.html"/>

<description>
[2.6.39-400.286.2]
- HID: hiddev: validate num_values for HIDIOCGUSAGES, HIDIOCSUSAGES commands (Scott Bauer)  [Orabug: 24798694]  {CVE-2016-5829}

[2.6.39-400.286.1]
- Revert 'rds: skip rx/tx work when destroying connection' (Brian Maly)  [Orabug: 24790158]

[2.6.39-400.285.1]
- netfilter: x_tables: speed up jump target validation (Florian Westphal)  [Orabug: 24690302]  {CVE-2016-3134}
- netfilter: x_tables: enforce nul-terminated table name from getsockopt GET_ENTRIES (Pablo Neira Ayuso)  [Orabug: 24690302]  {CVE-2016-3134}
- netfilter: remove unused comefrom hookmask argument (Florian Westphal)  [Orabug: 24690302]  {CVE-2016-3134}
- netfilter: x_tables: introduce and use xt_copy_counters_from_user (Florian Westphal)  [Orabug: 24690302]  {CVE-2016-3134}
- netfilter: x_tables: do compat validation via translate_table (Florian Westphal)  [Orabug: 24690302]  {CVE-2016-3134}
- netfilter: x_tables: xt_compat_match_from_user doesn't need a retval (Florian Westphal)  [Orabug: 24690302]  {CVE-2016-3134}
- netfilter: ip6_tables: simplify translate_compat_table args (Florian Westphal)  [Orabug: 24690302]  {CVE-2016-3134}
- netfilter: ip_tables: simplify translate_compat_table args (Florian Westphal)  [Orabug: 24690302]  {CVE-2016-3134}
- netfilter: arp_tables: simplify translate_compat_table args (Florian Westphal)  [Orabug: 24690302]  {CVE-2016-3134}
- netfilter: x_tables: don't reject valid target size on some architectures (Florian Westphal)  [Orabug: 24690302]  {CVE-2016-3134}
- netfilter: x_tables: validate all offsets and sizes in a rule (Florian Westphal)  [Orabug: 24690302]  {CVE-2016-3134}
- netfilter: x_tables: check for bogus target offset (Florian Westphal)  [Orabug: 24690302]  {CVE-2016-3134}
- netfilter: x_tables: check standard target size too (Florian Westphal)  [Orabug: 24690302]  {CVE-2016-3134}
- netfilter: x_tables: add compat version of xt_check_entry_offsets (Florian Westphal)  [Orabug: 24690302]  {CVE-2016-3134}
- netfilter: x_tables: assert minimum target size (Florian Westphal)  [Orabug: 24690302]  {CVE-2016-3134}
- netfilter: x_tables: kill check_entry helper (Florian Westphal)  [Orabug: 24690302]  {CVE-2016-3134}
- netfilter: x_tables: add and use xt_check_entry_offsets (Florian Westphal)  [Orabug: 24690302]  {CVE-2016-3134}
- netfilter: x_tables: validate targets of jumps (Florian Westphal)  [Orabug: 24690302]  {CVE-2016-3134}
- netfilter: x_tables: fix unconditional helper (Florian Westphal)  [Orabug: 24690302]  {CVE-2016-3134}
- netfilter: x_tables: validate targets of jumps (Florian Westphal)  [Orabug: 24690302]  {CVE-2016-3134}
- netfilter: x_tables: don't move to non-existent next rule (Florian Westphal)  [Orabug: 24690302]  {CVE-2016-3134}
- netfilter: x_tables: fix unconditional helper (Florian Westphal)  [Orabug: 24690302]  {CVE-2016-3134}
- netfilter: x_tables: check for size overflow (Florian Westphal)  [Orabug: 24690302]  {CVE-2016-3134}
- ocfs2: Fix double put of recount tree in ocfs2_lock_refcount_tree() (Ashish Samant)  [Orabug: 24587406] 
- TTY: do not reset master's packet mode (Jiri Slaby)  [Orabug: 24569399] 
- ocfs2: Fix start offset to ocfs2_zero_range_for_truncate() (Ashish Samant)  [Orabug: 24500401] 
- rds: skip rx/tx work when destroying connection (Wengang Wang)  [Orabug: 24314773] 
- Revert 'IPoIB: serialize changing on tx_outstanding' (Wengang Wang)  [Orabug: 23745787] 
- xen/events: document behaviour when scanning the start word for events (Dongli Zhang)  [Orabug: 23083945] 
- xen/events: mask events when changing their VCPU binding (Dongli Zhang)  [Orabug: 23083945] 
- xen/events: initialize local per-cpu mask for all possible events (Dongli Zhang)  [Orabug: 23083945] 
- IB/mlx4: Replace kfree with kvfree in mlx4_ib_destroy_srq (Wengang Wang)  [Orabug: 22570922] 
- NFS: Remove BUG_ON() calls from the generic writeback code (Trond Myklebust)  [Orabug: 22386565] 
- ocfs2: return non-zero st_blocks for inline data (John Haxby)  [Orabug: 22218262] 
- oracleasm: Classify device connectivity issues as global errors (Martin K. Petersen)  [Orabug: 21760143] 

</description>
<!--
 ~~~~~~~~~~~~~~~~~~~~   advisory details   ~~~~~~~~~~~~~~~~~~~ 
-->
<advisory>
<severity>IMPORTANT</severity>
<rights>Copyright 2016 Oracle, Inc.</rights>
<issued date="2016-10-06"/>
<cve cvss2="6.2/AV:L/AC:H/Au:N/C:C/I:C/A:C" href="https://linux.oracle.com/cve/CVE-2016-3134.html" public="20160310">CVE-2016-3134</cve>
<cve cvss2="6.9/AV:L/AC:M/Au:N/C:C/I:C/A:C" href="https://linux.oracle.com/cve/CVE-2016-5829.html" public="20160625">CVE-2016-5829</cve>

<affected_cpe_list>
<cpe>cpe:/a:oracle:linux:6::UEK_archive</cpe>
<cpe>cpe:/a:oracle:linux:6::UEK_latest</cpe>
<cpe>cpe:/a:oracle:linux:5::UEK_latest</cpe>
</affected_cpe_list>
</advisory>
</metadata>
<criteria operator="OR">
<criteria operator="AND">
<criterion test_ref="oval:com.oracle.elsa:tst:20163624001" comment="Oracle Linux 5 is installed"/>
<criteria operator="OR">
<criteria operator="AND">
<criterion test_ref="oval:com.oracle.elsa:tst:20163624002" comment="Oracle Linux arch is x86_64"/>
<criteria operator="OR">
<criteria operator="AND">
<criterion test_ref="oval:com.oracle.elsa:tst:20163624003" comment="kernel-uek is earlier than 0:2.6.39-400.286.2.el5uek"/>
<criterion test_ref="oval:com.oracle.elsa:tst:20163624004" comment="kernel-uek is signed with the Oracle Linux 5 key"/>
</criteria>
<criteria operator="AND">
<criterion test_ref="oval:com.oracle.elsa:tst:20163624005" comment="kernel-uek-debug is earlier than 0:2.6.39-400.286.2.el5uek"/>
<criterion test_ref="oval:com.oracle.elsa:tst:20163624006" comment="kernel-uek-debug is signed with the Oracle Linux 5 key"/>
</criteria>
<criteria operator="AND">
<criterion test_ref="oval:com.oracle.elsa:tst:20163624007" comment="kernel-uek-debug-devel is earlier than 0:2.6.39-400.286.2.el5uek"/>
<criterion test_ref="oval:com.oracle.elsa:tst:20163624008" comment="kernel-uek-debug-devel is signed with the Oracle Linux 5 key"/>
</criteria>
<criteria operator="AND">
<criterion test_ref="oval:com.oracle.elsa:tst:20163624009" comment="kernel-uek-devel is earlier than 0:2.6.39-400.286.2.el5uek"/>
<criterion test_ref="oval:com.oracle.elsa:tst:20163624010" comment="kernel-uek-devel is signed with the Oracle Linux 5 key"/>
</criteria>
<criteria operator="AND">
<criterion test_ref="oval:com.oracle.elsa:tst:20163624011" comment="kernel-uek-doc is earlier than 0:2.6.39-400.286.2.el5uek"/>
<criterion test_ref="oval:com.oracle.elsa:tst:20163624012" comment="kernel-uek-doc is signed with the Oracle Linux 5 key"/>
</criteria>
<criteria operator="AND">
<criterion test_ref="oval:com.oracle.elsa:tst:20163624013" comment="kernel-uek-firmware is earlier than 0:2.6.39-400.286.2.el5uek"/>
<criterion test_ref="oval:com.oracle.elsa:tst:20163624014" comment="kernel-uek-firmware is signed with the Oracle Linux 5 key"/>
</criteria>
</criteria>
</criteria>
<criteria operator="AND">
<criterion test_ref="oval:com.oracle.elsa:tst:20163624015" comment="Oracle Linux arch is i386"/>
<criteria operator="OR">
<criteria operator="AND">
<criterion test_ref="oval:com.oracle.elsa:tst:20163624003" comment="kernel-uek is earlier than 0:2.6.39-400.286.2.el5uek"/>
<criterion test_ref="oval:com.oracle.elsa:tst:20163624004" comment="kernel-uek is signed with the Oracle Linux 5 key"/>
</criteria>
<criteria operator="AND">
<criterion test_ref="oval:com.oracle.elsa:tst:20163624005" comment="kernel-uek-debug is earlier than 0:2.6.39-400.286.2.el5uek"/>
<criterion test_ref="oval:com.oracle.elsa:tst:20163624006" comment="kernel-uek-debug is signed with the Oracle Linux 5 key"/>
</criteria>
<criteria operator="AND">
<criterion test_ref="oval:com.oracle.elsa:tst:20163624007" comment="kernel-uek-debug-devel is earlier than 0:2.6.39-400.286.2.el5uek"/>
<criterion test_ref="oval:com.oracle.elsa:tst:20163624008" comment="kernel-uek-debug-devel is signed with the Oracle Linux 5 key"/>
</criteria>
<criteria operator="AND">
<criterion test_ref="oval:com.oracle.elsa:tst:20163624009" comment="kernel-uek-devel is earlier than 0:2.6.39-400.286.2.el5uek"/>
<criterion test_ref="oval:com.oracle.elsa:tst:20163624010" comment="kernel-uek-devel is signed with the Oracle Linux 5 key"/>
</criteria>
<criteria operator="AND">
<criterion test_ref="oval:com.oracle.elsa:tst:20163624011" comment="kernel-uek-doc is earlier than 0:2.6.39-400.286.2.el5uek"/>
<criterion test_ref="oval:com.oracle.elsa:tst:20163624012" comment="kernel-uek-doc is signed with the Oracle Linux 5 key"/>
</criteria>
<criteria operator="AND">
<criterion test_ref="oval:com.oracle.elsa:tst:20163624013" comment="kernel-uek-firmware is earlier than 0:2.6.39-400.286.2.el5uek"/>
<criterion test_ref="oval:com.oracle.elsa:tst:20163624014" comment="kernel-uek-firmware is signed with the Oracle Linux 5 key"/>
</criteria>
</criteria>
</criteria>
</criteria>
</criteria>
<criteria operator="AND">
<criterion test_ref="oval:com.oracle.elsa:tst:20163624016" comment="Oracle Linux 6 is installed"/>
<criteria operator="OR">
<criteria operator="AND">
<criterion test_ref="oval:com.oracle.elsa:tst:20163624017" comment="Oracle Linux arch is x86_64"/>
<criteria operator="OR">
<criteria operator="AND">
<criterion test_ref="oval:com.oracle.elsa:tst:20163624018" comment="kernel-uek is earlier than 0:2.6.39-400.286.2.el6uek"/>
<criterion test_ref="oval:com.oracle.elsa:tst:20163624019" comment="kernel-uek is signed with the Oracle Linux 6 key"/>
</criteria>
<criteria operator="AND">
<criterion test_ref="oval:com.oracle.elsa:tst:20163624020" comment="kernel-uek-debug is earlier than 0:2.6.39-400.286.2.el6uek"/>
<criterion test_ref="oval:com.oracle.elsa:tst:20163624021" comment="kernel-uek-debug is signed with the Oracle Linux 6 key"/>
</criteria>
<criteria operator="AND">
<criterion test_ref="oval:com.oracle.elsa:tst:20163624022" comment="kernel-uek-debug-devel is earlier than 0:2.6.39-400.286.2.el6uek"/>
<criterion test_ref="oval:com.oracle.elsa:tst:20163624023" comment="kernel-uek-debug-devel is signed with the Oracle Linux 6 key"/>
</criteria>
<criteria operator="AND">
<criterion test_ref="oval:com.oracle.elsa:tst:20163624024" comment="kernel-uek-devel is earlier than 0:2.6.39-400.286.2.el6uek"/>
<criterion test_ref="oval:com.oracle.elsa:tst:20163624025" comment="kernel-uek-devel is signed with the Oracle Linux 6 key"/>
</criteria>
<criteria operator="AND">
<criterion test_ref="oval:com.oracle.elsa:tst:20163624026" comment="kernel-uek-doc is earlier than 0:2.6.39-400.286.2.el6uek"/>
<criterion test_ref="oval:com.oracle.elsa:tst:20163624027" comment="kernel-uek-doc is signed with the Oracle Linux 6 key"/>
</criteria>
<criteria operator="AND">
<criterion test_ref="oval:com.oracle.elsa:tst:20163624028" comment="kernel-uek-firmware is earlier than 0:2.6.39-400.286.2.el6uek"/>
<criterion test_ref="oval:com.oracle.elsa:tst:20163624029" comment="kernel-uek-firmware is signed with the Oracle Linux 6 key"/>
</criteria>
</criteria>
</criteria>
<criteria operator="AND">
<criterion test_ref="oval:com.oracle.elsa:tst:20163624030" comment="Oracle Linux arch is i686"/>
<criteria operator="OR">
<criteria operator="AND">
<criterion test_ref="oval:com.oracle.elsa:tst:20163624018" comment="kernel-uek is earlier than 0:2.6.39-400.286.2.el6uek"/>
<criterion test_ref="oval:com.oracle.elsa:tst:20163624019" comment="kernel-uek is signed with the Oracle Linux 6 key"/>
</criteria>
<criteria operator="AND">
<criterion test_ref="oval:com.oracle.elsa:tst:20163624020" comment="kernel-uek-debug is earlier than 0:2.6.39-400.286.2.el6uek"/>
<criterion test_ref="oval:com.oracle.elsa:tst:20163624021" comment="kernel-uek-debug is signed with the Oracle Linux 6 key"/>
</criteria>
<criteria operator="AND">
<criterion test_ref="oval:com.oracle.elsa:tst:20163624022" comment="kernel-uek-debug-devel is earlier than 0:2.6.39-400.286.2.el6uek"/>
<criterion test_ref="oval:com.oracle.elsa:tst:20163624023" comment="kernel-uek-debug-devel is signed with the Oracle Linux 6 key"/>
</criteria>
<criteria operator="AND">
<criterion test_ref="oval:com.oracle.elsa:tst:20163624024" comment="kernel-uek-devel is earlier than 0:2.6.39-400.286.2.el6uek"/>
<criterion test_ref="oval:com.oracle.elsa:tst:20163624025" comment="kernel-uek-devel is signed with the Oracle Linux 6 key"/>
</criteria>
<criteria operator="AND">
<criterion test_ref="oval:com.oracle.elsa:tst:20163624026" comment="kernel-uek-doc is earlier than 0:2.6.39-400.286.2.el6uek"/>
<criterion test_ref="oval:com.oracle.elsa:tst:20163624027" comment="kernel-uek-doc is signed with the Oracle Linux 6 key"/>
</criteria>
<criteria operator="AND">
<criterion test_ref="oval:com.oracle.elsa:tst:20163624028" comment="kernel-uek-firmware is earlier than 0:2.6.39-400.286.2.el6uek"/>
<criterion test_ref="oval:com.oracle.elsa:tst:20163624029" comment="kernel-uek-firmware is signed with the Oracle Linux 6 key"/>
</criteria>
</criteria>
</criteria>
</criteria>
</criteria>
</criteria>
</definition>
</definitions>
<!--
 ~~~~~~~~~~~~~~~~~~~~~   rpminfo tests   ~~~~~~~~~~~~~~~~~~~~~ 
-->
<tests>
<rpminfo_test id="oval:com.oracle.elsa:tst:20163624001"  version="501" comment="Oracle Linux 5 is installed" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
<object object_ref="oval:com.oracle.elsa:obj:20163624001" />
<state state_ref="oval:com.oracle.elsa:ste:20163624003" />
</rpminfo_test>
<rpminfo_test id="oval:com.oracle.elsa:tst:20163624002"  version="501" comment="Oracle Linux arch is x86_64" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
<object object_ref="oval:com.oracle.elsa:obj:20163624001" />
<state state_ref="oval:com.oracle.elsa:ste:20163624004" />
</rpminfo_test>
<rpminfo_test id="oval:com.oracle.elsa:tst:20163624003"  version="501" comment="kernel-uek is earlier than 0:2.6.39-400.286.2.el5uek" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
<object object_ref="oval:com.oracle.elsa:obj:20163624002" />
<state state_ref="oval:com.oracle.elsa:ste:20163624005" />
</rpminfo_test>
<rpminfo_test id="oval:com.oracle.elsa:tst:20163624004"  version="501" comment="kernel-uek is signed with the Oracle Linux 5 key" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
<object object_ref="oval:com.oracle.elsa:obj:20163624002" />
<state state_ref="oval:com.oracle.elsa:ste:20163624001" />
</rpminfo_test>
<rpminfo_test id="oval:com.oracle.elsa:tst:20163624005"  version="501" comment="kernel-uek-debug is earlier than 0:2.6.39-400.286.2.el5uek" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
<object object_ref="oval:com.oracle.elsa:obj:20163624003" />
<state state_ref="oval:com.oracle.elsa:ste:20163624005" />
</rpminfo_test>
<rpminfo_test id="oval:com.oracle.elsa:tst:20163624006"  version="501" comment="kernel-uek-debug is signed with the Oracle Linux 5 key" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
<object object_ref="oval:com.oracle.elsa:obj:20163624003" />
<state state_ref="oval:com.oracle.elsa:ste:20163624001" />
</rpminfo_test>
<rpminfo_test id="oval:com.oracle.elsa:tst:20163624007"  version="501" comment="kernel-uek-debug-devel is earlier than 0:2.6.39-400.286.2.el5uek" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
<object object_ref="oval:com.oracle.elsa:obj:20163624004" />
<state state_ref="oval:com.oracle.elsa:ste:20163624005" />
</rpminfo_test>
<rpminfo_test id="oval:com.oracle.elsa:tst:20163624008"  version="501" comment="kernel-uek-debug-devel is signed with the Oracle Linux 5 key" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
<object object_ref="oval:com.oracle.elsa:obj:20163624004" />
<state state_ref="oval:com.oracle.elsa:ste:20163624001" />
</rpminfo_test>
<rpminfo_test id="oval:com.oracle.elsa:tst:20163624009"  version="501" comment="kernel-uek-devel is earlier than 0:2.6.39-400.286.2.el5uek" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
<object object_ref="oval:com.oracle.elsa:obj:20163624005" />
<state state_ref="oval:com.oracle.elsa:ste:20163624005" />
</rpminfo_test>
<rpminfo_test id="oval:com.oracle.elsa:tst:20163624010"  version="501" comment="kernel-uek-devel is signed with the Oracle Linux 5 key" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
<object object_ref="oval:com.oracle.elsa:obj:20163624005" />
<state state_ref="oval:com.oracle.elsa:ste:20163624001" />
</rpminfo_test>
<rpminfo_test id="oval:com.oracle.elsa:tst:20163624011"  version="501" comment="kernel-uek-doc is earlier than 0:2.6.39-400.286.2.el5uek" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
<object object_ref="oval:com.oracle.elsa:obj:20163624006" />
<state state_ref="oval:com.oracle.elsa:ste:20163624005" />
</rpminfo_test>
<rpminfo_test id="oval:com.oracle.elsa:tst:20163624012"  version="501" comment="kernel-uek-doc is signed with the Oracle Linux 5 key" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
<object object_ref="oval:com.oracle.elsa:obj:20163624006" />
<state state_ref="oval:com.oracle.elsa:ste:20163624001" />
</rpminfo_test>
<rpminfo_test id="oval:com.oracle.elsa:tst:20163624013"  version="501" comment="kernel-uek-firmware is earlier than 0:2.6.39-400.286.2.el5uek" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
<object object_ref="oval:com.oracle.elsa:obj:20163624007" />
<state state_ref="oval:com.oracle.elsa:ste:20163624005" />
</rpminfo_test>
<rpminfo_test id="oval:com.oracle.elsa:tst:20163624014"  version="501" comment="kernel-uek-firmware is signed with the Oracle Linux 5 key" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
<object object_ref="oval:com.oracle.elsa:obj:20163624007" />
<state state_ref="oval:com.oracle.elsa:ste:20163624001" />
</rpminfo_test>
<rpminfo_test id="oval:com.oracle.elsa:tst:20163624015"  version="501" comment="Oracle Linux arch is i386" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
<object object_ref="oval:com.oracle.elsa:obj:20163624001" />
<state state_ref="oval:com.oracle.elsa:ste:20163624006" />
</rpminfo_test>
<rpminfo_test id="oval:com.oracle.elsa:tst:20163624016"  version="501" comment="Oracle Linux 6 is installed" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
<object object_ref="oval:com.oracle.elsa:obj:20163624001" />
<state state_ref="oval:com.oracle.elsa:ste:20163624007" />
</rpminfo_test>
<rpminfo_test id="oval:com.oracle.elsa:tst:20163624017"  version="501" comment="Oracle Linux arch is x86_64" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
<object object_ref="oval:com.oracle.elsa:obj:20163624001" />
<state state_ref="oval:com.oracle.elsa:ste:20163624004" />
</rpminfo_test>
<rpminfo_test id="oval:com.oracle.elsa:tst:20163624018"  version="501" comment="kernel-uek is earlier than 0:2.6.39-400.286.2.el6uek" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
<object object_ref="oval:com.oracle.elsa:obj:20163624002" />
<state state_ref="oval:com.oracle.elsa:ste:20163624008" />
</rpminfo_test>
<rpminfo_test id="oval:com.oracle.elsa:tst:20163624019"  version="501" comment="kernel-uek is signed with the Oracle Linux 6 key" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
<object object_ref="oval:com.oracle.elsa:obj:20163624002" />
<state state_ref="oval:com.oracle.elsa:ste:20163624002" />
</rpminfo_test>
<rpminfo_test id="oval:com.oracle.elsa:tst:20163624020"  version="501" comment="kernel-uek-debug is earlier than 0:2.6.39-400.286.2.el6uek" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
<object object_ref="oval:com.oracle.elsa:obj:20163624003" />
<state state_ref="oval:com.oracle.elsa:ste:20163624008" />
</rpminfo_test>
<rpminfo_test id="oval:com.oracle.elsa:tst:20163624021"  version="501" comment="kernel-uek-debug is signed with the Oracle Linux 6 key" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
<object object_ref="oval:com.oracle.elsa:obj:20163624003" />
<state state_ref="oval:com.oracle.elsa:ste:20163624002" />
</rpminfo_test>
<rpminfo_test id="oval:com.oracle.elsa:tst:20163624022"  version="501" comment="kernel-uek-debug-devel is earlier than 0:2.6.39-400.286.2.el6uek" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
<object object_ref="oval:com.oracle.elsa:obj:20163624004" />
<state state_ref="oval:com.oracle.elsa:ste:20163624008" />
</rpminfo_test>
<rpminfo_test id="oval:com.oracle.elsa:tst:20163624023"  version="501" comment="kernel-uek-debug-devel is signed with the Oracle Linux 6 key" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
<object object_ref="oval:com.oracle.elsa:obj:20163624004" />
<state state_ref="oval:com.oracle.elsa:ste:20163624002" />
</rpminfo_test>
<rpminfo_test id="oval:com.oracle.elsa:tst:20163624024"  version="501" comment="kernel-uek-devel is earlier than 0:2.6.39-400.286.2.el6uek" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
<object object_ref="oval:com.oracle.elsa:obj:20163624005" />
<state state_ref="oval:com.oracle.elsa:ste:20163624008" />
</rpminfo_test>
<rpminfo_test id="oval:com.oracle.elsa:tst:20163624025"  version="501" comment="kernel-uek-devel is signed with the Oracle Linux 6 key" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
<object object_ref="oval:com.oracle.elsa:obj:20163624005" />
<state state_ref="oval:com.oracle.elsa:ste:20163624002" />
</rpminfo_test>
<rpminfo_test id="oval:com.oracle.elsa:tst:20163624026"  version="501" comment="kernel-uek-doc is earlier than 0:2.6.39-400.286.2.el6uek" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
<object object_ref="oval:com.oracle.elsa:obj:20163624006" />
<state state_ref="oval:com.oracle.elsa:ste:20163624008" />
</rpminfo_test>
<rpminfo_test id="oval:com.oracle.elsa:tst:20163624027"  version="501" comment="kernel-uek-doc is signed with the Oracle Linux 6 key" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
<object object_ref="oval:com.oracle.elsa:obj:20163624006" />
<state state_ref="oval:com.oracle.elsa:ste:20163624002" />
</rpminfo_test>
<rpminfo_test id="oval:com.oracle.elsa:tst:20163624028"  version="501" comment="kernel-uek-firmware is earlier than 0:2.6.39-400.286.2.el6uek" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
<object object_ref="oval:com.oracle.elsa:obj:20163624007" />
<state state_ref="oval:com.oracle.elsa:ste:20163624008" />
</rpminfo_test>
<rpminfo_test id="oval:com.oracle.elsa:tst:20163624029"  version="501" comment="kernel-uek-firmware is signed with the Oracle Linux 6 key" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
<object object_ref="oval:com.oracle.elsa:obj:20163624007" />
<state state_ref="oval:com.oracle.elsa:ste:20163624002" />
</rpminfo_test>
<rpminfo_test id="oval:com.oracle.elsa:tst:20163624030"  version="501" comment="Oracle Linux arch is i686" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
<object object_ref="oval:com.oracle.elsa:obj:20163624001" />
<state state_ref="oval:com.oracle.elsa:ste:20163624009" />
</rpminfo_test>

</tests>
<!--
 ~~~~~~~~~~~~~~~~~~~~   rpminfo objects   ~~~~~~~~~~~~~~~~~~~~ 
-->
<objects>
<rpminfo_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:com.oracle.elsa:obj:20163624007" version="501">
<name>kernel-uek-firmware</name>
</rpminfo_object>
<rpminfo_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:com.oracle.elsa:obj:20163624001" version="501">
<name>oraclelinux-release</name>
</rpminfo_object>
<rpminfo_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:com.oracle.elsa:obj:20163624004" version="501">
<name>kernel-uek-debug-devel</name>
</rpminfo_object>
<rpminfo_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:com.oracle.elsa:obj:20163624005" version="501">
<name>kernel-uek-devel</name>
</rpminfo_object>
<rpminfo_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:com.oracle.elsa:obj:20163624003" version="501">
<name>kernel-uek-debug</name>
</rpminfo_object>
<rpminfo_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:com.oracle.elsa:obj:20163624002" version="501">
<name>kernel-uek</name>
</rpminfo_object>
<rpminfo_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:com.oracle.elsa:obj:20163624006" version="501">
<name>kernel-uek-doc</name>
</rpminfo_object>

</objects>
<states>
<!--
 ~~~~~~~~~~~~~~~~~~~~   rpminfo states   ~~~~~~~~~~~~~~~~~~~~~ 
-->
<rpminfo_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:com.oracle.elsa:ste:20163624001" version="501">
<signature_keyid operation="equals">66ced3de1e5e0159</signature_keyid>
</rpminfo_state>
<rpminfo_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:com.oracle.elsa:ste:20163624002" version="501">
<signature_keyid operation="equals">72f97b74ec551f03</signature_keyid>
</rpminfo_state>
<rpminfo_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:com.oracle.elsa:ste:20163624003" version="501">
<version operation="pattern match">^5</version>
</rpminfo_state>
<rpminfo_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:com.oracle.elsa:ste:20163624004" version="501">
<arch operation="pattern match">x86_64</arch>
</rpminfo_state>
<rpminfo_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:com.oracle.elsa:ste:20163624005" version="501">
<version operation="pattern match">2.6.39</version>
<evr datatype="evr_string" operation="less than">0:2.6.39-400.286.2.el5uek</evr>
</rpminfo_state>
<rpminfo_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:com.oracle.elsa:ste:20163624006" version="501">
<arch operation="pattern match">i386</arch>
</rpminfo_state>
<rpminfo_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:com.oracle.elsa:ste:20163624007" version="501">
<version operation="pattern match">^6</version>
</rpminfo_state>
<rpminfo_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:com.oracle.elsa:ste:20163624008" version="501">
<version operation="pattern match">2.6.39</version>
<evr datatype="evr_string" operation="less than">0:2.6.39-400.286.2.el6uek</evr>
</rpminfo_state>
<rpminfo_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:com.oracle.elsa:ste:20163624009" version="501">
<arch operation="pattern match">i686</arch>
</rpminfo_state>

</states>
</oval_definitions>
