<oval_definitions xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" xmlns:oval="http://oval.mitre.org/XMLSchema/oval-common-5" xmlns:oval-def="http://oval.mitre.org/XMLSchema/oval-definitions-5" xmlns:unix-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" xmlns:red-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" xmlns:ind-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://oval.mitre.org/XMLSchema/oval-common-5 oval-common-schema.xsd http://oval.mitre.org/XMLSchema/oval-definitions-5 oval-definitions-schema.xsd http://oval.mitre.org/XMLSchema/oval-definitions-5#unix unix-definitions-schema.xsd http://oval.mitre.org/XMLSchema/oval-definitions-5#linux linux-definitions-schema.xsd">
<generator>
<oval:product_name>Oracle Errata System</oval:product_name>
<oval:product_version>Oracle Linux</oval:product_version>
<oval:schema_version>5.11</oval:schema_version>
<oval:timestamp>2025-12-04T20:09:47</oval:timestamp>
</generator>
<definitions>
<definition id="oval:com.oracle.elsa:def:202522660" version="501" class="patch">
<metadata>
<title>
ELSA-2025-22660:  systemd security update (MODERATE)
</title>
<affected family="unix">
<platform>Oracle Linux 9</platform>

</affected>
<reference source="elsa" ref_id="ELSA-2025-22660" ref_url="https://linux.oracle.com/errata/ELSA-2025-22660.html"/>
<reference source="CVE" ref_id="CVE-2025-4598" ref_url="https://linux.oracle.com/cve/CVE-2025-4598.html"/>

<description>
[252-55.0.3.7]
- serialize: don't allocate 1M on the stack just like that [LINUX-16166]
- Route logs from container mapped uids to the system journal [Orabug: 38135007]
- Drop delay when nspawn fails to reset loginuid [Orabug: 37793135]
- Improve logging for api bus connection and subscribers [Orabug: 38040980]
- Defer processing of timeout events in sd-bus api [Orabug: 38064217]
- coredump: use %d in kernel core pattern - CVE-2025-4598
- Add bus description to sd-bus outgoing sockets [Orabug: 37347576]
- Add log messages about daemon-reload requester and duration [Orabug: 37347576]
- Reverted back to previous Tony Lam patch [Orabug: 25897792] until issue with [Orabug: 36564551] is resolved.
- drop IN_ATTRIB from parent directory inotify watches [Orabug: 37118224]
- 1A) Fix local-fs and remote-fs targets during system boot (replaces old Orabug: 25897792) [Orabug: 36269319]
- 1B) Add 'systemd-fstab-generator-reload-targets.service' file [Orabug: 36269319]
- 1C) Add required rpms for correct kickstart/systemd functionality within systemd.spec [Orabug: 36269319]
- 1D) Important: Review 1001-systemd-fstab-generator-reload-targets.patch for important build details/steps [Orabug: 36269319]
- Due to a new [Orabug: 36564551] filed on April 29 2024, reverting from back to
- previous Tony Lam patch [Orabug: 25897792] until issue with [Orabug: 36564551] is resolved.
- drop IN_ATTRIB from parent directory inotify watches [Orabug: 37118224]
- Reverted back to previous Tony Lam patch [Orabug: 25897792] until issue with [Orabug: 36564551] is resolved.
- Re-Added 1001-Fix-missing-netdev-for-iscsi-entry-in-fstab.patch [Orabug: 25897792]
- Backport upstream pstore dmesg fix [Orabug: 34868110]
- Remove upstream references  [Orabug: 33995357]
- Disable unprivileged BPF by default [Orabug: 32870980]
- udev rules: fix memory hot add and remove [Orabug: 31310273]
- set 'RemoveIPC=no' in logind.conf as default for OL7.2 [Orabug: 22224874]
- allow dm remove ioctl to co-operate with UEK3 [Orabug: 18467469]
- shutdown: get only active md arrays. [Orabug: 34467234]
- Wait for an extra configurable time before udevd kills a worker [Orabug: 36017407]
- Removed unneeded patches from the systemd.spec
- 1A) 1004-orabug34272490-0001-core-device-ignore-DEVICE_FOUND_UDEV-bit-on-switchin.patch [Orabug: 34272490]
- 1B) 1005-orabug34272490-0002-core-device-drop-unnecessary-condition.patch [Orabug: 34272490]
- 1C) 1007-orabug34868110-pstore-fixes-for-dmesg.txt-reconstruction.patch [Orabug: 34868110]
- Removed the following, associated with [Orabug: 36269319]:
- 2A) Remove 1001-systemd-fstab-generator-reload-targets.patch
- 2B) Remove Fix local-fs and remote-fs targets during system boot [Orabug: 36269319]
- 2C) Remove 'systemd-fstab-generator-reload-targets.service' file [Orabug: 36269319]
- 2D) Remove required rpms for correct kickstart/systemd functionality within systemd.spec [Orabug: 36269319]
- 2E) Remove Important: Review 1001-systemd-fstab-generator-reload-targets.patch for important build details/steps [Orabug: 36269319]

[252-55.7]
- core: fix array size in unit_log_resources() (RHEL-132120)

[252-55.6]
- timer: rebase last_trigger timestamp if needed (RHEL-127022)

[252-55.5]
- test: rename TEST-53-ISSUE-16347 to TEST-53-TIMER (RHEL-127022)
- test: restarting elapsed timer shouldn't trigger the corresponding service (RHEL-127022)
- test: check the next elapse timer timestamp after deserialization (RHEL-127022)
- timer: don't run service immediately after restart of a timer (RHEL-127022)
- test: store and compare just the property value (RHEL-127022)
- timer: rebase the next elapse timestamp only if timer didn't already run (RHEL-127022)
- coredump: handle ENOBUFS and EMSGSIZE the same way (RHEL-126114)

[252-55.4]
- cryptsetup: Add optional support for linking volume key in keyring. (RHEL-118294)
- cryptsetup: fix typo (RHEL-118294)
- cryptsetup: HAVE_CRYPT_SET_KEYRING_TO_LINK is always defined (RHEL-118294)
- basic: add PIDFS magic (#31709) (RHEL-118294)
- time-util: make USEC_TIMESTAMP_FORMATTABLE_MAX for 32bit system off by one day (RHEL-118294)
- coredump: make check that all argv[] meta data fields are passed strict (RHEL-104138)
- coredump: restore compatibility with older patterns (RHEL-104138)
- coredump: use %d in kernel core pattern (RHEL-104138)
- pidref: add structure that can reference a pid via both pidfd and pid_t (RHEL-104138)
- fd-util: introduce parse_fd() (RHEL-104138)
- coredump: add support for new %F PIDFD specifier (RHEL-104138)

[252-55.2]
- Revert 'test-time-util: disable failing tests' (RHEL-110954)
- test: use get_timezones() to iterate all known timezones (RHEL-110954)
- test-time-util: do not fail on DST change (RHEL-110954)
- test-time-util: suppress timestamp conversion failures for Africa/Khartoum timezone (RHEL-110954)
- test-time-util: do more suppression of time zone checks (RHEL-110954)
- test-time-util: fix truncation of usec to sec (RHEL-110954)
- test: unset TZ before timezone-sensitive unit tests are run (RHEL-110954)
- meson: extend timeout for test-time-util (RHEL-110954)
- time-util: use DEFINE_STRING_TABLE_LOOKUP_TO_STRING() macro (RHEL-110954)
- time-util: align string table (RHEL-110954)
- time-util: rename variables (RHEL-110954)
- time-util: add assertions (RHEL-110954)
- time-util: drop redundant else (RHEL-110954)
- time-util: do not use strdupa() (RHEL-110954)
- time-util: use result from startswith_no_case() (RHEL-110954)
- time-util: use usec_add() and usec_sub_unsigned() (RHEL-110954)
- time-util: shorten code a bit (RHEL-110954)
- time-util: rename variables (RHEL-110954)
- time-util: drop unnecessary assignment of timezone name (RHEL-110954)
- time-util: make parse_timestamp() use the RFC-822/ISO 8601 standard timezone spec (RHEL-110954)
- time-util: fix typo (RHEL-110954)
- ci: bump the tools tree to F42 (RHEL-110954)

[252-55.1]
- meson: /etc/systemd/network is also used by udevd (RHEL-111611)
- test: add tests for format_timestamp() and parse_timestamp() with various timezone (RHEL-110954)
- test-time-util: disable failing tests (RHEL-110954)
- test: test parse_timestamp() in various timezone (RHEL-110954)
- systemctl: logind: add missing asserts (RHEL-110954)
- systemctl: logind: make logind_schedule_shutdown accept action as param (RHEL-110954)
- systemctl: add option --when for scheduled shutdown (RHEL-110954)
- test-time-util: add test cases to invalidate 'show' and 'cancel' (RHEL-110954)
- sd-bus: make bus_add_match_full accept timeout (RHEL-111630)
- core/unit: add get_timeout_start_usec in UnitVTable and define it for service (RHEL-111630)
- core/unit: increase the NameOwnerChanged/GetNameOwner timeout to the unit's start timeout (RHEL-111630)
- core,sd-bus: drop empty lines between function call and error check (RHEL-111630)
- core: do not disconnect from bus when failed to install signal match (RHEL-111630)
- dbus: stash the subscriber list when we disconenct from the bus (RHEL-111630)
- manager: s/deserialized_subscribed/subscribed_as_strv (RHEL-111630)
- bus-util: do not reset the count returned by sd_bus_track_count_name() (RHEL-111630)
- core/manager: restore bus track deserialization cleanup in manager_reload() (RHEL-111630)
- core/manager: drop duplicate bus track deserialization (RHEL-111630)
- sd-bus/bus-track: use install_callback in sd_bus_track_add_name() (RHEL-111630)
</description>
<!--
 ~~~~~~~~~~~~~~~~~~~~   advisory details   ~~~~~~~~~~~~~~~~~~~ 
-->
<advisory>
<severity>MODERATE</severity>
<rights>Copyright 2025 Oracle, Inc.</rights>
<issued date="2025-12-04"/>
<cve cvss3="4.7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" href="https://linux.oracle.com/cve/CVE-2025-4598.html" public="20250530">CVE-2025-4598</cve>

<affected_cpe_list>
<cpe>cpe:/a:oracle:linux:9::appstream</cpe>
<cpe>cpe:/o:oracle:linux:9:7:baseos_patch</cpe>
<cpe>cpe:/a:oracle:linux:9::codeready_builder</cpe>
<cpe>cpe:/o:oracle:linux:9::baseos_latest</cpe>
</affected_cpe_list>
</advisory>
</metadata>
<criteria operator="AND">
<criterion test_ref="oval:com.oracle.elsa:tst:202522660001" comment="Oracle Linux 9 is installed"/>
<criteria operator="OR">
<criteria operator="AND">
<criterion test_ref="oval:com.oracle.elsa:tst:202522660002" comment="Oracle Linux arch is aarch64"/>
<criteria operator="OR">
<criteria operator="AND">
<criterion test_ref="oval:com.oracle.elsa:tst:202522660003" comment="systemd-boot-unsigned is earlier than 0:252-55.0.3.el9_7.7"/>
<criterion test_ref="oval:com.oracle.elsa:tst:202522660004" comment="systemd-boot-unsigned is signed with the Oracle Linux 9 key"/>
</criteria>
<criteria operator="AND">
<criterion test_ref="oval:com.oracle.elsa:tst:202522660005" comment="rhel-net-naming-sysattrs is earlier than 0:252-55.0.3.el9_7.7"/>
<criterion test_ref="oval:com.oracle.elsa:tst:202522660006" comment="rhel-net-naming-sysattrs is signed with the Oracle Linux 9 key"/>
</criteria>
<criteria operator="AND">
<criterion test_ref="oval:com.oracle.elsa:tst:202522660007" comment="systemd is earlier than 0:252-55.0.3.el9_7.7"/>
<criterion test_ref="oval:com.oracle.elsa:tst:202522660008" comment="systemd is signed with the Oracle Linux 9 key"/>
</criteria>
<criteria operator="AND">
<criterion test_ref="oval:com.oracle.elsa:tst:202522660009" comment="systemd-container is earlier than 0:252-55.0.3.el9_7.7"/>
<criterion test_ref="oval:com.oracle.elsa:tst:202522660010" comment="systemd-container is signed with the Oracle Linux 9 key"/>
</criteria>
<criteria operator="AND">
<criterion test_ref="oval:com.oracle.elsa:tst:202522660011" comment="systemd-libs is earlier than 0:252-55.0.3.el9_7.7"/>
<criterion test_ref="oval:com.oracle.elsa:tst:202522660012" comment="systemd-libs is signed with the Oracle Linux 9 key"/>
</criteria>
<criteria operator="AND">
<criterion test_ref="oval:com.oracle.elsa:tst:202522660013" comment="systemd-oomd is earlier than 0:252-55.0.3.el9_7.7"/>
<criterion test_ref="oval:com.oracle.elsa:tst:202522660014" comment="systemd-oomd is signed with the Oracle Linux 9 key"/>
</criteria>
<criteria operator="AND">
<criterion test_ref="oval:com.oracle.elsa:tst:202522660015" comment="systemd-pam is earlier than 0:252-55.0.3.el9_7.7"/>
<criterion test_ref="oval:com.oracle.elsa:tst:202522660016" comment="systemd-pam is signed with the Oracle Linux 9 key"/>
</criteria>
<criteria operator="AND">
<criterion test_ref="oval:com.oracle.elsa:tst:202522660017" comment="systemd-resolved is earlier than 0:252-55.0.3.el9_7.7"/>
<criterion test_ref="oval:com.oracle.elsa:tst:202522660018" comment="systemd-resolved is signed with the Oracle Linux 9 key"/>
</criteria>
<criteria operator="AND">
<criterion test_ref="oval:com.oracle.elsa:tst:202522660019" comment="systemd-rpm-macros is earlier than 0:252-55.0.3.el9_7.7"/>
<criterion test_ref="oval:com.oracle.elsa:tst:202522660020" comment="systemd-rpm-macros is signed with the Oracle Linux 9 key"/>
</criteria>
<criteria operator="AND">
<criterion test_ref="oval:com.oracle.elsa:tst:202522660021" comment="systemd-udev is earlier than 0:252-55.0.3.el9_7.7"/>
<criterion test_ref="oval:com.oracle.elsa:tst:202522660022" comment="systemd-udev is signed with the Oracle Linux 9 key"/>
</criteria>
<criteria operator="AND">
<criterion test_ref="oval:com.oracle.elsa:tst:202522660023" comment="systemd-devel is earlier than 0:252-55.0.3.el9_7.7"/>
<criterion test_ref="oval:com.oracle.elsa:tst:202522660024" comment="systemd-devel is signed with the Oracle Linux 9 key"/>
</criteria>
<criteria operator="AND">
<criterion test_ref="oval:com.oracle.elsa:tst:202522660025" comment="systemd-journal-remote is earlier than 0:252-55.0.3.el9_7.7"/>
<criterion test_ref="oval:com.oracle.elsa:tst:202522660026" comment="systemd-journal-remote is signed with the Oracle Linux 9 key"/>
</criteria>
<criteria operator="AND">
<criterion test_ref="oval:com.oracle.elsa:tst:202522660027" comment="systemd-ukify is earlier than 0:252-55.0.3.el9_7.7"/>
<criterion test_ref="oval:com.oracle.elsa:tst:202522660028" comment="systemd-ukify is signed with the Oracle Linux 9 key"/>
</criteria>
</criteria>
</criteria>
<criteria operator="AND">
<criterion test_ref="oval:com.oracle.elsa:tst:202522660029" comment="Oracle Linux arch is x86_64"/>
<criteria operator="OR">
<criteria operator="AND">
<criterion test_ref="oval:com.oracle.elsa:tst:202522660023" comment="systemd-devel is earlier than 0:252-55.0.3.el9_7.7"/>
<criterion test_ref="oval:com.oracle.elsa:tst:202522660024" comment="systemd-devel is signed with the Oracle Linux 9 key"/>
</criteria>
<criteria operator="AND">
<criterion test_ref="oval:com.oracle.elsa:tst:202522660025" comment="systemd-journal-remote is earlier than 0:252-55.0.3.el9_7.7"/>
<criterion test_ref="oval:com.oracle.elsa:tst:202522660026" comment="systemd-journal-remote is signed with the Oracle Linux 9 key"/>
</criteria>
<criteria operator="AND">
<criterion test_ref="oval:com.oracle.elsa:tst:202522660027" comment="systemd-ukify is earlier than 0:252-55.0.3.el9_7.7"/>
<criterion test_ref="oval:com.oracle.elsa:tst:202522660028" comment="systemd-ukify is signed with the Oracle Linux 9 key"/>
</criteria>
<criteria operator="AND">
<criterion test_ref="oval:com.oracle.elsa:tst:202522660003" comment="systemd-boot-unsigned is earlier than 0:252-55.0.3.el9_7.7"/>
<criterion test_ref="oval:com.oracle.elsa:tst:202522660004" comment="systemd-boot-unsigned is signed with the Oracle Linux 9 key"/>
</criteria>
<criteria operator="AND">
<criterion test_ref="oval:com.oracle.elsa:tst:202522660005" comment="rhel-net-naming-sysattrs is earlier than 0:252-55.0.3.el9_7.7"/>
<criterion test_ref="oval:com.oracle.elsa:tst:202522660006" comment="rhel-net-naming-sysattrs is signed with the Oracle Linux 9 key"/>
</criteria>
<criteria operator="AND">
<criterion test_ref="oval:com.oracle.elsa:tst:202522660007" comment="systemd is earlier than 0:252-55.0.3.el9_7.7"/>
<criterion test_ref="oval:com.oracle.elsa:tst:202522660008" comment="systemd is signed with the Oracle Linux 9 key"/>
</criteria>
<criteria operator="AND">
<criterion test_ref="oval:com.oracle.elsa:tst:202522660009" comment="systemd-container is earlier than 0:252-55.0.3.el9_7.7"/>
<criterion test_ref="oval:com.oracle.elsa:tst:202522660010" comment="systemd-container is signed with the Oracle Linux 9 key"/>
</criteria>
<criteria operator="AND">
<criterion test_ref="oval:com.oracle.elsa:tst:202522660011" comment="systemd-libs is earlier than 0:252-55.0.3.el9_7.7"/>
<criterion test_ref="oval:com.oracle.elsa:tst:202522660012" comment="systemd-libs is signed with the Oracle Linux 9 key"/>
</criteria>
<criteria operator="AND">
<criterion test_ref="oval:com.oracle.elsa:tst:202522660013" comment="systemd-oomd is earlier than 0:252-55.0.3.el9_7.7"/>
<criterion test_ref="oval:com.oracle.elsa:tst:202522660014" comment="systemd-oomd is signed with the Oracle Linux 9 key"/>
</criteria>
<criteria operator="AND">
<criterion test_ref="oval:com.oracle.elsa:tst:202522660015" comment="systemd-pam is earlier than 0:252-55.0.3.el9_7.7"/>
<criterion test_ref="oval:com.oracle.elsa:tst:202522660016" comment="systemd-pam is signed with the Oracle Linux 9 key"/>
</criteria>
<criteria operator="AND">
<criterion test_ref="oval:com.oracle.elsa:tst:202522660017" comment="systemd-resolved is earlier than 0:252-55.0.3.el9_7.7"/>
<criterion test_ref="oval:com.oracle.elsa:tst:202522660018" comment="systemd-resolved is signed with the Oracle Linux 9 key"/>
</criteria>
<criteria operator="AND">
<criterion test_ref="oval:com.oracle.elsa:tst:202522660019" comment="systemd-rpm-macros is earlier than 0:252-55.0.3.el9_7.7"/>
<criterion test_ref="oval:com.oracle.elsa:tst:202522660020" comment="systemd-rpm-macros is signed with the Oracle Linux 9 key"/>
</criteria>
<criteria operator="AND">
<criterion test_ref="oval:com.oracle.elsa:tst:202522660021" comment="systemd-udev is earlier than 0:252-55.0.3.el9_7.7"/>
<criterion test_ref="oval:com.oracle.elsa:tst:202522660022" comment="systemd-udev is signed with the Oracle Linux 9 key"/>
</criteria>
</criteria>
</criteria>
</criteria>
</criteria>

</definition>
</definitions>
<!--
 ~~~~~~~~~~~~~~~~~~~~~   rpminfo tests   ~~~~~~~~~~~~~~~~~~~~~ 
-->
<tests>
<rpminfo_test id="oval:com.oracle.elsa:tst:202522660001"  version="501" comment="Oracle Linux 9 is installed" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
<object object_ref="oval:com.oracle.elsa:obj:202522660001" />
<state state_ref="oval:com.oracle.elsa:ste:202522660002" />
</rpminfo_test>
<rpminfo_test id="oval:com.oracle.elsa:tst:202522660002"  version="501" comment="Oracle Linux arch is aarch64" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
<object object_ref="oval:com.oracle.elsa:obj:202522660001" />
<state state_ref="oval:com.oracle.elsa:ste:202522660003" />
</rpminfo_test>
<rpminfo_test id="oval:com.oracle.elsa:tst:202522660003"  version="501" comment="systemd-boot-unsigned is earlier than 0:252-55.0.3.el9_7.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
<object object_ref="oval:com.oracle.elsa:obj:202522660002" />
<state state_ref="oval:com.oracle.elsa:ste:202522660004" />
</rpminfo_test>
<rpminfo_test id="oval:com.oracle.elsa:tst:202522660004"  version="501" comment="systemd-boot-unsigned is signed with the Oracle Linux 9 key" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
<object object_ref="oval:com.oracle.elsa:obj:202522660002" />
<state state_ref="oval:com.oracle.elsa:ste:202522660001" />
</rpminfo_test>
<rpminfo_test id="oval:com.oracle.elsa:tst:202522660005"  version="501" comment="rhel-net-naming-sysattrs is earlier than 0:252-55.0.3.el9_7.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
<object object_ref="oval:com.oracle.elsa:obj:202522660006" />
<state state_ref="oval:com.oracle.elsa:ste:202522660004" />
</rpminfo_test>
<rpminfo_test id="oval:com.oracle.elsa:tst:202522660006"  version="501" comment="rhel-net-naming-sysattrs is signed with the Oracle Linux 9 key" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
<object object_ref="oval:com.oracle.elsa:obj:202522660006" />
<state state_ref="oval:com.oracle.elsa:ste:202522660001" />
</rpminfo_test>
<rpminfo_test id="oval:com.oracle.elsa:tst:202522660007"  version="501" comment="systemd is earlier than 0:252-55.0.3.el9_7.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
<object object_ref="oval:com.oracle.elsa:obj:202522660007" />
<state state_ref="oval:com.oracle.elsa:ste:202522660004" />
</rpminfo_test>
<rpminfo_test id="oval:com.oracle.elsa:tst:202522660008"  version="501" comment="systemd is signed with the Oracle Linux 9 key" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
<object object_ref="oval:com.oracle.elsa:obj:202522660007" />
<state state_ref="oval:com.oracle.elsa:ste:202522660001" />
</rpminfo_test>
<rpminfo_test id="oval:com.oracle.elsa:tst:202522660009"  version="501" comment="systemd-container is earlier than 0:252-55.0.3.el9_7.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
<object object_ref="oval:com.oracle.elsa:obj:202522660008" />
<state state_ref="oval:com.oracle.elsa:ste:202522660004" />
</rpminfo_test>
<rpminfo_test id="oval:com.oracle.elsa:tst:202522660010"  version="501" comment="systemd-container is signed with the Oracle Linux 9 key" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
<object object_ref="oval:com.oracle.elsa:obj:202522660008" />
<state state_ref="oval:com.oracle.elsa:ste:202522660001" />
</rpminfo_test>
<rpminfo_test id="oval:com.oracle.elsa:tst:202522660011"  version="501" comment="systemd-libs is earlier than 0:252-55.0.3.el9_7.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
<object object_ref="oval:com.oracle.elsa:obj:202522660009" />
<state state_ref="oval:com.oracle.elsa:ste:202522660004" />
</rpminfo_test>
<rpminfo_test id="oval:com.oracle.elsa:tst:202522660012"  version="501" comment="systemd-libs is signed with the Oracle Linux 9 key" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
<object object_ref="oval:com.oracle.elsa:obj:202522660009" />
<state state_ref="oval:com.oracle.elsa:ste:202522660001" />
</rpminfo_test>
<rpminfo_test id="oval:com.oracle.elsa:tst:202522660013"  version="501" comment="systemd-oomd is earlier than 0:252-55.0.3.el9_7.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
<object object_ref="oval:com.oracle.elsa:obj:202522660010" />
<state state_ref="oval:com.oracle.elsa:ste:202522660004" />
</rpminfo_test>
<rpminfo_test id="oval:com.oracle.elsa:tst:202522660014"  version="501" comment="systemd-oomd is signed with the Oracle Linux 9 key" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
<object object_ref="oval:com.oracle.elsa:obj:202522660010" />
<state state_ref="oval:com.oracle.elsa:ste:202522660001" />
</rpminfo_test>
<rpminfo_test id="oval:com.oracle.elsa:tst:202522660015"  version="501" comment="systemd-pam is earlier than 0:252-55.0.3.el9_7.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
<object object_ref="oval:com.oracle.elsa:obj:202522660011" />
<state state_ref="oval:com.oracle.elsa:ste:202522660004" />
</rpminfo_test>
<rpminfo_test id="oval:com.oracle.elsa:tst:202522660016"  version="501" comment="systemd-pam is signed with the Oracle Linux 9 key" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
<object object_ref="oval:com.oracle.elsa:obj:202522660011" />
<state state_ref="oval:com.oracle.elsa:ste:202522660001" />
</rpminfo_test>
<rpminfo_test id="oval:com.oracle.elsa:tst:202522660017"  version="501" comment="systemd-resolved is earlier than 0:252-55.0.3.el9_7.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
<object object_ref="oval:com.oracle.elsa:obj:202522660012" />
<state state_ref="oval:com.oracle.elsa:ste:202522660004" />
</rpminfo_test>
<rpminfo_test id="oval:com.oracle.elsa:tst:202522660018"  version="501" comment="systemd-resolved is signed with the Oracle Linux 9 key" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
<object object_ref="oval:com.oracle.elsa:obj:202522660012" />
<state state_ref="oval:com.oracle.elsa:ste:202522660001" />
</rpminfo_test>
<rpminfo_test id="oval:com.oracle.elsa:tst:202522660019"  version="501" comment="systemd-rpm-macros is earlier than 0:252-55.0.3.el9_7.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
<object object_ref="oval:com.oracle.elsa:obj:202522660013" />
<state state_ref="oval:com.oracle.elsa:ste:202522660004" />
</rpminfo_test>
<rpminfo_test id="oval:com.oracle.elsa:tst:202522660020"  version="501" comment="systemd-rpm-macros is signed with the Oracle Linux 9 key" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
<object object_ref="oval:com.oracle.elsa:obj:202522660013" />
<state state_ref="oval:com.oracle.elsa:ste:202522660001" />
</rpminfo_test>
<rpminfo_test id="oval:com.oracle.elsa:tst:202522660021"  version="501" comment="systemd-udev is earlier than 0:252-55.0.3.el9_7.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
<object object_ref="oval:com.oracle.elsa:obj:202522660014" />
<state state_ref="oval:com.oracle.elsa:ste:202522660004" />
</rpminfo_test>
<rpminfo_test id="oval:com.oracle.elsa:tst:202522660022"  version="501" comment="systemd-udev is signed with the Oracle Linux 9 key" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
<object object_ref="oval:com.oracle.elsa:obj:202522660014" />
<state state_ref="oval:com.oracle.elsa:ste:202522660001" />
</rpminfo_test>
<rpminfo_test id="oval:com.oracle.elsa:tst:202522660023"  version="501" comment="systemd-devel is earlier than 0:252-55.0.3.el9_7.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
<object object_ref="oval:com.oracle.elsa:obj:202522660003" />
<state state_ref="oval:com.oracle.elsa:ste:202522660004" />
</rpminfo_test>
<rpminfo_test id="oval:com.oracle.elsa:tst:202522660024"  version="501" comment="systemd-devel is signed with the Oracle Linux 9 key" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
<object object_ref="oval:com.oracle.elsa:obj:202522660003" />
<state state_ref="oval:com.oracle.elsa:ste:202522660001" />
</rpminfo_test>
<rpminfo_test id="oval:com.oracle.elsa:tst:202522660025"  version="501" comment="systemd-journal-remote is earlier than 0:252-55.0.3.el9_7.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
<object object_ref="oval:com.oracle.elsa:obj:202522660004" />
<state state_ref="oval:com.oracle.elsa:ste:202522660004" />
</rpminfo_test>
<rpminfo_test id="oval:com.oracle.elsa:tst:202522660026"  version="501" comment="systemd-journal-remote is signed with the Oracle Linux 9 key" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
<object object_ref="oval:com.oracle.elsa:obj:202522660004" />
<state state_ref="oval:com.oracle.elsa:ste:202522660001" />
</rpminfo_test>
<rpminfo_test id="oval:com.oracle.elsa:tst:202522660027"  version="501" comment="systemd-ukify is earlier than 0:252-55.0.3.el9_7.7" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
<object object_ref="oval:com.oracle.elsa:obj:202522660005" />
<state state_ref="oval:com.oracle.elsa:ste:202522660004" />
</rpminfo_test>
<rpminfo_test id="oval:com.oracle.elsa:tst:202522660028"  version="501" comment="systemd-ukify is signed with the Oracle Linux 9 key" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
<object object_ref="oval:com.oracle.elsa:obj:202522660005" />
<state state_ref="oval:com.oracle.elsa:ste:202522660001" />
</rpminfo_test>
<rpminfo_test id="oval:com.oracle.elsa:tst:202522660029"  version="501" comment="Oracle Linux arch is x86_64" check="at least one" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
<object object_ref="oval:com.oracle.elsa:obj:202522660001" />
<state state_ref="oval:com.oracle.elsa:ste:202522660005" />
</rpminfo_test>

</tests>
<!--
 ~~~~~~~~~~~~~~~~~~~~   rpminfo objects   ~~~~~~~~~~~~~~~~~~~~ 
-->
<objects>
<rpminfo_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:com.oracle.elsa:obj:202522660007" version="501">
<name>systemd</name>
</rpminfo_object>
<rpminfo_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:com.oracle.elsa:obj:202522660005" version="501">
<name>systemd-ukify</name>
</rpminfo_object>
<rpminfo_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:com.oracle.elsa:obj:202522660008" version="501">
<name>systemd-container</name>
</rpminfo_object>
<rpminfo_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:com.oracle.elsa:obj:202522660001" version="501">
<name>oraclelinux-release</name>
</rpminfo_object>
<rpminfo_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:com.oracle.elsa:obj:202522660013" version="501">
<name>systemd-rpm-macros</name>
</rpminfo_object>
<rpminfo_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:com.oracle.elsa:obj:202522660003" version="501">
<name>systemd-devel</name>
</rpminfo_object>
<rpminfo_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:com.oracle.elsa:obj:202522660009" version="501">
<name>systemd-libs</name>
</rpminfo_object>
<rpminfo_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:com.oracle.elsa:obj:202522660014" version="501">
<name>systemd-udev</name>
</rpminfo_object>
<rpminfo_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:com.oracle.elsa:obj:202522660012" version="501">
<name>systemd-resolved</name>
</rpminfo_object>
<rpminfo_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:com.oracle.elsa:obj:202522660011" version="501">
<name>systemd-pam</name>
</rpminfo_object>
<rpminfo_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:com.oracle.elsa:obj:202522660004" version="501">
<name>systemd-journal-remote</name>
</rpminfo_object>
<rpminfo_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:com.oracle.elsa:obj:202522660006" version="501">
<name>rhel-net-naming-sysattrs</name>
</rpminfo_object>
<rpminfo_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:com.oracle.elsa:obj:202522660010" version="501">
<name>systemd-oomd</name>
</rpminfo_object>
<rpminfo_object xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:com.oracle.elsa:obj:202522660002" version="501">
<name>systemd-boot-unsigned</name>
</rpminfo_object>

</objects>
<states>
<!--
 ~~~~~~~~~~~~~~~~~~~~   rpminfo states   ~~~~~~~~~~~~~~~~~~~~~ 
-->
<rpminfo_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:com.oracle.elsa:ste:202522660001" version="501">
<signature_keyid operation="equals">bc4d06a08d8b756f</signature_keyid>
</rpminfo_state>
<rpminfo_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:com.oracle.elsa:ste:202522660002" version="501">
<version operation="pattern match">^9</version>
</rpminfo_state>
<rpminfo_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:com.oracle.elsa:ste:202522660003" version="501">
<arch operation="pattern match">aarch64</arch>
</rpminfo_state>
<rpminfo_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:com.oracle.elsa:ste:202522660004" version="501">
<evr datatype="evr_string" operation="less than">0:252-55.0.3.el9_7.7</evr>
</rpminfo_state>
<rpminfo_state xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" id="oval:com.oracle.elsa:ste:202522660005" version="501">
<arch operation="pattern match">x86_64</arch>
</rpminfo_state>

</states>
</oval_definitions>
