Description of problem: When trying to scan with ssg-rhel9-ds profile, the remote resource is not available anymore on Red Hat web site: ~~~ # oscap info /usr/share/xml/scap/ssg/content/ssg-rhel9-ds.xml 2>&1 | grep 'WARNING: Skipping' WARNING: Skipping 'https://access.redhat.com/security/data/oval/com.redhat.rhsa-RHEL9.xml.bz2' file which is referenced from datastream ~~~ # wget https://access.redhat.com/security/data/oval/com.redhat.rhsa-RHEL9.xml.bz2 --2023-07-14 23:42:59-- https://access.redhat.com/security/data/oval/com.redhat.rhsa-RHEL9.xml.bz2 Resolving access.redhat.com (access.redhat.com)... 23.54.83.152, 23.54.83.128, 2600:140f:6::172c:a50, ... Connecting to access.redhat.com (access.redhat.com)|23.54.83.152|:443... connected. HTTP request sent, awaiting response... 404 Not Found 2023-07-14 23:43:00 ERROR 404: Not Found. Only V2 version are available in https://access.redhat.com/security/data/oval Why the old versions have been removed, even if they are not updated anymore, they are needed for previous packages. Version-Release number of selected component (if applicable): scap-security-guide-0.1.66-1.el9_1.noarch RHEL9 How reproducible: always Steps to Reproduce: 1. yum install scap-security-guide.noarch 2. run oscap info /usr/share/xml/scap/ssg/content/ssg-rhel8-ds.xml Actual results: Profile not updated Expected results: Remote ressource available on Red Hat web site Additional info:
Fixed upstream: https://github.com/ComplianceAsCode/content/pull/10842
*** This bug has been marked as a duplicate of bug 2223178 ***