Is this still running / working?

[JHeinzde]

I wanted to use the oval files from the dl.rockylinux.org mirror, but apparently they are no longer updated? Is this intended?

[NeilHanlon]

Hi, we're looking into this. Thanks for the report.

[erdy232]

Hi @NeilHanlon,

The OVAL files at dl.rockylinux.org still seem to be outdated. Is there any intention of updating them?

[wagner-robert]

Any news on this? All OVAL files stopped updating on 10-May-2024. They no longer seem to work with OpenSCAP.
https://dl.rockylinux.org/pub/oval/org.rockylinux.rlsa-8.xml
https://dl.rockylinux.org/pub/oval/org.rockylinux.rlsa-9.xml
https://download.rockylinux.org/pub/oval/org.rockylinux.rlsa-9.xml

[nazunalika]

Updated ovals should be available now. However, I cannot guarantee their accuracy.

If there are issues with the output or the usage of the data and you have identified a fix for them, please submit a PR.

[wagner-robert]

The OVAL file is not valid according to OpenSCAP:
File 'org.rockylinux.rlsa-9.xml' line 256: Element '{http://oval.mitre.org/XMLSchema/oval-definitions-5}criterion', attribute 'test_ref': [facet 'pattern'] The value 'oval:org.rockylinux.rlsa:tst:unk' in not accepted by the pattern 'oval:[A-Za-z0-9_\-\.]+:tst:[1-9[0-9]*'. Warning: No precomputed value available, the value was either invalid or something strange happened.
Also lines 4764, 5408, 5868, 6126, 14153...
I think these are CVEs that are have both Rocky Linux 8 and Rocky Linux 9 in them. Those also have RPMs which point to the el8 versions. This need to follow the RHEL9 files and only contain el9 RPMs and look for Rocky Linux 9 OS.

Other Errors:
File 'org.rockylinux.rlsa-9.xml' line 16954: ... Duplicate key-sequence ['oval:org.rockylinux.rlsa:def:20243830'] in key identity-constraint '{http://oval.mitre.org/XMLSchema/oval-definitions-5}definitionKey