# Openscap oval scan reportrting false positives

**URL:** <https://forums.rockylinux.org/t/openscap-oval-scan-reportrting-false-positives/12973>\
**Category:** Rocky Linux Help & Support\
**Tags:** rocky-linux-9\
**Created:** [February 22, 2024, 12:30pm UTC](https://forums.rockylinux.org/t/openscap-oval-scan-reportrting-false-positives/12973 "2024-02-22T12:30:49Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Htalluri](https://avatars.discourse-cdn.com/v4/letter/h/8e8cbc/32.png) [@Htalluri](https://forums.rockylinux.org/u/Htalluri)\
**Post date:** [February 22, 2024, 12:30pm UTC](https://forums.rockylinux.org/t/openscap-oval-scan-reportrting-false-positives/12973/1 "2024-02-22T12:30:49Z")

</div>

Hi chaps  
I am testing rocky Linux 9.3 as a potential candidate to replace our centos Infra. I have noticed that openscap reports false positives when scanning for vulnerabilities using the oval file downloaded from [Index of /pub/oval/](https://dl.rockylinux.org/pub/oval/) .

For example the report shows that the system is impacted by RLSA-2022:7288: openssl security update and as per the Errata the issue was fixed in openssl version 3.0.7 and when i checked on the system the current installed version is 3.0.07-25 . But the openscap still reports the system is vulnerable

any pointers on how to proceed are greatly appreciated.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex020/uploads/rockylinux/original/1X/91b7219eec10e30013422e4df76c1d898711a5d5.svg) [@system](https://forums.rockylinux.org/u/system)\
**Post date:** [April 22, 2024, 12:31pm UTC](https://forums.rockylinux.org/t/openscap-oval-scan-reportrting-false-positives/12973/2 "2024-04-22T12:31:31Z")

</div>

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.