Norbert, the expected result is not to have zero unpatched CVEs. That's unrealistic and I'm afraid that openscap from github is giving you the wrong results. For instance, as of this writing, CVE-2015-5180 against glibc is unfixed so it should not be reporting zero unpatched CVEs.
Norbert, the expected result is not to have zero unpatched CVEs. That's unrealistic and I'm afraid that openscap from github is giving you the wrong results. For instance, as of this writing, CVE-2015-5180 against glibc is unfixed so it should not be reporting zero unpatched CVEs.