You might want to check the errata for the packages your scanning tools complained about. Rhel will keep stable versions at the same release version, but backport security fixes in.

Thanks. I had verified that there is an errata before posting here. I presume that it hasn't been installed due to that repository being disabled, but maybe I'm mistaken?

Many security scanners are stupid about this.

Indeed. In the process of researching this I found a related KB article from Red Hat that basically said that the security scanner is not supposed to flag this.

Since it is rhel, you have a support contract, right? What do they say?

I'm positive we have a support contract, but I've never had to use it, so I'm not familiar with the process. I'm not one of the main linux admins here. If I can't find the answer either here or from my own research, I'll look into the process to open a case.

Thanks again.