We have several RHEL 8.8 instances in AWS which have the BaseOS and AppStream RHUI repositories available. However, we cannot see updated versions of several packages which were flagged in a recent Nessus scan - one example would be the 8.9 kernel, 4.18.0-513.5.1.el8_9, though there are a variety of other packages as well which should be available according to the related RHSAs.
The repositories are available, reachable, and browsable after cleaning the dnf cache. There are no errors. I've read that it's not possible to update RHEL systems without an active subscription but we've been installing packages from these repositories without RHSM with no issues for several months (and for several years before that on RHEL 7), so I'm not sure what the deal is there. This is a very recent issue so if it is related to subscriptions, I don't know what could have suddenly changed.
Any insight appreciated.
el8_9indicates, the kernel version 4.18.0-513.5.1.el8_9 is part of minor release 8.9 of RHEL 8. If your systems include some third-party software that depends specifically on minor release being 8.8, it might block the automatic upgrade from 8.8 to 8.9 until the third-party software itself is upgraded. Or if you don't have a RedHat Subscription of your own, you might be accessing some AWS-managed mirror repository and paying for it as part of the AWS payments - in which case you should be asking AWS support about what's going on with the repository.