Do not hardcode version/release twice into spec
Filepath should end_with ".xml.bz2"

New OpenSCAP (1.2.0+) recognizes such paths and automatically loads the
content through bz2 openner.
ArfReport model should be able to generate HTML report online.