Beta Branch fix cmsec GA kernel version compare and printed modprobe workaround i…

fix cmsec GA kernel version compare and printed modprobe workaround in 140.00beta01

ver_ge() sorted a GA kernel such as 5.14.0-611.el9_7 above its fixed z-stream
5.14.0-611.54.5.el9_7, because sort -V orders letters after digits. Hosts still
on a GA kernel were reported PATCHED for Copy Fail, Dirty Frag, Fragnesia and
SSH KeySign Pwn. The Dirty Frag and Fragnesia stopgap command printed under
suggested next actions created an empty dirtyfrag.conf.

---

Changes:
- ver_ge() in all 5 check scripts compares with the trailing .elN dist tag
removed; vendor callers already require matching tags via dist_tag_compatible()
- check-cve-2026-43284.sh and check-cve-2026-46300.sh print a printf that
writes the three install lines, with a working line continuation
- Their cleanup step prints modprobe -a esp4 esp6 instead of modprobe esp4 esp6,
which passed esp6 to esp4 as a module parameter
- Same check files as 141.00beta01, verified there on AlmaLinux 9.8/10.2 and
Rocky Linux 9.8/10.2

Continue reading...

140.00beta01 branch

• Branch: https://github.com/centminmod/centminmod/tree/140.00beta01
• Commit History: https://github.com/centminmod/centminmod/commits/140.00beta01