Stable Branch avoid prescribing a kernel upgrade on already-patched hosts in cmsec …

avoid prescribing a kernel upgrade on already-patched hosts in cmsec in 132.00stable

The "Available kernel updates" section recorded a "dnf upgrade && reboot"
recommended action whenever newer kernel packages existed, even on hosts the
verdict later marks patched (e.g. a Rocky security-repo .0.N kernel confirmed
via changelog) — producing a "patched" verdict alongside an upgrade-and-reboot
recommendation.

---

Reword the rc=100 branch to a verdict-neutral availability note and drop its
record_action. The upgrade recommendation for genuinely vulnerable hosts is
still owned by the vulnerable verdict branch, and the always-printed "Suggested
next actions" block still documents how to update.

Continue reading...

132.00stable branch

• Branch: https://github.com/centminmod/centminmod/tree/132.00stable
• Commit History: https://github.com/centminmod/centminmod/commits/132.00stable