Stable Branch update cmsec CVE-2026-98432 AlmaLinux/Rocky production kernel baselin…

update cmsec CVE-2026-98432 AlmaLinux/Rocky production kernel baselines in 132.00stable

---

AlmaLinux and Rocky Linux BaseOS repos now ship kernels with the
CVE-2026-98432 fix, so the testing repo and security repo routes are no
longer needed.

Changes:
- set ALMALINUX_FIX_TESTING_ONLY and ROCKY_SECURITY_REPO_HAS_FIX to false
so step 1 shows a normal dnf upgrade
- raise the AlmaLinux fallback baselines to the production kernels
4.18.0-553.182.1.el8_10, 5.14.0-687.64.1.el9_8 and
6.12.0-211.72.1.el10_2; AlmaLinux 8 553.181.1 was built after 182.1
without the fix and was reported patched when the kernel changelog
could not be read
- add the same baselines for Rocky Linux 8/9/10; CIQ (_ciq) kernels stay
changelog only
- note that MPTCP being off or having no MPTCP listeners does not show a
host is safe (Red Hat RHSB-2026-016 update)
- refresh BASELINE_VERIFIED_DATE and header comments

Continue reading...

132.00stable branch

• Branch: https://github.com/centminmod/centminmod/tree/132.00stable
• Commit History: https://github.com/centminmod/centminmod/commits/132.00stable