Stable Branch update cmsec Rocky security repo kernel handling in 132.00stable

update cmsec Rocky security repo kernel handling in 132.00stable

Rocky Linux ships CVE-2026-98432 fixed kernels only in its opt-in
security repo (the baseos kernels lack the fix), and Rocky 8 names that
repo file Rocky-Security.repo instead of rocky-security.repo.

Changes:
- check-cve-2026-98432.sh: mark the Rocky security repo as carrying the
fix and make installing from it step 1, the vendor assessment and the
recorded action for Rocky kernels; prefix a rocky-repos update when the
repo file is missing; ask to check for the .0.N kernel release suffix;
leave CIQ (_ciq) kernels out; list the Rocky security repo kernels in
the header; drop the old step 7 hint
- check-cve-2026-98432.sh, check-cve-2026-31431.sh, check-cve-2026-43284.sh,
check-cve-2026-46300.sh, check-cve-2026-46333.sh, check-zdi-can-33367.sh:
detect both Rocky security repo file names for the repo query and hint

Continue reading...

---

132.00stable branch

• Branch: https://github.com/centminmod/centminmod/tree/132.00stable
• Commit History: https://github.com/centminmod/centminmod/commits/132.00stable