Relevance of kernel Fixlets of the Patches for CentOS sites have been modified.
What has changed
The previous behavior is kernel Fixlets will become relevant if a lower version of the kernel package is installed and there is no kernel package installed at a higher version. The updated behavior will also detect if the endpoint’s active kernel is also using the latest version of the kernel. If the endpoint has the latest kernel installed but is not using it, the kernel Fixlet will also become relevant.
Published sites
- Patches for CentOS 6 Plugin R2, site version 143
- Patches for CentOS 7 Plugin R2, site version 150
Actions to take
Gathering the sites will show the updated changes.
If a kernel Fixlet is suddenly relevant whereas previously it was not relevant, most likely the endpoint is not using the latest kernel. It is recommended that the endpoint switch to using the latest kernel to avoid potential vulnerabilities.
Reference
For the pre-announcement of the release, see: Pre-Announcement: Kernel Fixlets relevance changes for Linux sites
Application Engineering Team
BigFix Patch