v0.2.0 — Kernel CVE patch verification

Kernel CVE patch verification: the running kernel package is compared with the vendor's fixed version for each CVE.

python3 netviser_cve_audit.py --hosts servers.txt --cve CVE-2024-1086

Added

• patch check: kernel CVE patch status for the running kernel package, from
  vendor advisory data — Ubuntu Security API, Debian (via OSV) and the Red Hat
  Security Data API (RHEL, Rocky Linux, AlmaLinux, CentOS). Versions are
  compared with dpkg and rpm ordering. Verdicts: PATCHED, NOT_AFFECTED,
  LIVEPATCHED, VULNERABLE, FIX_PENDING, FIX_NOT_AVAILABLE, WONT_FIX,
  MENTIONED_IN_CHANGELOG, NO_DATA, UNSUPPORTED, NOT_CHECKED.
• Livepatch evidence (canonical-livepatch, kpatch-patch) and changelog
  CVE references for the running kernel package.
• --cve, --offline, --advisories FILE, --save-advisories FILE.
• os_version_codename fact; CVE PATCH column in the terminal summary; one
  patch.<CVE> column per CVE in the CSV report; advisory sources and download
  errors in the JSON report.

Changed

• cve_2026_98432.patch_status (always UNVERIFIED) is replaced by
  patch.CVE-2026-98432.
• Check.evaluate() takes an optional context argument.