I've created a new baseline for 6.5 critical host patches and specifically excluded ESXi 6.5 Complete Update 2. When I click the Remediate... button and get to the Patches and extensions section it doesn't list Update 2. But after remediation is done Update 2 is installed on the host.
Am I doing something that is causing 6.5 U2 to be installed even thought I explicitly excluded the patch?