2026-06-29 Baumann <daniel@debian.org>

	* Releasing version 20260629.

	[ Daniel Baumann ]
	* Adding mitigation for PACKET_EDIT_MEME.c (CVE-2026-46331).
	* Updating vcs url in linux-vulnerability-mitigation.1 manpage.

2026-05-22 Baumann <daniel@debian.org>

	* Releasing version 20260519.1.

	[ Daniel Baumann ]
	* Adding pintheft in linux-vulnerability-mitigation.7 manpage.
	* Updating references to pintheft mitigation as CVE-2026-43494.
	* Correcting spelling of PinTheft.

2026-05-20 Baumann <daniel@debian.org>

	* Releasing version 20260519.

	[ Daniel Baumann ]
	* Correcting return values of help commands.
	* Silencing changing sysctl in ssh-keysign-pwn mitigation in order to not fail if the tunable is locked down (i.e. value 3).
	* Adding pintheft mitigation.

2026-05-17 Baumann <daniel@debian.org>

	* Releasing version 20260515.2.

	[ Daniel Baumann ]
	* Add debian specific kernel version containing the fix for CVE-2026-46333 in manpage.
	* Correcting spelling typos in manpage, thanks to Christian T. Steigies <cts@debian.org>.
	* Adding check in mitigation scripts.
	* Adding status in mitigations scripts.
	* Harmonizing all public-domain license identifiers.
	* Adding linux-vulnerability-mitigation cli program.
	* Reworking metadata handling in mitigations.
	* Updating preseeding examples for new two-step dialog.
	* Adding todo file.

2026-05-15	Daniel Baumann <daniel@debian.org>

	* Releasing version 20260515.1.

	[ Daniel Baumann ]
	* Adding vulnerability discovery attribution in ssh-keysign-pwn mitigation.
	* Guarding changing sysctl in ssh-keysign-pwn mitigation in order to not fail if the tunable is locked down (i.e. value 3).
	* Updating references to ssh-keysing-pwn mitigation as CVE-2026-46333.

2026-05-15	Daniel Baumann <daniel@debian.org>

	* Releasing version 20260515.

	[ Daniel Baumann ]
	* Clarifying that the preseed example in manpage is an example.
	* Creating and removing module directories to make mitigations idempotent.
	* Adding (partial) ssh-keysign-pwn mitigation, thanks to Salvatore Bonaccorso <carnil@debian.org>.

2026-05-15	Daniel Baumann <daniel@debian.org>

	* Releasing version 20260513.1.

	[ Daniel Baumann ]
	* Correcting attribution to Fragnesia discoverer in manpage.
	* Adding kernel version information for Fragnesia in manpage.

2026-05-13	Daniel Baumann <daniel@debian.org>

	* Releasing version 20260513.

	[ Daniel Baumann ]
	* Correcting uninstall command for CVE-2026-43500 mitigation.
	* Correcting spelling typo in manpage.
	* Listing fixed kernel versions in manpage.
	* Adding mitigation for Fragnesia [CVE-2026-46300] which is identical to the mitigation for Dirty Frag (Part 2) [CVE-2026-43500].

2026-05-10	Daniel Baumann <daniel@debian.org>

	* Releasing version 20260508.3.

	[ Daniel Baumann ]
	* Also silencing unloading xfrm modules.

2026-05-08	Daniel Baumann <daniel@debian.org>

	* Releasing version 20260508.2.

	[ Daniel Baumann ]
	* Updating CVE-2026-43284 mitigation with Copy Fail 2 specific removal
	  of xfrm_user/xfrm_algo modules (it's not entirely clear if Copy Fail
	  2 is completely mitigated by only removing esp4/esp6 modules only, so
	  let's remove xfrm_user/xfrm_algo too).
	* Wrapping changelog.

2026-05-08	Daniel Baumann <daniel@debian.org>

	* Releasing version 20260508.1.

	[ Daniel Baumann ]
	* Updating comments in copy-fail mitigation.
	* Also blacklisting modules in order to catch module aliases.
	* Using CVE number as primary identifier for mitigations.
	* Splitting previous CVE-2026-43284 into CVE-2026-43284 and
	  CVE-2026-43500.
	* Adding individual mitigation preseeding example in manpage.

2026-05-08	Daniel Baumann <daniel@debian.org>

	* Releasing version 20260508.

	[ Daniel Baumann ]
	* Correcting spelling typo in manpage.
	* Adding usage notes in manpage.
	* Updating for dirty-frag CVE number.

2026-05-07	Daniel Baumann <daniel@debian.org>

	* Releasing version 20260507.
