linux-vulnerability-mitigation (20260629-2) sid; urgency=medium

  * Adding updated Catalan debconf translations from Carles Pina i Estany
    <carles@pina.cat> (Closes: #1139678).
  * Adding updated German debconf translations from Helge Kreutzmann
    <debian@helgefjell.de> (Closes: #1139708).
  * Adding updated Dutch debconf translations from Frans Spiesschaert
    <Frans.Spiesschaert@yucom.be> (Closes: #1140684).
  * Don't fail on empty manual mitigations, thanks to Francesco Poli
    (wintermute) <invernomuto@paranoici.org> for reporting (Closes:
    #1137728).

 -- Daniel Baumann <daniel@debian.org>  Sun, 12 Jul 2026 18:55:08 +0200

linux-vulnerability-mitigation (20260629-1) sid; urgency=high

  * Merging upstream version 20260629.
  * Updating to debhelper 14.
  * Adding CVE-2026-46331 to package description.
  * Updating vcs fields.
  * Updating source url in copyright.

 -- Daniel Baumann <daniel@debian.org>  Mon, 29 Jun 2026 13:29:26 +0200

linux-vulnerability-mitigation (20260519.1-2) sid; urgency=medium

  * Adding initial German debconf translations from Helge Kreutzmann
    <debian@helgefjell.de> (Closes: #1137193).
  * Adding updated Portuguese debconf translations from Américo Monteiro
    <a_monteiro@gmx.com> (Closes: #1137337).
  * Adding initial Spanish debconf translations from Camaleón
    <noelamac@gmail.com> (Closes: #1137471).
  * Adding initial Dutch debconf translations from Frans Spiesschaert
    <Frans.Spiesschaert@yucom.be> (Closes: #1137536).

 -- Daniel Baumann <daniel@debian.org>  Sat, 06 Jun 2026 12:26:56 +0200

linux-vulnerability-mitigation (20260519.1-1) sid; urgency=medium

  * Merging upstream version 20260519.1:
    - Adding pintheft in linux-vulnerability-mitigation.7 manpage.
    - Updating references to pintheft mitigation as CVE-2026-43494.
    - Correcting spelling of PinTheft.
  * Adding pintheft in package description.
  * Handling pintheft pre-CVE mitigation files.

 -- Daniel Baumann <daniel@debian.org>  Fri, 22 May 2026 07:43:26 +0200

linux-vulnerability-mitigation (20260519-1) sid; urgency=high

  * Merging upstream version 20260519.
    - Correcting return values of help commands.
    - Silencing changing sysctl in ssh-keysign-pwn mitigation in order to not
      fail if the tunable is locked down (i.e. value 3).
    - Adding pintheft mitigation.

 -- Daniel Baumann <daniel@debian.org>  Wed, 20 May 2026 14:11:49 +0200

linux-vulnerability-mitigation (20260515.2-1) sid; urgency=medium

  * Merging upstream version 20260515.2:
    - Add debian specific kernel version containing the fix for CVE-2026-46333 in manpage.
    - Correcting spelling typos in manpage, thanks to Christian T. Steigies <cts@debian.org>.
    - Adding check in mitigation scripts.
    - Adding status in mitigations scripts.
    - Harmonizing all public-domain license identifiers.
    - Adding linux-vulnerability-mitigation cli program.
    - Reworking metadata handling in mitigations.
    - Updating preseeding examples for new two-step dialog.
    - Adding todo file.
  * Capitalizing debconf choices variable for consistency.
  * Tidying Portuguese deboconf po file.
  * Adding to show vulnerability names in debconf instead of CVE number
    only.
  * Updating debconf handling to use cli program.
  * Reworking debconf into two-step dialog.
  * Refreshing debconf files.
  * Updating mitigation provides.
  * Updating package description.
  * Adding bash-completion to suggests.

 -- Daniel Baumann <daniel@debian.org>  Sun, 17 May 2026 22:03:22 +0200

linux-vulnerability-mitigation (20260515.1-1) sid; urgency=high

  * Merging upstream version 20260515.1:
    - Adding vulnerability discovery attribution in ssh-keysign-pwn mitigation.
    - Guarding changing sysctl in ssh-keysign-pwn mitigation in order to not
      fail if the tunable is locked down (i.e. value 3).
    - Updating references to ssh-keysing-pwn mitigation as CVE-2026-46333.
  * Slightly improving readability of maintainerscript output when
    applying mitigations.
  * Sorting changelog.
  * Updating preinst to remove files from previous versions.

 -- Daniel Baumann <daniel@debian.org>  Fri, 15 May 2026 17:15:20 +0200

linux-vulnerability-mitigation (20260515-1) sid; urgency=high

  * Merging upstream version 20260515:
    - Clarifying that the preseed example in manpage is an example.
    - Creating and removing module directories to make mitigations idempotent.
    - Adding (partial) ssh-keysign-pwn mitigation, thanks to Salvatore
      Bonaccorso <carnil@debian.org>.
  * Temporarily omitting CVE filepattern for mitigations in
    maintainerscripts as the ssh-keysign-pwn vulnerability does not yet
    have a CVE number.

 -- Daniel Baumann <daniel@debian.org>  Fri, 15 May 2026 07:30:21 +0200

linux-vulnerability-mitigation (20260513.1-1) experimental; urgency=medium

  * Merging upstream version 20260513.1:
    - Correcting attribution to Fragnesia discoverer in manpage.
    - Adding kernel version information for Fragnesia in manpage.
  * Adding initial Catalan debconf translations from poc senderi
    <pocsenderi@protonmail.com> (Closes: #1136700).

 -- Daniel Baumann <daniel@debian.org>  Fri, 15 May 2026 00:39:19 +0200

linux-vulnerability-mitigation (20260513-1) experimental; urgency=medium

  * Merging upstream version 20260513.
    - Correcting uninstall command for CVE-2026-43500 mitigation.
    - Correcting spelling typo in manpage.
    - Listing fixed kernel versions in manpage.
    - Adding mitigation for Fragnesia [CVE-2026-46300] which is identical to the
      mitigation for Dirty Frag (Part 2) [CVE-2026-43500].
  * Including upstream changelogs in debian changelog.

 -- Daniel Baumann <daniel@debian.org>  Thu, 14 May 2026 08:14:42 +0200

# For older changelog entries, run 'apt-get changelog linux-vulnerability-mitigation'
