diff --git a/debian/changelog b/debian/changelog
index 13f557753..49ddd79cb 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,4 +1,4 @@
-linux (4.19.24-1) UNRELEASED; urgency=medium
+linux (4.19.25-1) UNRELEASED; urgency=medium
 
   * New upstream stable update:
     https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.21
@@ -435,6 +435,36 @@ linux (4.19.24-1) UNRELEASED; urgency=medium
     - [x86] drm/i915: Block fbdev HPD processing during suspend
     - [x86] drm/i915: Prevent a race during I915_GEM_MMAP ioctl with WC set
     - mm: proc: smaps_rollup: fix pss_locked calculation
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.25
+    - af_packet: fix raw sockets over 6in4 tunnel
+    - [arm64, armhf] dsa: mv88e6xxx: Ensure all pending interrupts are handled
+      prior to exit
+    - mlxsw: __mlxsw_sp_port_headroom_set(): Fix a use of local variable
+    - net: crypto set sk to NULL when af_alg_release. (CVE-2019-8912)
+    - net: Fix for_each_netdev_feature on Big endian
+    - net: fix IPv6 prefix route residue
+    - net: ip6_gre: initialize erspan_ver just for erspan tunnels
+    - net: ipv4: use a dedicated counter for icmp_v4 redirect packets
+    - net: phy: xgmiitorgmii: Support generic PHY status read
+    - net: stmmac: Fix a race in EEE enable callback
+    - net: stmmac: handle endianness in dwmac4_get_timestamp
+    - sky2: Increase D3 delay again
+    - vhost: correctly check the return value of translate_desc() in log_used()
+    - vsock: cope with memory allocation failure at socket creation time
+    - vxlan: test dev->flags & IFF_UP before calling netif_rx()
+    - net: Add header for usage of fls64()
+    - tcp: clear icsk_backoff in tcp_write_queue_purge()
+    - tcp: tcp_v4_err() should be more careful
+    - net: Do not allocate page fragments that are not skb aligned
+    - hwmon: (lm80) Fix missing unlock on error in set_fan_div()
+    - scsi: target/core: Use kmem_cache_free() instead of kfree()
+    - PCI: Fix __initdata issue with "pci=disable_acs_redir" parameter
+    - sunrpc: fix 4 more call sites that were using stack memory with a
+      scatterlist
+    - netfilter: nf_nat_snmp_basic: add missing length checks in ASN.1 cbs
+      (CVE-2019-9162)
+    - net/x25: do not hold the cpu too long in x25_new_lci()
+    - ax25: fix possible use-after-free
 
   [ Ben Hutchings ]
   * [sparc64] udeb: Use standard module list in nic-modules; add i2c-modules