diff --git a/debian/changelog b/debian/changelog
index 49e2634b7..0b2557d30 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,4 +1,4 @@
-linux (4.19.128-1) UNRELEASED; urgency=medium
+linux (4.19.129-1) UNRELEASED; urgency=medium
 
   * New upstream stable update:
     https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.119
@@ -481,6 +481,272 @@ linux (4.19.128-1) UNRELEASED; urgency=medium
     - uprobes: ensure that uprobe->offset and ->ref_ctr_offset are properly
       aligned
     - Revert "net/mlx5: Annotate mutex destroy for root ns"
+    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.129
+    - ipv6: fix IPV6_ADDRFORM operation logic
+    - net_failover: fixed rollback in net_failover_open()
+    - bridge: Avoid infinite loop when suppressing NS messages with invalid options
+    - vxlan: Avoid infinite loop when suppressing NS messages with invalid options
+    - tun: correct header offsets in napi frags mode
+    - selftests: bpf: fix use of undeclared RET_IF macro
+    - make 'user_access_begin()' do 'access_ok()'
+    - Fix 'acccess_ok()' on alpha and SH
+    - arch/openrisc: Fix issues with access_ok()
+    - x86: uaccess: Inhibit speculation past access_ok() in user_access_begin()
+    - lib: Reduce user_access_begin() boundaries in strncpy_from_user() and strnlen_user()
+    - btrfs: merge btrfs_find_device and find_device
+    - btrfs: Detect unbalanced tree with empty leaf before crashing btree operations
+    - crypto: talitos - fix ECB and CBC algs ivsize
+    - Input: mms114 - fix handling of mms345l
+    - ARM: 8977/1: ptrace: Fix mask for thumb breakpoint hook
+    - sched/fair: Don't NUMA balance for kthreads
+    - Input: synaptics - add a second working PNP_ID for Lenovo T470s
+    - drivers/net/ibmvnic: Update VNIC protocol version reporting
+    - powerpc/xive: Clear the page tables for the ESB IO mapping
+    - ath9k_htc: Silence undersized packet warnings
+    - RDMA/uverbs: Make the event_queue fds return POLLERR when disassociated
+    - x86/cpu/amd: Make erratum #1054 a legacy erratum
+    - perf probe: Accept the instance number of kretprobe event
+    - mm: add kvfree_sensitive() for freeing sensitive data objects
+    - aio: fix async fsync creds
+    - btrfs: tree-checker: Check level for leaves and nodes
+    - x86_64: Fix jiffies ODR violation
+    - x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs
+    - x86/speculation: Prevent rogue cross-process SSBD shutdown
+    - x86/reboot/quirks: Add MacBook6,1 reboot quirk
+    - efi/efivars: Add missing kobject_put() in sysfs entry creation error path
+    - ALSA: es1688: Add the missed snd_card_free()
+    - ALSA: hda/realtek - add a pintbl quirk for several Lenovo machines
+    - ALSA: usb-audio: Fix inconsistent card PM state after resume
+    - ALSA: usb-audio: Add vendor, product and profile name for HP Thunderbolt Dock
+    - ACPI: sysfs: Fix reference count leak in acpi_sysfs_add_hotplug_profile()
+    - ACPI: CPPC: Fix reference count leak in acpi_cppc_processor_probe()
+    - ACPI: GED: add support for _Exx / _Lxx handler methods
+    - ACPI: PM: Avoid using power resources if there are none for D0
+    - cgroup, blkcg: Prepare some symbols for module and !CONFIG_CGROUP usages
+    - nilfs2: fix null pointer dereference at nilfs_segctor_do_construct()
+    - spi: dw: Fix controller unregister order
+    - spi: bcm2835aux: Fix controller unregister order
+    - spi: bcm-qspi: when tx/rx buffer is NULL set to 0
+    - PM: runtime: clk: Fix clk_pm_runtime_get() error path
+    - crypto: cavium/nitrox - Fix 'nitrox_get_first_device()' when ndevlist is fully iterated
+    - ALSA: pcm: disallow linking stream to itself
+    - x86/{mce,mm}: Unmap the entire page if the whole page is affected and poisoned
+    - KVM: x86: Fix APIC page invalidation race
+    - kvm: x86: Fix L1TF mitigation for shadow MMU
+    - KVM: x86/mmu: Consolidate "is MMIO SPTE" code
+    - KVM: x86: only do L1TF workaround on affected processors
+    - x86/speculation: Change misspelled STIPB to STIBP
+    - x86/speculation: Add support for STIBP always-on preferred mode
+    - x86/speculation: Avoid force-disabling IBPB based on STIBP and enhanced IBRS.
+    - x86/speculation: PR_SPEC_FORCE_DISABLE enforcement for indirect branches.
+    - spi: No need to assign dummy value in spi_unregister_controller()
+    - spi: Fix controller unregister order
+    - spi: pxa2xx: Fix controller unregister order
+    - spi: bcm2835: Fix controller unregister order
+    - spi: pxa2xx: Balance runtime PM enable/disable on error
+    - spi: pxa2xx: Fix runtime PM ref imbalance on probe error
+    - crypto: virtio: Fix use-after-free in virtio_crypto_skcipher_finalize_req()
+    - crypto: virtio: Fix src/dst scatterlist calculation in __virtio_crypto_skcipher_do_req()
+    - crypto: virtio: Fix dest length calculation in __virtio_crypto_skcipher_do_req()
+    - selftests/net: in rxtimestamp getopt_long needs terminating null entry
+    - ovl: initialize error in ovl_copy_xattr
+    - proc: Use new_inode not new_inode_pseudo
+    - video: fbdev: w100fb: Fix a potential double free.
+    - KVM: nSVM: fix condition for filtering async PF
+    - KVM: nSVM: leave ASID aside in copy_vmcb_control_area
+    - KVM: nVMX: Consult only the "basic" exit reason when routing nested exit
+    - KVM: MIPS: Define KVM_ENTRYHI_ASID to cpu_asid_mask(&boot_cpu_data)
+    - KVM: MIPS: Fix VPN2_MASK definition for variable cpu_vmbits
+    - KVM: arm64: Make vcpu_cp1x() work on Big Endian hosts
+    - scsi: megaraid_sas: TM command refire leads to controller firmware crash
+    - ath9k: Fix use-after-free Read in ath9k_wmi_ctrl_rx
+    - ath9k: Fix use-after-free Write in ath9k_htc_rx_msg
+    - ath9x: Fix stack-out-of-bounds Write in ath9k_hif_usb_rx_cb
+    - ath9k: Fix general protection fault in ath9k_hif_usb_rx_cb
+    - Smack: slab-out-of-bounds in vsscanf
+    - drm/vkms: Hold gem object while still in-use
+    - mm/slub: fix a memory leak in sysfs_slab_add()
+    - fat: don't allow to mount if the FAT length == 0
+    - perf: Add cond_resched() to task_function_call()
+    - agp/intel: Reinforce the barrier after GTT updates
+    - mmc: sdhci-msm: Clear tuning done flag while hs400 tuning
+    - ARM: dts: at91: sama5d2_ptc_ek: fix sdmmc0 node description
+    - mmc: sdio: Fix potential NULL pointer error in mmc_sdio_init_card()
+    - xen/pvcalls-back: test for errors when calling backend_connect()
+    - KVM: arm64: Synchronize sysreg state on injecting an AArch32 exception
+    - ACPI: GED: use correct trigger type field in _Exx / _Lxx handling
+    - drm: bridge: adv7511: Extend list of audio sample rates
+    - crypto: ccp -- don't "select" CONFIG_DMADEVICES
+    - media: si2157: Better check for running tuner in init
+    - objtool: Ignore empty alternatives
+    - spi: pxa2xx: Apply CS clk quirk to BXT
+    - net: atlantic: make hw_get_regs optional
+    - net: ena: fix error returning in ena_com_get_hash_function()
+    - efi/libstub/x86: Work around LLVM ELF quirk build regression
+    - arm64: cacheflush: Fix KGDB trap detection
+    - spi: dw: Zero DMA Tx and Rx configurations on stack
+    - arm64: insn: Fix two bugs in encoding 32-bit logical immediates
+    - ixgbe: Fix XDP redirect on archs with PAGE_SIZE above 4K
+    - MIPS: Loongson: Build ATI Radeon GPU driver as module
+    - Bluetooth: Add SCO fallback for invalid LMP parameters error
+    - kgdb: Disable WARN_CONSOLE_UNLOCKED for all kgdb
+    - kgdb: Prevent infinite recursive entries to the debugger
+    - spi: dw: Enable interrupts in accordance with DMA xfer mode
+    - clocksource: dw_apb_timer: Make CPU-affiliation being optional
+    - clocksource: dw_apb_timer_of: Fix missing clockevent timers
+    - btrfs: do not ignore error from btrfs_next_leaf() when inserting checksums
+    - ARM: 8978/1: mm: make act_mm() respect THREAD_SIZE
+    - batman-adv: Revert "disable ethtool link speed detection when auto negotiation off"
+    - mmc: meson-mx-sdio: trigger a soft reset after a timeout or CRC error
+    - spi: dw: Fix Rx-only DMA transfers
+    - x86/kvm/hyper-v: Explicitly align hcall param for kvm_hyperv_exit
+    - net: vmxnet3: fix possible buffer overflow caused by bad DMA value in vmxnet3_get_rss()
+    - staging: android: ion: use vmap instead of vm_map_ram
+    - brcmfmac: fix wrong location to get firmware feature
+    - tools api fs: Make xxx__mountpoint() more scalable
+    - e1000: Distribute switch variables for initialization
+    - dt-bindings: display: mediatek: control dpi pins mode to avoid leakage
+    - audit: fix a net reference leak in audit_send_reply()
+    - media: dvb: return -EREMOTEIO on i2c transfer failure.
+    - media: platform: fcp: Set appropriate DMA parameters
+    - MIPS: Make sparse_init() using top-down allocation
+    - Bluetooth: btbcm: Add 2 missing models to subver tables
+    - audit: fix a net reference leak in audit_list_rules_send()
+    - netfilter: nft_nat: return EOPNOTSUPP if type or flags are not supported
+    - selftests/bpf: Fix memory leak in extract_build_id()
+    - net: bcmgenet: set Rx mode before starting netif
+    - lib/mpi: Fix 64-bit MIPS build with Clang
+    - exit: Move preemption fixup up, move blocking operations down
+    - sched/core: Fix illegal RCU from offline CPUs
+    - drivers/perf: hisi: Fix typo in events attribute array
+    - net: lpc-enet: fix error return code in lpc_mii_init()
+    - media: cec: silence shift wrapping warning in __cec_s_log_addrs()
+    - net: allwinner: Fix use correct return type for ndo_start_xmit()
+    - powerpc/spufs: fix copy_to_user while atomic
+    - xfs: clean up the error handling in xfs_swap_extents
+    - Crypto/chcr: fix for ccm(aes) failed test
+    - MIPS: Truncate link address into 32bit for 32bit kernel
+    - mips: cm: Fix an invalid error code of INTVN_*_ERR
+    - kgdb: Fix spurious true from in_dbg_master()
+    - xfs: reset buffer write failure state on successful completion
+    - xfs: fix duplicate verification from xfs_qm_dqflush()
+    - platform/x86: intel-vbtn: Use acpi_evaluate_integer()
+    - platform/x86: intel-vbtn: Split keymap into buttons and switches parts
+    - platform/x86: intel-vbtn: Do not advertise switches to userspace if they are not there
+    - platform/x86: intel-vbtn: Also handle tablet-mode switch on "Detachable" and "Portable" chassis-types
+    - nvme: refine the Qemu Identify CNS quirk
+    - ath10k: Remove msdu from idr when management pkt send fails
+    - wcn36xx: Fix error handling path in 'wcn36xx_probe()'
+    - net: qed*: Reduce RX and TX default ring count when running inside kdump kernel
+    - mt76: avoid rx reorder buffer overflow
+    - md: don't flush workqueue unconditionally in md_open
+    - veth: Adjust hard_start offset on redirect XDP frames
+    - net/mlx5e: IPoIB, Drop multicast packets that this interface sent
+    - rtlwifi: Fix a double free in _rtl_usb_tx_urb_setup()
+    - mwifiex: Fix memory corruption in dump_station
+    - x86/boot: Correct relocation destination on old linkers
+    - mips: MAAR: Use more precise address mask
+    - mips: Add udelay lpj numbers adjustment
+    - crypto: stm32/crc32 - fix ext4 chksum BUG_ON()
+    - crypto: stm32/crc32 - fix run-time self test issue.
+    - crypto: stm32/crc32 - fix multi-instance
+    - x86/mm: Stop printing BRK addresses
+    - m68k: mac: Don't call via_flush_cache() on Mac IIfx
+    - btrfs: qgroup: mark qgroup inconsistent if we're inherting snapshot to a new qgroup
+    - macvlan: Skip loopback packets in RX handler
+    - PCI: Don't disable decoding when mmio_always_on is set
+    - MIPS: Fix IRQ tracing when call handle_fpe() and handle_msa_fpe()
+    - bcache: fix refcount underflow in bcache_device_free()
+    - mmc: sdhci-msm: Set SDHCI_QUIRK_MULTIBLOCK_READ_ACMD12 quirk
+    - staging: greybus: sdio: Respect the cmd->busy_timeout from the mmc core
+    - mmc: via-sdmmc: Respect the cmd->busy_timeout from the mmc core
+    - ixgbe: fix signed-integer-overflow warning
+    - mmc: sdhci-esdhc-imx: fix the mask for tuning start point
+    - spi: dw: Return any value retrieved from the dma_transfer callback
+    - cpuidle: Fix three reference count leaks
+    - platform/x86: hp-wmi: Convert simple_strtoul() to kstrtou32()
+    - platform/x86: intel-hid: Add a quirk to support HP Spectre X2 (2015)
+    - platform/x86: intel-vbtn: Only blacklist SW_TABLET_MODE on the 9 / "Laptop" chasis-type
+    - string.h: fix incompatibility between FORTIFY_SOURCE and KASAN
+    - btrfs: include non-missing as a qualifier for the latest_bdev
+    - btrfs: send: emit file capabilities after chown
+    - mm: thp: make the THP mapcount atomic against __split_huge_pmd_locked()
+    - mm: initialize deferred pages with interrupts enabled
+    - ima: Fix ima digest hash table key calculation
+    - ima: Directly assign the ima_default_policy pointer to ima_rules
+    - evm: Fix possible memory leak in evm_calc_hmac_or_hash()
+    - ext4: fix EXT_MAX_EXTENT/INDEX to check for zeroed eh_max
+    - ext4: fix error pointer dereference
+    - ext4: fix race between ext4_sync_parent() and rename()
+    - PCI: Avoid Pericom USB controller OHCI/EHCI PME# defect
+    - PCI: Avoid FLR for AMD Matisse HD Audio & USB 3.0
+    - PCI: Avoid FLR for AMD Starship USB 3.0
+    - PCI: Add ACS quirk for iProc PAXB
+    - PCI: Add ACS quirk for Intel Root Complex Integrated Endpoints
+    - PCI: Remove unused NFP32xx IDs
+    - pci:ipmi: Move IPMI PCI class id defines to pci_ids.h
+    - hwmon/k10temp, x86/amd_nb: Consolidate shared device IDs
+    - x86/amd_nb: Add PCI device IDs for family 17h, model 30h
+    - PCI: add USR vendor id and use it in r8169 and w6692 driver
+    - PCI: Move Synopsys HAPS platform device IDs
+    - PCI: Move Rohm Vendor ID to generic list
+    - misc: pci_endpoint_test: Add the layerscape EP device support
+    - misc: pci_endpoint_test: Add support to test PCI EP in AM654x
+    - PCI: Add Synopsys endpoint EDDA Device ID
+    - PCI: Add NVIDIA GPU multi-function power dependencies
+    - PCI: Enable NVIDIA HDA controllers
+    - PCI: mediatek: Add controller support for MT7629
+    - x86/amd_nb: Add PCI device IDs for family 17h, model 70h
+    - ALSA: lx6464es - add support for LX6464ESe pci express variant
+    - PCI: Add Genesys Logic, Inc. Vendor ID
+    - PCI: Add Amazon's Annapurna Labs vendor ID
+    - PCI: vmd: Add device id for VMD device 8086:9A0B
+    - x86/amd_nb: Add Family 19h PCI IDs
+    - PCI: Add Loongson vendor ID
+    - serial: 8250_pci: Move Pericom IDs to pci_ids.h
+    - PCI: Make ACS quirk implementations more uniform
+    - PCI: Unify ACS quirk desired vs provided checking
+    - PCI: Generalize multi-function power dependency device links
+    - btrfs: fix error handling when submitting direct I/O bio
+    - btrfs: fix wrong file range cleanup after an error filling dealloc range
+    - ima: Call ima_calc_boot_aggregate() in ima_eventdigest_init()
+    - PCI: Program MPS for RCiEP devices
+    - e1000e: Disable TSO for buffer overrun workaround
+    - e1000e: Relax condition to trigger reset for ME workaround
+    - carl9170: remove P2P_GO support
+    - media: go7007: fix a miss of snd_card_free
+    - Bluetooth: hci_bcm: fix freeing not-requested IRQ
+    - b43legacy: Fix case where channel status is corrupted
+    - b43: Fix connection problem with WPA3
+    - b43_legacy: Fix connection problem with WPA3
+    - media: ov5640: fix use of destroyed mutex
+    - igb: Report speed and duplex as unknown when device is runtime suspended
+    - power: vexpress: add suppress_bind_attrs to true
+    - pinctrl: samsung: Correct setting of eint wakeup mask on s5pv210
+    - pinctrl: samsung: Save/restore eint_mask over suspend for EINT_TYPE GPIOs
+    - gnss: sirf: fix error return code in sirf_probe()
+    - sparc32: fix register window handling in genregs32_[gs]et()
+    - sparc64: fix misuses of access_process_vm() in genregs32_[sg]et()
+    - dm crypt: avoid truncating the logical block size
+    - alpha: fix memory barriers so that they conform to the specification
+    - kernel/cpu_pm: Fix uninitted local in cpu_pm
+    - ARM: tegra: Correct PL310 Auxiliary Control Register initialization
+    - ARM: dts: exynos: Fix GPIO polarity for thr GalaxyS3 CM36651 sensor's bus
+    - ARM: dts: at91: sama5d2_ptc_ek: fix vbus pin
+    - ARM: dts: s5pv210: Set keep-power-in-suspend for SDHCI1 on Aries
+    - drivers/macintosh: Fix memleak in windfarm_pm112 driver
+    - powerpc/64s: Don't let DT CPU features set FSCR_DSCR
+    - powerpc/64s: Save FSCR to init_task.thread.fscr after feature init
+    - kbuild: force to build vmlinux if CONFIG_MODVERSION=y
+    - sunrpc: svcauth_gss_register_pseudoflavor must reject duplicate registrations.
+    - sunrpc: clean up properly in gss_mech_unregister()
+    - mtd: rawnand: brcmnand: fix hamming oob layout
+    - mtd: rawnand: pasemi: Fix the probe error path
+    - w1: omap-hdq: cleanup to add missing newline for some dev_dbg
+    - perf probe: Do not show the skipped events
+    - perf probe: Fix to check blacklist address correctly
+    - perf probe: Check address correctness by map instead of _etext
+    - perf symbols: Fix debuginfo search for Ubuntu
 
   [ Salvatore Bonaccorso ]
   * [rt] Add new signing key for Tom Zanussi