diff --git a/debian/changelog b/debian/changelog
index dfa8217..b4c254a 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,41 @@
+faad2 (2.9.0-1) unstable; urgency=medium
+
+  [ Ondřej Nový ]
+  * Use debhelper-compat instead of debian/compat
+
+  [ Fabian Greffrath ]
+  * Ack NMUs, thanks Hugo!
+  * Upstream moved to GitHub, adapt packaging accordingly.
+  * New upstream version 2.9.0.
+  * Remove all patches, applied upstream.
+  * Build reproducibly.
+  * Finish debug symbols package migration.
+  * Bump debhelper-compat to 12.
+  * Bump Standards-Version to 4.4.0.
+  * Add Build-Depends-Package line to the symbols file.
+
+ -- Fabian Greffrath <fabian@debian.org>  Wed, 11 Sep 2019 20:28:04 +0200
+
+faad2 (2.8.8-3.2) unstable; urgency=high
+
+  * Non-maintainer upload with maintainer's permission.
+  * debian/patches/gcc-9.patch: Fix build with GCC-9 (thanks Gianfranco
+    Costamagna for the patch) (Closes: #930363).
+
+ -- Hugo Lefeuvre <hle@debian.org>  Sat, 31 Aug 2019 09:11:54 -0400
+
+faad2 (2.8.8-3.1) unstable; urgency=medium
+
+  * Non-maintainer upload with maintainer's permission.
+  * CVE-2019-6956: Buffer over read in the function ps_mix_phase()
+    (libfaad/ps_dec.c) (Closes: #914641).
+  * CVE-2018-20196: Stack buffer overflow in the function calculate_gain
+    (libfaad/sbr_hfadj.c).
+  * CVE-2018-20199, CVE-2018-20360: NULL pointer dereference in the function
+    ifilter_bank (libfaad/filtbank.c).
+
+ -- Hugo Lefeuvre <hle@debian.org>  Tue, 27 Aug 2019 13:29:39 -0400
+
 faad2 (2.8.8-3) unstable; urgency=high
 
   * Team upload.
@@ -462,4 +500,3 @@
   * Initial Release.
 
  -- Christian Marillat <marillat@debian.org>  Sun, 29 Dec 2002 23:09:33 +0100
-