diff --git a/debian/changelog b/debian/changelog
index 0c67ae1..9a7cce5 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,23 +1,24 @@
 xz-utils (5.0.0-2.1) stable; urgency=low
 
-  * liblzma:
-    - If asked to compress a zero-length buffer,
-      lzma_easy_buffer_encode() and lzma_stream_buffer_encode() would
-      write a Block with an empty LZMA2 stream, which unxz and liblzma
-      versions before 5.0.2 cannot read.
-    - lzma_stream_encoder() leaked memory.
-    - lzma_index_init() would segfault on allocation failure.
-  * xz and scripts:
-    - "xz -v -v --list" would read and try to free() uninitialized
-      memory, continuing past the end of an on-stack array, when
-      describing certain corrupted XZ files.
-    - The exit status from xzdiff did not reflect whether the two
-      compressed files being compared differed.  Closes: #635501.
-      Thanks to Peter Pallinger.
-    - The Czech “xz --help” output uses a more correct term for files
-      with holes.  Closes: #605762.  Thanks to Petr Hubený.
-    - The Italian translation for “Unknown file format type” had an
-      extra ‘N’.
+  * Fixes from upstream:
+    * liblzma:
+      - lzma_easy_buffer_encode() and lzma_stream_buffer_encode()
+        avoid writing Blocks with empty compressed data that xz and
+        liblzma versions before 5.0.2 cannot read.
+      - Plugs a memory leak in lzma_stream_encoder().
+      - lzma_index_init() returns NULL instead of segfaulting on
+        allocation failure.
+    * "xz -v -v --list" does not free() filter options unless the
+      filter options array has been initialized.  This prevents
+      reading and free()ing pointers from past the end of an on-stack
+      array when one of the listed files has an unmeaningful Block
+      header size.
+    * The exit status from “xzdiff foo.xz bar.xz” reflects whether
+      files differ.  Thanks to Peter Pallinger.  Closes: #635501.
+    * The Czech “xz --help” output uses a more correct term for files
+      with holes.  Thanks to Petr Hubený.  Closes: #605762.
+    * The Italian diagnostic for an invalid --format argument lost an
+      extra 'N'.
   * debian/rules: "chmod +x tests/test_scripts.sh" for new xzdiff
     tests.
   * debian/symbols: Bump minimal versions for lzma_easy_buffer_encode