kernel security upgrade - "rebase?"

[Bob Bernstein <poobah@ruptured-duck.com>]

I am trying to meet the challenge of the security upgrade -- 
[SECURITY] [DSA 4774-1] linux security update -- that 
was issued today.

This is an AMD Buster system:

Linux debian.localdomain 4.19.0-8-amd64 #1 SMP Debian 
4.19.98-1+deb10u1 (2020-04-27) x86_64 GNU/Linux

I have noticed for several weeks that when I run "apt-get 
upgrade" my kernel gets held back:

"The following packages have been kept back:
  linux-image-amd64 thunderbird"

So, again today, running apt-get update and then apt-get upgrade 
does not install the new kernel. Here is the instruction from 
the security bulletin:

"For the stable distribution (buster), these problems have been 
fixed in version 4.19.152-1. The vulnerabilities are fixed by 
rebasing to the new stable upstream version 4.19.152 which 
includes additional bugfixes."

I am completely at a loss to know how to "rebase" to the new 
version. The term "rebase" is a Debian term-of-art I have never 
before encountered. Can someone please point me to a step by 
step "Kernel Rebasing For Dummies" guide?

Thank you.


--
 A test of right and wrong must be the means, one would
 think, of ascertaining what is right or wrong, and not a
 consequence of having already ascertained it.

                                  J. S. Mill