2 files changed, 34 insertions, 0 deletions
diff --git a/debian/NEWS b/debian/NEWS
index 6bb6cf19f..5c10ff1f2 100644
--- a/debian/NEWS
+++ b/debian/NEWS
@@ -1,3 +1,22 @@
+apt (2.9.19) unstable; urgency=medium
+
+  This release switches to OpenSSL for hashing and TLS, replacing the
+  GnuTLS and gcrypt libraries.
+
+  This release switches to Sequoia for OpenPGP verification on supported
+  Debian platforms. A Sequoia policy override enabling SHA1 self-signatures
+  until 2026 is included. To override the policy, the following environment
+  variables and files are considered:
+
+  * The APT_SEQUOIA_CRYPTO_POLICY environment variable, and failing that:
+    - /etc/crypto-policies/back-ends/apt-sequoia.config,
+    - /var/lib/crypto-config/profiles/current/apt-sequoia.config
+  * The SEQUOIA_CRYPTO_POLICY environment variable, and failing that:
+    - /etc/crypto-policies/back-ends/sequoia.config
+    - /var/lib/crypto-config/profiles/current/sequoia.config
+
+ -- Julian Andres Klode <jak@debian.org>  Mon, 23 Dec 2024 12:16:22 +0100
+
 apt (2.9.15) unstable; urgency=medium
 
   This release stops using apt-key to verify the signatures.
diff --git a/debian/changelog b/debian/changelog
index 5f90b1f77..5f6bb7205 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,18 @@
+apt (2.9.19) unstable; urgency=medium
+
+  * Replace GnuTLS and gcrypt with OpenSSL
+  * Replace GnuPG with Sequoia on supported Debian platforms
+    - methods: Add new sqv method
+    - debian: Add default policy to allow SHA-1 self-signatures until 2026
+    - debian: Plug sqv into the package build
+  * Smaller bits:
+    - apt-helper: Add a hash-file helper to debug file hashing
+    - Use sq in the test suite, remove apt-key
+    - abicheck: Add symbol-merge.py helper
+    - Symbols: Merge stable, noble, testing, unstable
+
+ -- Julian Andres Klode <jak@debian.org>  Mon, 23 Dec 2024 12:16:19 +0100
+
 apt (2.9.18) unstable; urgency=medium
 
   * Fix out-of-bounds read in `apt show :` (Closes: #1090068)