diff --git a/debian/changelog b/debian/changelog
index d953bf7a2..3253ea498 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,17 @@
+freeipa (4.9.7-2) unstable; urgency=medium
+
+  * lintian: Drop override on python-script-but-no-python-dep, which doesn't exist anymore.
+  * rules: Add fortify flag to CFLAGS, as CPPFLAGS isn't used by the project.
+  * ci: Drop allowed failure for blhc, it passes now.
+  * control: Build-depend on libcurl4-openssl-dev.
+  * fix-paths.diff: Fix some paths in ipaplatform/base.
+  * fix-apache-group.diff: Fix apache group name in ipa.conf tmpfile.
+  * control: Depend on gpg instead of gnupg.
+  * control: Drop libwbclient-sssd from freeipa-client-samba Depends.
+  * patches: Import a patch to fix ipa cert-find. (Closes: #997952)
+
+ -- Timo Aaltonen <tjaalton@debian.org>  Wed, 17 Nov 2021 15:40:55 +0200
+
 freeipa (4.9.7-1) unstable; urgency=medium
 
   * New upstream release.