diff --git a/debian-alt/bionic/changelog b/debian-alt/bionic/changelog
index 8dcc4c852521c26d360578a32765195aba15970a..cf1767b22478a005adee545f9ede78fb347e34e0 100644
--- a/debian-alt/bionic/changelog
+++ b/debian-alt/bionic/changelog
@@ -1,3 +1,9 @@
+i2p (0.9.39-1ubuntu1) bionic; urgency=medium
+
+  * New upstream version 0.9.39
+
+ -- zzz on i2p (key signing) <zzz@i2pmail.org>  Fri, 22 Mar 2019 12:12:12 +0000
+
 i2p (0.9.38-1ubuntu1) bionic; urgency=medium
 
   * New upstream version 0.9.38
diff --git a/debian-alt/buster/control b/debian-alt/buster/control
index 9f543134938f854716ad8ad44786a6709a99cec0..2fb468a6901f549fb4efa6f40698be837133ba19 100644
--- a/debian-alt/buster/control
+++ b/debian-alt/buster/control
@@ -28,11 +28,13 @@ Section: net
 Priority: optional
 Depends: ${misc:Depends}, ${java:Depends}, ${shlibs:Depends},
  adduser,
+ apparmor,
  debconf,
  i2p-router (>= 0.8.6-5),
  libjbigi-jni,
  lsb-base (>= 3.0-6),
- service-wrapper
+ service-wrapper,
+ ucf (>= 0.28)
 Description: Invisible Internet Project (I2P) - anonymous network
  I2P is an anonymizing network, offering a simple layer that identity-sensitive
  applications can use to securely communicate. All data is wrapped with several
@@ -83,7 +85,8 @@ Depends: ${misc:Depends}, ${java:Depends}, ${shlibs:Depends},
  libjetty9-java,
  libtaglibs-standard-jstlel-java,
  libtomcat9-java,
- famfamfam-flag-png
+ famfamfam-flag-png,
+ sensible-utils
 Replaces: i2p ( << 0.8.6-5)
 Breaks: i2p (<< 0.8.6-5)
 Recommends: libjbigi-jni, fonts-dejavu
diff --git a/debian-alt/buster/rules b/debian-alt/buster/rules
index 9f9789a009084c8e9a52c658715bde413e51d92a..6a8934542fa378b8096c9fd0e8674f41fdd7b37f 100755
--- a/debian-alt/buster/rules
+++ b/debian-alt/buster/rules
@@ -85,6 +85,7 @@ endif
 #	@/bin/echo -e "javac.compilerargs7=-bootclasspath $(JAVA_HOME)/jre/lib/rt.jar:$(JAVA_HOME)/jre/lib/jce.jar" >> $(CURDIR)/override.properties
 	@/bin/echo -e "javac.compilerargs7=" >> $(CURDIR)/override.properties
 	@/bin/echo -e "build.built-by=debian" >> $(CURDIR)/override.properties
+	@/bin/echo -e "build.reproducible=true" >> $(CURDIR)/override.properties
 
 	@# debian and ubuntu: everywhere
 	@/bin/echo -e "with-geoip-database=true" >> $(CURDIR)/override.properties
diff --git a/debian-alt/disco/changelog b/debian-alt/disco/changelog
index f3f958e69bc4a6ced5179a5e1f11441560e43b28..5ec7d81d08049aa0bf75695c46e89ea44ecb7252 100644
--- a/debian-alt/disco/changelog
+++ b/debian-alt/disco/changelog
@@ -1,3 +1,9 @@
+i2p (0.9.39-1~disco+1) disco; urgency=medium
+
+  * New upstream version 0.9.39
+
+ -- zzz on i2p (key signing) <zzz@i2pmail.org>  Fri, 22 Mar 2019 12:12:12 +0000
+
 i2p (0.9.38-1~disco+1) disco; urgency=medium
 
   * New upstream version 0.9.38
diff --git a/debian-alt/disco/control b/debian-alt/disco/control
index c9d242b3d28dc4f6091234d05dbc6173514f4850..5fe5be58296eebc9e5146705b0ad66ac98702d28 100644
--- a/debian-alt/disco/control
+++ b/debian-alt/disco/control
@@ -1,14 +1,16 @@
 Source: i2p
 Maintainer: zzz <zzz@i2pmail.org>
 Section: net
-Standards-Version: 3.9.8
+Standards-Version: 4.3.0
 Priority: optional
 Bugs: mailto:zzz@i2pmail.org
 Homepage: https://geti2p.net/
+Vcs-Browser: https://salsa.debian.org/debian/i2p
+Vcs-Git: https://salsa.debian.org/debian/i2p.git
 Build-Depends: debhelper (>= 9.20160709)
  ,ant (>= 1.8)
  ,debconf
- ,openjdk-8-jdk
+ ,default-jdk
  ,libjetty9-java
  ,libtaglibs-standard-jstlel-java
  ,libtomcat9-java
@@ -27,11 +29,13 @@ Section: net
 Priority: optional
 Depends: ${misc:Depends}, ${java:Depends}, ${shlibs:Depends},
  adduser,
+ apparmor,
  debconf,
  i2p-router (>= 0.8.6-5),
  libjbigi-jni,
  lsb-base,
- service-wrapper
+ service-wrapper,
+ ucf (>= 0.28)
 Description: Invisible Internet Project (I2P) - anonymous network
  I2P is an anonymizing network, offering a simple layer that identity-sensitive
  applications can use to securely communicate. All data is wrapped with several
@@ -74,7 +78,7 @@ Architecture: all
 Section: net
 Priority: optional
 Depends: ${misc:Depends}, ${java:Depends}, ${shlibs:Depends},
- openjdk-9-jre-headless | openjdk-8-jre-headless | default-jre-headless | java9-runtime-headless | java8-runtime-headless,
+ openjdk-11-jre-headless | java11-runtime-headless,
  geoip-database,
  gettext-base,
  libgetopt-java,
@@ -82,7 +86,8 @@ Depends: ${misc:Depends}, ${java:Depends}, ${shlibs:Depends},
  libjetty9-java,
  libtaglibs-standard-jstlel-java,
  libtomcat9-java,
- famfamfam-flag-png
+ famfamfam-flag-png,
+ sensible-utils
 Replaces: i2p ( << 0.8.6-5)
 Breaks: i2p (<< 0.8.6-5)
 Recommends: libjbigi-jni, fonts-dejavu
diff --git a/debian-alt/disco/i2p-router.links b/debian-alt/disco/i2p-router.links
index 1890f6112e3cc5492872eaa28b973eba30b71a95..134d77543d0fd73211d406db24286c7dabd7c78b 100644
--- a/debian-alt/disco/i2p-router.links
+++ b/debian-alt/disco/i2p-router.links
@@ -33,23 +33,6 @@ usr/share/java/servlet-api-3.1.jar usr/share/i2p/lib/javax.servlet.jar
 usr/share/java/jsp-api-2.3.jar usr/share/i2p/lib/jsp-api.jar
 
 
-# comment out if not building with libtomcat8-java
-# ubuntu: only in xenial+
-# debian: wheezy-backports, jessie+
-# legacy name, contains only tomcat-juli, not commons-logging
-#usr/share/java/tomcat8-juli.jar usr/share/i2p/lib/commons-logging.jar
-#usr/share/java/tomcat8-jasper.jar usr/share/i2p/lib/jasper-runtime.jar
-# combined into jasper-runtime.jar in non-package builds
-#usr/share/java/tomcat8-coyote.jar usr/share/i2p/lib/tomcat-coyote.jar
-#usr/share/java/tomcat8-api.jar usr/share/i2p/lib/tomcat-api.jar
-#usr/share/java/tomcat8-util.jar usr/share/i2p/lib/tomcat-util.jar
-#usr/share/java/tomcat8-util-scan.jar usr/share/i2p/lib/tomcat-util-scan.jar
-# combined into commons-el.jar in non-package builds
-#usr/share/java/tomcat8-jasper-el.jar usr/share/i2p/lib/jasper-el.jar
-# legacy name in lib/
-#usr/share/java/tomcat8-el-api.jar usr/share/i2p/lib/commons-el.jar
-
-
 # comment out if not building with libtomcat9-java
 # ubuntu: only in xenial+
 # debian: wheezy-backports, jessie+
diff --git a/debian-alt/disco/rules b/debian-alt/disco/rules
index 1b7cceb91236e8cd68367667ddefc1f433ffbb0e..c7bf6f18bedb48446f4add4bd0bacf988d62ac38 100755
--- a/debian-alt/disco/rules
+++ b/debian-alt/disco/rules
@@ -24,9 +24,10 @@
 build:
 	@echo 'The build target is disabled. Use the appropriate binary target.'
 
-#JAVA_HOME=/usr/lib/jvm/default-java
-export DEB_HOST_ARCH := $(shell dpkg-architecture -qDEB_HOST_ARCH)
-JAVA_HOME=/usr/lib/jvm/java-8-openjdk-$(DEB_HOST_ARCH)
+DEB_HOST_ARCH ?= $(shell dpkg-architecture -qDEB_HOST_ARCH)
+
+JAVA_HOME=/usr/lib/jvm/default-java
+
 I2P=$(CURDIR)/pkg-temp
 ROUTERVERSION=$(CURDIR)/router/java/src/net/i2p/router/RouterVersion.java
 export DEB_BUILD_HARDENING=1
@@ -80,9 +81,9 @@ else
 	@echo "Already found deb in version, not doing anything"
 endif
 	@# build options
-	@/bin/echo -e "javac.version=1.8" > $(CURDIR)/override.properties
-	@/bin/echo -e "javac.compilerargs=-bootclasspath $(JAVA_HOME)/jre/lib/rt.jar:$(JAVA_HOME)/jre/lib/jce.jar" >> $(CURDIR)/override.properties
-	@/bin/echo -e "javac.compilerargs7=-bootclasspath $(JAVA_HOME)/jre/lib/rt.jar:$(JAVA_HOME)/jre/lib/jce.jar" >> $(CURDIR)/override.properties
+#	@/bin/echo -e "javac.version=1.8" > $(CURDIR)/override.properties
+#	@/bin/echo -e "javac.compilerargs=-bootclasspath $(JAVA_HOME)/jre/lib/rt.jar:$(JAVA_HOME)/jre/lib/jce.jar" >> $(CURDIR)/override.properties
+#	@/bin/echo -e "javac.compilerargs7=-bootclasspath $(JAVA_HOME)/jre/lib/rt.jar:$(JAVA_HOME)/jre/lib/jce.jar" >> $(CURDIR)/override.properties
 	@/bin/echo -e "build.built-by=debian" >> $(CURDIR)/override.properties
 	@/bin/echo -e "build.reproducible=true" >> $(CURDIR)/override.properties
 
diff --git a/debian-alt/precise/changelog b/debian-alt/precise/changelog
index d9f22ea0573aa371394d035177d31f71431f9766..d90bb6ea30f7ad04d601dacc634339162b2488c5 100644
--- a/debian-alt/precise/changelog
+++ b/debian-alt/precise/changelog
@@ -1,3 +1,9 @@
+i2p (0.9.39p-1~precise+1) precise; urgency=medium
+
+  * Backport to Precise
+
+ -- zzz on i2p (key signing) <zzz@i2pmail.org>  Fri, 22 Mar 2019 12:12:12 +0000
+
 i2p (0.9.38p-2~precise+1) precise; urgency=medium
 
   * Fix broken build
diff --git a/debian-alt/trusty/changelog b/debian-alt/trusty/changelog
index 65ece3797b25cc23b04e7f8eaacee8bdc326829e..5fccf7237ef3890491a64e7241429f6432028f83 100644
--- a/debian-alt/trusty/changelog
+++ b/debian-alt/trusty/changelog
@@ -1,3 +1,9 @@
+i2p (0.9.39p-1~trusty+1) trusty; urgency=medium
+
+  * Backport to Trusty
+
+ -- zzz on i2p (key signing) <zzz@i2pmail.org>  Fri, 22 Mar 2019 12:12:12 +0000
+
 i2p (0.9.38p-4~trusty+1) trusty; urgency=medium
 
   * Fix broken build
diff --git a/debian-alt/xenial/changelog b/debian-alt/xenial/changelog
index ea7227c6600fbb1e200085ad359567d468cba0b4..e7b1494162b69fba072e03a18a9c57d747a36f7d 100644
--- a/debian-alt/xenial/changelog
+++ b/debian-alt/xenial/changelog
@@ -1,3 +1,9 @@
+i2p (0.9.39x-1~xenial+1) xenial; urgency=medium
+
+  * Backport to Xenial
+
+ -- zzz on i2p (key signing) <zzz@i2pmail.org>  Fri, 22 Mar 2019 12:12:12 +0000
+
 i2p (0.9.38x-1~xenial+1) xenial; urgency=medium
 
   * Backport to Xenial