diff -pruN 2019.1/debian/changelog 2019.1ubuntu2/debian/changelog
--- 2019.1/debian/changelog	2019-04-23 11:42:28.000000000 +0000
+++ 2019.1ubuntu2/debian/changelog	2019-07-08 09:02:29.000000000 +0000
@@ -1,3 +1,20 @@
+debian-archive-keyring (2019.1ubuntu2) eoan; urgency=medium
+
+  * Remove duplicate rm_conffile invocations for
+    /etc/apt/trusted.gpg.d/debian-archive-wheezy-*.
+
+ -- Colin Watson <cjwatson@ubuntu.com>  Mon, 08 Jul 2019 10:02:29 +0100
+
+debian-archive-keyring (2019.1ubuntu1) eoan; urgency=low
+
+  * Merge from Debian unstable.  LP: #1814536  Remaining changes:
+    + Do not trust debian archive keys by default, and instead ship those
+      keys in usr/share/keyrings. On Ubuntu, this package is mostly used for
+      validating chroots when debootstrapping Debian using
+      /usr/share/keyrings/debian-archive-keyring.gpg.
+
+ -- Mattia Rizzolo <mapreri@ubuntu.com>  Sun, 07 Jul 2019 15:48:57 +0200
+
 debian-archive-keyring (2019.1) unstable; urgency=medium
 
   [ Adam D. Barratt ]
@@ -46,6 +63,15 @@ debian-archive-keyring (2017.7+exp) expe
 
  -- Niels Thykier <niels@thykier.net>  Sat, 16 Dec 2017 20:25:55 +0000
 
+debian-archive-keyring (2017.7ubuntu1) bionic; urgency=medium
+
+  * Do not trust debian archive keys by default, and instead ship those
+    keys in usr/share/keyrings. On Ubuntu, this package is mostly used for
+    validating chroots when debootstrapping Debian using
+    /usr/share/keyrings/debian-archive-keyring.gpg.  LP: #1685305
+
+ -- Dimitri John Ledkov <xnox@ubuntu.com>  Tue, 16 Jan 2018 16:52:37 +0000
+
 debian-archive-keyring (2017.7) unstable; urgency=medium
 
   * Team upload.
diff -pruN 2019.1/debian/control 2019.1ubuntu2/debian/control
--- 2019.1/debian/control	2019-04-23 11:41:26.000000000 +0000
+++ 2019.1ubuntu2/debian/control	2019-07-07 13:47:28.000000000 +0000
@@ -1,7 +1,8 @@
 Source: debian-archive-keyring
 Priority: important
 Section: misc
-Maintainer: Debian Release Team <packages@release.debian.org>
+Maintainer: Ubuntu Developers <ubuntu-devel-discuss@lists.ubuntu.com>
+XSBC-Original-Maintainer: Debian Release Team <packages@release.debian.org>
 Uploaders: Niels Thykier <niels@thykier.net>
 Build-Depends: debhelper (>= 10), jetring, gnupg
 Rules-Requires-Root: no
diff -pruN 2019.1/debian/debian-archive-keyring.install 2019.1ubuntu2/debian/debian-archive-keyring.install
--- 2019.1/debian/debian-archive-keyring.install	2017-11-23 16:28:46.000000000 +0000
+++ 2019.1ubuntu2/debian/debian-archive-keyring.install	2019-04-24 08:18:15.000000000 +0000
@@ -1,2 +1,2 @@
 usr/share/keyrings/*
-etc/apt/trusted.gpg.d/*
+etc/apt/trusted.gpg.d/* usr/share/keyrings/
diff -pruN 2019.1/debian/debian-archive-keyring.maintscript 2019.1ubuntu2/debian/debian-archive-keyring.maintscript
--- 2019.1/debian/debian-archive-keyring.maintscript	2019-04-23 11:40:26.000000000 +0000
+++ 2019.1ubuntu2/debian/debian-archive-keyring.maintscript	2019-07-08 09:02:14.000000000 +0000
@@ -2,3 +2,10 @@ rm_conffile /etc/apt/trusted.gpg.d/debia
 rm_conffile /etc/apt/trusted.gpg.d/debian-archive-squeeze-stable.gpg 2017.5~~
 rm_conffile /etc/apt/trusted.gpg.d/debian-archive-wheezy-automatic.gpg 2019.1~~
 rm_conffile /etc/apt/trusted.gpg.d/debian-archive-wheezy-stable.gpg 2019.1~~
+
+rm_conffile /etc/apt/trusted.gpg.d/debian-archive-jessie-automatic.gpg 2017.7ubuntu1~
+rm_conffile /etc/apt/trusted.gpg.d/debian-archive-jessie-security-automatic.gpg 2017.7ubuntu1~
+rm_conffile /etc/apt/trusted.gpg.d/debian-archive-jessie-stable.gpg 2017.7ubuntu1~
+rm_conffile /etc/apt/trusted.gpg.d/debian-archive-stretch-automatic.gpg 2017.7ubuntu1~
+rm_conffile /etc/apt/trusted.gpg.d/debian-archive-stretch-security-automatic.gpg 2017.7ubuntu1~
+rm_conffile /etc/apt/trusted.gpg.d/debian-archive-stretch-stable.gpg 2017.7ubuntu1~