diff --git a/crypto-policies.spec b/crypto-policies.spec
index 4bbf96e..e6f29bc 100644
--- a/crypto-policies.spec
+++ b/crypto-policies.spec
@@ -1,5 +1,5 @@
-%global git_date 20241010
-%global git_commit 7a71364675f3ffd2b328cabfe4362de0ee0e149d
+%global git_date 20241021
+%global git_commit d5393d5a5be4269cf402dc1c030a4008b994a58f
 %{?git_commit:%global git_commit_hash %(c=%{git_commit}; echo ${c:0:7})}
 
 %global _python_bytecompile_extra 0
@@ -32,7 +32,7 @@ BuildRequires: systemd-rpm-macros
 Conflicts: openssl-libs < 1:3.2
 Conflicts: nss < 3.101
 Conflicts: libreswan < 4.12
-Conflicts: openssh < 9.6p1-1
+Conflicts: openssh < 9.9p1
 Conflicts: gnutls < 3.8.3
 
 %description
@@ -251,6 +251,10 @@ exit 0
 
 
 %changelog
+* Mon Oct 21 2024 Alexander Sosedkin <asosedkin@redhat.com> - 20241021-1.gitd5393d5
+- TEST-PQ, openssh: add support for mlkem768x25519-sha256 key_exchange
+- openssh: remove sntrup761x25519-sha512@openssh.com key_exchange
+
 * Thu Oct 10 2024 Alexander Sosedkin <asosedkin@redhat.com> - 20241010-1.git7a71364
 - reintroduce TEST-PQ (ML-DSA/ML-KEM) in a crypto-policies-pq-preview subpackage
 - LEGACY: enable 192-bit ciphers for nss pkcs12/smime
diff --git a/sources b/sources
index 34558b9..4c86a82 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (crypto-policies-git7a71364.tar.gz) = ff03803ae77a7e7a55f929583ebc4a8d92b601ff8450e9d8670021862f50695bb51b72d320548f80e533708114e44ef82823d22c8122eab3a071f880d84d0715
+SHA512 (crypto-policies-gitd5393d5.tar.gz) = aa42d0615a50f13c3e32f5771701a19e321f079ed0b9ea5823d154c6ee61f0541da410e7b044b255105f250aeb386b00e2f552f6b2c264568a47259cf11a79f7