diff --git a/Dockerfile b/Dockerfile
index 189f1a0fbd45..279a15d6046f 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -33,7 +33,7 @@ RUN case "$TARGETARCH" in \
     && echo "CC=$CC" \
     && rustup override set nightly \
     && rustup target add "$RUST_TARGET" \
-    && RUSTFLAGS="-C linker=$CC" CC=$CC cargo build --target "$RUST_TARGET" --release --features "local-tun local-redir armv8 neon stream-cipher aead-cipher-2022" \
+    && RUSTFLAGS="-C linker=$CC" CC=$CC cargo build --target "$RUST_TARGET" --release --features "local-tun local-redir stream-cipher aead-cipher-2022" \
     && mv target/$RUST_TARGET/release/ss* target/release/
 
 FROM alpine:3.16 AS sslocal
diff --git a/debian/changelog b/debian/changelog
index aa465989afe7..3daa1d434dbc 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,31 @@
+shadowsocks-rust (1.15.0) unstable; urgency=medium
+
+  ## Features
+
+  - #811 AEAD-2022 protocol ([SIP022](https://github.com/shadowsocks/shadowsocks-org/issues/196))
+      - WARN: This is still a draft protocol, use it at your own risk.
+  - SIP002 Extended Format: Allowing unencoded user-info in URL, https://github.com/shadowsocks/shadowsocks-org/issues/27#issuecomment-1124853747
+  - #810 Manager standalone mode support bypassing ACL files
+  - #818 Allow `sslocal` run without any `servers`, which will bypass all connections and packets
+  - #838 `"password"` is optional for `none` / `plain` method
+  - redir-local: Enable dual-stack support on Linux (TProxy) and FreeBSD
+  - Disable `md5-asm` and `sha1-asm`: https://github.com/shadowsocks/shadowsocks-crypto/issues/16
+  - `"acl"` and `"outbound_fwmark"` are available in configuration file
+
+  ## Miscellaneous
+
+  - shadowsocks/shadowsocks-org#204 Remove `security-iv-printable-prefix` experimental feature
+  - Upgrade [clap](https://crates.io/crates/clap) to v4.0.
+  - UDP association channel size shrinked to 1024, which could save a lot of memory for each associations
+
+  ## Enhancements
+
+  - #855 Properly handle IPv4-mapped-IPv6 addresses in UDP assocations
+      - `ssserver` always convert IPv4-mapped-IPv6 addresses to IPv4 in UDP respond target addresses
+      - `sslocal`
+          - `tun`, `socks5` always convert IPv4-mapped-IPv6 addresses to IPv4
+          - `redir` always use IPv6 sockets for sending back packets
+
 shadowsocks-rust (1.14.3) unstable; urgency=medium
 
   ## Features