diff --git a/Cargo.lock b/Cargo.lock
index d8ed92b8..f602a852 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -2971,7 +2971,7 @@ dependencies = [
 
 [[package]]
 name = "sequoia-sq"
-version = "0.30.0"
+version = "0.30.1"
 dependencies = [
  "anyhow",
  "assert_cmd",
diff --git a/Cargo.toml b/Cargo.toml
index 8112ec5c..c20e036b 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -1,7 +1,7 @@
 [package]
 name = "sequoia-sq"
 description = "Command-line frontends for Sequoia"
-version = "0.30.0"
+version = "0.30.1"
 authors = [
     "Azul <azul@sequoia-pgp.org>",
     "Heiko Schaefer <heiko@schaefer.name>",
diff --git a/NEWS b/NEWS
index dd985eba..dfe5e6ea 100644
--- a/NEWS
+++ b/NEWS
@@ -7,6 +7,11 @@
    - The `crypto-botan` feature now selects Botan's v3 interface.  Use
      the new `crypto-botan2` feature to continue using Botan's v2
      interface.
+ * Notable fixes
+   - Several parser bugs were fixed in sequoia-openpgp 1.16.0 and
+     buffered-reader 1.2.0.  These are all low-severity as Rust
+     correctly detects the out of bounds access and panics.  Update
+     Cargo.lock to make sure we use these versions.
 * Changes in 0.30
  * New functionality
   - `sq key adopt` now honors `--time`.