diff --git a/charts/matrix-stack/source/matrixAuthenticationService.yaml.j2 b/charts/matrix-stack/source/matrixAuthenticationService.yaml.j2
index dd0fc2d0d..5360ea14e 100644
--- a/charts/matrix-stack/source/matrixAuthenticationService.yaml.j2
+++ b/charts/matrix-stack/source/matrixAuthenticationService.yaml.j2
@@ -6,7 +6,7 @@ SPDX-License-Identifier: AGPL-3.0-only
 
 {% import "common/sub_schema_values.yaml.j2" as sub_schema_values %}
 enabled: true
-{{- sub_schema_values.image(registry='ghcr.io', repository='element-hq/matrix-authentication-service', tag='0.18.0') }}
+{{- sub_schema_values.image(registry='ghcr.io', repository='element-hq/matrix-authentication-service', tag='0.19.0') }}
 
 replicas: 1
 
@@ -60,7 +60,7 @@ syn2mas:
   enabled: false
 
   # Syn2Mas relies on the debug image to copy mas-cli to the matrix-tools container
-  {{- sub_schema_values.image(registry='ghcr.io', repository='element-hq/matrix-authentication-service', tag='0.18.0-debug') | indent(2) }}
+  {{- sub_schema_values.image(registry='ghcr.io', repository='element-hq/matrix-authentication-service', tag='0.19.0-debug') | indent(2) }}
   {{- sub_schema_values.labels() | indent(2) -}}
   {{- sub_schema_values.workloadAnnotations() | indent(2) -}}
   {{- sub_schema_values.containersSecurityContext() | indent(2) -}}
diff --git a/charts/matrix-stack/values.yaml b/charts/matrix-stack/values.yaml
index 6ed0571c9..d424f4cbd 100644
--- a/charts/matrix-stack/values.yaml
+++ b/charts/matrix-stack/values.yaml
@@ -1356,7 +1356,7 @@ matrixAuthenticationService:
 
     ## The tag of the container image to use.
     ## One of tag or digest must be provided.
-    tag: "0.18.0"
+    tag: "0.19.0"
 
     ## Container digest to use. Used to pull the image instead of the image tag if set
     ## The tag will still be set as the app.kubernetes.io/version label
@@ -1775,7 +1775,7 @@ matrixAuthenticationService:
 
       ## The tag of the container image to use.
       ## One of tag or digest must be provided.
-      tag: "0.18.0-debug"
+      tag: "0.19.0-debug"
 
       ## Container digest to use. Used to pull the image instead of the image tag if set
       ## The tag will still be set as the app.kubernetes.io/version label
diff --git a/newsfragments/611.changed.md b/newsfragments/611.changed.md
new file mode 100644
index 000000000..d353039e3
--- /dev/null
+++ b/newsfragments/611.changed.md
@@ -0,0 +1,7 @@
+Upgrade Matrix Authentication Service to v0.19.0.
+
+Highlights:
+* Support receiving OpenID Connect Back-Channel Logout notifications
+
+Full Changelog:
+* [v0.19.0](https://github.com/element-hq/matrix-authentication-service/releases/tag/v0.19.0)