From 1e99b22ed2aa3bfed7ae8a7c1ca5c4bb99148a0e Mon Sep 17 00:00:00 2001
From: Daniel Baumann <daniel.baumann@progress-linux.org>
Date: Sat, 27 Apr 2024 09:24:23 +0200
Subject: Adding debian version 1:9.16.44-1~deb11u1.

Signed-off-by: Daniel Baumann <daniel.baumann@progress-linux.org>
---
 debian/README.Debian                               |   60 +
 debian/README.source                               |   12 +
 debian/bind9-dev.install                           |   15 +
 debian/bind9-dnsutils.install                      |   12 +
 debian/bind9-doc.dirs                              |    1 +
 debian/bind9-doc.docs                              |    1 +
 debian/bind9-doc.install                           |    1 +
 debian/bind9-host.install                          |    2 +
 debian/bind9-libs.install                          |    7 +
 debian/bind9-libs.lintian-overrides                |    1 +
 debian/bind9-utils.install                         |   33 +
 debian/bind9-utils.links                           |    1 +
 debian/bind9.dirs                                  |   12 +
 debian/bind9.docs                                  |    1 +
 debian/bind9.install                               |   32 +
 debian/bind9.links                                 |    1 +
 debian/bind9.lintian-overrides                     |    1 +
 debian/bind9.maintscript                           |    4 +
 debian/bind9.named.default                         |    6 +
 debian/bind9.named.init                            |  146 +
 debian/bind9.named.service                         |   17 +
 debian/bind9.named.tmpfile                         |    1 +
 debian/bind9.postinst                              |   37 +
 debian/bind9.postrm                                |   18 +
 debian/changelog                                   | 3250 ++++++++++++++++++++
 debian/control                                     |  186 ++
 debian/copyright                                   |  210 ++
 debian/extras/apparmor.d/usr.sbin.named            |   94 +
 debian/extras/etc/db.0                             |   12 +
 debian/extras/etc/db.127                           |   13 +
 debian/extras/etc/db.255                           |   12 +
 debian/extras/etc/db.empty                         |   14 +
 debian/extras/etc/db.local                         |   14 +
 debian/extras/etc/named.conf                       |   11 +
 debian/extras/etc/named.conf.default-zones         |   30 +
 debian/extras/etc/named.conf.local                 |    8 +
 debian/extras/etc/named.conf.options               |   24 +
 debian/extras/etc/zones.rfc1918                    |   20 +
 debian/extras/if-reconfig.d/bind9                  |   15 +
 debian/extras/insserv.conf.d/bind9                 |    1 +
 debian/extras/ufw/bind9                            |    5 +
 debian/gbp.conf                                    |   10 +
 debian/named-resolvconf.service                    |   15 +
 ...Add_--install-layout=deb_to_setup.py_call.patch |   24 +
 .../0002-python-fix-for-dist-packages.patch        |   49 +
 .../0003-Disable-sphinx-build-strict-mode.patch    |   33 +
 debian/patches/series                              |    3 +
 debian/po/POTFILES.in                              |    1 +
 debian/po/cs.po                                    |   67 +
 debian/po/da.po                                    |   67 +
 debian/po/de.po                                    |   84 +
 debian/po/es.po                                    |   86 +
 debian/po/eu.po                                    |   68 +
 debian/po/fi.po                                    |   64 +
 debian/po/fr.po                                    |   69 +
 debian/po/gl.po                                    |   66 +
 debian/po/id.po                                    |   51 +
 debian/po/it.po                                    |   69 +
 debian/po/ja.po                                    |   66 +
 debian/po/ko.po                                    |   69 +
 debian/po/nb.po                                    |   69 +
 debian/po/nl.po                                    |   72 +
 debian/po/pl.po                                    |   68 +
 debian/po/pt.po                                    |   69 +
 debian/po/pt_BR.po                                 |   71 +
 debian/po/ru.po                                    |   70 +
 debian/po/sk.po                                    |   67 +
 debian/po/sr.po                                    |   66 +
 debian/po/sr@latin.po                              |   66 +
 debian/po/sv.po                                    |   69 +
 debian/po/templates.pot                            |   60 +
 debian/po/tr.po                                    |   70 +
 debian/po/vi.po                                    |   67 +
 debian/po/zh_CN.po                                 |   64 +
 debian/rules                                       |  104 +
 debian/source/format                               |    1 +
 debian/tests/control                               |    9 +
 debian/tests/simpletest                            |   21 +
 debian/tests/validation                            |   28 +
 debian/upstream/signing-key.asc                    |  151 +
 debian/watch                                       |    9 +
 81 files changed, 6573 insertions(+)
 create mode 100644 debian/README.Debian
 create mode 100644 debian/README.source
 create mode 100644 debian/bind9-dev.install
 create mode 100644 debian/bind9-dnsutils.install
 create mode 100644 debian/bind9-doc.dirs
 create mode 100644 debian/bind9-doc.docs
 create mode 100644 debian/bind9-doc.install
 create mode 100644 debian/bind9-host.install
 create mode 100644 debian/bind9-libs.install
 create mode 100644 debian/bind9-libs.lintian-overrides
 create mode 100644 debian/bind9-utils.install
 create mode 100644 debian/bind9-utils.links
 create mode 100644 debian/bind9.dirs
 create mode 100644 debian/bind9.docs
 create mode 100644 debian/bind9.install
 create mode 100644 debian/bind9.links
 create mode 100644 debian/bind9.lintian-overrides
 create mode 100644 debian/bind9.maintscript
 create mode 100644 debian/bind9.named.default
 create mode 100644 debian/bind9.named.init
 create mode 100644 debian/bind9.named.service
 create mode 100644 debian/bind9.named.tmpfile
 create mode 100644 debian/bind9.postinst
 create mode 100644 debian/bind9.postrm
 create mode 100644 debian/changelog
 create mode 100644 debian/control
 create mode 100644 debian/copyright
 create mode 100644 debian/extras/apparmor.d/usr.sbin.named
 create mode 100644 debian/extras/etc/db.0
 create mode 100644 debian/extras/etc/db.127
 create mode 100644 debian/extras/etc/db.255
 create mode 100644 debian/extras/etc/db.empty
 create mode 100644 debian/extras/etc/db.local
 create mode 100644 debian/extras/etc/named.conf
 create mode 100644 debian/extras/etc/named.conf.default-zones
 create mode 100644 debian/extras/etc/named.conf.local
 create mode 100644 debian/extras/etc/named.conf.options
 create mode 100644 debian/extras/etc/zones.rfc1918
 create mode 100755 debian/extras/if-reconfig.d/bind9
 create mode 100644 debian/extras/insserv.conf.d/bind9
 create mode 100644 debian/extras/ufw/bind9
 create mode 100644 debian/gbp.conf
 create mode 100644 debian/named-resolvconf.service
 create mode 100644 debian/patches/0001-Add_--install-layout=deb_to_setup.py_call.patch
 create mode 100644 debian/patches/0002-python-fix-for-dist-packages.patch
 create mode 100644 debian/patches/0003-Disable-sphinx-build-strict-mode.patch
 create mode 100644 debian/patches/series
 create mode 100644 debian/po/POTFILES.in
 create mode 100644 debian/po/cs.po
 create mode 100644 debian/po/da.po
 create mode 100644 debian/po/de.po
 create mode 100644 debian/po/es.po
 create mode 100644 debian/po/eu.po
 create mode 100644 debian/po/fi.po
 create mode 100644 debian/po/fr.po
 create mode 100644 debian/po/gl.po
 create mode 100644 debian/po/id.po
 create mode 100644 debian/po/it.po
 create mode 100644 debian/po/ja.po
 create mode 100644 debian/po/ko.po
 create mode 100644 debian/po/nb.po
 create mode 100644 debian/po/nl.po
 create mode 100644 debian/po/pl.po
 create mode 100644 debian/po/pt.po
 create mode 100644 debian/po/pt_BR.po
 create mode 100644 debian/po/ru.po
 create mode 100644 debian/po/sk.po
 create mode 100644 debian/po/sr.po
 create mode 100644 debian/po/sr@latin.po
 create mode 100644 debian/po/sv.po
 create mode 100644 debian/po/templates.pot
 create mode 100644 debian/po/tr.po
 create mode 100644 debian/po/vi.po
 create mode 100644 debian/po/zh_CN.po
 create mode 100755 debian/rules
 create mode 100644 debian/source/format
 create mode 100644 debian/tests/control
 create mode 100644 debian/tests/simpletest
 create mode 100644 debian/tests/validation
 create mode 100644 debian/upstream/signing-key.asc
 create mode 100644 debian/watch

(limited to 'debian')

diff --git a/debian/README.Debian b/debian/README.Debian
new file mode 100644
index 0000000..e6159d7
--- /dev/null
+++ b/debian/README.Debian
@@ -0,0 +1,60 @@
+DNSSEC validation turned on by default as of BIND 9.8.1
+-------------------------------------------------------
+As of version 9.8.1.dfsg-1, BIND ships with DNSSEC validation turned on
+by default.  As the keys get changed over time, this means that a fresh
+install of BIND will require that the admin manually upgrade bind.keys
+to account for the change, before BIND will be able to resolve hosts in
+DNSSEC validated zones.
+
+
+Configuration Schema:
+--------------------
+
+The Debian BIND package ships with a config that will work for the majority 
+of leaf servers with no user input required.
+
+The named configuration file named.conf is located in /etc/bind, so that all 
+static configuration files relating to bind are in one place.  If you really 
+don't want named.conf in /etc/bind, then the best way to handle it is probably
+to replace /etc/bind/named.conf with a symlink to the location you want to use.
+You could also use an option to named in the init.d script, but that only works
+for named, not for things like ndc.
+
+Zone data files for the root servers, and the forward and reverse localhost
+zones are also provided in /etc/bind.
+
+The working directory for named is now /var/cache/bind.  Thus, any transient
+files generated by named, such as database files for zones the daemon is
+secondary for, will be written to the /var filesystem, where they belong.
+
+To make this work, the named.conf provided uses explicitly fully-qualified
+pathnames to reference the files in /etc/bind. 
+
+Unlike previous BIND packages for Debian, the named.conf and provided db.*
+files are tagged as conffiles.  Thus, if you just want a "caching mostly"
+server configuration for a server that does not need to be authoritative for
+anything else, you can run the provided configuration as-is.  If you want to
+hack on named.conf, or even the init.d fragment, you can feel free to.  Future
+package upgrades will treat your configuration changes sanely, as all Debian
+packages should.
+
+While you are free to craft whatever structure you wish for servers which need
+to be authoritative for additional zones, what we suggest is that you put the
+db files for any zones you are master for in /etc/bind (perhaps even in a
+subdirectory structure depending on complexity), using full pathnames in the
+named.conf file.  Any zones you are secondary for should be configured in
+named.conf with simple filenames (relative to /var/cache/bind), so the data
+files will be stored in BIND's working directory (defaults to /var/cache/bind).
+Zones subject to automatic updates (such as via DHCP and/or nsupdate) should be
+stored in /var/lib/bind, and specified with full pathnames.
+
+
+Apparmor Profile
+----------------
+If your system uses apparmor, please note that the shipped enforcing profile
+works with the default installation, and changes in your configuration may
+require changes to the installed apparmor profile. Please see
+https://wiki.ubuntu.com/DebuggingApparmor before filing a bug against this
+software.
+
+ -- Ondřej Surý <ondrej@debian.org>, Thu, 18 Jan 2018 14:02:44 +0000
diff --git a/debian/README.source b/debian/README.source
new file mode 100644
index 0000000..d0e527d
--- /dev/null
+++ b/debian/README.source
@@ -0,0 +1,12 @@
+Just a crude notes about the source handling (it needs cleanup).
+
+- The source has been converted to git-buildpackage structure to allow
+  easy team work
+
+- uscan can be used to download new upstream sources
+
+- d/copyright has been converted to machine readable format (TODO) and
+  has Files-Excludes section for generation upstream tarball using
+  mk-origtarball (via uscan) to remove contrib/ directory
+
+ -- Ondřej Surý <ondrej@debian.org>, Fri,  8 Sep 2017 12:18:26 +0200
diff --git a/debian/bind9-dev.install b/debian/bind9-dev.install
new file mode 100644
index 0000000..7614051
--- /dev/null
+++ b/debian/bind9-dev.install
@@ -0,0 +1,15 @@
+usr/include
+usr/lib/*/libbind9.a
+usr/lib/*/libbind9.so
+usr/lib/*/libdns.a
+usr/lib/*/libdns.so
+usr/lib/*/libirs.a
+usr/lib/*/libirs.so
+usr/lib/*/libisc.a
+usr/lib/*/libisc.so
+usr/lib/*/libisccc.a
+usr/lib/*/libisccc.so
+usr/lib/*/libisccfg.a
+usr/lib/*/libisccfg.so
+usr/lib/*/libns.a
+usr/lib/*/libns.so
diff --git a/debian/bind9-dnsutils.install b/debian/bind9-dnsutils.install
new file mode 100644
index 0000000..90e4fba
--- /dev/null
+++ b/debian/bind9-dnsutils.install
@@ -0,0 +1,12 @@
+usr/bin/delv
+usr/bin/dig
+usr/bin/dnstap-read
+usr/bin/mdig
+usr/bin/nslookup
+usr/bin/nsupdate
+usr/share/man/man1/delv.1
+usr/share/man/man1/dig.1
+usr/share/man/man1/dnstap-read.1
+usr/share/man/man1/mdig.1
+usr/share/man/man1/nslookup.1
+usr/share/man/man1/nsupdate.1
diff --git a/debian/bind9-doc.dirs b/debian/bind9-doc.dirs
new file mode 100644
index 0000000..3d13cf8
--- /dev/null
+++ b/debian/bind9-doc.dirs
@@ -0,0 +1 @@
+usr/share/doc/bind9-doc/arm
diff --git a/debian/bind9-doc.docs b/debian/bind9-doc.docs
new file mode 100644
index 0000000..86d3a6d
--- /dev/null
+++ b/debian/bind9-doc.docs
@@ -0,0 +1 @@
+doc/misc
diff --git a/debian/bind9-doc.install b/debian/bind9-doc.install
new file mode 100644
index 0000000..7a6453e
--- /dev/null
+++ b/debian/bind9-doc.install
@@ -0,0 +1 @@
+doc/arm/_build/html/* /usr/share/doc/bind9-doc/arm/
diff --git a/debian/bind9-host.install b/debian/bind9-host.install
new file mode 100644
index 0000000..f07a04d
--- /dev/null
+++ b/debian/bind9-host.install
@@ -0,0 +1,2 @@
+usr/bin/host
+usr/share/man/man1/host.1*
diff --git a/debian/bind9-libs.install b/debian/bind9-libs.install
new file mode 100644
index 0000000..bf9528c
--- /dev/null
+++ b/debian/bind9-libs.install
@@ -0,0 +1,7 @@
+usr/lib/*/libbind9-*.so
+usr/lib/*/libdns-*.so
+usr/lib/*/libirs-*.so
+usr/lib/*/libisc-*.so
+usr/lib/*/libisccc-*.so
+usr/lib/*/libisccfg-*.so
+usr/lib/*/libns-*.so
diff --git a/debian/bind9-libs.lintian-overrides b/debian/bind9-libs.lintian-overrides
new file mode 100644
index 0000000..534ea3f
--- /dev/null
+++ b/debian/bind9-libs.lintian-overrides
@@ -0,0 +1 @@
+bind9-libs: package-name-doesnt-match-sonames *
diff --git a/debian/bind9-utils.install b/debian/bind9-utils.install
new file mode 100644
index 0000000..975cc26
--- /dev/null
+++ b/debian/bind9-utils.install
@@ -0,0 +1,33 @@
+usr/lib/python3/dist-packages/
+usr/sbin/dnssec-cds
+usr/sbin/dnssec-checkds
+usr/sbin/dnssec-coverage
+usr/sbin/dnssec-dsfromkey
+usr/sbin/dnssec-dsfromkey
+usr/sbin/dnssec-keyfromlabel
+usr/sbin/dnssec-keygen
+usr/sbin/dnssec-keymgr
+usr/sbin/dnssec-revoke
+usr/sbin/dnssec-settime
+usr/sbin/dnssec-signzone
+usr/sbin/dnssec-verify
+usr/sbin/named-checkconf
+usr/sbin/named-checkzone
+usr/sbin/named-compilezone
+usr/sbin/rndc
+usr/sbin/rndc-confgen
+usr/share/man/man8/dnssec-cds.8
+usr/share/man/man8/dnssec-checkds.8
+usr/share/man/man8/dnssec-dsfromkey.8
+usr/share/man/man8/dnssec-keyfromlabel.8
+usr/share/man/man8/dnssec-keygen.8
+usr/share/man/man8/dnssec-keymgr.8
+usr/share/man/man8/dnssec-revoke.8
+usr/share/man/man8/dnssec-settime.8
+usr/share/man/man8/dnssec-signzone.8
+usr/share/man/man8/dnssec-verify.8
+usr/share/man/man8/named-checkconf.8
+usr/share/man/man8/named-checkzone.8
+usr/share/man/man8/named-compilezone.8
+usr/share/man/man8/rndc-confgen.8
+usr/share/man/man8/rndc.8
diff --git a/debian/bind9-utils.links b/debian/bind9-utils.links
new file mode 100644
index 0000000..bf9daf6
--- /dev/null
+++ b/debian/bind9-utils.links
@@ -0,0 +1 @@
+usr/share/man/man8/named-checkzone.8 usr/share/man/man8/named-compilezone.8
diff --git a/debian/bind9.dirs b/debian/bind9.dirs
new file mode 100644
index 0000000..b5256a1
--- /dev/null
+++ b/debian/bind9.dirs
@@ -0,0 +1,12 @@
+etc/apparmor.d/force-complain
+etc/apparmor.d/local
+etc/bind
+etc/insserv.conf.d
+etc/network/if-down.d
+etc/network/if-up.d
+etc/ppp/ip-down.d
+etc/ppp/ip-up.d
+etc/ufw/applications.d
+usr/bin
+usr/sbin
+var/cache/bind
diff --git a/debian/bind9.docs b/debian/bind9.docs
new file mode 100644
index 0000000..e845566
--- /dev/null
+++ b/debian/bind9.docs
@@ -0,0 +1 @@
+README
diff --git a/debian/bind9.install b/debian/bind9.install
new file mode 100644
index 0000000..30848cf
--- /dev/null
+++ b/debian/bind9.install
@@ -0,0 +1,32 @@
+debian/extras/apparmor.d/* /etc/apparmor.d/
+debian/extras/etc/* /etc/bind/
+debian/extras/if-reconfig.d/* /etc/network/if-down.d
+debian/extras/if-reconfig.d/* /etc/network/if-up.d/
+debian/extras/if-reconfig.d/* /etc/ppp/ip-down.d/
+debian/extras/if-reconfig.d/* /etc/ppp/ip-up.d/
+debian/extras/insserv.conf.d/* /etc/insserv.conf.d/
+debian/extras/ufw/* /etc/ufw/applications.d/
+etc/bind/bind.keys
+usr/bin/arpaname
+usr/bin/named-rrchecker
+usr/lib/*/named/filter-aaaa.so
+usr/sbin/ddns-confgen
+usr/sbin/dnssec-importkey
+usr/sbin/named
+usr/sbin/named-journalprint
+usr/sbin/named-nzd2nzf
+usr/sbin/nsec3hash
+usr/sbin/tsig-keygen
+usr/share/man/man1/arpaname.1
+usr/share/man/man1/named-rrchecker.1
+usr/share/man/man5/named.conf.5
+usr/share/man/man5/rndc.conf.5
+usr/share/man/man8/ddns-confgen.8
+usr/share/man/man8/dnssec-coverage.8
+usr/share/man/man8/dnssec-importkey.8
+usr/share/man/man8/filter-aaaa.8
+usr/share/man/man8/named-journalprint.8
+usr/share/man/man8/named-nzd2nzf.8
+usr/share/man/man8/named.8
+usr/share/man/man8/nsec3hash.8
+usr/share/man/man8/tsig-keygen.8
diff --git a/debian/bind9.links b/debian/bind9.links
new file mode 100644
index 0000000..77769fa
--- /dev/null
+++ b/debian/bind9.links
@@ -0,0 +1 @@
+usr/share/man/man8/ddns-confgen.8 usr/share/man/man8/tsig-keygen.8
diff --git a/debian/bind9.lintian-overrides b/debian/bind9.lintian-overrides
new file mode 100644
index 0000000..f20096b
--- /dev/null
+++ b/debian/bind9.lintian-overrides
@@ -0,0 +1 @@
+bind9: systemd-service-file-refers-to-unusual-wantedby-target lib/systemd/system/named-resolvconf.service
diff --git a/debian/bind9.maintscript b/debian/bind9.maintscript
new file mode 100644
index 0000000..1c4d964
--- /dev/null
+++ b/debian/bind9.maintscript
@@ -0,0 +1,4 @@
+mv_conffile /etc/default/bind  /etc/default/named 1:9.13.6~
+mv_conffile /etc/default/bind9 /etc/default/named 1:9.12.0~
+mv_conffile /etc/init.d/bind   /etc/init.d/named  1:9.13.6~
+mv_conffile /etc/init.d/bind9  /etc/init.d/named  1:9.12.0~
diff --git a/debian/bind9.named.default b/debian/bind9.named.default
new file mode 100644
index 0000000..66352f0
--- /dev/null
+++ b/debian/bind9.named.default
@@ -0,0 +1,6 @@
+#
+# run resolvconf?
+RESOLVCONF=no
+
+# startup options for the server
+OPTIONS="-u bind"
diff --git a/debian/bind9.named.init b/debian/bind9.named.init
new file mode 100644
index 0000000..44b00ca
--- /dev/null
+++ b/debian/bind9.named.init
@@ -0,0 +1,146 @@
+#!/bin/sh -e
+
+### BEGIN INIT INFO
+# Provides:          bind bind9
+# Required-Start:    $remote_fs
+# Required-Stop:     $remote_fs
+# Should-Start:      $network $syslog
+# Should-Stop:       $network $syslog
+# Default-Start:     2 3 4 5
+# Default-Stop:      0 1 6
+# Short-Description: Start and stop BIND 9 Domain Name Server
+# Description:       BIND 9 is a Domain Name Server (DNS)
+#        which translates ip addresses to and from internet names
+### END INIT INFO
+
+PATH=/sbin:/bin:/usr/sbin:/usr/bin
+
+# for a chrooted server: "-u bind -t /var/lib/named"
+# Don't modify this line, instead change or create /etc/default/named.
+OPTIONS=""
+RESOLVCONF=no
+
+test -f /etc/default/named && . /etc/default/named
+
+test -x /usr/sbin/rndc || exit 0
+
+. /lib/lsb/init-functions
+PIDFILE=/run/named/named.pid
+
+check_network() {
+    result=0
+    if [ -x /usr/bin/uname ] && [ "X$(/usr/bin/uname -o)" = XSolaris ]; then
+        LIST_NICS_IP=$(/sbin/ifconfig -au) || result=$?
+    else
+        LIST_NICS_IP=$(/bin/ip addr) || result=$?
+    fi
+    if [ $result -ne 0 -o -z "${LIST_NICS_IP}" ]; then
+       #log_action_msg "No networks configured."
+       return 1
+    fi
+    return 0
+}
+
+case "$1" in
+    start)
+	log_daemon_msg "Starting domain name service..." "named"
+
+	modprobe capability >/dev/null 2>&1 || true
+
+	# dirs under /run can go away on reboots.
+	mkdir -p /run/named
+	chmod 775 /run/named
+	chown root:bind /run/named >/dev/null 2>&1 || true
+
+	if [ ! -x /usr/sbin/named ]; then
+	    log_action_msg "named binary missing - not starting"
+	    log_end_msg 1
+	fi
+
+	if ! check_network; then
+	    log_action_msg "no networks configured"
+	    log_end_msg 1
+	fi
+
+	if start-stop-daemon --start --oknodo --quiet --exec /usr/sbin/named \
+		--pidfile ${PIDFILE} -- $OPTIONS; then
+	    if [ "X$RESOLVCONF" != "Xno" ] && [ -x /sbin/resolvconf ] ; then
+		echo "nameserver 127.0.0.1" | /sbin/resolvconf -a lo.named
+	    fi
+	    log_end_msg 0
+	else
+	    log_end_msg 1
+	fi
+    ;;
+
+    stop)
+	log_daemon_msg "Stopping domain name service..." "named"
+	if ! check_network; then
+	    log_action_msg "no networks configured"
+	    log_end_msg 1
+	fi
+
+	if [ "X$RESOLVCONF" != "Xno" ] && [ -x /sbin/resolvconf ] ; then
+	    /sbin/resolvconf -d lo.named
+	fi
+	pid=$(/usr/sbin/rndc stop -p | awk '/^pid:/ {print $2}') || true
+	if [ -z "$pid" ]; then		# no pid found, so either not running, or error
+	    pid=$(pgrep -f ^/usr/sbin/named) || true
+	    start-stop-daemon --stop --oknodo --quiet --exec /usr/sbin/named \
+		    --pidfile ${PIDFILE} -- $OPTIONS
+	fi
+	if [ -n "$pid" ]; then
+	    sig=0
+	    n=1
+	    while kill -$sig $pid 2>/dev/null; do
+		if [ $n -eq 1 ]; then
+		    echo "waiting for pid $pid to die"
+		fi
+		if [ $n -eq 11 ]; then
+		    echo "giving up on pid $pid with kill -0; trying -9"
+		    sig=9
+		fi
+		if [ $n -gt 20 ]; then
+		    echo "giving up on pid $pid"
+		    break
+		fi
+		n=$(($n+1))
+		sleep 1
+	    done
+	fi
+	log_end_msg 0
+    ;;
+
+    reload|force-reload)
+	log_daemon_msg "Reloading domain name service..." "named"
+	if ! check_network; then
+	    log_action_msg "no networks configured"
+	    log_end_msg 1
+	fi
+
+	/usr/sbin/rndc reload >/dev/null && log_end_msg 0 || log_end_msg 1
+    ;;
+
+    restart)
+	if ! check_network; then
+	    log_action_msg "no networks configured"
+	    exit 1
+	fi
+
+	$0 stop
+	$0 start
+    ;;
+    
+    status)
+    	ret=0
+	status_of_proc -p ${PIDFILE} /usr/sbin/named bind 2>/dev/null || ret=$?
+	exit $ret
+	;;
+
+    *)
+	log_action_msg "Usage: /etc/init.d/named {start|stop|reload|restart|force-reload|status}"
+	exit 1
+    ;;
+esac
+
+exit 0
diff --git a/debian/bind9.named.service b/debian/bind9.named.service
new file mode 100644
index 0000000..8bf0653
--- /dev/null
+++ b/debian/bind9.named.service
@@ -0,0 +1,17 @@
+[Unit]
+Description=BIND Domain Name Server
+Documentation=man:named(8)
+After=network.target
+Wants=nss-lookup.target
+Before=nss-lookup.target
+
+[Service]
+EnvironmentFile=-/etc/default/named
+ExecStart=/usr/sbin/named -f $OPTIONS
+ExecReload=/usr/sbin/rndc reload
+ExecStop=/usr/sbin/rndc stop
+Restart=on-failure
+
+[Install]
+WantedBy=multi-user.target
+Alias=bind9.service
diff --git a/debian/bind9.named.tmpfile b/debian/bind9.named.tmpfile
new file mode 100644
index 0000000..36fc91d
--- /dev/null
+++ b/debian/bind9.named.tmpfile
@@ -0,0 +1 @@
+d /run/named 0775 root bind - -
diff --git a/debian/bind9.postinst b/debian/bind9.postinst
new file mode 100644
index 0000000..69333d0
--- /dev/null
+++ b/debian/bind9.postinst
@@ -0,0 +1,37 @@
+#!/bin/sh
+
+set -e
+
+if [ "$1" = configure ]; then
+    # lets give them a bind user/group in all cases.
+    getent group bind >/dev/null 2>&1 || addgroup --system bind
+    getent passwd bind >/dev/null 2>&1 ||
+	adduser --system --home /var/cache/bind --no-create-home \
+		--disabled-password --ingroup bind bind
+
+    # create data directory on fresh install
+    if [ -z "$2" ]; then
+	mkdir -p /var/lib/bind
+	chown root:bind /var/lib/bind
+	chmod 775 /var/lib/bind
+    fi
+
+    if [ ! -s /etc/bind/rndc.key ] && [ ! -s /etc/bind/rndc.conf ]; then
+	rndc-confgen -a
+    fi
+
+    uid=$(ls -ln /etc/bind/rndc.key | awk '{print $3}')
+    if [ "$uid" = "0" ]; then
+	chown bind /etc/bind/rndc.key
+	chgrp bind /etc/bind
+	chmod g+s /etc/bind
+	chgrp bind /etc/bind/rndc.key /var/cache/bind
+	chgrp bind /etc/bind/named.conf* || true
+	chmod g+r /etc/bind/rndc.key /etc/bind/named.conf* || true
+	chmod g+rwx /var/cache/bind
+    fi
+fi
+
+#DEBHELPER#
+
+exit 0
diff --git a/debian/bind9.postrm b/debian/bind9.postrm
new file mode 100644
index 0000000..27239c0
--- /dev/null
+++ b/debian/bind9.postrm
@@ -0,0 +1,18 @@
+#!/bin/sh
+
+set -e
+
+#DEBHELPER#
+
+if [ "$1" = "purge" ]; then
+	rm -f /etc/bind/rndc.key
+	rmdir /etc/bind >/dev/null 2>&1 || true
+	rm -f /etc/apparmor.d/force-complain/usr.sbin.named >/dev/null 2>&1 || true
+	rmdir /var/lib/bind || true
+	# delete bind daemon user, if it exists
+	if getent passwd bind > /dev/null ; then
+		deluser  --quiet bind > /dev/null || true
+	fi
+fi
+
+exit 0
diff --git a/debian/changelog b/debian/changelog
new file mode 100644
index 0000000..53e35f5
--- /dev/null
+++ b/debian/changelog
@@ -0,0 +1,3250 @@
+bind9 (1:9.16.44-1~deb11u1) bullseye-security; urgency=high
+
+  * New upstream version 9.16.44
+   - CVE-2023-3341: A stack exhaustion flaw in control channel code may
+     cause named to terminate unexpectedly
+
+ -- Ondřej Surý <ondrej@debian.org>  Thu, 21 Sep 2023 19:30:52 +0200
+
+bind9 (1:9.16.42-1~deb11u1) bullseye-security; urgency=high
+
+  * Update the upstream signing keys
+  * New upstream version 9.16.42
+   - CVE-2023-2828: The overmem cleaning process has been improved,
+     to prevent the cache from significantly exceeding the configured
+     max-cache-size limit.
+   - CVE-2023-2911: A query that prioritizes stale data over lookup
+     triggers a fetch to refresh the stale data in cache. If the fetch
+     is aborted for exceeding the recursion quota, it was possible for
+     named to enter an infinite callback loop and crash due to stack
+     overflow. This has been fixed.
+
+ -- Ondřej Surý <ondrej@debian.org>  Wed, 21 Jun 2023 20:31:51 +0200
+
+bind9 (1:9.16.37-1~deb11u1) bullseye-security; urgency=high
+
+  * New upstream version 9.16.37
+   - CVE-2022-3094: An UPDATE message flood could cause named
+     to exhaust all available memory.
+   - CVE-2022-3736: named could crash with an assertion failure
+     when an RRSIG query was received and stale-answer-client-timeout
+     was set to a non-zero value.
+   - CVE-2022-3924: named running as a resolver with the
+     stale-answer-client-timeout option set to any value greater
+     than 0 could crash with an assertion failure, when the
+     recursive-clients soft quota was reached.
+
+ -- Ondřej Surý <ondrej@debian.org>  Wed, 25 Jan 2023 16:22:22 +0100
+
+bind9 (1:9.16.33-1~deb11u1) bullseye-security; urgency=high
+
+  * New upstream version 9.16.33
+   - CVE-2022-2795: Processing large delegations may severely degrade
+     resolver performance
+   - CVE-2022-2881: Buffer overread in statistics channel code
+   - CVE-2022-2906: Memory leaks in code handling Diffie-Hellman key
+     exchange via TKEY RRs (OpenSSL 3.0.0+ only)
+   - CVE-2022-3080: BIND 9 resolvers configured to answer from stale
+     cache with zero stale-answer-client-timeout may terminate unexpectedly
+   - CVE-2022-38177: Memory leak in ECDSA DNSSEC verification code
+   - CVE-2022-38178: Memory leaks in EdDSA DNSSEC verification code
+  * Drop libldap2-dev from Build-Depends (Closes: #1008021)
+  * Add runtime dependency on libuv1 >= 1.40.0 (Closes: #1009889)
+
+ -- Ondřej Surý <ondrej@debian.org>  Wed, 21 Sep 2022 12:40:02 +0200
+
+bind9 (1:9.16.27-1~deb11u1) bullseye-security; urgency=high
+
+  * New upstream version 9.16.27
+  * CVE-2022-0396: A synchronous call to closehandle_cb() caused
+    isc__nm_process_sock_buffer() to be called recursively, which in turn
+    left TCP connections hanging in the CLOSE_WAIT state blocking
+    indefinitely when out-of-order processing was disabled.
+  * CVE-2021-25220: The rules for acceptance of records into the cache
+    have been tightened to prevent the possibility of poisoning if
+    forwarders send records outside the configured bailiwick
+  * Remove patch to fix sphinx-build failure (fixed upstream)
+
+ -- Ondřej Surý <ondrej@debian.org>  Mon, 14 Mar 2022 15:25:15 +0100
+
+bind9 (1:9.16.22-1~deb11u1) bullseye-security; urgency=high
+
+  * New upstream version 9.16.22
+   + CVE-2021-25219: The "lame-ttl" option is now forcibly set to 0. This
+     effectively disables the lame server cache, as it could previously be
+     abused by an attacker to significantly degrade resolver performance.
+
+ -- Ondřej Surý <ondrej@debian.org>  Mon, 25 Oct 2021 13:29:14 +0200
+
+bind9 (1:9.16.15-1) unstable; urgency=high
+
+  * New upstream version 9.16.15 (Closes: #987741, #987742, #987743)
+   + CVE-2021-25214: A malformed incoming IXFR transfer could trigger an
+     assertion failure in ``named``, causing it to quit abnormally.
+   + CVE-2021-25215: ``named`` crashed when a DNAME record placed in the
+     ANSWER section during DNAME chasing turned out to be the final
+     answer to a client query.
+   + CVE-2021-25216: When a server's configuration set the
+    ``tkey-gssapi-keytab`` or ``tkey-gssapi-credential`` option, a
+    specially crafted GSS-TSIG query could cause a buffer overflow in
+    the ISC implementation of SPNEGO (a protocol enabling negotiation of
+    the security mechanism used for GSSAPI authentication).
+  * Add patches to implement I-D draft-hardaker-dnsop-nsec3-guidance
+
+ -- Ondřej Surý <ondrej@debian.org>  Thu, 29 Apr 2021 09:11:32 +0200
+
+bind9 (1:9.16.13-1) unstable; urgency=medium
+
+  * New upstream version 9.16.13
+  * Add upstream patches to fix TCP timeouts firing too early
+
+ -- Ondřej Surý <ondrej@debian.org>  Thu, 18 Mar 2021 14:23:49 +0100
+
+bind9 (1:9.16.12-3) unstable; urgency=medium
+
+  * Add most important patches from upcoming 9.16.13 release
+
+ -- Ondřej Surý <ondrej@debian.org>  Fri, 12 Mar 2021 09:59:49 +0100
+
+bind9 (1:9.16.12-2) unstable; urgency=medium
+
+  * Add patch to fix sphinx-build failure on Ubuntu Xenial
+
+ -- Ondřej Surý <ondrej@debian.org>  Thu, 18 Feb 2021 12:26:09 +0100
+
+bind9 (1:9.16.12-1) unstable; urgency=high
+
+  * New upstream version 9.16.12
+   + [CVE-2020-8625]: Fix off-by-one bug in ISC SPNEGO implementation.
+     (Closes: #983004)
+  * Adjust the bind9-libs and bind9-dev packages for new upstream library
+    names
+
+ -- Ondřej Surý <ondrej@debian.org>  Thu, 18 Feb 2021 08:13:58 +0100
+
+bind9 (1:9.16.11-3) unstable; urgency=medium
+
+  * Split the simple validation test to separate file and mark it as flaky
+    (Closes: #976045)
+
+ -- Ondřej Surý <ondrej@debian.org>  Sun, 14 Feb 2021 20:04:39 +0100
+
+bind9 (1:9.16.11-2) unstable; urgency=medium
+
+  * Cherry-pick upstream commit to fix segfault with named ACLs used in
+    allow-update (Closes: #980786)
+
+ -- Bernhard Schmidt <berni@debian.org>  Fri, 29 Jan 2021 08:27:31 +0100
+
+bind9 (1:9.16.11-1) unstable; urgency=medium
+
+  * Add the ISC code-signing key for 2021-2022
+  * New upstream version 9.16.11
+
+ -- Ondřej Surý <ondrej@debian.org>  Thu, 21 Jan 2021 09:58:33 +0100
+
+bind9 (1:9.16.10-1) unstable; urgency=medium
+
+  * New upstream version 9.16.10
+
+ -- Ondřej Surý <ondrej@debian.org>  Wed, 16 Dec 2020 22:22:25 +0100
+
+bind9 (1:9.16.9-1) unstable; urgency=medium
+
+  * New upstream version 9.16.9
+
+ -- Ondřej Surý <ondrej@debian.org>  Thu, 26 Nov 2020 12:52:28 +0100
+
+bind9 (1:9.16.8-1) unstable; urgency=medium
+
+  [ Ondřej Surý ]
+  * New upstream version 9.16.8
+
+  [ Bernhard Schmidt ]
+  * d/t/control:
+    - tag autopkgtest with needs-internet (Closes: #973955)
+    - depend on bind9-dnsutils insead of the transitional dnsutils
+  * d/rules: change deprecated --with-libjson-c configure argument to
+    --with-json-c
+
+ -- Bernhard Schmidt <berni@debian.org>  Mon, 09 Nov 2020 23:03:53 +0100
+
+bind9 (1:9.16.7-1) unstable; urgency=medium
+
+  * New upstream version 9.16.7
+
+ -- Ondřej Surý <ondrej@debian.org>  Thu, 17 Sep 2020 10:36:51 +0200
+
+bind9 (1:9.16.6-3) unstable; urgency=medium
+
+  [ Ondřej Surý ]
+  * Add upstream patches to fix some rare conditions (Closes: #969448)
+
+  [ Bernhard Schmidt ]
+  * Set Restart=on-failure in systemd unit
+
+ -- Bernhard Schmidt <berni@debian.org>  Tue, 15 Sep 2020 00:26:14 +0200
+
+bind9 (1:9.16.6-2) unstable; urgency=medium
+
+  * Move Build-Depends for documentation to Build-Depends-Indep, this
+    should fix the arch-any build on s390x where xindy is not available.
+
+ -- Bernhard Schmidt <berni@debian.org>  Sat, 22 Aug 2020 20:06:00 +0200
+
+bind9 (1:9.16.6-1) unstable; urgency=medium
+
+  * New upstream version 9.16.6
+
+ -- Ondřej Surý <ondrej@debian.org>  Thu, 20 Aug 2020 21:32:46 +0200
+
+bind9 (1:9.16.5-1) unstable; urgency=medium
+
+  * New upstream version 9.16.5
+  * Add fonts-freefont-otf, latexmk, texlive-fonts-recommended,
+    texlive-latex-recommended, texlive-xetex, xindy to Build-Depends
+  * Install man pages for tsig-gen and named-compilezone
+
+ -- Ondřej Surý <ondrej@debian.org>  Thu, 16 Jul 2020 00:29:57 +0200
+
+bind9 (1:9.16.4-1) unstable; urgency=medium
+
+  * New upstream version 9.16.4
+  * Update Debian packaging for sphinx-doc documentation
+
+ -- Ondřej Surý <ondrej@debian.org>  Wed, 17 Jun 2020 09:27:29 +0200
+
+bind9 (1:9.16.3-1) unstable; urgency=medium
+
+  * New upstream version 9.16.3
+
+ -- Ondřej Surý <ondrej@debian.org>  Tue, 19 May 2020 14:14:35 +0200
+
+bind9 (1:9.16.2-3) unstable; urgency=medium
+
+  [ Simon Deziel ]
+  * apparmor: use profile name specifier
+
+ -- Bernhard Schmidt <berni@debian.org>  Thu, 23 Apr 2020 11:45:43 +0200
+
+bind9 (1:9.16.2-2) unstable; urgency=medium
+
+  * Update gbp.conf to debian/master and upstream/latest
+  * Reintroduce the bind9-dev package (Closes: #954906)
+
+ -- Ondřej Surý <ondrej@debian.org>  Thu, 16 Apr 2020 12:14:44 +0200
+
+bind9 (1:9.16.2-1) unstable; urgency=medium
+
+  * Update d/copyright (Closes: #947978)
+  * New upstream version 9.16.2 (Closes: #952946, #954919)
+
+ -- Ondřej Surý <ondrej@debian.org>  Thu, 16 Apr 2020 10:07:07 +0200
+
+bind9 (1:9.16.1-2) unstable; urgency=medium
+
+  [ Andreas Hasenack ]
+  * Bring back the DEP8 test from sid
+  * Use iproute2 instead of net-tools
+  * d/control: drop hardcoded python3 dependency
+
+  [ Bernhard Schmidt ]
+  * Fix apparmor profile name.
+    Thanks to Andreas Hasenack
+  * Enable readline support
+
+  [ Andreas Hasenack ]
+  * Update apparmor profile with what is in sid
+  * Create the missing transitional packages for dnsutils, bind9utils
+  * There is a licensing conflict with adding libreadline and we should
+    use libedit-dev instead.
+
+  [ Ondřej Surý ]
+  * Add Breaks: freeipa, so the package doesn't migrate to testing before freeipa is fixed
+
+ -- Ondřej Surý <ondrej@debian.org>  Sun, 22 Mar 2020 09:21:21 +0100
+
+bind9 (1:9.16.1-1) experimental; urgency=medium
+
+  * New upstream version 9.16.1
+
+ -- Ondřej Surý <ondrej@debian.org>  Fri, 20 Mar 2020 13:59:34 +0100
+
+bind9 (1:9.16.0-1) experimental; urgency=medium
+
+  * Change the branch to 9.16
+  * New upstream version 9.16.0
+
+ -- Ondřej Surý <ondrej@debian.org>  Thu, 20 Feb 2020 10:54:34 +0100
+
+bind9 (1:9.15.8-1) experimental; urgency=medium
+
+  * New upstream version 9.15.8
+
+ -- Ondřej Surý <ondrej@debian.org>  Thu, 23 Jan 2020 14:58:01 +0100
+
+bind9 (1:9.15.7-1) experimental; urgency=medium
+
+  * Add libuv1-dev, libcmocka-dev, libedit-dev and zlib1g-dev to B-D
+  * Update d/watch to use tar.xz
+  * New upstream version 9.15.7
+
+ -- Ondřej Surý <ondrej@debian.org>  Thu, 19 Dec 2019 09:40:52 +0100
+
+bind9 (1:9.15.6-1) experimental; urgency=medium
+
+  * Remove useless patches
+  * New upstream version 9.15.6
+
+ -- Ondřej Surý <ondrej@debian.org>  Wed, 20 Nov 2019 21:58:06 +0100
+
+bind9 (1:9.15.5-1) experimental; urgency=medium
+
+  * New upstream version 9.15.5
+  * Install python files to dist-packages (Courtesy of Jim Popovitch)
+  * Remove GPL licensed apport file until one with better license is available
+  * Remove debian/nslookup.1
+  * Remove 4-clause BSD content from the package
+
+ -- Ondřej Surý <ondrej@sury.org>  Thu, 17 Oct 2019 08:41:55 +0200
+
+bind9 (1:9.15.4-1) unstable; urgency=medium
+
+  * New upstream version 9.15.4
+
+ -- Ondřej Surý <ondrej@sury.org>  Mon, 23 Sep 2019 11:54:32 +0200
+
+bind9 (1:9.15.3-2) unstable; urgency=medium
+
+  * Fix the section for bind9 alias in the systemd unit [GL #1193]
+
+ -- Ondřej Surý <ondrej@sury.org>  Wed, 28 Aug 2019 21:35:44 +0200
+
+bind9 (1:9.15.3-1) unstable; urgency=medium
+
+  * New upstream version 9.15.3
+  * isc-config has been removed, remove it from the debian/
+
+ -- Ondřej Surý <ondrej@sury.org>  Mon, 26 Aug 2019 10:26:41 +0200
+
+bind9 (1:9.15.2-2) unstable; urgency=medium
+
+  * Tighten libmaxminddb-dev dependency
+  * Install the tmpfile for named service again
+
+ -- Ondřej Surý <ondrej@sury.org>  Wed, 07 Aug 2019 11:11:13 +0200
+
+bind9 (1:9.15.2-1) unstable; urgency=medium
+
+  * New upstream version 9.15.2
+  * Disable old GeoIP and enable new GeoIP2
+
+ -- Ondřej Surý <ondrej@sury.org>  Thu, 18 Jul 2019 10:09:29 +0200
+
+bind9 (1:9.15.1-2) experimental; urgency=medium
+
+  * Change --with-json=/usr to --with-json-c (and use pkg-config)
+
+ -- Ondřej Surý <ondrej@sury.org>  Thu, 20 Jun 2019 00:34:27 +0200
+
+bind9 (1:9.15.1-1) experimental; urgency=medium
+
+  * New upstream version 9.15.1
+  * Rebase patches for 9.15.1
+
+ -- Ondřej Surý <ondrej@sury.org>  Thu, 20 Jun 2019 00:27:55 +0200
+
+bind9 (1:9.15.0-2) experimental; urgency=medium
+
+  * Fix Debian buster armhf build
+
+ -- Ondřej Surý <ondrej@sury.org>  Tue, 21 May 2019 20:04:34 +0200
+
+bind9 (1:9.15.0-1) experimental; urgency=medium
+
+  * Update debian/ for BIND 9.15
+  * New upstream version 9.15.0
+
+ -- Ondřej Surý <ondrej@sury.org>  Tue, 21 May 2019 13:19:38 +0200
+
+bind9 (1:9.14.2-1) experimental; urgency=medium
+
+  * Make named.service to be known as bind9.service
+  * New upstream version 9.14.2
+
+ -- Ondřej Surý <ondrej@sury.org>  Tue, 21 May 2019 13:08:43 +0200
+
+bind9 (1:9.14.1-1) experimental; urgency=medium
+
+  [ Ondřej Surý ]
+  * New upstream version 9.14.1
+  * Remove the transitional packages and only keep bind9 names as the
+    product name is 'BIND 9'
+
+  [ Bernhard Schmidt ]
+  * Update AppArmor policy for Samba AD DLZ.
+    Thanks to Steven Monai (Closes: #920530)
+  * More fixes to the AppArmor policy
+  * AppArmor policy: Allow access to /dev/urandom
+  * AppArmor: Also add /var/lib/samba/bind-dns/dns/** (Closes: #927827)
+
+ -- Ondřej Surý <ondrej@debian.org>  Fri, 26 Apr 2019 08:57:57 +0000
+
+bind9 (1:9.14.0-1) experimental; urgency=medium
+
+  * New upstream version 9.14.0
+
+ -- Ondřej Surý <ondrej@debian.org>  Fri, 22 Mar 2019 09:17:03 +0000
+
+bind9 (1:9.14.0~rc3-1) experimental; urgency=medium
+
+  * New upstream version 9.14.0~rc3
+
+ -- Ondřej Surý <ondrej@debian.org>  Mon, 18 Mar 2019 12:34:17 +0000
+
+bind9 (1:9.14.0~rc2-1) experimental; urgency=medium
+
+  * New upstream version 9.14.0~rc2
+  * Plugins are now in /usr/lib/<triplet>/named/*.so
+
+ -- Ondřej Surý <ondrej@debian.org>  Mon, 11 Mar 2019 12:42:47 +0000
+
+bind9 (1:9.14.0~rc1-1) experimental; urgency=medium
+
+  * Update branches for DEP-14
+  * Bump the d/watch from 9.13 -> 9.14
+  * New upstream version 9.14.0~rc1
+
+ -- Ondřej Surý <ondrej@debian.org>  Fri, 01 Mar 2019 10:44:30 +0000
+
+bind9 (1:9.13.6-2) experimental; urgency=medium
+
+  * Add B/R for dnsutils
+
+ -- Ondřej Surý <ondrej@debian.org>  Wed, 20 Feb 2019 12:20:08 +0000
+
+bind9 (1:9.13.6-1) experimental; urgency=medium
+
+  [ Ondřej Surý ]
+  * New upstream version 9.13.6
+  * Add usr/share/man/man8/filter-aaaa.8 to the bind package
+  * Rename packages back to BIND 9
+  * Rename the init scripts to named to match the name of the daemon
+  * Bump to debhelper compat level 12
+  * Fix dh_install, dh_installinit and dh_installsystemd invocation for
+    debhelper-compat level 12
+  * Add new upstream GPG signing-key
+  * Disable building in subdirectory
+  * Add bind-libs transitional package to cleanly remove src:bind from the
+    archive
+  * Disable subdirectory build in dh_auto_install target
+  * Disable dh_auto_test as neither kyua (needed for unit tests) or
+    setting up virtual interfaces on lo (needed for system tests) is
+    available in Debian builds
+
+  [ Dominik George ]
+  * Support dyndb modules in apparmor.
+  * Also allow mapping from dyndb modules.
+
+  [ Bernhard Schmidt ]
+  * apparmor-policy: permit locking of the allow-new-zones database
+    (Closes: #922065)
+  * apparmor-policy: allow access to Samba DLZ files (Closes: #920530)
+
+ -- Ondřej Surý <ondrej@debian.org>  Mon, 18 Feb 2019 20:02:55 +0000
+
+bind (1:9.13.5-1) experimental; urgency=medium
+
+  * New upstream version 9.13.5
+
+ -- Ondřej Surý <ondrej@debian.org>  Tue, 18 Dec 2018 14:50:46 +0000
+
+bind (1:9.13.4-1) experimental; urgency=medium
+
+  * Use team+dns@tracker.debian.org as Maintainer address
+  * New upstream version 9.13.4
+
+ -- Ondřej Surý <ondrej@debian.org>  Thu, 22 Nov 2018 14:56:03 +0000
+
+bind (1:9.13.3-3) experimental; urgency=medium
+
+  * Remove deprecated -r /dev/urandom option from rndc invocation
+
+ -- Ondřej Surý <ondrej@debian.org>  Thu, 22 Nov 2018 14:55:53 +0000
+
+bind (1:9.13.3-2) experimental; urgency=medium
+
+  * Remove --disable-static from the dh_auto_configure call
+
+ -- Ondřej Surý <ondrej@debian.org>  Wed, 26 Sep 2018 10:38:05 +0000
+
+bind (1:9.13.3-1) experimental; urgency=medium
+
+  * New upstream version 9.13.3
+  * Rebase patches for BIND 9.13.3
+
+ -- Ondřej Surý <ondrej@debian.org>  Mon, 10 Sep 2018 08:13:47 +0000
+
+bind (1:9.13.3~400-g47066d3d01-1) experimental; urgency=medium
+
+  * New upstream version 9.13.3~400-g47066d3d01
+
+ -- Ondřej Surý <ondrej@debian.org>  Fri, 31 Aug 2018 12:47:48 +0000
+
+bind (1:9.13.3~398-g5c00162f54-1) experimental; urgency=medium
+
+  [ Bernhard Schmidt ]
+  * Enable IDN support for dig+host using libidn2 (Closes: #459010)
+  * Use root.hints from dns-root-data (Closes: #888491)
+  * Adjust apparmor profile for dns-root-data
+  * Fix missing colon in AppArmor profile (Closes: #904983)
+  * d/watch: Properly deal with -P patch releases
+
+  [ Timo Aaltonen ]
+  * skip-rtld-deepbind-for-dyndb.diff: Add a patch to fix named-pkcs11 crashing on startup. (LP: #1769440)
+
+  [ Ondřej Surý ]
+  * New upstream version 9.13.3~398-g5c00162f54
+  * Rebase patches for new upstream snapshot release
+
+ -- Ondřej Surý <ondrej@debian.org>  Fri, 31 Aug 2018 11:39:51 +0000
+
+bind (1:9.13.2-1~exp0) experimental; urgency=medium
+
+  * Don't repack, all non-free files are gone from BIND 9.13
+  * New upstream version 9.13.2
+  * Rebase patches for BIND 9.13.2
+  * Stop providing bind-dev package and checking for symbols, they are not
+    tightly coupled with rest of the package.
+  * Add docbook-xsl and docbook-xml to Build-Depends
+  * Add pkg-config to Build-Depends and cleanup versioned Build-Depends
+  * Enable dnstap support (Courtesy of Richard James Salts)
+  * Remove auth-nxdomain no; from named.conf.options (Closes: #896889)
+
+ -- Ondřej Surý <ondrej@debian.org>  Tue, 17 Jul 2018 11:15:07 +0000
+
+bind (1:9.13.1+dfsg-1) experimental; urgency=medium
+
+  * New upstream version 9.13.1+dfsg
+  * d/watch: Always package the latest version
+  * d/patches: Remove 0003-Add-min-cache-ttl-and-min-ncache-ttl-keywords.patch,
+    so we less divert from upstream
+  * d/patches: Refresh patches on top of BIND 9.13.1
+
+ -- Ondřej Surý <ondrej@debian.org>  Thu, 21 Jun 2018 08:10:49 +0000
+
+bind (1:9.12.0+dfsg-1~exp1) experimental; urgency=medium
+
+  * Move to standard master/upstream/pristine-tar branching
+  * Add /etc/default/bind file to bind package
+  * Don't fail the systemd unit if /etc/default/bind doesn't exist
+
+ -- Ondřej Surý <ondrej@debian.org>  Wed, 24 Jan 2018 14:16:43 +0000
+
+bind (1:9.12.0+dfsg-1~exp0) experimental; urgency=medium
+
+  * New upstream version 9.12.0+dfsg
+  * Rename bind9 to just bind, and merge all shared libraries into bind-libs.
+  * Update Vcs-* links to salsa.d.o
+  * Update d/watch and d/gbp.conf for BIND 9.12
+  * Remove export version of the libraries; we really need to deprecate ISC-DHCP in buster+1
+  * d/patches changes:
+   + Convert 02_version.diff to sed rule in d/rules
+   + Remove the extra native-pkcs11 patch that double builds everything; a solution with OpenSSL engines is far more suitable and less intrusive
+   + Remove stdatomic.h patches; already merged upstream into BIND 9.12
+   + Refresh all the other patches for BIND 9.12.0
+   + Fix the min-(n)cache-ttl patch for BIND 9.12
+  * Remove isc-hmac-fixup from bind package
+  * Remove man3 from bind-dev package as they are not installed
+  * Add dnssec-cds to bind-utils package
+  * Update missing and new symbols for BIND 9.12
+
+ -- Ondřej Surý <ondrej@debian.org>  Wed, 24 Jan 2018 09:18:13 +0000
+
+bind9 (1:9.11.2.P1-1) unstable; urgency=medium
+
+  * New upstream version 9.11.2-P1
+  * Refresh patches for new release
+
+ -- Ondřej Surý <ondrej@debian.org>  Wed, 17 Jan 2018 06:06:04 +0000
+
+bind9 (1:9.11.2+dfsg-10) unstable; urgency=medium
+
+  * Disable lmdb usage in export version of libraries (Closes: #887407)
+
+ -- Ondřej Surý <ondrej@debian.org>  Tue, 16 Jan 2018 05:59:31 +0000
+
+bind9 (1:9.11.2+dfsg-9) unstable; urgency=medium
+
+  * Fix various mistakes in bind9 conffiles (Closes: #887398)
+
+ -- Ondřej Surý <ondrej@debian.org>  Mon, 15 Jan 2018 23:12:43 +0000
+
+bind9 (1:9.11.2+dfsg-8) unstable; urgency=medium
+
+  * Pull more stdatomic patch to fix builds on 32-bit architectures
+  * Remove extra native pkcs11 patch (it has been replaced by sed rules)
+
+ -- Ondřej Surý <ondrej@debian.org>  Mon, 15 Jan 2018 21:02:30 +0000
+
+bind9 (1:9.11.2+dfsg-7) unstable; urgency=medium
+
+  * Pull upstream patch to use C11 stdatomic where available (Closes: #778720)
+
+ -- Ondřej Surý <ondrej@debian.org>  Mon, 15 Jan 2018 15:59:48 +0000
+
+bind9 (1:9.11.2+dfsg-6) unstable; urgency=medium
+
+  * Add named-nzd2nzf to bind9 package
+  * Simplify installation rules
+  * Enable lmdb (to actually build named-nzd2nzf)
+  * Move delv from bind9 to dnsutils package (Closes: #887326)
+
+ -- Ondřej Surý <ondrej@debian.org>  Mon, 15 Jan 2018 14:19:31 +0000
+
+bind9 (1:9.11.2+dfsg-5) unstable; urgency=medium
+
+  * Remove duplicate invoke-rc.d start invocation (Closes: #883575)
+  * Don't fail in postrm when /var/lib/bind cannot be removed (Closes: #882999)
+  * Use dh-apparmor for profile management
+  * apparmor-profile: allow changing thread name (Closes: #883228)
+  * Bump debhelper compat level to 10
+  * Bump Standards-Version to 4.1.2, no changes necessary
+
+ -- Bernhard Schmidt <berni@debian.org>  Sun, 10 Dec 2017 20:23:12 +0100
+
+bind9 (1:9.11.2+dfsg-4) unstable; urgency=medium
+
+  * Team upload.
+  * Fix symlinks in libbind-export-dev to point to /lib (Closes: #883536)
+
+ -- Bernhard Schmidt <berni@debian.org>  Tue, 05 Dec 2017 00:09:25 +0100
+
+bind9 (1:9.11.2+dfsg-3) unstable; urgency=medium
+
+  * Team upload.
+  * Only install files into bind9:any on arch-any builds (Closes: #883448)
+  * Adjust dependencies for udeb packages (Closes: #883449)
+
+ -- Bernhard Schmidt <berni@debian.org>  Mon, 04 Dec 2017 10:56:58 +0100
+
+bind9 (1:9.11.2+dfsg-2) unstable; urgency=medium
+
+  * Team upload.
+  * Workaround for FTBFS on binary-any builds (Closes: #883159)
+
+ -- Bernhard Schmidt <berni@debian.org>  Sun, 03 Dec 2017 20:36:32 +0100
+
+bind9 (1:9.11.2+dfsg-1) unstable; urgency=low
+
+  * d/watch: Bump the BIND version to 9.11.x
+  * Remove 'order random_1' patch, it was a horrible deviation from standards
+  * Modernize d/rules using debhelper
+  * New upstream version 9.11.2+dfsg
+  * Delete dyndb patch, as dyndb is now included in upstream sources
+  * Rebase patches for new upstream release.
+  * Add python3-ply to Build-Depends
+  * Restore the native pkcs11 patch
+  * Fix the Debian version parsing
+  * Remove lwresd as it has been deprecated by upstream anyway
+  * Add new tools: mdig to dnsutils and dnssec-keymgr to bind9utils
+  * Update the SONAMEs of BIND libraries
+  * Fix python3 packaging errors
+  * Bump the standards version to 4.1.1.1 (no change)
+  * Add support for dh_missing
+
+ -- Ondřej Surý <ondrej@debian.org>  Tue, 28 Nov 2017 22:59:30 +0000
+
+bind9 (1:9.10.6+dfsg-5) unstable; urgency=medium
+
+  [ Chris Lamb ]
+  * Make the build reproducible (Closes: #828012)
+
+  [ Micah Cowan ]
+  * Try not to be fragile to varying value of LIBS make var. (Closes: #833307)
+
+  [ Ondřej Surý ]
+  * Update the softhsm2.so non-MA path (Closes: #860722)
+  * Enable JSON output in the statistics channel (Closes: #860722)
+  * Merge NMUs' changelogs (Closes: #880077)
+  * Use /dev/urandom to avoid blocking in the server process. (Closes: #854243)
+
+ -- Ondřej Surý <ondrej@debian.org>  Thu, 02 Nov 2017 10:31:01 +0000
+
+bind9 (1:9.10.6+dfsg-4) unstable; urgency=medium
+
+  [ Michael Biebl ]
+  * Improve bind9-resolvconf.service (Closes: #826353)
+
+  [ Ondřej Surý ]
+  * Add insserv.conf.d configuration (Closes: #650538)
+  * Change bind9-resolvconf.server to Type=oneshot + RemainAfterExit=yes (Closes: #832040)
+  * Only add static and development symlinks for *-export.{a,so} libraries (Closes: #857522)
+  * Update Vcs-* fields to standard variants
+  * Rebuild with newer debhelper (Closes: #879542)
+
+ -- Ondřej Surý <ondrej@debian.org>  Mon, 23 Oct 2017 07:02:50 +0000
+
+bind9 (1:9.10.6+dfsg-3) unstable; urgency=medium
+
+  * Make lwresd hard depend on bind9 package (Closes: #879127)
+
+ -- Ondřej Surý <ondrej@debian.org>  Sun, 22 Oct 2017 11:08:20 +0000
+
+bind9 (1:9.10.6+dfsg-2) unstable; urgency=medium
+
+  [ Timo Aaltonen ]
+  * d/copyright: Add Bv9ARM.pdf to Files-Excluded.
+
+  [ Ondřej Surý ]
+  * Replace lwresd with symlink instead of hard copy (Closes: #868538)
+  * Fix the symbols file to compensate for missing bsdcompat symbol on kFreeBSD (Closes: #879017)
+  * Re-enable threading support on kFreeBSD (Closes: #879018)
+  * Drop Multi-Arch: same header from libbind-dev (Closes: #874232)
+  * Remove transitional host package (Closes: #645437, #878228)
+
+ -- Ondřej Surý <ondrej@debian.org>  Thu, 19 Oct 2017 09:35:03 +0000
+
+bind9 (1:9.10.6+dfsg-1) unstable; urgency=medium
+
+  * New upstream version 9.10.6+dfsg
+  * Use OpenSSL 1.1.0 for crypto
+  * Add support for downloading upstream sources using d/watch
+    + Make d/copyright machine readable for Files-Excluded: support
+    + Update Files-Exclude: * to remove obsolete software dropped in
+      contrib/, but not really used
+  * Add initial README.source
+  * Limit the d/watch to 9.10.x (aka stable) for now
+  * Update patches for BIND 9.10.6 release
+  * Update PKCS11 patch
+  * Move under pkg-dns umbrella
+  * Reformat files in debian/ with wrap-and-sort -a for better maintainability
+  * Update the d/export.diff for BIND 9.10.6
+  * Remove FAQ from d/bind9.docs
+  * Bump SONAME versions for BIND libraries
+  * Add symbols files for libraries and enable strict symbol checks
+  * arpaname and named-rrchecker has been moved to /usr/bin
+  * Install required python library into bind9utils to accompany
+    dnssec-checkds and dnssec-coverage
+  * Change Vcs-* to pkg-dns/bind9
+  * Also exclude idnkit from upstream tarball
+  * Finish the debian/copyright update into machine readable format
+  * Enable Multi-Arch on libirs-export189
+  * Cleanup maintainer scripts
+  * Add lintian override for false positive on full-path command
+  * Remove unnecessary complexity when generating ${Description} to d/control
+
+ -- Ondřej Surý <ondrej@debian.org>  Fri, 06 Oct 2017 06:18:21 +0000
+
+bind9 (1:9.10.3.dfsg.P4-12.3+deb9u3) stretch; urgency=medium
+
+  [ Bernhard Schmidt ]
+  * Import upcoming DNSSEC KSK-2017 from 9.10.5
+
+  [ Ondřej Surý ]
+  * Non-maintainer upload.
+
+ -- Ondřej Surý <ondrej@debian.org>  Mon, 28 Aug 2017 09:36:28 +0200
+
+bind9 (1:9.10.3.dfsg.P4-12.3+deb9u2) stretch-security; urgency=high
+
+  * Non-maintainer upload by the Security Team.
+  * debian/patches:
+    - CVE-2017-3142_regression added, fix a regression introduced in with the
+    correction for CVE-2017-3142.
+
+ -- Yves-Alexis Perez <corsac@debian.org>  Sat, 22 Jul 2017 21:24:54 +0200
+
+bind9 (1:9.10.3.dfsg.P4-12.3+deb9u1) stretch-security; urgency=high
+
+  * Non-maintainer upload by the Security Team.
+  * debian/patches:
+    - debian/patches/CVE-2017-3142+CVE-2017-3143 added, fix TSIG bypasses
+      CVE-2017-3142: error in TSIG authentication can permit unauthorized zone
+      transfers. An attacker may be able to circumvent TSIG authentication of
+      AXFR and Notify requests.
+      CVE-2017-3143: error in TSIG authentication can permit unauthorized
+      dynamic updates. An attacker may be able to forge a valid TSIG or SIG(0)
+      signature for a dynamic update.
+
+ -- Yves-Alexis Perez <corsac@debian.org>  Fri, 30 Jun 2017 16:20:29 +0200
+
+bind9 (1:9.10.3.dfsg.P4-12.3) unstable; urgency=high
+
+  * Non-maintainer upload.
+  * Dns64 with "break-dnssec yes;" can result in a assertion failure
+    (CVE-2017-3136) (Closes: #860224)
+  * Some chaining (CNAME or DNAME) responses to upstream queries could trigger
+    assertion failures (CVE-2017-3137) (Closes: #860225)
+  * 'rndc ""' could trigger a assertion failure in named (CVE-2017-3138)
+    (Closes: #860226)
+
+ -- Salvatore Bonaccorso <carnil@debian.org>  Sun, 07 May 2017 15:22:46 +0200
+
+bind9 (1:9.10.3.dfsg.P4-12.2) unstable; urgency=medium
+
+  * Non-maintainer upload.
+  * Replace 32_mips_atomic.diff with a version that uses C11 atomics. Fixes
+    hangs and crashes on MIPS. (Closes: #778720)
+
+ -- James Cowgill <jcowgill@debian.org>  Tue, 18 Apr 2017 16:42:50 +0100
+
+bind9 (1:9.10.3.dfsg.P4-12.1) unstable; urgency=medium
+
+  * Non-maintainer upload.
+  * Use /dev/urandom to avoid blocking in the server process.
+    (closes: #854243)
+
+ -- Bastian Blank <waldi@debian.org>  Fri, 17 Mar 2017 19:07:16 +0100
+
+bind9 (1:9.10.3.dfsg.P4-12) unstable; urgency=high
+
+  * Merge and accept the non-maintainer upload.
+  * Fix regression caused by the fix for CVE-2016-8864 (closes: #855540).
+  * Fix CVE-2017-3135: a malicously crafted query can cause named to crash if
+    both DNS64 and RPZ are being used (closes: #855520).
+
+ -- Michael Gilbert <mgilbert@debian.org>  Sun, 19 Feb 2017 22:39:32 +0000
+
+bind9 (1:9.10.3.dfsg.P4-11.1) unstable; urgency=medium
+
+  * Non-maintainer upload.
+  * Disable GOST to prevent ENGINE_by_id failed (crypto failure) in chroot.
+    Patch by Marc Haber <mh+debian-bugs@zugschlus.de> (Closes: #820974).
+
+ -- Arturo Borrero Gonzalez <arturo@debian.org>  Tue, 07 Feb 2017 10:42:00 +0100
+
+bind9 (1:9.10.3.dfsg.P4-11) unstable; urgency=medium
+
+  * Fix some lintian warnings.
+  * Add lsb-base dependency to lwresd (closes: #848519).
+  * Fix CVE-2016-2775: crash in lwresd due to a long query name
+    (closes: #831796).
+  * Fix CVE-2016-2776: maliciously crafted query can cause named to crash
+    (closes: #839010).
+  * Fix CVE-2016-8864: incorrect handling of a DNAME record can cause
+    named to crash (closes: #842858).
+  * Fix CVE-2016-9131: maliciously crafted response to an ANY query can
+    cause named to crash (closes: #851065).
+  * Fix CVE-2016-9147: query with contradictory DNSSEC information can
+    cause named to crash (closes: #851063).
+  * Fix CVE-2016-9444: maliciously formed DNSSEC Delegation Signer (DS)
+    record can cause named to crash (closes: #851062).
+  * Openssl 1.1 is not yet supported, so build with openssl 1.0 for now
+    (closes: #828082).
+
+  [ LaMont Jones ]
+  * Update VCS fields in control.
+  * -DDIG_SIGCHASE got dropped by the change in hardening.
+
+  [ Stefan Bader ]
+  * Use the defaults file in systemd.
+
+ -- Michael Gilbert <mgilbert@debian.org>  Thu, 19 Jan 2017 04:03:28 +0000
+
+bind9 (1:9.10.3.dfsg.P4-10.1) unstable; urgency=medium
+
+  * Non-maintainer upload.
+  * Add explicit ordering for nss-lookup.target in bind9.service,
+    lwresd.service. Patches by Michael Biebl <biebl@debian.org>.
+    (Closes: #826243, #826245)
+
+ -- Christian Hofstaedtler <zeha@debian.org>  Sat, 02 Jul 2016 14:32:50 +0200
+
+bind9 (1:9.10.3.dfsg.P4-10) unstable; urgency=medium
+
+  * Use python3
+
+ -- LaMont Jones <lamont@debian.org>  Tue, 03 May 2016 17:39:49 -0600
+
+bind9 (1:9.10.3.dfsg.P4-9) unstable; urgency=medium
+
+  * Fix bad patch from when we switched to quilt.  Closes: #820847  LP:
+    #1552801, #1549788, #1553460
+  * freshen patch to remove fuzz.
+
+ -- LaMont Jones <lamont@debian.org>  Tue, 26 Apr 2016 15:17:58 -0600
+
+bind9 (1:9.10.3.dfsg.P4-8) unstable; urgency=medium
+
+  [Timo Aaltonen]
+
+  * Fix bind9-resolvconf.service installation.
+  * Add support for native pkcs11.  LP: #1565392
+
+  [Samuel Thibault]
+
+  * Detect in6_pktinfo on hurd-i386.  Closes: #820404
+
+ -- LaMont Jones <lamont@debian.org>  Wed, 13 Apr 2016 13:19:37 -0600
+
+bind9 (1:9.10.3.dfsg.P4-7) unstable; urgency=medium
+
+  * Fix libisccc-export dependencies.  Closes: #820043
+
+ -- Michael Gilbert <mgilbert@debian.org>  Tue, 05 Apr 2016 02:53:22 +0000
+
+bind9 (1:9.10.3.dfsg.P4-6) unstable; urgency=medium
+
+  * Upload 9.10 to unstable.  Closes: #781739
+  * Add -DNO_VERSION_DATE to CFLAGS.  Closes: #783885
+
+ -- Michael Gilbert <mgilbert@debian.org>  Mon, 04 Apr 2016 00:39:57 +0000
+
+bind9 (1:9.10.3.dfsg.P4-5) experimental; urgency=medium
+
+  * Drop dead code in bind9.preinst.
+  * move from /var/run to /run for policy.
+
+ -- LaMont Jones <lamont@debian.org>  Sat, 19 Mar 2016 19:52:04 -0600
+
+bind9 (1:9.10.3.dfsg.P4-4) experimental; urgency=medium
+
+  * use multiarch path in udebs
+  * Updated root cache file.  Closes: #806954
+
+ -- LaMont Jones <lamont@debian.org>  Fri, 18 Mar 2016 20:50:49 -0600
+
+bind9 (1:9.10.3.dfsg.P4-3) experimental; urgency=medium
+
+  * Fix vcs links
+  * build in debian/tmp, use bind9.install
+
+ -- LaMont Jones <lamont@debian.org>  Fri, 18 Mar 2016 14:46:30 -0600
+
+bind9 (1:9.10.3.dfsg.P4-2) experimental; urgency=medium
+
+  * updated precise_time patch
+  * add RT#s to some patches
+  * Merge ubuntu changes
+  * Fix debian/rules to properly remove files from bind9 that are delivered
+    elsewhere.  LP: #1559090
+
+ -- LaMont Jones <lamont@canonical.com>  Fri, 18 Mar 2016 10:58:07 -0600
+
+bind9 (1:9.10.3.dfsg.P4-1ubuntu2) xenial; urgency=medium
+
+  * Bump debhelper to v9 to use dh-exec.
+  * libbind-export-dev: Fix the libbind.so symlink.
+  * Move static libs to the multiarch libdir again.
+
+ -- Matthias Klose <doko@ubuntu.com>  Fri, 18 Mar 2016 13:30:03 +0100
+
+bind9 (1:9.10.3.dfsg.P4-1ubuntu1) xenial; urgency=medium
+
+  * Fix udeb dependencies.
+
+ -- Matthias Klose <doko@ubuntu.com>  Fri, 18 Mar 2016 12:47:02 +0100
+
+bind9 (1:9.10.3.dfsg.P4-1) experimental; urgency=medium
+
+  [ ISC ]
+  * New upstream: 9.10.3-P3
+    - Specific APL data could trigger a INSIST.  (CVE-2015-8704) [RT #41396]
+    - render_ecs errors were mishandled when printing out a OPT record
+      resulting in a assertion failure.  (CVE-2015-8705) [RT #41397]
+    - Fixed a regression in resolver.c:possibly_mark() which caused
+      known-bogus servers to be queried anyway. [RT #41321]
+  * New upstream: 9.10.3-P4
+    - Malformed control messages can trigger assertions in named and rndc.
+      (CVE-2016-1285) [RT #41666]
+    - Fix resolver assertion failure due to improper DNAME handling when
+      parsing fetch reply messages. (CVE-2016-1286) [RT #41753]
+    - Duplicate EDNS COOKIE options in a response could trigger an
+      assertion failure. (CVE-2016-2088) [RT #41809]
+
+  [LaMont Jones]
+
+  * Do not build -export libs for libbind90 and liblwres.  Relates in part
+    to, and is the last fix to LP: #1551351
+  * update patches for 9.10.3.dfsg.P4.  Drop 50_CVE_2015-8704.diff
+
+  [ Stefan Bader ]
+
+  * Do not modify signal handlers for external apps. LP: #1556175
+
+ -- LaMont Jones <lamont@debian.org>  Thu, 17 Mar 2016 14:53:36 -0600
+
+bind9 (1:9.10.3.dfsg.P2-7) experimental; urgency=medium
+
+  * Fix my bad merge of autoreconf workaround.
+  * Re-implement -export libraries.  LP: #1556175
+  * Deliver libisccc-export library.
+
+ -- LaMont Jones <lamont@debian.org>  Wed, 16 Mar 2016 15:14:48 -0600
+
+bind9 (1:9.10.3.dfsg.P2-5) experimental; urgency=medium
+
+  [Timo Aaltonen]
+
+  * Sync 30_dynamic_db.diff from Fedora.
+  * rules: Backup some files which dh_autoreconf_clean would remove, restore
+    on clean.
+
+  [Jamie Strandboge]
+
+  * apparmor: use @{PROC} instead of /proc, allow read on
+    sys.net.ipv4.ip_local_port_range.  LP: #1552441
+
+  [LaMont Jones]
+
+  * Return nanosecond-precise time for files, so that we more-correctly know
+    when we can skip loading a zonefile.  (Bug introduced 9.9.3b2)
+
+ -- LaMont Jones <lamont@debian.org>  Thu, 03 Mar 2016 18:17:06 -0700
+
+bind9 (1:9.10.3.dfsg.P2-4) experimental; urgency=medium
+
+  [Matthias Klose]
+
+  * Fix .so symlinks.
+  * libbind-dev: Depend on libirs141.
+  * For the udeb's, use a separate build with a reduced feature set, drop the
+    name difference, and do both builds in a separate directory.
+
+  [Filip Pytloun]
+
+  * Add apparmor rules needed by freeipa-server.  Closes: #814314
+
+  [LaMont Jones]
+
+  * Do not deliver libraries (left in /lib) as part of bind9.  LP: #1547052
+  * clean up library path for libirs.
+
+ -- LaMont Jones <lamont@debian.org>  Fri, 19 Feb 2016 14:26:08 -0700
+
+bind9 (1:9.10.3.dfsg.P2-3ubuntu3) xenial; urgency=medium
+
+  * For the udeb's, use a separate build with a reduced feature set.
+  * Don't call the reduced build "export"; it was used by isc-dhcp as well.
+  * Do both builds in a separate builddir.
+
+ -- Matthias Klose <doko@ubuntu.com>  Fri, 19 Feb 2016 15:01:16 +0100
+
+bind9 (1:9.10.3.dfsg.P2-3~ubuntu2) xenial; urgency=medium
+
+  * libbind-dev: Depend on libirs141.
+  * Ship libirs.{a,so} in libbind-dev.
+  * Remove obsolete debian/*.dirs files.
+
+ -- Matthias Klose <doko@ubuntu.com>  Fri, 19 Feb 2016 15:01:16 +0100
+
+bind9 (1:9.10.3.dfsg.P2-3~ubuntu1) xenial; urgency=medium
+
+  * Fix .so symlinks.
+
+ -- Matthias Klose <doko@ubuntu.com>  Thu, 18 Feb 2016 13:55:19 +0100
+
+bind9 (1:9.10.3.dfsg.P2-3) experimental; urgency=medium
+
+  [Marc Deslauriers]
+
+  * SECURITY UPDATE: denial of service via string formatting operations.
+    CVE-2015-8704
+
+  [Matthias Klose]
+
+  * Add multiarch support.  Closes: #802584.
+  * Standards cleanup.
+
+  [LaMont Jones]
+
+  * Properly finish converting to 3.0 (quilt) format.
+  * Drop geoip_acl patch temporarily while we evaluate the upstream geoip
+    changes.
+  * Prechroot init appears to have been taken upstream.
+
+ -- LaMont Jones <lamont@debian.org>  Wed, 17 Feb 2016 10:34:24 -0700
+
+bind9 (1:9.10.3.dfsg.P2-1) experimental; urgency=medium
+
+  * New upstream, no need for export packages with 9.10
+  * Fix sonames
+  * Update how we do hardening.
+  * Add Robie Basak as an uploader
+  * Migrate quilt patches from 9.9.5 branch, and incorporate Michael Gilbert's
+    changes.
+
+ -- LaMont Jones <lamont@debian.org>  Thu, 31 Dec 2015 18:41:31 -0700
+
+bind9 (1:9.9.5.dfsg-12.1) unstable; urgency=high
+
+  * Non-maintainer upload.
+  * Add patch to fix CVE-2015-8000.
+    CVE-2015-8000: Insufficient testing when parsing a message allowed
+    records with an incorrect class to be accepted, triggering a REQUIRE
+    failure when those records were subsequently cached. (Closes: #808081)
+
+ -- Salvatore Bonaccorso <carnil@debian.org>  Wed, 16 Dec 2015 15:01:39 +0100
+
+bind9 (1:9.9.5.dfsg-12) unstable; urgency=high
+
+  * Fix CVE-2015-5722: maliciously crafted DNSSEC key can cause named to crash.
+
+ -- Michael Gilbert <mgilbert@debian.org>  Thu, 03 Sep 2015 01:16:32 +0000
+
+bind9 (1:9.9.5.dfsg-11) unstable; urgency=high
+
+  * Fix CVE-2015-5477: maliciously crafted TKEY query can cause named to exit
+    (closes: #793903).
+
+ -- Michael Gilbert <mgilbert@debian.org>  Wed, 29 Jul 2015 23:46:48 +0000
+
+bind9 (1:9.9.5.dfsg-10) unstable; urgency=high
+
+  * Fix CVE-2015-4620: DNSSEC validation of a malicously crafted zone can
+    cause the resolver to crash (closes: #791715).
+
+ -- Michael Gilbert <mgilbert@debian.org>  Thu, 09 Jul 2015 00:43:38 +0000
+
+bind9 (1:9.9.5.dfsg-9) unstable; urgency=high
+
+  * Fix CVE-2015-1349: named crash due to managed key rollover, primarily only
+    affecting setups using DNSSEC (closes: #778733).
+
+ -- Michael Gilbert <mgilbert@debian.org>  Thu, 19 Feb 2015 03:42:21 +0000
+
+bind9 (1:9.9.5.dfsg-8) unstable; urgency=medium
+
+  * Launch rndc command in the background in networking scripts to avoid a
+    hang in named from bringing down the entire network (closes: #760555).
+
+ -- Michael Gilbert <mgilbert@debian.org>  Thu, 01 Jan 2015 17:51:52 +0000
+
+bind9 (1:9.9.5.dfsg-7) unstable; urgency=medium
+
+  * Fix CVE-2014-8500: limit recursion in order to avoid memory consuption
+    issues that can lead to denial-of-service (closes: #772610).
+
+ -- Michael Gilbert <mgilbert@debian.org>  Sun, 14 Dec 2014 05:05:48 +0000
+
+bind9 (1:9.9.5.dfsg-6) unstable; urgency=medium
+
+  * Include dlz_dlopen.h in libbind-dev (closes: #769117).
+
+ -- Michael Gilbert <mgilbert@debian.org>  Sun, 30 Nov 2014 22:53:50 +0000
+
+bind9 (1:9.9.5.dfsg-6) unstable; urgency=medium
+
+  * Include dlz_dlopen.h in libbind-dev (closes: #769117).
+
+ -- Michael Gilbert <mgilbert@debian.org>  Sun, 30 Nov 2014 22:53:50 +0000
+
+bind9 (1:9.9.5.dfsg-5) unstable; urgency=medium
+
+  * Avoid libnsl dependency on non-linux architectures.  Closes: #766430
+  * Install export libraries to /lib instead of /usr/lib.  Closes: #766544
+  * Add myself to the maintainer team with approval from LaMont and Bdale.
+
+ -- Michael Gilbert <mgilbert@debian.org>  Thu, 30 Oct 2014 02:42:17 +0000
+
+bind9 (1:9.9.5.dfsg-4.3) unstable; urgency=medium
+
+  * Non-maintainer upload.
+  * Mark critical section as not parallel in the makefile.  Closes: #762766
+
+ -- Michael Gilbert <mgilbert@debian.org>  Mon, 13 Oct 2014 04:37:55 +0000
+
+bind9 (1:9.9.5.dfsg-4.2) unstable; urgency=low
+
+  * Non-maintainer upload.
+  * Fix intermittent parallel build failure.  Closes: #762766
+  * Set -fno-delete-null-pointer-checks.  Closes: #750760
+  * Use separate packages for the udebs.  Closes: #762762
+  * Don't install configuration files to /usr.  Closes: #762948
+
+ -- Michael Gilbert <mgilbert@debian.org>  Mon, 06 Oct 2014 01:23:57 +0000
+
+bind9 (1:9.9.5.dfsg-4.1) unstable; urgency=low
+
+  * Non-maintainer upload.
+  * Add support for hurd.  Closes: #746540
+  * Provide shared libraries for isc-dhcp.  Closes: #656150
+
+ -- Michael Gilbert <mgilbert@debian.org>  Sun, 14 Sep 2014 00:58:06 +0000
+
+bind9 (1:9.9.5.dfsg-4) unstable; urgency=low
+
+  [Julien Cristau]
+
+  * FTBFS on kfreebsd.  Closes: #741285
+
+  [LaMont Jones]
+
+  * revert aclocal.m4 expansion from earlier merge
+
+ -- LaMont Jones <lamont@debian.org>  Tue, 29 Apr 2014 14:48:50 -0600
+
+bind9 (1:9.9.5.dfsg-3) unstable; urgency=low
+
+  * Re-enable rrl (now a configure option).  Closes: #741059 LP: #1288823
+
+ -- LaMont Jones <lamont@debian.org>  Mon, 24 Mar 2014 06:55:55 -0600
+
+bind9 (1:9.9.5.dfsg-2) unstable; urgency=low
+
+  * merge in ubuntu 1:9.9.3.dfsg.P2-4ubuntu3
+  * move dnssec-coverage to bind9utils.  Closes: #739994
+  * dnssec-{checkds,verify} manpages in wrong package.  Closes: #739995
+
+ -- LaMont Jones <lamont@debian.org>  Wed, 26 Feb 2014 09:30:31 -0700
+
+bind9 (1:9.9.5.dfsg-1) experimental; urgency=low
+
+  [Internet Software Consortium, Inc]
+
+  * New upstream version: 9.9.5  Closes: #735190
+
+  [Martin Nagy]
+
+  * dynamic loading of database backends. See:
+    http://pkgs.fedoraproject.org/cgit/bind.git/tree/bind-96-dyndb.patch. 
+    Closes: #722669
+
+  [LaMont Jones]
+
+  * fix sonames
+  * merge ubuntu changes
+  * Deliver dns/rrl.h.  Closes: #724844
+  * rules tweak to make backports to pre-dh-systemd releases easier
+
+ -- LaMont Jones <lamont@debian.org>  Tue, 11 Feb 2014 09:16:05 -0700
+
+bind9 (1:9.9.4.dfsg-0.3) experimental; urgency=low
+
+  [Internet Software Consortium, Inc]
+
+  * Upstream version 9.9.4
+
+  [LaMont Jones]
+
+  * fix sonames
+  * merge ubuntu change
+  * Deliver dns/rrl.h.  Closes: #724844
+
+ -- LaMont Jones <lamont@debian.org>  Wed, 06 Nov 2013 13:27:37 -0700
+
+bind9 (1:9.9.3.dfsg.P2-4ubuntu3) trusty; urgency=low
+
+  * SECURITY UPDATE: denial of service when processing NSEC3-signed zone
+    queries
+    - debian/patches/CVE-2014-0591.patch: don't call memcpy with
+      overlapping ranges in bin/named/query.c.
+    - patch backported from 9.9.4-P2.
+    - CVE-2014-0591
+
+ -- Marc Deslauriers <marc.deslauriers@ubuntu.com>  Fri, 10 Jan 2014 09:36:55 -0500
+
+bind9 (1:9.9.3.dfsg.P2-4ubuntu2) trusty; urgency=medium
+
+  * Use dh-autoreconf to update libtool and configure for new ports.
+
+ -- Adam Conrad <adconrad@ubuntu.com>  Wed, 18 Dec 2013 04:42:22 -0700
+
+bind9 (1:9.9.3.dfsg.P2-4ubuntu1) saucy; urgency=low
+
+  * Use dh_autotools-dev to update config.{sub,guess} for new ports.
+
+ -- Adam Conrad <adconrad@ubuntu.com>  Mon, 07 Oct 2013 23:09:45 -0600
+
+bind9 (1:9.9.3.dfsg.P2-4) unstable; urgency=low
+
+  [Peter Marschall]
+
+  * If rndc.conf exists, skip creation of rndc.key.  Closes: #620394
+
+  [Al Tarakanoff]
+
+  * properly quote check of pid in bind9 init.d.  LP: #1092243
+
+  [LaMont Jones]
+
+  * include distro and package version in version string
+  * apparmor: allow GeoIP data file access.  LP: #834901
+  * enable filter-aaaa.  Closes: #701704  LP: #1115168
+
+ -- LaMont Jones <lamont@debian.org>  Thu, 29 Aug 2013 16:22:29 -0600
+
+bind9 (1:9.9.3.dfsg.P2-3) unstable; urgency=low
+
+  [Michael Stapelberg]
+
+  * add systemd service file.  Closes: #718212
+
+  [LaMont Jones]
+
+  * deliver more dnssec-* tools in bind9utils.  Closes: #713026
+  * support parallel=N DEB_BUILD_OPTIONS, fix -j build. Closes: #713025
+  * deliver rrl.h and stat.h Closes: #692483, #720813
+
+ -- LaMont Jones <lamont@debian.org>  Tue, 27 Aug 2013 10:06:37 -0600
+
+bind9 (1:9.9.3.dfsg.P2-2build1) saucy; urgency=low
+
+  [Marc Deslauriers]
+
+  * 9.9.2.dfsg.P1-2ubuntu1: fixed in 9.9.3b1
+  * 9.9.2.dfsg.P1-2ubuntu3: fixed in 9.9.3-P2
+
+  [Robie Basak]
+
+  * 9.9.2.dfsg.P1-2ubuntu2: fixed in 9.9.3b1
+
+  [LaMont Jones]
+
+  * Merge ubuntu changes, except: autoconf files are generated as part
+    of the source packagee creation, not on the build host.  NAK
+  * deliver more dnssec-* tools in bind9utils.  Closes: #713026
+  * support parallel=N DEB_BUILD_OPTIONS, fix -j build
+
+  [Michael Stapelberg]
+
+  * add systemd service file.  Closes: #718212
+
+ -- LaMont Jones <lamont@debian.org>  Thu, 22 Aug 2013 10:57:17 -0600
+
+bind9 (1:9.9.3.dfsg.P2-2) unstable; urgency=low
+
+  * ack NMUs of 9.8.4
+    - upstream 9.9.3-P2 fixes: CVE-2013-4854, CVE-2012-5689,
+      CVE-2013-2266
+    - deliver rrl.h
+
+  [LaMont Jones]
+
+  * Use ISC's bin/tests
+  * Diff cleanup and rationalization to 9.9.3 upstream
+
+ -- LaMont Jones <lamont@debian.org>  Sat, 17 Aug 2013 07:09:54 -0600
+
+bind9 (1:9.9.3.dfsg.P2-1) unstable; urgency=low
+
+
+  [Internet Software Consortium, Inc]
+
+  * 9.9.3-P2
+
+  [Ben Hutchings]
+
+  * Initialise OpenSSL before calling chroot().  Closes: #696661
+
+  [LaMont Jones]
+
+  * soname changes
+
+  [Paul Vixie]
+
+  * Reapply rpz/rrl patches from http://www.redbarn.org/dns/ratelimits
+
+ -- LaMont Jones <lamont@debian.org>  Wed, 14 Aug 2013 10:38:59 -0600
+
+bind9 (1:9.9.2.dfsg.P1-3) experimental; urgency=low
+
+  [LaMont Jones]
+  
+  * Merge 1:9.8.4.dfsg.P1-6
+
+  [Ben Hutchings]
+
+  * Initialise OpenSSL before calling chroot().  Closes: #696661
+
+ -- LaMont Jones <lamont@debian.org>  Mon, 04 Mar 2013 09:30:50 -0700
+
+bind9 (1:9.9.2.dfsg.P1-2ubuntu3) saucy; urgency=low
+
+  * SECURITY UPDATE: denial of service via incorrect bounds checking on
+    private type 'keydata'
+    - lib/dns/rdata/generic/keydata_65533.c: check for correct length.
+    - Patch backported from 9.9.3-P2
+    - CVE-2013-4854
+
+ -- Marc Deslauriers <marc.deslauriers@ubuntu.com>  Sun, 28 Jul 2013 10:13:06 -0400
+
+bind9 (1:9.9.2.dfsg.P1-2ubuntu2) raring; urgency=low
+
+  * configure.in: detect libxml 2.9 as well as 2.[678] (LP: #1164475). 
+  * debian/control: add Build-Depends on dh-autoreconf.
+  * debian/rules: use dh_autoreconf and dh_autoreconf_clean.
+
+ -- Robie Basak <robie.basak@canonical.com>  Wed, 10 Apr 2013 16:50:28 +0000
+
+bind9 (1:9.9.2.dfsg.P1-2ubuntu1) raring; urgency=low
+
+  * SECURITY UPDATE: denial of service via regex syntax checking
+    - configure,configure.in,config.h.in: remove check for regex.h to
+      disable regex syntax checking.
+    - CVE-2013-2266
+
+ -- Marc Deslauriers <marc.deslauriers@ubuntu.com>  Thu, 28 Mar 2013 15:04:57 -0400
+
+bind9 (1:9.9.2.dfsg.P1-2) experimental; urgency=low
+
+  [Michael Gilbert]
+
+  * Use /var/lib/bind for state file.  Closes: #689332
+
+  [LaMont Jones]
+
+  * zone transfers now involve link(), update the apparmor profile
+  * Update db.root with new IP for D.root-servers.net.  Closes: #697352
+  * re-drop dlzexternal test
+  * Reduce log level for "sucessfully validated after lower casing" dnssec
+    based on mail from Mark Andrews.  Closes: #697681
+  * remove /var/lib/bind/bind9-default.md5sum in postrm
+  * remove /etc/bind/named.conf.options on purge.  Closes: #668801
+
+  [Sebastian Wiesinger]
+
+  * Build and deliver dnssec-checkds and dnssec-verify in bind9utils
+
+ -- LaMont Jones <lamont@debian.org>  Wed, 09 Jan 2013 10:09:40 -0700
+
+bind9 (1:9.8.4.dfsg.P1-6+nmu3) unstable; urgency=high
+
+  * Non-maintainer upload by the Security Team.
+  * CVE-2013-4854: A specially crafted query that includes malformed rdata can
+    cause named to terminate with an assertion failure while rejecting the
+    malformed query. (Closes: #717936).
+
+ -- Salvatore Bonaccorso <carnil@debian.org>  Sat, 27 Jul 2013 10:24:07 +0200
+
+bind9 (1:9.8.4.dfsg.P1-6+nmu2) unstable; urgency=medium
+
+  * Non-maintainer upload.
+  * Install /usr/include/dns/rrl.h (closes: #699834).
+
+ -- Michael Gilbert <mgilbert@debian.org>  Tue, 16 Apr 2013 01:59:05 +0000
+
+bind9 (1:9.8.4.dfsg.P1-6+nmu1) unstable; urgency=high
+
+  * Non-maintainer upload by the Security Team.
+  * Fix cve-2012-5689: issue in nameservers using DNS64 to perform a AAAA
+    lookup for a record with an A record overwrite rule in a Response Policy
+    Zone (closes: #699145).
+  * Fix cve-2013-2266: issues in regular expression handling (closes: #704174).
+
+ -- Michael Gilbert <mgilbert@debian.org>  Fri, 29 Mar 2013 00:47:25 +0000
+
+bind9 (1:9.8.4.dfsg.P1-6) unstable; urgency=low
+
+  [Ben Hutchings]
+
+  * Initialise OpenSSL before calling chroot().  Closes: #696661
+
+ -- LaMont Jones <lamont@debian.org>  Fri, 01 Mar 2013 08:23:27 -0700
+
+bind9 (1:9.8.4.dfsg.P1-5) unstable; urgency=low
+
+  [LaMont Jones]
+
+  * Properly acknowledge 1:9.8.1.dfsg.P1-4.4: [Philipp Kern]
+    - Fix CVE-2012-4244. Thanks to Moritz Mühlenhoff for providing the patch.
+
+  [Paul Vixie]
+
+  * Include rpz/rrl patches from http://www.redbarn.org/dns/ratelimits. 
+    Closes: #698641
+
+ -- LaMont Jones <lamont@debian.org>  Wed, 30 Jan 2013 14:04:35 -0700
+
+bind9 (1:9.8.4.dfsg.P1-4) unstable; urgency=high
+
+  * The rest of the dnssec validation logspam removal.  Closes: #697681
+
+ -- LaMont Jones <lamont@debian.org>  Mon, 21 Jan 2013 13:18:53 -0700
+
+bind9 (1:9.8.4.dfsg.P1-3) unstable; urgency=low
+
+  [Marc Deslauriers]
+
+  * debian/bind9.apport: Add AppArmor info and logs to apport hook.
+
+  [LaMont Jones]
+
+  * Reduce log level for "sucessfully validated after lower casing" dnssec
+    based on mail from Mark Andrews.  Closes: #697681
+  * remove /var/lib/bind/bind9-default.md5sum in postrm
+  * remove /etc/bind/named.conf.options on purge.  Closes: #668801
+
+ -- LaMont Jones <lamont@debian.org>  Wed, 09 Jan 2013 09:47:24 -0700
+
+bind9 (1:9.9.2.dfsg.P1-1) experimental; urgency=low
+
+  * Named could die on specific queries with dns64 enabled.
+    [Addressed in change #3388 for BIND 9.8.5 and 9.9.3.]
+    CVE-2012-5688  Closes: #695192
+
+ -- LaMont Jones <lamont@debian.org>  Wed, 05 Dec 2012 05:27:18 -0700
+
+bind9 (1:9.8.4.dfsg.P1-2) unstable; urgency=low
+
+  [Michael Gilbert]
+
+  * Use /var/lib/bind for state file.  Closes: #689332
+
+  [LaMont Jones]
+
+  * Re-enable dlopen, do not build the test that fails.  Closes: #692416
+  * Update db.root with new IP for D.root-servers.net.  Closes: #697352
+
+ -- LaMont Jones <lamont@debian.org>  Mon, 07 Jan 2013 06:50:25 -0700
+
+bind9 (1:9.8.4.dfsg.P1-1) unstable; urgency=low
+
+  * Named could die on specific queries with dns64 enabled.
+    [Addressed in change #3388 for BIND 9.8.5 and 9.9.3.]
+    CVE-2012-5688  Closes: #695192
+
+ -- LaMont Jones <lamont@debian.org>  Wed, 05 Dec 2012 05:22:06 -0700
+
+bind9 (1:9.9.2.dfsg-1) experimental; urgency=low
+
+  [Matthew Grant]
+
+  * Turn off dlopen as it was causing test compile failures.
+  * Add missing library .postrm files for debhelper
+
+  [LaMont Jones]
+
+  * New upstream version 9.9.2
+  * soname fixes
+
+ -- LaMont Jones <lamont@debian.org>  Thu, 01 Nov 2012 08:59:57 -0600
+
+bind9 (1:9.9.1.dfsg.P1-1) unstable; urgency=low
+
+  [LaMont Jones]
+
+  * New upstream 9.9.1-P1
+
+ -- LaMont Jones <lamont@debian.org>  Wed, 13 Jun 2012 08:22:15 -0600
+
+bind9 (1:9.9.0.dfsg-1) unstable; urgency=low
+
+  [Internet Software Consortium, Inc]
+
+  * 9.9.0 release
+
+  [Christoph Egger]
+
+  * define _GNU_SOURCE on kfreebsd et al.  Closes: #658201
+
+  [LaMont Jones]
+
+  * chmod typo in postinst.  LP: #980798
+  * Correctly order debhelper bits in postrm.  Closes: #661040
+
+ -- LaMont Jones <lamont@debian.org>  Mon, 23 Apr 2012 09:52:51 -0600
+
+bind9 (1:9.9.0.dfsg~rc4-1) unstable; urgency=low
+
+  [Internet Software Consortium, Inc]
+
+  * New upstream release
+
+  [LaMont Jones]
+
+  * soname changes for new release
+
+ -- LaMont Jones <lamont@debian.org>  Fri, 17 Feb 2012 17:51:39 -0700
+
+bind9 (1:9.8.4.dfsg-1ubuntu2) raring; urgency=low
+
+  * SECURITY UPDATE: denial of service via DNS64 and crafted query
+    - bin/named/query.c: init rdataset before cleanup.
+    - Patch backported from 9.8.4-P1
+    - CVE-2012-5688
+
+ -- Marc Deslauriers <marc.deslauriers@ubuntu.com>  Wed, 05 Dec 2012 15:42:08 -0500
+
+bind9 (1:9.8.4.dfsg-1ubuntu1) raring; urgency=low
+
+  * Merge from Debian unstable. Remaining changes:
+    - debian/bind9.apport: Add AppArmor info and logs to apport hook.
+
+ -- Marc Deslauriers <marc.deslauriers@ubuntu.com>  Fri, 23 Nov 2012 08:13:50 -0500
+
+bind9 (1:9.8.4.dfsg-1) unstable; urgency=low
+
+  [Matthew Grant]
+
+  * Turn off dlopen as it was causing test compile failures.
+  * Add missing library .postrm files for debhelper
+
+  [LaMont Jones]
+
+  * New upstream version
+  * soname fixup
+  * Ack NMUs
+
+ -- LaMont Jones <lamont@debian.org>  Mon, 29 Oct 2012 08:37:49 -0600
+
+bind9 (1:9.8.1.dfsg.P1-4.4) testing-proposed-updates; urgency=low
+
+  * Non-maintainer upload.
+  * Fix CVE-2012-4244. Thanks to Moritz Mühlenhoff for providing
+    the patch.
+
+ -- Philipp Kern <pkern@debian.org>  Sat, 03 Nov 2012 20:43:43 +0100
+
+bind9 (1:9.8.1.dfsg.P1-4.3) unstable; urgency=medium
+
+  [ Philipp Kern ]
+  * Non-maintainer upload.
+
+  [ Marc Deslauriers ]
+  * SECURITY UPDATE: denial of service via specific combinations of RDATA
+    - bin/named/query.c: fix logic
+    - Patch backported from 9.8.3-P4
+    - CVE-2012-5166
+
+ -- Philipp Kern <pkern@debian.org>  Sun, 28 Oct 2012 20:28:11 +0100
+
+bind9 (1:9.8.1.dfsg.P1-4.2) unstable; urgency=high
+
+  * Non-maintainer upload by the Security Team.
+  * Fix denial of service vulnerability triggered
+    through an assert because of using bad cache
+    (CVE-2012-3817; Closes: #683259).
+
+ -- Nico Golde <nion@debian.org>  Mon, 30 Jul 2012 20:56:10 +0200
+
+bind9 (1:9.8.1.dfsg.P1-4.1) unstable; urgency=high
+
+  * Non-maintainer upload by the Security Team.
+  * SECURITY UPDATE: ghost domain names attack
+    - lib/dns/rbtdb.c: Restrict the TTL of NS RRset to no more than that
+      of the old NS RRset when replacing it.
+    - Patch backported from 9.8.2.
+    - CVE-2012-1033
+  * SECURITY UPDATE: denial of service via zero length rdata handling
+    - lib/dns/rdata.c,lib/dns/rdataslab.c: use sentinel pointer for
+      duplicate rdata.
+    - Patch backported from 9.8.3-P1.
+    - CVE-2012-1667
+
+ -- Luk Claes <luk@debian.org>  Wed, 20 Jun 2012 15:26:09 -0400
+
+bind9 (1:9.8.1.dfsg.P1-4) unstable; urgency=low
+
+  [Christoph Egger]
+
+  * define _GNU_SOURCE on kfreebsd et al.  Closes: #658201
+
+  [LaMont Jones]
+
+  * chmod typo in postinst.  LP: #980798
+  * Correctly order debhelper bits in postrm.  Closes: #661040
+
+ -- LaMont Jones <lamont@debian.org>  Fri, 13 Apr 2012 12:09:24 -0600
+
+bind9 (1:9.8.1.dfsg.P1-3) unstable; urgency=low
+
+  [Zlatan Todoric]
+
+  * fixed Serbian latin translation of debconf template.  Closes: #634951
+
+  [Peter Eisentraut]
+
+  * Add support for "status" action to lwresd init script.  Closes: #651540
+
+  [Bjørn Steensrud]
+
+  * NB Translations.  Closes: #654454
+
+  [LaMont Jones]
+
+  * Default to run_resolvconf=false.  LP: #933723
+  * Deliver named.conf.options on fresh install.  Closes: #657042  LP: #920202
+  * Do not deliver /usr/share/bind9/bind9-default.md5sum in the bind9 deb. 
+    Closes: #620007  LP: #681536
+  * Deliver and use /etc/apparmor.d/local/usr.sbin.named for local overrides.
+    LP: #929563
+
+ -- LaMont Jones <lamont@debian.org>  Fri, 17 Feb 2012 14:40:29 -0800
+
+bind9 (1:9.8.1.dfsg.P1-2) unstable; urgency=low
+
+  * Deliver named.conf.options on fresh install.  Closes: #657042  LP: #920202
+
+ -- LaMont Jones <lamont@debian.org>  Wed, 25 Jan 2012 03:55:21 -0700
+
+bind9 (1:9.8.1.dfsg.P1-1) unstable; urgency=low
+
+  [Internet Software Consortium, Inc]
+
+  * 9.8.1-P1
+    -  Cache lookup could return RRSIG data associated with nonexistent
+       records, leading to an assertion failure.
+
+  [LaMont Jones]
+
+  * add a readme entry for DNSSEC-by-default
+  * Failed to install due to chgrp on non-existant directory.  Closes: #647598
+  * ack NMU: l10n issues
+
+ -- LaMont Jones <lamont@debian.org>  Wed, 18 Jan 2012 10:44:14 -0700
+
+bind9 (1:9.8.1.dfsg-1.1) unstable; urgency=low
+
+  * Non-maintainer upload.
+  * Fix pending l10n issues. Debconf translations:
+    - Danish (Joe Hansen).  Closes: #619302
+    - Korean (강민지).  Closes: #632006, #632016
+    - Serbian (FULL NAME).  Closes: #634886
+
+ -- Christian Perrier <bubulle@debian.org>  Sat, 03 Dec 2011 17:22:12 +0100
+
+bind9 (1:9.8.1.dfsg-1) unstable; urgency=low
+
+  [Internet Software Consortium, Inc]
+
+  * New upstream release
+
+  [LaMont Jones]
+
+  * cleanup the messages around killing named
+  * enable dnssec validation: deliver named.conf.options outside of
+    conffiledom, and update if able, complain and do not update if not
+    Closes: #516979
+  * typo in min-ncache-ttl processing
+  * disable dlz until we get a patch to make it build again
+
+  [Jay Ford]
+
+  * Fix "waiting for pid $pid to die" loop to not be infinite.  Closes: #570852
+
+ -- LaMont Jones <lamont@debian.org>  Tue, 01 Nov 2011 16:39:19 -0600
+
+bind9 (1:9.8.0.dfsg.P1-0) unstable; urgency=low
+
+  [Internet Software Consortium, Inc]
+
+  * 9.8.0-P1
+
+  [LaMont Jones]
+
+  * soname changes
+
+ -- LaMont Jones <lamont@debian.org>  Fri, 13 May 2011 03:46:22 -0600
+
+bind9 (1:9.7.4.dfsg-0) unstable; urgency=low
+
+  * New upstream
+
+ -- LaMont Jones <lamont@debian.org>  Sun, 21 Aug 2011 04:43:16 -0600
+
+bind9 (1:9.7.3.dfsg-1ubuntu4) oneiric; urgency=low
+
+  * debian/apparmor-profile: Allow /var/run and /run. (LP: #810270)
+
+ -- Martin Pitt <martin.pitt@ubuntu.com>  Thu, 14 Jul 2011 15:15:45 +0200
+
+bind9 (1:9.7.3.dfsg-1ubuntu3) oneiric; urgency=low
+
+  * SECURITY UPDATE: denial of service via specially crafted packet
+    - lib/dns/include/dns/rdataset.h, lib/dns/{masterdump,message,ncache,
+      nsec3,rbtdb,rdataset,resolver,validator}.c: Use an rdataset attribute
+      flag to indicate negative-cache records rather than using rrtype 0.
+    - Patch backported from 9.7.3-P3.
+    - CVE-2011-2464
+
+ -- Marc Deslauriers <marc.deslauriers@ubuntu.com>  Tue, 05 Jul 2011 08:33:30 -0400
+
+bind9 (1:9.7.3.dfsg-1ubuntu2.1) natty-security; urgency=low
+
+  * SECURITY UPDATE: denial of service via off-by-one
+    - lib/dns/ncache.c: correctly validate length.
+    - Patch backported from 9.7.3-P1.
+    - CVE-2011-1910
+
+ -- Marc Deslauriers <marc.deslauriers@ubuntu.com>  Fri, 27 May 2011 12:50:40 -0400
+
+bind9 (1:9.7.3.dfsg-1ubuntu2) natty; urgency=low
+
+  * debian/rules, configure, contrib/dlz/config.dlz.in: use
+    DEB_HOST_MULTIARCH so we can find multiarch libraries and fix FTBFS.
+    (LP: #745642)
+
+ -- Marc Deslauriers <marc.deslauriers@ubuntu.com>  Wed, 30 Mar 2011 10:19:37 -0400
+
+bind9 (1:9.7.3.dfsg-1ubuntu1) natty; urgency=low
+
+  * debian/bind9-default.md5sum:
+    - updated to reflect the default md5sum in maverick and natty, this
+      avoids a bogus /etc/default/bind9.dpkg-dist file
+      (LP: #556332)
+
+ -- Michael Vogt <michael.vogt@ubuntu.com>  Tue, 29 Mar 2011 10:13:11 +0200
+
+bind9 (1:9.7.3.dfsg-1) unstable; urgency=low
+
+  [Peter Palfrader]
+
+  * Add db-4.6 to bdb_libnames in dlz/config.dlz.in so that it finds the right
+    db.
+
+  [Internet Systems Consortium, Inc]
+
+  * 9.7.3 - Closes: #612287
+
+  [Mahyuddin Susanto]
+
+  * Updated Indonesian debconf templates.  Closes: #608559
+
+  [LaMont Jones]
+
+  * soname changes
+
+ -- LaMont Jones <lamont@debian.org>  Wed, 23 Feb 2011 09:14:36 -0700
+
+bind9 (1:9.7.3.dfsg~rc1-1) unstable; urgency=low
+
+  [Internet Software Consortium, Inc]
+
+  * New upstream
+
+  [Peter Palfrader]
+
+  * Add db-4.6 to bdb_libnames in dlz/config.dlz.in so that it finds the right
+    db.
+
+  [Mahyuddin Susanto]
+
+  * Updated Indonesian debconf templates.  Closes: #608559
+
+  [LaMont Jones]
+
+  * soname changes for new upstream
+
+ -- LaMont Jones <lamont@debian.org>  Fri, 04 Feb 2011 21:20:05 -0700
+
+bind9 (1:9.7.2.dfsg.P3-1) unstable; urgency=high
+
+  [ISC]
+  * Fix denial of service via ncache entry and a rrsig for the
+    same type (CVE-2010-3613)
+  * answers were incorrectly marked as insecure during key algorithm
+    rollover (CVE-2010-3614)
+  * Using "allow-query" in the "options" or "view" statements to
+    restrict access to authoritative zones had no effect.
+    (CVE-2010-3615)
+
+  [LaMont Jones]
+
+  * Adjust indentation for dpkg change.  Closes: #597171
+
+ -- LaMont Jones <lamont@debian.org>  Wed, 01 Dec 2010 16:32:48 -0700
+
+bind9 (1:9.7.2.dfsg.P2-3) unstable; urgency=low
+
+  [LaMont Jones]
+
+  * Adjust indentation for dpkg change.  Closes: #597171
+  * acknowledge and incorporate ubuntu change.
+
+ -- LaMont Jones <lamont@debian.org>  Fri, 26 Nov 2010 05:18:43 -0700
+
+bind9 (1:9.7.2.dfsg.P2-2ubuntu1) natty; urgency=low
+
+  [ Andres Rodriguez ]
+  * Add apport hook (LP: #533601):
+    - debian/bind9.apport: Added.
+
+  [ Martin Pitt ]
+  * debian/rules: Install Apport hook when building on Ubuntu.
+
+ -- Martin Pitt <martin.pitt@ubuntu.com>  Fri, 26 Nov 2010 10:50:17 +0100
+
+bind9 (1:9.7.2.dfsg.P2-2) unstable; urgency=low
+
+  [Roy Jamison]
+
+  * lib/isc/unix/resource.c was missing inttypes.h include.  LP: #674199
+
+ -- LaMont Jones <lamont@debian.org>  Fri, 12 Nov 2010 10:52:32 -0700
+
+bind9 (1:9.7.2.dfsg.P2-1) unstable; urgency=low
+
+  [Joe Dalton]
+
+  * Add Danish translation of debconf templates.  Closes: #599431
+
+  [Internet Software Consortium, Inc]
+
+  * v9.7.2-P2
+
+  [José Figueiredo]
+
+  * Add Brazilian Portuguese debconf templates translation.  Closes: #597616
+
+  [LaMont Jones]
+
+  * drop this v3 (quilt) source format idea.  Closes: #589916
+
+ -- LaMont Jones <lamont@debian.org>  Sun, 10 Oct 2010 19:01:57 -0600
+
+bind9 (1:9.7.1.dfsg.P2-2) unstable; urgency=low
+
+  * Correct conflicts for bind9-host
+
+ -- LaMont Jones <lamont@debian.org>  Fri, 16 Jul 2010 05:24:38 -0600
+
+bind9 (1:9.7.1.dfsg.P2-1) unstable; urgency=low
+
+  [Internet Software Consortium, Inc]
+
+  * Temporarily and partially disable change 2864 because it would cause
+    inifinite attempts of RRSIG queries.  This is an urgent care fix; we'll
+    revisit the issue and complete the fix later.  [RT #21710]
+  * Temporarially rollback change 2748. [RT #21594]
+  * Named failed to accept uncachable negative responses from insecure zones.
+    [RT# 21555]
+
+  [LaMont Jones]
+
+  * freshen copyright file
+
+ -- LaMont Jones <lamont@debian.org>  Thu, 15 Jul 2010 15:07:54 -0600
+
+bind9 (1:9.7.1.dfsg.0-1) unstable; urgency=low
+
+  * Repack to drop zkt/doc/{draft,rfc}*  Closes: #588055
+
+ -- LaMont Jones <lamont@debian.org>  Mon, 05 Jul 2010 07:21:34 -0600
+
+bind9 (1:9.7.1.dfsg-2) unstable; urgency=low
+
+  [Regid Ichira]
+
+  * explicitly add nsupdate to dynamic updates in README.Debian. 
+    Closes: #577398
+
+  [LaMont Jones]
+
+  * Cleanup bind9-host description.  Closes: #579421
+  * switch to 3.0 (quilt) source format, but not to quilt.  Closes: #578210
+
+  [Stephen Gran]
+
+  * updated geoip patch for ipv6, based on work by John 'Warthog9' Hawley
+    <warthog9@eaglescrag.net>.  Closes: #584603
+
+ -- LaMont Jones <lamont@debian.org>  Fri, 02 Jul 2010 08:19:29 -0600
+
+bind9 (1:9.7.1.dfsg-1) unstable; urgency=low
+
+  [Internet Software Consortium, Inc]
+
+  * 9.7.1
+
+  [LaMont Jones]
+
+  * Add freebsd support.  Closes: #578447
+  * soname changes
+  * freshen root cache.  LP: #596363
+
+ -- LaMont Jones <lamont@debian.org>  Mon, 21 Jun 2010 09:53:30 -0600
+
+bind9 (1:9.7.0.dfsg.P1-1) unstable; urgency=low
+
+  [Internet Software Consortium, Inc]
+
+  * 9.7.0-P1
+    - 2852. [bug] Handle broken DNSSEC trust chains better. [RT #15619]
+
+ -- LaMont Jones <lamont@debian.org>  Wed, 17 Mar 2010 08:06:42 -0600
+
+bind9 (1:9.7.0.dfsg.1-1) unstable; urgency=low
+
+  [Niko Tyni]
+
+  * fix mips/mipsel startup.  Closes: #516616
+
+  [LaMont Jones]
+
+  * ignore failures due to a lack of /etc/bind/named.conf*.  LP: #422968
+  * ldap API changed regarding % sign.  LP: #227344
+  * Drop more rfc and draft files.  Closes: #572606
+  * update config.guess, config.sub.  Closes: #572528
+
+ -- LaMont Jones <lamont@debian.org>  Fri, 12 Mar 2010 14:56:08 -0700
+
+bind9 (1:9.7.0.dfsg-2) unstable; urgency=low
+
+  [Aurelien Jarno]
+
+  * kfreebsd has linux threads.  Closes: #470500
+
+  [LaMont Jones]
+
+  * do not error out on initial install.  Closes: #572443
+
+ -- LaMont Jones <lamont@debian.org>  Thu, 04 Mar 2010 09:32:13 -0700
+
+bind9 (1:9.7.0.dfsg-1) unstable; urgency=low
+
+  * New upstream release
+
+ -- LaMont Jones <lamont@debian.org>  Wed, 17 Feb 2010 14:53:36 -0700
+
+bind9 (1:9.7.0.dfsg~rc2-1) experimental; urgency=low
+
+  * New upstream release
+
+ -- LaMont Jones <lamont@debian.org>  Thu, 28 Jan 2010 05:46:50 -0700
+
+bind9 (1:9.7.0.dfsg~b3-2) experimental; urgency=low
+
+  * merge changes from 9.6.1.dfsg.P2-1
+  * meta: drop verisoned depends from library packages, for less upgrade pain
+  * apparmor: allow named to create /var/run/named/session.key
+
+ -- LaMont Jones <lamont@debian.org>  Sun, 06 Dec 2009 11:46:17 -0700
+
+bind9 (1:9.7.0.dfsg~b3-1) experimental; urgency=low
+
+  [Internet Software Consortium, Inc]
+
+  * 9.7.0b3
+
+  [LaMont Jones]
+
+  * Merge remote branch 'origin/master'
+  * soname changes
+
+ -- LaMont Jones <lamont@debian.org>  Mon, 30 Nov 2009 21:07:58 -0700
+
+bind9 (1:9.6.1.dfsg.P2-1) unstable; urgency=low
+
+  [Internet Software Consortium, Inc]
+
+  * 9.6.1-P2
+    - When validating, track whether pending data was from the
+      additional section or not and only return it if validates
+      as secure. [RT #20438] CVE-2009-4022
+
+  [LaMont Jones]
+
+  * prerm: do not stop named on upgrade.  Closes: #542888
+  * Drop some RFCs that crept into the diff.
+  * meta: add ${misc:Depends}
+  * lintian: update config.guess, config.sub in idnkit-1.0 tree
+  * dnsutils: remove pre-sarge dpkg-divert calls in postinst
+  * meta: soname changes
+  * l10n: missing newline in pofile.
+
+ -- LaMont Jones <lamont@debian.org>  Fri, 27 Nov 2009 10:07:10 -0700
+
+bind9 (1:9.7.0.dfsg~b2-2) experimental; urgency=low
+
+  * dnsutils: remove pre-sarge dpkg-divert calls in postinst
+
+ -- LaMont Jones <lamont@debian.org>  Tue, 17 Nov 2009 22:42:40 -0600
+
+bind9 (1:9.7.0.dfsg~b2-1) experimental; urgency=low
+
+  [Internet Software Consortium, Inc]
+
+  * 9.7.0b2
+
+  [LaMont Jones]
+
+  * /etc/bind/bind.keys need not be executable.
+  * bind9: drop old stale code from postinst
+  * prerm: do not stop named on upgrade.  Closes: #542888
+  * Drop some RFCs that crept into the diff.
+  * meta: add ${misc:Depends}
+  * lintian: update config.guess, config.sub in idnkit-1.0 tree
+  * l10n: missing newline in pofile.
+
+ -- LaMont Jones <lamont@debian.org>  Mon, 16 Nov 2009 18:53:24 -0700
+
+bind9 (1:9.7.0~a1.dfsg-0) experimental; urgency=low
+
+  [Internet Software Consortium, Inc]
+
+  * 9.7.0a1
+
+ -- LaMont Jones <lamont@debian.org>  Wed, 24 Jun 2009 15:10:08 -0600
+
+bind9 (1:9.6.1.dfsg.P1-3) unstable; urgency=low
+
+  * Build-Depend on the fixed libgeoip-dev.  Closes: #540973
+
+ -- LaMont Jones <lamont@debian.org>  Mon, 17 Aug 2009 06:53:11 -0600
+
+bind9 (1:9.6.1.dfsg.P1-2) unstable; urgency=low
+
+  [Jamie Strandboge]
+
+  * reload individual named profile, not all of apparmor.  LP: #412751
+
+  [Guillaume Delacour]
+
+  * bind9 did not purge cleanly.  Closes: #497959
+
+  [LaMont Jones]
+
+  * postinst: do not append a blank line to /etc/default/bind9. 
+    Closes: #541469
+  * init.d stop needs to not error out.  LP: #398033
+  * meta: fix build-depends.  Closes: #539230
+
+ -- LaMont Jones <lamont@debian.org>  Fri, 14 Aug 2009 17:03:31 -0600
+
+bind9 (1:9.6.1.dfsg.P1-1) unstable; urgency=low
+
+  [Internet Software Consortium, Inc]
+
+  * A specially crafted update packet will cause named to exit. 
+    CVE-2009-0696, CERT VU#725188.  Closes: #538975
+
+  [InterNIC]
+
+  * Update db.root hints file.
+
+  [LaMont Jones]
+
+  * Move default zone definitions from named.conf to named.conf.default-zones.
+     Closes: #492308
+  * use start-stop-daemon if rndc stop fails.  Closes: #536487
+  * lwresd: pidfile name was wrong in init script.  Closes: #527137
+
+ -- LaMont Jones <lamont@debian.org>  Tue, 28 Jul 2009 22:03:14 -0600
+
+bind9 (1:9.6.1.dfsg-2) unstable; urgency=low
+
+  * ia64: fix atomic.h
+
+ -- LaMont Jones <lamont@debian.org>  Tue, 23 Jun 2009 01:56:35 -0600
+
+bind9 (1:9.6.1.dfsg-1) unstable; urgency=low
+
+  [Internet Software Consortium, Inc]
+
+  * 9.6.1
+
+ -- LaMont Jones <lamont@debian.org>  Mon, 22 Jun 2009 14:33:20 -0600
+
+bind9 (1:9.6.0.dfsg.P1-3) unstable; urgency=low
+
+  [Martin Zobel-Helas]
+
+  * GEO-IP Patch from
+    git://git.kernel.org/pub/scm/network/bind/bind-geodns.git.  Closes: #395191
+
+  [LaMont Jones]
+
+  * Remove /var/lib/bind on purge.  Closes: #527613
+  * Build-Depend: libdb-dev (>4.6).  Closes: #527877, #528772
+  * init.d: detect rndc errors better.  LP: #380962
+  * init.d: clean up exit status.  Closes: #523454
+  * Enable pkcs11 support, and then Revert - causes assertion failures
+    c.f.: #516552
+
+ -- LaMont Jones <lamont@debian.org>  Mon, 22 Jun 2009 13:58:32 -0600
+
+bind9 (1:9.6.0.dfsg.P1-2) unstable; urgency=low
+
+  * random_1 broke memory usage assertions.
+
+ -- LaMont Jones <lamont@debian.org>  Thu, 23 Apr 2009 05:15:45 -0600
+
+bind9 (1:9.6.0.dfsg.P1-1) experimental; urgency=low
+
+  [Michael Milligan]
+
+  * Add min-cache-ttl and min-ncache-ttl keywords
+
+  [LaMont Jones]
+  
+  * Fix merge errors from 9.6.0.dfsg.P1-0
+
+ -- LaMont Jones <lamont@debian.org>  Fri, 20 Mar 2009 15:50:50 -0600
+
+bind9 (1:9.6.0.dfsg.P1-0) experimental; urgency=low
+
+  [Internet Software Consortium, Inc]
+
+  * 9.6.0-P1
+
+  [LaMont Jones]
+
+  * meta: fix override disparity
+  * meta: soname package fixups for 9.6.0
+  * meta: update Standards-Version: 3.7.3.0
+  * upstream now uses a bind subdir.  Closes: #212659
+
+  [Sven Joachim]
+
+  * meta: pass host and build into configure for hybrid build machines. 
+    Closes: #515110
+
+ -- LaMont Jones <lamont@debian.org>  Fri, 20 Mar 2009 11:54:55 -0600
+
+bind9 (1:9.5.1.dfsg.P1-3) unstable; urgency=low
+
+  * package -2 for unstable
+
+ -- LaMont Jones <lamont@debian.org>  Wed, 18 Mar 2009 09:40:18 -0600
+
+bind9 (1:9.5.1.dfsg.P1-2) stable; urgency=low
+
+  [Juhana Helovuo]
+
+  * fix atomic operations on alpha.  Closes: #512285
+
+  [Dann Frazier]
+
+  * fix atomic operations on ia64.  Closes: #520179
+
+  [LaMont Jones]
+
+  * build-conflict: libdb4.2-dev.  Closes: #515074, #507013
+
+  [localization folks]
+
+  * l10n: Basque debconf template.  Closes: #516549 (Piarres Beobide)
+
+ -- LaMont Jones <lamont@debian.org>  Wed, 18 Mar 2009 05:30:22 -0600
+
+bind9 (1:9.5.1.dfsg.P1-1) unstable; urgency=low
+
+  * New upstream patch release
+    - supportable version of fix from 9.5.0.dfsg.P2-5.1
+    - CVE-2009-0025:  Closes: #511936
+    - 2475: Overly agressive cache entry removal.  Closes: #511768
+    - other bug fixes worthy of patch-release inclusion
+
+ -- LaMont Jones <lamont@debian.org>  Mon, 26 Jan 2009 10:33:42 -0700
+
+bind9 (1:9.5.0.dfsg.P2-5.1) unstable; urgency=low
+
+  * Non-maintainer upload.
+  * Apply upstream ACL fixes from 9.5.1 to fix RC bug. Patch was provided
+    by Evan Hunt (upstream bind9 developer) after Emmanuel Bouthenot
+    contacted him. Closes: #496954, #501800.
+  * Remove obsolete dh_installmanpages invocation which was adding
+    unwanted manual pages to bind9. Closes: #486196.
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Fri, 02 Jan 2009 16:51:42 +0000
+
+bind9 (1:9.5.0.dfsg.P2-5) unstable; urgency=low
+
+  [ISC]
+
+  * 2463: IPv6 Advanced Socket API broken on linux.  LP: #249824
+
+  [Jamie Strandboge]
+
+  * apparmor: add capability sys_resource
+  * apparmor: add krb keytab access.  LP: #277370
+
+  [LaMont Jones]
+
+  * apparmor: allow proc/*/net/if_inet6 read access too.  LP: #289060
+  * apparmor: add /var/log/named/* entries.  LP: #294935
+
+  [Ben Hutchings]
+
+  * meta: Add dependency of bind9 on net-tools (ifconfig used in init script)
+  * meta: Fix bind9utils Depends.
+  * meta: fix typo in package description
+
+  [localization folks]
+
+  * l10n: add polish debconf translations.  Closes: #506856 (L)
+
+ -- LaMont Jones <lamont@debian.org>  Sun, 07 Dec 2008 21:03:29 -0700
+
+bind9 (1:9.5.0.dfsg.P2-4) unstable; urgency=low
+
+  * meta: fix typo in Depends: lsb-base.  Closes: #501365
+
+ -- LaMont Jones <lamont@debian.org>  Tue, 07 Oct 2008 17:20:11 -0600
+
+bind9 (1:9.5.0.dfsg.P2-3) unstable; urgency=low
+
+  [LaMont Jones]
+
+  * enable largefile support.  Closes: #497040
+
+  [localization folks]
+
+  * l10n: Dutch translation.  Closes: #499977 (Paul Gevers)
+  * l10n: simplified chinese debconf template.  Closes: #501103 (LI Daobing)
+  * l10n: Update spanish template.  Closes: #493775 (Ignacio Mondino)
+
+ -- LaMont Jones <lamont@debian.org>  Sun, 05 Oct 2008 20:20:00 -0600
+
+bind9 (1:9.5.0.dfsg.P2-2) unstable; urgency=low
+
+  [Kees Cook]
+
+  * debian/{control,rules}: enable PIE hardening (from -1ubuntu1)
+
+  [Nicolas Valcárcel]
+
+  * Add ufw integration (from -1ubuntu2)
+
+  [Dustin Kirkland]
+
+  * use pid file in init.d/bind9 status.  LP: #247084
+
+  [LaMont Jones]
+
+  * dig: add -DDIG_SIGCHASE to compile options.  LP: #257682
+  * apparmor profile: add /var/log/named
+
+  [Nikita Ofitserov]
+
+  * ipv6 support requires _GNU_SOURCE definition.  LP: #249824
+
+ -- LaMont Jones <lamont@debian.org>  Thu, 28 Aug 2008 23:08:36 -0600
+
+bind9 (1:9.5.0.dfsg.P2-1) unstable; urgency=low
+
+  [LaMont Jones]
+
+  * default to using resolvconf if it is installed
+  * fix sonames and dependencies.  Closes: #149259, #492418
+  * Do not build-depend libcap2-dev on non-linux.  Closes: #493392
+  * drop unused query-loc manpage.  Closes: #492564
+  * lwresd: Deliver /etc/bind directory.  Closes: #490027
+  * fix query-source comment in default install
+
+  [Internet Software Consortium, Inc]
+
+  * 9.5.0-P2.  Closes: #492949
+
+  [localization folks]
+
+  * l10n: Spanish debconf translation.  Closes: #492425 (Ignacio Mondino)
+  * l10n: Swedish debconf templates.  Closes: #491369 (Martin Ågren)
+  * l10n: Japanese debconf translations.  Closes: #492048 (Hideki Yamane
+    (Debian-JP))
+  * l10n: Finnish translation.  Closes: #490630 (Esko Arajärvi)
+  * l10n: Italian debconf translations.  Closes: #492587 (Alessandro Vietta)
+
+ -- LaMont Jones <lamont@debian.org>  Sat, 02 Aug 2008 14:20:20 -0600
+
+bind9 (1:9.5.0.dfsg.P1-2) unstable; urgency=low
+
+  * Revert "meta: merge the mess of single-lib packages back into one large
+    one." - That way lies madness and pain.
+  * init.d/bind9: implement status function.  LP: #203169
+
+ -- LaMont Jones <lamont@debian.org>  Tue, 08 Jul 2008 21:56:58 -0600
+
+bind9 (1:9.5.0.dfsg.P1-1) unstable; urgency=low
+
+  * Repackage 9.5.0.dfsg-5 with the -P1 tarball.
+
+ -- LaMont Jones <lamont@debian.org>  Tue, 08 Jul 2008 15:06:07 -0600
+
+bind9 (1:9.5.0.dfsg-5) unstable; urgency=low
+
+  [Internet Software Consortium, Inc]
+
+  * Randomize UDP query source ports to improve forgery resilience.
+    (CVE-2008-1447)                                                                              
+
+  [LaMont Jones]
+
+  * add build-depends: texlive-latex-base, xsltproc, remove Bv9ARM.pdf in clean
+  * fix sonames
+  * drop unneeded build-deps, since we do not actually deliver B9vARM.pdf
+  * meta: cleanup libbind9-41 Provides/Conflicts
+  * build: fix sonames for new libraries
+  * postinst: really restart bind/lwresd in postinst
+
+ -- LaMont Jones <lamont@debian.org>  Sun, 06 Jul 2008 21:34:18 -0600
+
+bind9 (1:9.5.0.dfsg-4) unstable; urgency=low
+
+  [LaMont Jones]
+
+  * control: fix dnsutils description to avoid list reformatting. 
+    Closes: #480317
+  * lwresd: restart in postinst.  Closes: #486481
+  * meta: merge the mess of single-lib packages back into one large one.
+  * apparmor: allow bind to create files in /var/{lib,cache}/bind
+  * build: drop .la files.  Closes: #486969
+  * build: drop the extra lib path from the library-package merge
+  * meta: liblwres40 does not conflict with the libbind9-40-provided libbind0
+
+  [localization folks]
+
+  * l10n: German debconf translation.  Closes: #486547 (Helge Kreutzmann)
+  * l10n: Indonesian debconf translations.  Closes: #486503 (Arief S Fitrianto)
+  * l10n: Slovak po-debconf translation Closes: #488905 (helix84)
+  * l10n: Turkish debconf template.  Closes: #486479 (Mert Dirik)
+
+ -- LaMont Jones <lamont@debian.org>  Mon, 30 Jun 2008 11:22:05 -0600
+
+bind9 (1:9.4.2-12) unstable; urgency=low
+
+  * apparmor: allow bind to create files in /var/{lib,cache}/bind
+
+ -- LaMont Jones <lamont@debian.org>  Mon, 30 Jun 2008 11:17:53 -0600
+
+bind9 (1:9.4.2-11) unstable; urgency=low
+
+  * apparmor: add dnscvsutil package files
+  * lwresd Depends: adduser
+  * control: fix dnsutils description to avoid list reformatting. 
+    Closes: #480317
+
+ -- LaMont Jones <lamont@debian.org>  Tue, 17 Jun 2008 21:30:12 -0600
+
+bind9 (1:9.5.0.dfsg-3) unstable; urgency=low
+
+  [LaMont Jones]
+
+  * bind9utils Depends: libbind9-40.  Closes: #486194
+  * bind9 should not deliver manpages for nonexistant binaries. 
+    Closes: #486196
+
+  [localization folks]
+
+  * l10n: Vietnamese debconf templates translation update.  Closes: #486185
+    (Clytie Siddall)
+  * l10n: Russian debconf templates translation.  Closes: #486191 (Yuri Kozlov)
+  * l10n: Galician debconf template.  Closes: #486215 (Jacobo Tarrio)
+  * l10n: French debconf templates.  Closes: #486325 (CALARESU Luc)
+  * l10n: Czech debconf translation.  Closes: #486337 (Miroslav Kure)
+  * l10n: Updated Portuguese translation.  Closes: #486267 (Traduz -
+    Portuguese Translation Team)
+
+ -- LaMont Jones <lamont@debian.org>  Sun, 15 Jun 2008 18:25:02 -0600
+
+bind9 (1:9.5.0.dfsg-2) unstable; urgency=low
+
+  [Tim Spriggs]
+
+  * init.d: Nexenta has different ifconfig arguments
+
+  [LaMont Jones]
+
+  * templates rework from debian-l10n-english
+  * reload named when an interface goes up or down.  LP: #226495
+  * build: need to create the directories for interface restart triggering
+  * Build-Depends: libcap2-dev.  Closes: #485747
+  * Leave named running during update.  Closes: #453765
+  * Fix path to uname, cleaning up the nexenta checks.
+  * l10n: avoid double-question in templates.
+
+  [localization folks]
+
+  * l10n: Vietnamese debconf translations.  Closes: #483911 (Clytie Siddall)
+  * l10n: Portuguese debconf translations.  Closes: #483872 (Traduz -
+    Portuguese Translation Team)
+
+ -- LaMont Jones <lamont@debian.org>  Fri, 13 Jun 2008 16:54:42 -0600
+
+bind9 (1:9.5.0.dfsg-1) unstable; urgency=low
+
+  [LaMont Jones]
+
+  * manpages: fix references that should say /etc/bind
+  * meta: build-depend libxml2-dev for statistics support
+
+ -- LaMont Jones <lamont@debian.org>  Sat, 31 May 2008 12:17:21 -0600
+
+bind9 (1:9.5.0.dfsg-0) experimental; urgency=low
+
+  [Internet Software Consortium, Inc]
+
+  * 9.5.0 release
+
+  [LaMont Jones]
+
+  * Only use capabilities if they are present: reprise.  Closes: #360339, #212226
+  * control: fix dnsutils description to avoid list reformatting.  Closes: #480317
+  * build: use the correct directories in dh_shlibdeps invocation
+  * build: turn on dlz.  No pgsql or mysql support yet.  LP: #227344
+
+ -- LaMont Jones <lamont@debian.org>  Thu, 29 May 2008 22:05:19 -0600
+
+bind9 (1:9.5.0~rc1-2~0ubuntu2) intrepid; urgency=low
+
+  * build: use the correct directories in dh_shlibdeps invocation
+  * build: turn on dlz.  LP: #227344
+
+ -- LaMont Jones <lamont@ubuntu.com>  Tue, 27 May 2008 21:43:06 -0600
+
+bind9 (1:9.5.0~rc1-2~0ubuntu1) intrepid; urgency=low
+
+  * Upload what will become (maybe an ancestor of) -2 to intrepid.
+    - Only use capabilities if they are present: reprise.  Closes: #360339, #212226
+    - control: fix dnsutils description to avoid list reformatting.  Closes: #480317
+
+ -- LaMont Jones <lamont@ubuntu.com>  Mon, 26 May 2008 11:46:27 -0600
+
+bind9 (1:9.5.0~rc1-1) experimental; urgency=low
+
+  [Patrick Winnertz]
+
+  * postinst: make add debconf support.  Closes: #473460
+
+  [Jamie Strandboge]
+
+  * debian/bind9.preinst: Apparmor force-complain on upgrade without
+    existing profile.  LP: #204658
+
+  [LaMont Jones]
+
+  * bind9utils: fix typos in .install
+  * host: manpage inaccurately describes default query.  LP: #203087
+  * apparmor: add dnscvsutil package files
+  * Revert "Only use capabilities if they are present." for merge of 9.5.0rc1.
+  * soname: libdns41 -> 42
+  * fix typos in debconf patch, #473460
+  * cleanup more files in clean target
+  * lwresd Depends: adduser
+
+ -- LaMont Jones <lamont@debian.org>  Thu, 15 May 2008 17:59:54 -0600
+
+bind9 (1:9.5.0~b2-2) experimental; urgency=low
+
+  * meta: add bind9utils binary package, with various useful utilities.  Closes: #151957, #130445, #160483
+
+ -- LaMont Jones <lamont@debian.org>  Thu, 03 Apr 2008 07:01:42 -0600
+
+bind9 (1:9.4.2-10) unstable; urgency=low
+
+  [Jamie Strandboge]
+
+  * debian/bind9.preinst: AA force-complain on upgrade without existing
+    profile.  LP: #204658
+
+  [LaMont Jones]
+
+  * host: manpage inaccurately describes default query.  LP: #203087
+
+ -- LaMont Jones <lamont@debian.org>  Tue, 08 Apr 2008 22:45:57 -0600
+
+bind9 (1:9.4.2-9) unstable; urgency=low
+
+  * apparmor: allow subdirs in {/etc,/var/cache,/var/lib}/bind
+  * apparmor: make profile match README.Debian
+
+ -- LaMont Jones <lamont@debian.org>  Tue, 01 Apr 2008 21:13:05 -0600
+
+bind9 (1:9.4.2-8) unstable; urgency=low
+
+  [ISC]
+
+  * CVE-2008-0122: off by one error in (unused) inet_network function.
+    Closes: #462783  LP: #203476
+
+  [Michael Milligan]
+
+  * Fix min-cache-ttl and min-ncache-ttl keywords
+
+  [Jamie Strandboge]
+
+  * apparmor: force complain-mode for apparmor on certain upgrades.  LP: #203528
+  * debian/bind9.postrm: purge /etc/apparmor.d/force-complain/usr.sbin.named
+
+ -- LaMont Jones <lamont@debian.org>  Tue, 18 Mar 2008 18:35:15 -0600
+
+bind9 (1:9.4.2-7) unstable; urgency=low
+
+  [Jamie Strandboge]
+
+  * Allow rw access to /var/lib/bind/* in apparmor-profile.  LP: #201954
+
+  [LaMont Jones]
+
+  * Drop root-delegation comments from named.conf.  Closes: #217829, #297219
+
+ -- LaMont Jones <lamont@debian.org>  Sat, 15 Mar 2008 09:48:10 -0600
+
+bind9 (1:9.4.2-6) unstable; urgency=low
+
+  * Correct apparmor profile filename.  LP: #200739
+
+ -- LaMont Jones <lamont@debian.org>  Mon, 10 Mar 2008 14:28:01 -0600
+
+bind9 (1:9.4.2-5) unstable; urgency=low
+
+  * add "order random_1" support (return one random RR)
+  * Fix doc pathnames in README.Debian.  Closes: #266891
+  * Add AAAA ::1 entry to db.local.  Closes: #230088
+
+ -- LaMont Jones <lamont@debian.org>  Mon, 10 Mar 2008 13:51:28 -0600
+
+bind9 (1:9.5.0~b2-1) experimental; urgency=low
+
+  [Thiemo Seufer]
+
+  * mips:atomic.h: improve implementation of atomic ops, fix mips{el,64}
+
+  [LaMont Jones]
+
+  * manpages: call it /etc/bind/named.conf throughout, and typos.  Closes: #419750
+  * named.conf.5: correct filename.  Closes: #428015
+  * manpages: fix typo errors.  Closes: #395834
+  * Makefile.in: be explicit about library paths
+  * build: Turn on GSS-TSIG support.  LP: #158197
+  * build: soname changes
+  * db.root: include AAAA RRs.  Closes: #464111
+  * soname: lib{dns,isc}40 -> 41
+  * meta: use binary:Version instead of Source-Version
+
+  [Andreas John]
+
+  * Only use capabilities if they are present.  Closes: #360339, #212226
+
+ -- LaMont Jones <lamont@debian.org>  Sat, 23 Feb 2008 08:06:17 -0700
+
+bind9 (1:9.4.2-4) unstable; urgency=low
+
+  * incorporate ubuntu apparmor change from Jamie Strandboge,
+    with changes:
+    - Add apparmor profile, reload apparmor profile on config
+    - Add a note about apparmor to README.Debian
+    - conflicts/replaces old apparmor versions
+  * db.root: include AAAA RRs.  Closes: #464111
+  * Don't die when /var/lib/bind already exists.  LP: #191685
+  * build: turn on optimization.  Closes: #435194
+
+ -- LaMont Jones <lamont@debian.org>  Fri, 22 Feb 2008 22:05:25 -0700
+
+bind9 (1:9.4.2-3ubuntu1) hardy; urgency=low
+
+  * add AppArmor profile
+    + debian/apparmor-profile
+    + debian/bind9.postinst: Reload AA profile on configuration
+  * updated debian/README.Debian for note on AppArmor
+  * debian/control: Replaces apparmor-profiles << 2.1+1075-0ubuntu4 as we
+    should now take control
+  * debian/control: Conflicts with apparmor-profiles << 2.1+1075-0ubuntu4
+    to make sure that if earlier version of apparmor-profiles gets installed
+    it won't overwrite our profile
+  * Modify Maintainer value to match the DebianMaintainerField
+    specification.
+
+ -- Jamie Strandboge <jamie@ubuntu.com>  Wed, 13 Feb 2008 17:30:45 +0000
+
+bind9 (1:9.4.2-3) unstable; urgency=low
+
+  * don't run rndc-confgen when it's not there.  Closes: #459551
+  * control: drop use of ${Source-Version}
+
+ -- LaMont Jones <lamont@debian.org>  Mon, 07 Jan 2008 10:16:06 -0700
+
+bind9 (1:9.4.2-2) unstable; urgency=low
+
+  * init.d: add --oknodo to start-stop-daemon.  Closes: #411881
+  * init: LSB dependency info.  Closes: #459421, #448006
+  * meta: bind9 Suggests: resolvconf.  Closes: #252285
+  * bind9: deliver /var/lib/bind directory, and document.
+    Closes: #248771, #200253, #202981, #209022
+  * lwresd: create bind user/group and rndc key if needed, at install.
+    Closes: #190742
+  * dnsutils: update long description.  Closes: #236901
+
+ -- LaMont Jones <lamont@debian.org>  Sun, 06 Jan 2008 12:25:31 -0700
+
+bind9 (1:9.4.2-1) unstable; urgency=low
+
+  [Mike O'Connor]
+
+  * bind9.init: LSB compliance.  Closes: #448006
+
+  [Internet Software Consortium, Inc]
+
+  * New release: 9.4.2
+
+  [LaMont Jones]
+
+  * soname shifts for new release
+
+ -- LaMont Jones <lamont@debian.org>  Sat, 17 Nov 2007 10:50:07 -0700
+
+bind9 (1:9.4.2~rc2-1) experimental; urgency=low
+
+  * New upstream release
+
+ -- LaMont Jones <lamont@debian.org>  Fri, 12 Oct 2007 18:33:57 -0600
+
+bind9 (1:9.4.1-P1-4) unstable; urgency=low
+
+  [Thomas Antepoth]
+
+  * unix/socket.c: don't send to a socket with pending_send.  Closes: #430065
+
+  [LaMont Jones]
+
+  * document git repositories
+  * db.root: l.root-servers.net changed IP address.  Closes: #449148  LP: #160176
+  * init.d: if there are no networks configured, error out quickly
+
+ -- LaMont Jones <lamont@debian.org>  Thu, 08 Nov 2007 21:31:55 -0700
+
+bind9 (1:9.4.1-P1-3) unstable; urgency=low
+
+  * Only deliver upstream changes with bind9-doc
+
+ -- LaMont Jones <lamont@debian.org>  Thu, 04 Oct 2007 08:30:55 -0600
+
+bind9 (1:9.4.1-P1-2) unstable; urgency=low
+
+  * manpages: fix typo errors.  Closes: #395834
+  * manpages: call it /etc/bind/named.conf throughout, and typos.  Closes: #419750
+  * named.conf.5: correct filename.  Closes: #428015
+  * bind9.NEWS: update version for ACL change doc.  Closes: #435225
+  * build: don't have dnsutils deliver man pages that it shouldn't.  LP: #82178
+  * nslookup.1: some of the manpage was not visible.  LP: #131415
+  * document git repositories
+  * unix/socket.c: don't send to a socket with pending_send.  Closes: #430065
+
+ -- LaMont Jones <lamont@debian.org>  Wed, 03 Oct 2007 01:10:59 -0600
+
+bind9 (1:9.4.1-P1-1) unstable; urgency=high
+
+  * New upstream version, addresses CVE-2007-2926 and CVE-2007-2925 
+
+ -- Bdale Garbee <bdale@gag.com>  Thu, 26 Jul 2007 16:41:50 -0600
+
+bind9 (1:9.4.1-1) unstable; urgency=low
+
+  * New upstream version
+
+ -- LaMont Jones <lamont@debian.org>  Mon, 30 Apr 2007 16:59:05 -0600
+
+bind9 (1:9.4.0-2) unstable; urgency=low
+
+  * upload to unstable
+
+ -- LaMont Jones <lamont@debian.org>  Tue, 10 Apr 2007 11:12:16 -0600
+
+bind9 (1:9.4.0-1) experimental; urgency=low
+
+  * New upstream version
+  * more mipsel patch.  Closes: #406409
+
+ -- LaMont Jones <lamont@debian.org>  Sun, 25 Feb 2007 11:44:11 -0700
+
+bind9 (1:9.4.0~rc2-1) experimental; urgency=low
+
+  * New upstream version.  Addresses CVE-2007-0493 CVE-2007-0494
+
+ -- LaMont Jones <lamont@debian.org>  Thu, 25 Jan 2007 14:26:12 -0700
+
+bind9 (1:9.4.0~rc1.0-3) experimental; urgency=low
+
+  * add NEWS file talking about the change in defaults:
+    As of bind 9.4, allow-query-cache and allow-recursion default to the
+    builtin acls 'localnets' and 'localhost'.  If you are setting up a
+    name server for a network, you will almost certainly need to change
+    this.
+
+    The change in default has been done to make caching servers less
+    attractive as reflective amplifying targets for spoofed traffic.
+    This still leaves authoritative servers exposed.
+
+ -- LaMont Jones <lamont@debian.org>  Wed, 24 Jan 2007 09:35:06 -0700
+
+bind9 (1:9.4.0~rc1.0-2) experimental; urgency=low
+
+  * Fix mips64.  Closes: #406409
+
+ -- LaMont Jones <lamont@debian.org>  Sun, 21 Jan 2007 15:32:27 -0700
+
+bind9 (1:9.4.0~rc1.0-1) experimental; urgency=low
+
+  * Broken orig.tar.gz.
+
+ -- LaMont Jones <lamont@debian.org>  Thu, 28 Dec 2006 23:04:05 -0700
+
+bind9 (1:9.4.0~rc1-1) experimental; urgency=low
+
+  * New upstream
+
+ -- LaMont Jones <lamont@debian.org>  Thu, 28 Dec 2006 19:00:37 -0700
+
+bind9 (1:9.3.4-2etch2) stable-proposed-updates; urgency=low
+
+  [Thomas Antepoth]
+
+  * unix/socket.c: don't send to a socket with pending_send.  Closes: #430065
+
+  [LaMont Jones]
+
+  * document git repositories
+  * db.root: l.root-servers.net changed IP address.  Closes: #449148
+
+ -- LaMont Jones <lamont@debian.org>  Mon, 05 Nov 2007 19:48:23 -0700
+
+bind9 (1:9.3.4-2etch1) stable-security; urgency=high
+
+  * Fix DNS cache poisoning through predictable query IDs. (CVE-2007-2926)
+
+ -- Moritz Muehlenhoff <jmm@debian.org>  Tue, 24 Jul 2007 22:09:35 +0000
+
+bind9 (1:9.3.4-2) unstable; urgency=high
+
+  * Actually really do the merge of 9.3.4.  Sigh.  Closes: #408925
+
+ -- LaMont Jones <lamont@debian.org>  Mon, 29 Jan 2007 06:09:03 -0700
+
+bind9 (1:9.3.4-1) unstable; urgency=high
+
+  * New upstream version.  Addresses CVE-2007-0493 CVE-2007-0494
+
+ -- LaMont Jones <lamont@debian.org>  Thu, 25 Jan 2007 14:31:09 -0700
+
+bind9 (1:9.3.3-1) unstable; urgency=low
+
+  * New upstream version
+
+ -- LaMont Jones <lamont@debian.org>  Tue, 12 Dec 2006 23:31:51 -0700
+
+bind9 (1:9.3.2-P1.0-1) unstable; urgency=low
+
+  * Fix README.Debian to point to the URL.  Closes: #387437
+  * Strip rfc's from orig.tar.gz.  Closes: #393359
+
+ -- LaMont Jones <lamont@mmjgroup.com>  Mon, 16 Oct 2006 06:38:22 -0600
+
+bind9 (1:9.3.2-P1-2) unstable; urgency=low
+
+  * Fix init script output.  Closes: #354192
+    Thanks to Joey Hess for the patch.
+  * Default install should listen on ipv6 interfaces.  Closes: #382438
+
+ -- LaMont Jones <lamont@debian.org>  Sat,  9 Sep 2006 19:01:53 -0600
+
+bind9 (1:9.3.2-P1-1) unstable; urgency=high
+
+  * New upstream, fixes CVE-2006-4095 and CVE-2006-4096.
+    Closes: #386237, #386245
+  * Drop gcc-3.4 [powerpc] dependency.  Closes: #342957, #372203
+  * Add -fno-strict-aliasing for type-punned pointer aliasing issues
+    Closes: #386224
+  * Use getent in postinst instead of chown/chgrp.  Closes: #386091, #239665
+  * Drop redundant update-rc.d calls.  Closes: #356914
+
+ -- LaMont Jones <lamont@debian.org>  Wed,  6 Sep 2006 08:07:13 -0600
+
+bind9 (1:9.3.2-2) unstable; urgency=low
+
+  * correct force-reload.  Closes: #333841
+  * Fix init.d's usage message.  Closes: #331090
+  * resolvconf tweaks.  Closes: #252232, #275412
+
+ -- LaMont Jones <lamont@debian.org>  Mon, 16 Jan 2006 15:17:04 -0700
+
+bind9 (1:9.3.2-1) unstable; urgency=low
+
+  * New upstream
+  * use lsb-base for start/stop messages in init.d.
+  * switch to debhelper 4
+
+ -- LaMont Jones <lamont@debian.org>  Thu,  5 Jan 2006 12:29:28 -0700
+
+bind9 (1:9.3.1-2) unstable; urgency=low
+
+  * Getting good reports from experimental, uploading to sid.
+    Release team, please consider this package for sarge.  Thanks.
+  * correct pidfile name in init.d/lwresd.  Closes: #298100
+
+ -- LaMont Jones <lamont@debian.org>  Sat, 19 Mar 2005 17:46:31 -0700
+
+bind9 (1:9.3.1-1) experimental; urgency=low
+
+  * Build with gcc-3.4 on powerpc, to work around #292958.
+
+ -- LaMont Jones <lamont@debian.org>  Sat, 19 Mar 2005 11:40:06 -0700
+
+bind9 (1:9.3.1-0) experimental; urgency=low
+
+  * New upstream version.
+
+ -- LaMont Jones <lamont@debian.org>  Sun, 13 Mar 2005 21:44:57 -0700
+
+bind9 (1:9.3.0+9.3.1beta2-1) experimental; urgency=low
+
+  * new upstream version
+
+ -- LaMont Jones <lamont@debian.org>  Tue, 25 Jan 2005 14:21:51 -0700
+
+bind9 (1:9.3.0-1) experimental; urgency=low
+
+  * New upstream version
+
+ -- LaMont Jones <lamont@debian.org>  Sat, 25 Sep 2004 21:35:46 -0600
+
+bind9 (1:9.2.4-1) unstable; urgency=high
+
+  * New upstream version.  Closes: #269157 and others.
+  * Version debhelper build-dep.  Closes: #262720
+
+ -- LaMont Jones <lamont@mmjgroup.com>  Thu, 23 Sep 2004 09:11:37 -0600
+
+bind9 (1:9.2.3+9.2.4-rc7-1) unstable; urgency=low
+
+  * New upstream
+
+ -- LaMont Jones <lamont@mmjgroup.com>  Wed,  1 Sep 2004 00:04:55 -0600
+
+bind9 (1:9.2.3+9.2.4-rc6-1) unstable; urgency=low
+
+  * New upstream.
+  * Comment out delegation-only directives in named.conf
+
+ -- LaMont Jones <lamont@debian.org>  Mon,  2 Aug 2004 10:00:38 -0600
+
+bind9 (1:9.2.3+9.2.4-rc5-1) unstable; urgency=low
+
+  * New upstream release candidate
+
+ -- LaMont Jones <lamont@debian.org>  Thu, 17 Jun 2004 19:50:37 -0600
+
+bind9 (1:9.2.3+9.2.4-rc2-1) unstable; urgency=low
+
+  * New upstream release candidate
+  * Remove shared library symlinks in clean.  Closes: #243109
+  * Deal with capset being a module.  Closes: #245043, #240874, #241605
+  * deliver /var/run/bind/run in lwresd as well.  Closes: #186569
+
+ -- LaMont Jones <lamont@debian.org>  Thu, 22 Apr 2004 12:20:05 -0600
+
+bind9 (1:9.2.3-3) unstable; urgency=low
+
+  * new IP for b.root-servers.net.  Closes: #234278
+  * Fix RC linkages to match bind8.  Closes: #218007
+
+ -- LaMont Jones <lamont@debian.org>  Mon,  1 Mar 2004 15:00:44 -0700
+
+bind9 (1:9.2.3-2) unstable; urgency=low
+
+  * Rebuild autoconf files for mips.  Closes: #221419
+
+ -- LaMont Jones <lamont@debian.org>  Tue, 18 Nov 2003 06:33:34 -0700
+
+bind9 (1:9.2.3-1) unstable; urgency=low
+
+  * New upstream.
+  * cleanup zones.rfc1918/db.empty stuff.
+  * Fix Makefiles to work even if the build environment is unclean.
+    Closes: #211503
+  * Add comments about root-delegation-only to named.conf.  Closes: #212243
+  * Add resolvconf support.  Closes: #199255
+  * more SO_BSDCOMPAT hacks for linux.  Closes: #220735, #214460
+
+ -- LaMont Jones <lamont@debian.org>  Mon, 17 Nov 2003 21:30:33 -0700
+
+bind9 (1:9.2.2+9.2.3rc4-1) unstable; urgency=low
+
+  * Yet another new upstream release.
+
+ -- LaMont Jones <lamont@debian.org>  Mon, 22 Sep 2003 09:39:50 -0600
+
+bind9 (1:9.2.2+9.2.3rc3-1) unstable; urgency=low
+
+  * New upstream.  Closes: #211752. #211503. #211496, #211520
+
+ -- LaMont Jones <lamont@debian.org>  Sat, 20 Sep 2003 12:22:59 -0600
+
+bind9 (1:9.2.2+9.2.3rc2-4) unstable; urgency=low
+
+  * Really fix versioned depends.  Closes: #211590
+
+ -- LaMont Jones <lamont@debian.org>  Thu, 18 Sep 2003 17:29:47 -0600
+
+bind9 (1:9.2.2+9.2.3rc2-3) unstable; urgency=low
+
+  * Version depends for all the libraries. sigh.  Closes: #211412,#210293
+
+ -- LaMont Jones <lamont@debian.org>  Wed, 17 Sep 2003 10:56:36 -0600
+
+bind9 (1:9.2.2+9.2.3rc2-2) unstable; urgency=low
+
+  * Need a versioned depend. sigh.
+
+ -- LaMont Jones <lamont@debian.org>  Wed, 17 Sep 2003 10:25:35 -0600
+
+bind9 (1:9.2.2+9.2.3rc2-1) unstable; urgency=low
+
+  * New upstream release.  Closes: #211373
+  * Remove RFC's from package, per policy.
+  * Make com and net zones delegation-only by default.
+
+ -- LaMont Jones <lamont@debian.org>  Wed, 17 Sep 2003 07:15:37 -0600
+
+bind9 (1:9.2.2+9.2.3rc1-3) unstable; urgency=low
+
+  * A bit more cleanup of descriptions.
+  * fix package sections
+  * Fix b0rkage with dependencies.
+
+ -- LaMont Jones <lamont@debian.org>  Sun, 14 Sep 2003 09:05:10 -0600
+
+bind9 (1:9.2.2+9.2.3rc1-2) unstable; urgency=low
+
+  * Explicitly link libraries.  Closes: #210653
+  * Fix descriptions.  Closes: #209563, #209853, #210063
+
+ -- LaMont Jones <lamont@debian.org>  Sat, 13 Sep 2003 19:29:05 -0600
+
+bind9 (1:9.2.2+9.2.3rc1-1) unstable; urgency=low
+
+  * New upstream release candidate.
+  * Quit using SO_BSDCOMPAT (why is it still in the header files??) so
+    that the kernel will shut up about it's advertised, obsolete option.
+    Closes: #201293, #204282, #205590
+
+ -- LaMont Jones <lamont@debian.org>  Thu, 28 Aug 2003 14:44:28 -0600
+
+bind9 (1:9.2.2-2) unstable; urgency=low
+
+  * Fix libtool.m4. Closes: #183791
+  * move lib packages into Section: libs.  Closes: #184788
+  * make sure it's libssl0.9.7.  Closes: #182363
+  * Add /etc/default/lwresd.  Closes: #169727
+  * Add fakeroot dir to dh_shlibdeps.  Closes: #169622
+  * Fix rndc manpage.  Closes: #179353
+  * Deliver /usr/bin/isc-config.sh (in libbind-dev).  Closes: #178186
+
+ -- LaMont Jones <lamont@debian.org>  Sat, 15 Mar 2003 16:34:15 -0700
+
+bind9 (1:9.2.2-1) unstable; urgency=low
+
+  * New upstream version
+  * Document /etc/default/bind9 in init.d script.  Closes: #170267
+
+ -- LaMont Jones <lamont@debian.org>  Tue,  4 Mar 2003 22:43:58 -0700
+
+bind9 (1:9.2.1-7) unstable; urgency=low
+
+  * One more overrides disparity.
+  * Fix bashism in postinst.  Closes: #169531
+
+ -- LaMont Jones <lamont@debian.org>  Sun, 17 Nov 2002 19:22:58 -0700
+
+bind9 (1:9.2.1-6) unstable; urgency=low
+
+  * The "I give up for now" release.
+  *   Only convert to running as bind if named.conf hasn't been modified.
+  *   Closes: #163552, #164352
+  * Fix overrides
+  * Cleanup README.Debian wrt non-root-by-default.
+  * Make sure that /var/run/bind/run exists in init.d script.  Closes: #168912
+  * New IP for j.root-servers.net.  Closes: #167818
+  * Check for 2.2.18 kernel in preinst.  Closes: #164349
+  * Move local options to /etc/default/bind9.  Closes: #169132, #163073
+  * Cleanup old bugs (fixed in -5, really).  Closes: #165864
+  * Add /etc/bind/named.conf.local, included from named.conf.  Closes: #129576
+  * Do options definitions in /etc/bind/named.conf.options, makes life
+    easier in the face of named.conf changes from upstream.
+  * Add missing Depends: adduser
+
+ -- LaMont Jones <lamont@debian.org>  Sat, 16 Nov 2002 17:05:45 -0700
+
+bind9 (1:9.2.1-5) unstable; urgency=low
+
+  * Run named a non-privileged user by default.  Closes: #149059
+
+ -- LaMont Jones <lamont@debian.org>  Thu, 12 Sep 2002 16:57:37 -0600
+
+bind9 (1:9.2.1-4) unstable; urgency=low
+
+  * swap maintainer/uploader status so LaMont is primary and Bdale is backup
+  * Deal with bind/bind9 collisions better.  Closes: #149580
+  * Fix some documentation.  Closes: #151579
+
+ -- LaMont Jones <lamont@debian.org>  Wed,  4 Sep 2002 23:25:33 -0600
+
+bind9 (1:9.2.1-3) unstable; urgency=high
+
+  * fold in lib/bind/resolv from 8.3.3 to resolve buffer overlow issue in
+    resolver library, closes: #151342, #151431
+
+ -- Bdale Garbee <bdale@gag.com>  Mon,  1 Jul 2002 00:16:31 -0600
+
+bind9 (1:9.2.1-1.woody.1) testing-security woody-proposed-updates; urgency=high
+
+  * backport to woody (simple rebuild) since 9.2.1 resolves a security issue
+
+ -- Bdale Garbee <bdale@gag.com>  Tue,  4 Jun 2002 10:30:57 -0600
+
+bind9 (1:9.2.1-2) unstable; urgency=low
+
+  * don't include nslint man page, closes: #148695
+  * fix typo in rndc.8, closes: #139602
+  * add a section to README.Debian explaining the rndc key mode that has been
+    our default since 9.2.0-2, closes: #129849
+  * fix paths for named.conf in named.8 to reflect our default, closes: #143443
+  * upstream fixed the nsupdate man page at some point, closes: #121108
+
+ -- Bdale Garbee <bdale@gag.com>  Mon,  3 Jun 2002 15:44:37 -0600
+
+bind9 (1:9.2.1-1) unstable; urgency=medium
+
+  * new upstream version
+  * have bind9-host provide host, closes: #140174
+  * move bind9-host to priority standard since dnsutils depends on it or host,
+    and we prefer bind9-host over host.
+  * move libdns5 and libisc4 to priority standard since dnsutils depends on
+    them and is priority standard
+
+ -- Bdale Garbee <bdale@gag.com>  Thu, 30 May 2002 10:38:39 -0600
+
+bind9 (1:9.2.0-6) unstable; urgency=low
+
+  * move to US main!  Yippee!  Closes: #123969
+  * add info to README.Debian about 2.5 kernels vs --disable-linux-caps
+
+ -- Bdale Garbee <bdale@gag.com>  Sat, 23 Mar 2002 00:18:05 -0700
+
+bind9 (1:9.2.0-5) unstable; urgency=medium
+
+  * clean up various issues in the rules file
+  * make bind9-host conflict/replace old dnsutils as host does, otherwise we
+    can have problems upgrading from potato to woody, closes: #136686
+  * use /dev/urandom for rndc-confgen in postinst, it should be good enough for
+    this purpose, and will keep the postinst from blocking arbitrarily.
+    closes: #130372
+  * add fresh pointers to chroot howto to README.Debian, closes: #135774
+
+ -- Bdale Garbee <bdale@gag.com>  Sun,  3 Mar 2002 16:47:12 -0700
+
+bind9 (1:9.2.0-4) unstable; urgency=low
+
+  * bind9-host needs to conflict with host, closes: #127395
+
+ -- Bdale Garbee <bdale@gag.com>  Tue,  1 Jan 2002 20:12:14 -0700
+
+bind9 (1:9.2.0-3) unstable; urgency=low
+
+  * force removal of old diverted files, closes: #126236
+  * change priority of liblwres1 from optional to standard per ftp admins
+  * add a bind9-host package so that the 'host' provided with the BIND 9.X
+    source tree can be an alternative to the aging NIKHEF version packaged
+    separately.  Update dnsutils dependencies to depend on one of the two,
+    with preference to this one since it has fewer bugs (but fewer features,
+    too).
+
+ -- Bdale Garbee <bdale@gag.com>  Sun, 23 Dec 2001 00:59:15 -0700
+
+bind9 (1:9.2.0-2) unstable; urgency=medium
+
+  * change rc.d links to ensure daemon starts before and stops after other
+    daemons that may fail if name service is not working (bug was filed 
+    against 8.X bind packages, but is just as relevant here!)
+  * use rndc for daemon shutdown instead of start-stop-daemon, closes: #111935
+  * add a postinst to dnsutils to remove any lingering diversions from old 
+    dnsutils packages, closes: #122227
+  * not much point in delivering zone2ldap.1 since we aren't delivering 
+    zone2ldap right now (though we might someday?), closes: #124058
+  * be more verbose with shared library descriptions, closes: #123426, #123428
+  * 9.2.0 added a new rndc.key file that both named and rndc will read to 
+    obtain a shared key, and rndc-confgen will easily create this file with 
+    a unique-per-system key.  Modify named.conf and remove rndc.conf
+    to take advantage of this mechanism and stop delivering a pre-determined 
+    static key to all Debian systems (which has been a mild security risk).  
+    Create the key in postinst if the key file doesn't already exist, and 
+    remove the file in postrm if purging.
+    Closes: #86718, #87208
+
+ -- Bdale Garbee <bdale@gag.com>  Fri, 21 Dec 2001 04:04:30 -0700
+
+bind9 (1:9.2.0-1) unstable; urgency=low
+
+  * new upstream version, closes: #108243, #112266, #114250, #119506, #120657
+  * /etc/bind/rndc.conf is now a conffile
+  * minor hacks to the README.Debian since the chroot instructions it points
+    to are 8.X specific, part of addressing bug 111868.
+  * libomapi is gone, replaced by libisccc and libisccfg
+  * a few lintian-motivated cosmetic cleanups
+  * lose task-dns-server meta package, since tasksel doesn't need it now
+  * dig problem not reproducible in this version, closes: #89526
+  * named-checkconf now uses $sysconfdir, closes: #107835
+  * no longer deliver man pages for contributed binaries we're not including
+    in dnsutils, closes: #108220
+  * fix section in nslookup man page, though that's the least of the man
+    page's problems...  glitch reported is unreproducible
+    closes: #103630, #120946
+  * update libbind-dev README.Debian, closes: #121050
+
+ -- Bdale Garbee <bdale@gag.com>  Tue, 27 Nov 2001 01:41:00 -0700
+
+bind9 (1:9.1.3-1) unstable; urgency=low
+
+  * new upstream version, closes: #96483, #99824, #100647, #101568, #103429
+  * update config.sub/guess for hppa/ia64 support
+  * small init.d patch from Marco d'Itri to ease adding options on invocation
+  * stop having bind9-doc conflict/replace bind-doc since they don't really
+    conflict and there's no reason to prevent having both installed at the
+    same time, closes: #90994
+  * the CHANGES file documents fixes since 9.1.1 that probably cured the
+    reported assertion failure.  If it turns out that I'm wrong, the bug can
+    be re-opened or a new one filed.  I can't see any way to reproduce the bug 
+    in a test case here.  Closes: #99352
+  * have libbind-dev depend on the runtime library packages it delivers 
+    compile-time symlinks for, closes: #100898, #103855
+  * fix lwres man pages to source man3/* instead of * so all the page content
+    can actually be found, closes: #85450, #103865
+
+ -- Bdale Garbee <bdale@gag.com>  Mon,  9 Jul 2001 11:30:39 -0600
+
+bind9 (1:9.1.1-1) unstable; urgency=low
+
+  * new upstream release
+  * update build-depends for libssl-dev
+  * add build-depends on bison, closes: #90150, #90752, #90159
+  * split up libbind0 since libdns is changing so numbers
+  * downgrade rblcheck from a depends to a suggests, closes: #90783
+  * bind9 mkdep creates files in the current working directory, closes: #58353
+
+ -- Bdale Garbee <bdale@gag.com>  Wed, 25 Apr 2001 22:53:21 -0600
+
+bind9 (1:9.1.0-3) unstable; urgency=low
+
+  * merge patch from Zack Weinberg that solves compilation problem, and 
+    reduces the memory footprint of applications by making configure.in
+    smarter.  Closes: #86776, #86910
+  * the bind-doc package includes all relevant documentation from the bind9
+    source tree, including HTML content in /usr/share/doc/bind9-doc/arm,
+    closes: #85718
+  * default named.conf and rndc.conf to not world-readable.  This is an
+    interim step towards addressing the concerns about security raised by 
+    bugs 86718 and closes: #86836  A better long-term solution would be for
+    rndc.conf to allow includes, so that both named.conf and rndc.conf could
+    include a key file built on the fly during installation while themselves
+    retaining conffile status.  The required functionality has been requested
+    of the bind9 upstream, this will limit vulnerability in the meantime.
+  * add replaces logic to the dnsutils package to avoid complaints about the
+    delivery of nsupdate.8.gz, closes: #86759
+  * move a couple of man pages back from dnsutils to bind9 that really belong
+    there.  sigh.
+
+ -- Bdale Garbee <bdale@gag.com>  Thu, 22 Feb 2001 16:39:02 -0700
+
+bind9 (1:9.1.0-2) unstable; urgency=low
+
+  * merge patch from Luca Filipozzi <lfilipoz@debian.org> - thanks!
+    + bind9:  ships with a working rndc.conf file, closes: #84572
+    + bind9:  init.d calls rndc rather than ndc on reload, closes: #85481
+    + bind9:  named.conf ships with 'key' and 'control' sections
+    + bind9:  correctly creates /var/cache/bind, closes: #85457
+    + lwresd: lwresd is split off into its own package, closes: #85627
+  * nsupdate is delivered by the dnsutils package, but the (wrong) man page 
+    was accidentally also included in the bind9 package, closes: #85717
+  * freshen config.sub and config.guess for ia64 and hppa support
+
+ -- Bdale Garbee <bdale@gag.com>  Mon, 12 Feb 2001 23:43:55 -0700
+
+bind9 (1:9.1.0-1) unstable; urgency=low
+
+  * Initial packaging of BIND 9.1.0.  Must use epoch so that meta packages 
+    retain their sequencing from the bind 8 package version stream.
+  * snarf a couple of man pages from the 8.X tree for now
+
+ -- Bdale Garbee <bdale@gag.com>  Thu,  1 Feb 2001 16:30:35 -0700
+
diff --git a/debian/control b/debian/control
new file mode 100644
index 0000000..935a87c
--- /dev/null
+++ b/debian/control
@@ -0,0 +1,186 @@
+Source: bind9
+Section: net
+Priority: optional
+Maintainer: Debian DNS Team <team+dns@tracker.debian.org>
+Uploaders: Ondřej Surý <ondrej@debian.org>,
+           Bernhard Schmidt <berni@debian.org>
+Build-Depends: bison,
+               debhelper-compat (= 12),
+               dh-apparmor,
+               dh-exec,
+               dh-python,
+               libcap2-dev [linux-any],
+               libcmocka-dev,
+               libdb-dev,
+               libedit-dev,
+               libfstrm-dev,
+               libidn2-dev,
+               libjson-c-dev,
+               libkrb5-dev,
+               liblmdb-dev,
+               libmaxminddb-dev (>= 1.3.0),
+               libprotobuf-c-dev,
+               libssl-dev,
+               libtool,
+               libuv1-dev (>= 1.40.0),
+               libxml2-dev,
+               pkg-config,
+               protobuf-c-compiler,
+               python3,
+               python3-ply,
+               zlib1g-dev
+Build-Depends-Indep: fonts-freefont-otf,
+                     latexmk,
+                     python3-sphinx,
+                     python3-sphinx-rtd-theme,
+                     texlive-fonts-recommended,
+                     texlive-latex-recommended,
+                     texlive-xetex,
+                     xindy
+Standards-Version: 4.1.2
+Vcs-Browser: https://salsa.debian.org/dns-team/bind9
+Vcs-Git: https://salsa.debian.org/dns-team/bind9.git
+Homepage: https://www.isc.org/downloads/bind/
+
+Package: bind9
+Architecture: any
+Pre-Depends: ${misc:Pre-Depends}
+Depends: adduser,
+         bind9-libs (= ${binary:Version}),
+         bind9-utils (= ${binary:Version}),
+         debconf | debconf-2.0,
+         dns-root-data,
+         iproute2,
+         lsb-base (>= 3.2-14),
+         netbase,
+         ${misc:Depends},
+         ${shlibs:Depends}
+Suggests: bind-doc,
+          dnsutils,
+          resolvconf,
+          ufw
+Breaks: bind (<< 1:9.13.6~)
+Replaces: bind (<< 1:9.13.6~)
+Description: Internet Domain Name Server
+ The Berkeley Internet Name Domain (BIND 9) implements an Internet domain
+ name server.  BIND 9 is the most widely-used name server software on the
+ Internet, and is supported by the Internet Software Consortium, www.isc.org.
+ .
+ This package provides the server and related configuration files.
+
+Package: bind9utils
+Architecture: all
+Depends: bind9-utils,
+         ${misc:Depends}
+Priority: optional
+Section: oldlibs
+Description: Transitional package for bind9-utils
+ This is a transitional package. It can safely be removed.
+
+Package: bind9-utils
+Architecture: any
+Depends: ${misc:Depends},
+         ${python3:Depends},
+         ${shlibs:Depends}
+Breaks: bind-utils (<< 1:9.13.6~),
+        bind9utils (<< 1:9.12.0~),
+        freeipa
+Replaces: bind-utils (<< 1:9.13.6~),
+          bind9utils (<< 1:9.12.0~)
+Provides: bind9utils
+Description: Utilities for BIND 9
+ This package provides various utilities that are useful for maintaining a
+ working BIND 9 installation.
+
+Package: bind9-doc
+Architecture: all
+Section: doc
+Depends: ${misc:Depends}
+Breaks: bind-doc (<< 1:9.13.6~)
+Replaces: bind-doc (<< 1:9.13.6~)
+Description: Documentation for BIND 9
+ This package provides various documents that are useful for maintaining a
+ working BIND 9 installation.
+
+Package: bind9-host
+Priority: standard
+Architecture: any
+Depends: ${misc:Depends},
+         ${shlibs:Depends}
+Provides: host
+Breaks: bind-host (<< 1:9.13.6~)
+Replaces: bind-host (<< 1:9.13.6~)
+Description: DNS Lookup Utility
+ This package provides the 'host' DNS lookup utility in the form that
+ is bundled with the BIND 9 sources.
+
+Package: bind9-libs
+Section: libs
+Priority: standard
+Architecture: any
+Multi-Arch: same
+Depends: libuv1 (>= 1.40.0),
+         ${misc:Depends},
+         ${shlibs:Depends}
+Breaks: bind-libs (<< 1:9.13.6~)
+Replaces: bind-libs (<< 1:9.13.6~)
+Description: Shared Libraries used by BIND 9
+ The Berkeley Internet Name Domain (BIND 9) implements an Internet domain
+ name server.  BIND 9 is the most widely-used name server software on the
+ Internet, and is supported by the Internet Software Consortium, www.isc.org.
+ .
+ This package contains a bundle of shared libraries used by BIND 9.
+
+Package: bind9-dev
+Section: devel
+Priority: optional
+Architecture: any
+Multi-Arch: same
+Depends: bind9-libs (= ${binary:Version}),
+         ${misc:Depends},
+         ${shlibs:Depends}
+Breaks: libbind-dev (<< 1:9.16.0~)
+Replaces: libbind-dev (<< 1:9.16.0~)
+Description: Static Libraries and Headers used by BIND 9
+ The Berkeley Internet Name Domain (BIND 9) implements an Internet domain
+ name server.  BIND 9 is the most widely-used name server software on the
+ Internet, and is supported by the Internet Software Consortium, www.isc.org.
+ .
+ This package contains a bundle of static libraries and header files used by
+ BIND 9.
+ .
+ Please be aware that the BIND 9 libraries are considered private by upstream
+ developers and the API and ABI might break at any time.
+
+Package: dnsutils
+Architecture: all
+Depends: bind9-dnsutils,
+         ${misc:Depends}
+Priority: optional
+Section: oldlibs
+Description: Transitional package for bind9-dnsutils
+ This is a transitional package. It can safely be removed.
+
+Package: bind9-dnsutils
+Priority: standard
+Architecture: any
+Depends: bind9-host | host,
+         bind9-libs (= ${binary:Version}),
+         ${misc:Depends},
+         ${shlibs:Depends}
+Breaks: bind-dnsutils (<< 1:9.13.6~),
+        dnsutils (<< 1:9.13.6~)
+Conflicts: bind-dnsutils (<< 1:9.13.6~),
+           dnsutils (<< 1:9.13.6~)
+Provides: dnsutils
+Description: Clients provided with BIND 9
+ The Berkeley Internet Name Domain (BIND 9) implements an Internet domain
+ name server.  BIND 9 is the most widely-used name server software on the
+ Internet, and is supported by the Internet Software Consortium, www.isc.org.
+ .
+ This package delivers various client programs related to DNS that are
+ derived from the BIND 9 source tree.
+ .
+  - dig - query the DNS in various ways
+  - nslookup - the older way to do it
+  - nsupdate - perform dynamic updates (See RFC2136)
diff --git a/debian/copyright b/debian/copyright
new file mode 100644
index 0000000..cb8ab61
--- /dev/null
+++ b/debian/copyright
@@ -0,0 +1,210 @@
+Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
+Upstream-Name: BIND
+Upstream-Contact: Internet Systems Consortium <info@isc.org>
+Source: https://ftp.isc.org/isc/bind9/
+
+Files: *
+Copyright: 2004-2017 Internet Systems Consortium, Inc. ("ISC")
+           1996-2003 Internet Software Consortium
+	   2013-2017 Farsight Security, Inc.
+	   2012 Vadim Goncharov
+	   2009-2012 John Eaglesham
+	   2009-2015 Red Hat
+	   2008 Damien Miller
+	   2004, 2008 Nominet, Ltd.
+	   2004 Masarykova universita
+	   1997-2003 Kungliga Tekniska Högskolan
+	   2002 Nuno M. Rodrigues.
+	   2002 Stichting NLnet
+	   2000-2002 Japan Network Information Center.
+	   2001 Jake Burkholder
+	   1996-2001 Nominum, Inc.
+	   1995-2000 Network Associates, Inc.
+	   2000 Aaron D. Gifford
+	   1999-2000 Nortel Networks Corporation
+	   1996 David Mazieres
+	   1995-1998 WIDE Project
+	   1993 Digital Equipment Corporation.
+	   1985, 1987, 1989, 1990, 1993, 1994 The Regents of the University of California.
+License: MPL-2.0 and ISC and BSD-2-clause and BSD-3-clause
+Comment:
+ The BIND 9 project was originally distributed under permissive
+ ISC licence.  The license on the majority of the files has been
+ changed to MPL-2.0 in the BIND 9.11 release.  However, while the
+ majority of the files are licenced under MPL-2.0, there are files
+ where the portions were contributed to ISC by third parties under
+ different license.  It would serve no useful purpose to duplicate
+ copyright information from every file with a different licence, so
+ this copyright block is just amalgamate of all copyright holders
+ and licenses used in the BIND 9 project. You need to look at the
+ individual files to get the specific license that covers that file.
+
+Files: lib/isc/hp.c lib/isc/include/isc/hp.h
+Copyright: 2018-2020 Internet Systems Consortium, Inc. ("ISC")
+	   2014-2016, Pedro Ramalhete, Andreia Correia
+License: MPL-2.0 and BSD-3-clause
+Comment:
+ This work is based on C++ code available from:
+ https://github.com/pramalhe/ConcurrencyFreaks/
+
+Files: lib/isc/random.c
+Copyright: 2018-2020 Internet Systems Consortium, Inc. ("ISC")
+	   1996 David Mazieres
+	   2008 Damien Miller
+License: MPL-2.0 and ISC
+
+Files: lib/isc/siphash.c
+Copyright: 2018-2020 Internet Systems Consortium, Inc. ("ISC")
+	   2012-2016 Jean-Philippe Aumasson
+	   2012-2014 Daniel J. Bernstein
+License: MPL-2.0 and CC0-1.0
+Comment:
+ The SipHash in BIND 9 is based on SipHash reference C implementation.
+
+Files: lib/isc/include/pkcs11/pkcs11.h
+Copyright: 2006-2007 g10 Code GmbH
+	   2006 Andreas Jellinghaus
+	   2017 Red Hat, Inc.
+License:
+ This file is free software; as a special exception the author gives
+ unlimited permission to copy and/or distribute it, with or without
+ modifications, as long as this notice is preserved.
+ .
+ This file is distributed in the hope that it will be useful, but
+ WITHOUT ANY WARRANTY, to the extent permitted by law; without even
+ the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR
+ PURPOSE.  */
+Comment: The pkcs11.h header was imported from libp11 project
+
+Files: lib/isc/tests/random_test.c
+Copyright: 2004-2017 Internet Systems Consortium, Inc. ("ISC")
+           1996-2003 Internet Software Consortium
+	   1985, 1987, 2000 Stephen L. Moshier
+License: MPL-2.0 and public-domain
+
+Files: contrib/dlz/modules/mysqldyn/dlz_mysqldyn_mod.c
+Copyright: 2004-2017 Internet Systems Consortium, Inc. ("ISC")
+	   2014 Maui Systems Ltd
+License: MPL-2.0 and ISC
+
+Files: contrib/dlz/modules/perl/
+Copyright: 2004-2017 Internet Systems Consortium, Inc. ("ISC")
+	   2009-2012 John Eaglesham
+	   2002 Stichting NLnet
+License: MPL-2.0 and ISC
+
+Files: contrib/dlz/modules/wildcard/
+Copyright: 2004-2017 Internet Systems Consortium, Inc. ("ISC")
+	   2012 Vadim Goncharov
+	   2002 Stichting NLnet
+License: MPL-2.0 and ISC
+
+Files: m4/
+Copyright: 2004-2017 Internet Systems Consortium, Inc. ("ISC")
+	   2008 Guido U. Draheim
+	   2011 Maarten Bosmans
+	   2009, 2010 Zmanda Inc.
+	   2009, 2010 Dustin J. Mitchell
+	   2008 Steven G. Johnson
+	   2011 Daniel Richard G.
+	   2009 Filippo Giunchedi
+	   2011 The Board of Trustees of the Leland Stanford Junior University
+	   2011 Russ Allbery <rra@stanford.edu>
+	   2013 Bastien ROUCARIES
+	   2004, 2011-2015 Free Software Foundation, Inc.
+License:
+ Copying and distribution of this file, with or without modification, are
+ permitted in any medium without royalty provided the copyright notice
+ and this notice are preserved. This file is offered as-is, without any
+ warranty.
+Comment:
+ The files from m4/ directory were imported from autoconf-archive, and libtool.
+
+Files: debian/
+Copyright: 2007-2017 LaMont Jones
+	   2013-2017 Michael Gilbert
+           2017-2019 Ondřej Surý
+	   2008-2016 Jamie Strandboge
+License: ISC or MPL-2.0
+
+License: MPL-2.0
+ This Source Code Form is subject to the terms of the Mozilla Public
+ License, v. 2.0.
+ .
+ On Debian systems, the full copy of MPL-2.0 can be found at
+ /usr/share/common-licenses/MPL-2.0
+
+License: ISC
+ Permission to use, copy, modify, and/or distribute this software for any
+ purpose with or without fee is hereby granted, provided that the above
+ copyright notice and this permission notice appear in all copies.
+ .
+ THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
+ REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
+ AND FITNESS.  IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
+ INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
+ LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
+ OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
+ PERFORMANCE OF THIS SOFTWARE.
+
+License: BSD-2-clause
+ Redistribution and use in source and binary forms, with or without
+ modification, are permitted provided that the following conditions
+ are met:
+ .
+ 1. Redistributions of source code must retain the above copyright
+ notice, this list of conditions and the following disclaimer.
+ .
+ 2. Redistributions in binary form must reproduce the above copyright
+ notice, this list of conditions and the following disclaimer in the
+ documentation and/or other materials provided with the distribution.
+ .
+ THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+ "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+ LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
+ A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
+ HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT,
+ INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING,
+ BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS
+ OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED
+ AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
+ LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY
+ WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
+ POSSIBILITY OF SUCH DAMAGE.
+
+License: BSD-3-clause
+ Redistribution and use in source and binary forms, with or without
+ modification, are permitted provided that the following conditions
+ are met:
+ .
+ 1. Redistributions of source code must retain the above copyright
+ notice, this list of conditions and the following disclaimer.
+ .
+ 2. Redistributions in binary form must reproduce the above copyright
+ notice, this list of conditions and the following disclaimer in the
+ documentation and/or other materials provided with the distribution.
+ .
+ 3. Neither the name of the copyright holder nor the names of its
+ contributors may be used to endorse or promote products derived from
+ this software without specific prior written permission.
+ .
+ THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+ "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+ LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
+ A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
+ HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT,
+ INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING,
+ BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS
+ OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED
+ AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
+ LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY
+ WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
+ POSSIBILITY OF SUCH DAMAGE.
+
+License: CC0-1.0
+ To the extent possible under law, the author(s) have dedicated all copyright
+ and related and neighboring rights to this software to the public domain
+ worldwide. This software is distributed without any warranty.
+ .
+ On Debian systems, the full copy of CC0-1.0 can be found at
+ /usr/share/common-licenses/CC0-1.0
diff --git a/debian/extras/apparmor.d/usr.sbin.named b/debian/extras/apparmor.d/usr.sbin.named
new file mode 100644
index 0000000..fe14850
--- /dev/null
+++ b/debian/extras/apparmor.d/usr.sbin.named
@@ -0,0 +1,94 @@
+# vim:syntax=apparmor
+# Last Modified: Fri Jun  1 16:43:22 2007
+#include <tunables/global>
+
+profile named /usr/sbin/named flags=(attach_disconnected) {
+  #include <abstractions/base>
+  #include <abstractions/nameservice>
+
+  capability net_bind_service,
+  capability setgid,
+  capability setuid,
+  capability sys_chroot,
+  capability sys_resource,
+
+  # /etc/bind should be read-only for bind
+  # /var/lib/bind is for dynamically updated zone (and journal) files.
+  # /var/cache/bind is for slave/stub data, since we're not the origin of it.
+  # See /usr/share/doc/bind9/README.Debian.gz
+  /etc/bind/** r,
+  /var/lib/bind/** rw,
+  /var/lib/bind/ rw,
+  /var/cache/bind/** lrw,
+  /var/cache/bind/ rw,
+
+  # Database file used by allow-new-zones
+  /var/cache/bind/_default.nzd-lock rwk,
+
+  # gssapi
+  /etc/krb5.keytab kr,
+  /etc/bind/krb5.keytab kr,
+
+  # ssl
+  /etc/ssl/openssl.cnf r,
+
+  # root hints from dns-data-root
+  /usr/share/dns/root.* r,
+
+  # GeoIP data files for GeoIP ACLs
+  /usr/share/GeoIP/** r,
+
+  # dnscvsutil package
+  /var/lib/dnscvsutil/compiled/** rw,
+
+  # Allow changing worker thread names
+  owner @{PROC}/@{pid}/task/@{tid}/comm rw,
+
+  @{PROC}/net/if_inet6 r,
+  @{PROC}/*/net/if_inet6 r,
+  @{PROC}/sys/net/ipv4/ip_local_port_range r,
+  /usr/sbin/named mr,
+  /{,var/}run/named/named.pid w,
+  /{,var/}run/named/session.key w,
+  # support for resolvconf
+  /{,var/}run/named/named.options r,
+
+  # some people like to put logs in /var/log/named/ instead of having
+  # syslog do the heavy lifting.
+  /var/log/named/** rw,
+  /var/log/named/ rw,
+
+  # gssapi
+  /var/lib/sss/pubconf/krb5.include.d/** r,
+  /var/lib/sss/pubconf/krb5.include.d/ r,
+  /var/lib/sss/mc/initgroups r,
+  /etc/gss/mech.d/ r,
+
+  # ldap
+  /etc/ldap/ldap.conf r,
+  /{,var/}run/slapd-*.socket rw,
+
+  # dynamic updates
+  /var/tmp/DNS_* rw,
+
+  # dyndb backends
+  /usr/lib/bind/*.so rm,
+
+  # Samba DLZ
+  /{usr/,}lib/@{multiarch}/samba/bind9/*.so rm,
+  /{usr/,}lib/@{multiarch}/samba/gensec/*.so rm,
+  /{usr/,}lib/@{multiarch}/samba/ldb/*.so rm,
+  /{usr/,}lib/@{multiarch}/ldb/modules/ldb/*.so rm,
+  /var/lib/samba/bind-dns/dns.keytab rk,
+  /var/lib/samba/bind-dns/named.conf r,
+  /var/lib/samba/bind-dns/dns/** rwk,
+  /var/lib/samba/private/dns.keytab rk,
+  /var/lib/samba/private/named.conf r,
+  /var/lib/samba/private/dns/** rwk,
+  /etc/samba/smb.conf r,
+  /dev/urandom rwmk,
+  owner /var/tmp/krb5_* rwk,
+
+  # Site-specific additions and overrides. See local/README for details.
+  #include <local/usr.sbin.named>
+}
diff --git a/debian/extras/etc/db.0 b/debian/extras/etc/db.0
new file mode 100644
index 0000000..e3aabdb
--- /dev/null
+++ b/debian/extras/etc/db.0
@@ -0,0 +1,12 @@
+;
+; BIND reverse data file for broadcast zone
+;
+$TTL	604800
+@	IN	SOA	localhost. root.localhost. (
+			      1		; Serial
+			 604800		; Refresh
+			  86400		; Retry
+			2419200		; Expire
+			 604800 )	; Negative Cache TTL
+;
+@	IN	NS	localhost.
diff --git a/debian/extras/etc/db.127 b/debian/extras/etc/db.127
new file mode 100644
index 0000000..cd05bef
--- /dev/null
+++ b/debian/extras/etc/db.127
@@ -0,0 +1,13 @@
+;
+; BIND reverse data file for local loopback interface
+;
+$TTL	604800
+@	IN	SOA	localhost. root.localhost. (
+			      1		; Serial
+			 604800		; Refresh
+			  86400		; Retry
+			2419200		; Expire
+			 604800 )	; Negative Cache TTL
+;
+@	IN	NS	localhost.
+1.0.0	IN	PTR	localhost.
diff --git a/debian/extras/etc/db.255 b/debian/extras/etc/db.255
new file mode 100644
index 0000000..e3aabdb
--- /dev/null
+++ b/debian/extras/etc/db.255
@@ -0,0 +1,12 @@
+;
+; BIND reverse data file for broadcast zone
+;
+$TTL	604800
+@	IN	SOA	localhost. root.localhost. (
+			      1		; Serial
+			 604800		; Refresh
+			  86400		; Retry
+			2419200		; Expire
+			 604800 )	; Negative Cache TTL
+;
+@	IN	NS	localhost.
diff --git a/debian/extras/etc/db.empty b/debian/extras/etc/db.empty
new file mode 100644
index 0000000..8a12858
--- /dev/null
+++ b/debian/extras/etc/db.empty
@@ -0,0 +1,14 @@
+; BIND reverse data file for empty rfc1918 zone
+;
+; DO NOT EDIT THIS FILE - it is used for multiple zones.
+; Instead, copy it, edit named.conf, and use that copy.
+;
+$TTL	86400
+@	IN	SOA	localhost. root.localhost. (
+			      1		; Serial
+			 604800		; Refresh
+			  86400		; Retry
+			2419200		; Expire
+			  86400 )	; Negative Cache TTL
+;
+@	IN	NS	localhost.
diff --git a/debian/extras/etc/db.local b/debian/extras/etc/db.local
new file mode 100644
index 0000000..2f272d4
--- /dev/null
+++ b/debian/extras/etc/db.local
@@ -0,0 +1,14 @@
+;
+; BIND data file for local loopback interface
+;
+$TTL	604800
+@	IN	SOA	localhost. root.localhost. (
+			      2		; Serial
+			 604800		; Refresh
+			  86400		; Retry
+			2419200		; Expire
+			 604800 )	; Negative Cache TTL
+;
+@	IN	NS	localhost.
+@	IN	A	127.0.0.1
+@	IN	AAAA	::1
diff --git a/debian/extras/etc/named.conf b/debian/extras/etc/named.conf
new file mode 100644
index 0000000..880786a
--- /dev/null
+++ b/debian/extras/etc/named.conf
@@ -0,0 +1,11 @@
+// This is the primary configuration file for the BIND DNS server named.
+//
+// Please read /usr/share/doc/bind9/README.Debian.gz for information on the 
+// structure of BIND configuration files in Debian, *BEFORE* you customize 
+// this configuration file.
+//
+// If you are just adding zones, please do that in /etc/bind/named.conf.local
+
+include "/etc/bind/named.conf.options";
+include "/etc/bind/named.conf.local";
+include "/etc/bind/named.conf.default-zones";
diff --git a/debian/extras/etc/named.conf.default-zones b/debian/extras/etc/named.conf.default-zones
new file mode 100644
index 0000000..1a85ad3
--- /dev/null
+++ b/debian/extras/etc/named.conf.default-zones
@@ -0,0 +1,30 @@
+// prime the server with knowledge of the root servers
+zone "." {
+	type hint;
+	file "/usr/share/dns/root.hints";
+};
+
+// be authoritative for the localhost forward and reverse zones, and for
+// broadcast zones as per RFC 1912
+
+zone "localhost" {
+	type master;
+	file "/etc/bind/db.local";
+};
+
+zone "127.in-addr.arpa" {
+	type master;
+	file "/etc/bind/db.127";
+};
+
+zone "0.in-addr.arpa" {
+	type master;
+	file "/etc/bind/db.0";
+};
+
+zone "255.in-addr.arpa" {
+	type master;
+	file "/etc/bind/db.255";
+};
+
+
diff --git a/debian/extras/etc/named.conf.local b/debian/extras/etc/named.conf.local
new file mode 100644
index 0000000..7a57b10
--- /dev/null
+++ b/debian/extras/etc/named.conf.local
@@ -0,0 +1,8 @@
+//
+// Do any local configuration here
+//
+
+// Consider adding the 1918 zones here, if they are not used in your
+// organization
+//include "/etc/bind/zones.rfc1918";
+
diff --git a/debian/extras/etc/named.conf.options b/debian/extras/etc/named.conf.options
new file mode 100644
index 0000000..4778d18
--- /dev/null
+++ b/debian/extras/etc/named.conf.options
@@ -0,0 +1,24 @@
+options {
+	directory "/var/cache/bind";
+
+	// If there is a firewall between you and nameservers you want
+	// to talk to, you may need to fix the firewall to allow multiple
+	// ports to talk.  See http://www.kb.cert.org/vuls/id/800113
+
+	// If your ISP provided one or more IP addresses for stable 
+	// nameservers, you probably want to use them as forwarders.  
+	// Uncomment the following block, and insert the addresses replacing 
+	// the all-0's placeholder.
+
+	// forwarders {
+	// 	0.0.0.0;
+	// };
+
+	//========================================================================
+	// If BIND logs error messages about the root key being expired,
+	// you will need to update your keys.  See https://www.isc.org/bind-keys
+	//========================================================================
+	dnssec-validation auto;
+
+	listen-on-v6 { any; };
+};
diff --git a/debian/extras/etc/zones.rfc1918 b/debian/extras/etc/zones.rfc1918
new file mode 100644
index 0000000..03b5546
--- /dev/null
+++ b/debian/extras/etc/zones.rfc1918
@@ -0,0 +1,20 @@
+zone "10.in-addr.arpa"      { type master; file "/etc/bind/db.empty"; };
+ 
+zone "16.172.in-addr.arpa"  { type master; file "/etc/bind/db.empty"; };
+zone "17.172.in-addr.arpa"  { type master; file "/etc/bind/db.empty"; };
+zone "18.172.in-addr.arpa"  { type master; file "/etc/bind/db.empty"; };
+zone "19.172.in-addr.arpa"  { type master; file "/etc/bind/db.empty"; };
+zone "20.172.in-addr.arpa"  { type master; file "/etc/bind/db.empty"; };
+zone "21.172.in-addr.arpa"  { type master; file "/etc/bind/db.empty"; };
+zone "22.172.in-addr.arpa"  { type master; file "/etc/bind/db.empty"; };
+zone "23.172.in-addr.arpa"  { type master; file "/etc/bind/db.empty"; };
+zone "24.172.in-addr.arpa"  { type master; file "/etc/bind/db.empty"; };
+zone "25.172.in-addr.arpa"  { type master; file "/etc/bind/db.empty"; };
+zone "26.172.in-addr.arpa"  { type master; file "/etc/bind/db.empty"; };
+zone "27.172.in-addr.arpa"  { type master; file "/etc/bind/db.empty"; };
+zone "28.172.in-addr.arpa"  { type master; file "/etc/bind/db.empty"; };
+zone "29.172.in-addr.arpa"  { type master; file "/etc/bind/db.empty"; };
+zone "30.172.in-addr.arpa"  { type master; file "/etc/bind/db.empty"; };
+zone "31.172.in-addr.arpa"  { type master; file "/etc/bind/db.empty"; };
+
+zone "168.192.in-addr.arpa" { type master; file "/etc/bind/db.empty"; };
diff --git a/debian/extras/if-reconfig.d/bind9 b/debian/extras/if-reconfig.d/bind9
new file mode 100755
index 0000000..d06965f
--- /dev/null
+++ b/debian/extras/if-reconfig.d/bind9
@@ -0,0 +1,15 @@
+#!/bin/sh -e
+# Called when an interfaces comes up or down
+# Written by LaMont Jones <lamont@debian.org>
+
+# kick named as needed
+
+# If /usr isn't mounted yet, silently bail.
+if [ ! -d /usr/sbin ]; then
+	exit 0
+fi
+
+# if named is running, reconfig it.
+rndc reconfig >/dev/null 2>&1 &
+
+exit 0
diff --git a/debian/extras/insserv.conf.d/bind9 b/debian/extras/insserv.conf.d/bind9
new file mode 100644
index 0000000..1861a99
--- /dev/null
+++ b/debian/extras/insserv.conf.d/bind9
@@ -0,0 +1 @@
+$named bind9
diff --git a/debian/extras/ufw/bind9 b/debian/extras/ufw/bind9
new file mode 100644
index 0000000..6cd6fca
--- /dev/null
+++ b/debian/extras/ufw/bind9
@@ -0,0 +1,5 @@
+[Bind9]
+title=Internet Domain Name Server
+description=The Berkeley Internet Name Domain (BIND) implements an Internet domain name server.
+ports=53
+
diff --git a/debian/gbp.conf b/debian/gbp.conf
new file mode 100644
index 0000000..1f57306
--- /dev/null
+++ b/debian/gbp.conf
@@ -0,0 +1,10 @@
+[DEFAULT]
+debian-branch = debian/bullseye
+upstream-branch = upstream/9.16
+pristine-tar = True
+
+[dch]
+meta = 1
+
+[import-orig]
+filter = ['.gitignore']
diff --git a/debian/named-resolvconf.service b/debian/named-resolvconf.service
new file mode 100644
index 0000000..60e3a99
--- /dev/null
+++ b/debian/named-resolvconf.service
@@ -0,0 +1,15 @@
+[Unit]
+Description=local BIND 9 via resolvconf
+Documentation=man:named(8) man:resolvconf(8)
+PartOf=named.service
+After=named.service
+ConditionFileIsExecutable=/sbin/resolvconf
+
+[Service]
+Type=oneshot
+RemainAfterExit=yes
+ExecStart=/bin/sh -c 'echo nameserver 127.0.0.1 | /sbin/resolvconf -a lo.named'
+ExecStop=/sbin/resolvconf -d lo.named
+
+[Install]
+WantedBy=named.service
diff --git a/debian/patches/0001-Add_--install-layout=deb_to_setup.py_call.patch b/debian/patches/0001-Add_--install-layout=deb_to_setup.py_call.patch
new file mode 100644
index 0000000..0ef8534
--- /dev/null
+++ b/debian/patches/0001-Add_--install-layout=deb_to_setup.py_call.patch
@@ -0,0 +1,24 @@
+From: Debian DNS Packaging <pkg-dns-devel@lists.alioth.debian.org>
+Date: Fri, 24 Nov 2017 16:26:55 +0000
+Subject: Add_--install-layout=deb_to_setup.py_call
+
+---
+ bin/python/Makefile.in | 4 ++--
+ 1 file changed, 2 insertions(+), 2 deletions(-)
+
+diff --git a/bin/python/Makefile.in b/bin/python/Makefile.in
+index dc1af40..a87927a 100644
+--- a/bin/python/Makefile.in
++++ b/bin/python/Makefile.in
+@@ -45,9 +45,9 @@ install:: ${TARGETS} installdirs
+ 	${INSTALL_SCRIPT} dnssec-keymgr ${DESTDIR}${sbindir}
+ 	if test -n "${PYTHON}" ; then \
+ 		if test -n "${DESTDIR}" ; then \
+-			${PYTHON} ${srcdir}/setup.py install --root=${DESTDIR} --prefix=${prefix} @PYTHON_INSTALL_LIB@ ; \
++			${PYTHON} ${srcdir}/setup.py install --root=${DESTDIR} --prefix=${prefix} @PYTHON_INSTALL_LIB@ --install-layout=deb ; \
+ 		else \
+-			${PYTHON} ${srcdir}/setup.py install --prefix=${prefix} @PYTHON_INSTALL_LIB@ ; \
++			${PYTHON} ${srcdir}/setup.py install --prefix=${prefix} @PYTHON_INSTALL_LIB@ --install-layout=deb ; \
+ 		fi ; \
+ 		rm -rf build ; \
+ 	fi
diff --git a/debian/patches/0002-python-fix-for-dist-packages.patch b/debian/patches/0002-python-fix-for-dist-packages.patch
new file mode 100644
index 0000000..971bfa0
--- /dev/null
+++ b/debian/patches/0002-python-fix-for-dist-packages.patch
@@ -0,0 +1,49 @@
+From: Jim Popovitch <jimpop@domainmail.org>
+Date: Sat, 13 Jul 2019 17:00:35 +0000
+Subject: python fix for dist-packages
+
+---
+ bin/python/dnssec-checkds.py.in  | 2 +-
+ bin/python/dnssec-coverage.py.in | 2 +-
+ bin/python/dnssec-keymgr.py.in   | 2 +-
+ 3 files changed, 3 insertions(+), 3 deletions(-)
+
+diff --git a/bin/python/dnssec-checkds.py.in b/bin/python/dnssec-checkds.py.in
+index 3ec15e2..e70d0c4 100644
+--- a/bin/python/dnssec-checkds.py.in
++++ b/bin/python/dnssec-checkds.py.in
+@@ -22,7 +22,7 @@ if os.name != "nt":
+         sys.path.insert(
+             1,
+             os.path.join(
+-                "@prefix@", "lib", "python" + sys.version[:3], "site-packages"
++                "@prefix@", "lib", "python" + sys.version[:3], "dist-packages"
+             ),
+         )
+ 
+diff --git a/bin/python/dnssec-coverage.py.in b/bin/python/dnssec-coverage.py.in
+index a82dfe3..7d4f6ba 100644
+--- a/bin/python/dnssec-coverage.py.in
++++ b/bin/python/dnssec-coverage.py.in
+@@ -22,7 +22,7 @@ if os.name != "nt":
+         sys.path.insert(
+             1,
+             os.path.join(
+-                "@prefix@", "lib", "python" + sys.version[:3], "site-packages"
++                "@prefix@", "lib", "python" + sys.version[:3], "dist-packages"
+             ),
+         )
+ 
+diff --git a/bin/python/dnssec-keymgr.py.in b/bin/python/dnssec-keymgr.py.in
+index f8ee013..3bfa02e 100644
+--- a/bin/python/dnssec-keymgr.py.in
++++ b/bin/python/dnssec-keymgr.py.in
+@@ -22,7 +22,7 @@ if os.name != "nt":
+         sys.path.insert(
+             1,
+             os.path.join(
+-                "@prefix@", "lib", "python" + sys.version[:3], "site-packages"
++                "@prefix@", "lib", "python" + sys.version[:3], "dist-packages"
+             ),
+         )
+ 
diff --git a/debian/patches/0003-Disable-sphinx-build-strict-mode.patch b/debian/patches/0003-Disable-sphinx-build-strict-mode.patch
new file mode 100644
index 0000000..e9d7406
--- /dev/null
+++ b/debian/patches/0003-Disable-sphinx-build-strict-mode.patch
@@ -0,0 +1,33 @@
+From: =?utf-8?b?T25kxZllaiBTdXLDvQ==?= <ondrej@debian.org>
+Date: Wed, 21 Sep 2022 12:53:09 +0200
+Subject: Disable sphinx-build strict mode
+
+---
+ doc/arm/Makefile.in | 1 -
+ doc/man/Makefile.in | 1 -
+ 2 files changed, 2 deletions(-)
+
+diff --git a/doc/arm/Makefile.in b/doc/arm/Makefile.in
+index ce365e3..806f577 100644
+--- a/doc/arm/Makefile.in
++++ b/doc/arm/Makefile.in
+@@ -29,7 +29,6 @@ SPHINXBUILD = @SPHINX_BUILD@
+ SPHINXBUILDDIR = ${builddir}/_build
+ 
+ common_SPHINXOPTS =	\
+-	-W		\
+ 	-a		\
+ 	-v		\
+ 	-c "${abs_srcdir}"
+diff --git a/doc/man/Makefile.in b/doc/man/Makefile.in
+index 75794f7..70b66a2 100644
+--- a/doc/man/Makefile.in
++++ b/doc/man/Makefile.in
+@@ -161,7 +161,6 @@ SPHINXBUILDDIR = ${builddir}/_build
+ SPHINX_W = -W
+ 
+ common_SPHINXOPTS =		\
+-	$(SPHINX_W)		\
+ 	-a			\
+ 	-v			\
+ 	-c "${abs_srcdir}"
diff --git a/debian/patches/series b/debian/patches/series
new file mode 100644
index 0000000..12673d3
--- /dev/null
+++ b/debian/patches/series
@@ -0,0 +1,3 @@
+0001-Add_--install-layout=deb_to_setup.py_call.patch
+0002-python-fix-for-dist-packages.patch
+0003-Disable-sphinx-build-strict-mode.patch
diff --git a/debian/po/POTFILES.in b/debian/po/POTFILES.in
new file mode 100644
index 0000000..cef83a3
--- /dev/null
+++ b/debian/po/POTFILES.in
@@ -0,0 +1 @@
+[type: gettext/rfc822deb] templates
diff --git a/debian/po/cs.po b/debian/po/cs.po
new file mode 100644
index 0000000..0f916c8
--- /dev/null
+++ b/debian/po/cs.po
@@ -0,0 +1,67 @@
+# Czech translation of bind9 debconf messages.
+# Copyright (C) YEAR THE PACKAGE'S COPYRIGHT HOLDER
+# This file is distributed under the same license as the bind9 package.
+# Miroslav Kure <kurem@debian.cz>, 2008
+#
+msgid ""
+msgstr ""
+"Project-Id-Version: bind9\n"
+"Report-Msgid-Bugs-To: Source: bind9@packages.debian.org\n"
+"POT-Creation-Date: 2008-06-13 16:56-0600\n"
+"PO-Revision-Date: 2008-06-15 14:38+0200\n"
+"Last-Translator: Miroslav Kure <kurem@debian.cz>\n"
+"Language-Team: Czech <debian-l10n-czech@lists.debian.org>\n"
+"Language: cs\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid "User account for running the BIND9 daemon:"
+msgstr "Uživatelský účet pro běh daemona BIND9:"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid ""
+"The default is to run the BIND9 daemon (named) under the 'bind' user "
+"account. To use a different account, please enter the appropriate username."
+msgstr ""
+"Ve výchozím nastavení se daemon BINDu9 (named) spouští pod účtem uživatele "
+"„bind“. Pro použití jiného účtu zadejte jeho jméno."
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid "Other startup options for named:"
+msgstr "Další spouštěcí parametry pro named:"
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid ""
+"Please provide any additional options (other than username) that should be "
+"passed to the BIND9 daemon (named) on startup."
+msgstr ""
+"Zadejte prosím případné další parametry (mimo uživatelského účtu), které se "
+"mají předat daemonu BINDu9 (named) při každém spuštění."
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid "Should resolv.conf settings be overridden?"
+msgstr "Má se přepsat nastavení v resolv.conf?"
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid ""
+"Please choose whether the resolver should be forced to use the local BIND9 "
+"daemon (named) rather than what the current connection recommends, when this "
+"machine moves around."
+msgstr ""
+"Rozhodněte se, zda se má přepsat nastavení resolveru tak, aby vždy používal "
+"lokální daemon BINDu9 (named) namísto serveru, který doporučí aktuální "
+"připojení."
diff --git a/debian/po/da.po b/debian/po/da.po
new file mode 100644
index 0000000..e9a2df1
--- /dev/null
+++ b/debian/po/da.po
@@ -0,0 +1,67 @@
+# Danish translation bind9.
+# Copyright (C) 2010 bind9 & Joe Hansen.
+# This file is distributed under the same license as the bind9 package.
+# Joe Hansen <joedalton2@yahoo.dk>, 2010.
+#
+msgid ""
+msgstr ""
+"Project-Id-Version: bind9\n"
+"Report-Msgid-Bugs-To: Source: bind9@packages.debian.org\n"
+"POT-Creation-Date: 2008-06-13 16:56-0600\n"
+"PO-Revision-Date: 2010-10-07 17:30+01:00\n"
+"Last-Translator: Joe Hansen <joedalton2@yahoo.dk>\n"
+"Language-Team: Danish <debian-l10n-danish@lists.debian.org> \n"
+"Language: \n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid "User account for running the BIND9 daemon:"
+msgstr "Brugerkonto til kørsel af BIND9-dæmonen:"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid ""
+"The default is to run the BIND9 daemon (named) under the 'bind' user "
+"account. To use a different account, please enter the appropriate username."
+msgstr ""
+"Standarden er at køre BIND9-dæmonen (navngivet) under brugerkontoen »bind«. "
+"For at bruge en anden konto, så indtast venligst et passende brugernavn."
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid "Other startup options for named:"
+msgstr "Andre opstartsindstillinger for navngivet:"
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid ""
+"Please provide any additional options (other than username) that should be "
+"passed to the BIND9 daemon (named) on startup."
+msgstr ""
+"Angiv venligst eventuelle yderligere indstillinger (udover brugernavnet) som "
+"skal videresendes til BIND9-dæmonen (navngivet) ved opstart."
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid "Should resolv.conf settings be overridden?"
+msgstr "Skal opsætningen af resolv.conf overskrives?"
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid ""
+"Please choose whether the resolver should be forced to use the local BIND9 "
+"daemon (named) rather than what the current connection recommends, when this "
+"machine moves around."
+msgstr ""
+"Vælg venligst hvorvidt opløseren skal tvinges til at bruge den lokale BIND9-"
+"dæmon (navngivet), frem for hvad den aktuelle forbindelse anbefaler, når "
+"denne maskine flytter rundt."
diff --git a/debian/po/de.po b/debian/po/de.po
new file mode 100644
index 0000000..b2a18df
--- /dev/null
+++ b/debian/po/de.po
@@ -0,0 +1,84 @@
+# Translation of bind9 debconf templates to German
+# (C) Helge Kreutzmann <debian@helgefjell.de>, 2008.
+# This file is distributed under the same license as the bind9 package.
+#
+msgid ""
+msgstr ""
+"Project-Id-Version: bind9 1:9.5.0.dfsg-2\n"
+"Report-Msgid-Bugs-To: Source: bind9@packages.debian.org\n"
+"POT-Creation-Date: 2008-06-13 16:56-0600\n"
+"PO-Revision-Date: 2008-06-16 20:22+0200\n"
+"Last-Translator: Helge Kreutzmann <debian@helgefjell.de>\n"
+"Language-Team: de <debian-l10n-german@lists.debian.org>\n"
+"Language: \n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=iso-8859-15\n"
+"Content-Transfer-Encoding: 8bit\n"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid "User account for running the BIND9 daemon:"
+msgstr "Benutzerkonto, unter dessen Kennung der BIND9-Daemon laufen soll:"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid ""
+"The default is to run the BIND9 daemon (named) under the 'bind' user "
+"account. To use a different account, please enter the appropriate username."
+msgstr ""
+"Standardm��ig wird der BIND9-Daemon (Named) unter der Kennung des Benutzers "
+"�bind� betrieben. Um ein anderes Benutzerkonto auszuw�hlen, geben Sie bitte "
+"den entsprechenden Benutzernamen ein."
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid "Other startup options for named:"
+msgstr "Weitere Optionen f�r den Start des Named:"
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid ""
+"Please provide any additional options (other than username) that should be "
+"passed to the BIND9 daemon (named) on startup."
+msgstr ""
+"Bitte geben Sie hier die zus�tzlichen Optionen (au�er dem Benutzernamen) "
+"ein, die dem Bind9-Daemon (Named) beim Starten �bergeben werden sollen."
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid "Should resolv.conf settings be overridden?"
+msgstr "Sollen die Einstellungen in resolv.conf ignoriert werden?"
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid ""
+"Please choose whether the resolver should be forced to use the local BIND9 "
+"daemon (named) rather than what the current connection recommends, when this "
+"machine moves around."
+msgstr ""
+"Bitte w�hlen Sie aus, ob der Namensaufl�ser (Resolver) dazu gezwungen werden "
+"soll, den lokalen BIND9-Daemon (Named) zu verwenden, statt den aktuellen "
+"Verbindungsempfehlungen zu folgen, wenn diese Maschine bewegt wird."
+
+#~ msgid "Options that should be passed at startup to bind9"
+#~ msgstr "Optionen, die beim Starten an Bind9 weitergegeben werden sollen"
+
+#~ msgid "which user should bind9 run as?"
+#~ msgstr "Unter welcher Benutzerkennung soll Bind9 laufen?"
+
+#~ msgid ""
+#~ "The default is to start bind9 as bind user, if you would  like to change "
+#~ "that, please give here the username as which  bind9 should start as."
+#~ msgstr ""
+#~ "Standardm��ig startet Bind9 unter der Benutzerkennung �bind�. Falls Sie "
+#~ "dies �ndern m�chten geben Sie hier bitte den Benutzernamen ein, unter "
+#~ "dessen Kennung Bind9 starten soll."
+
+#~ msgid "Should resolvconf run when bind9 starts up?"
+#~ msgstr "Soll Resolvconf laufen, wenn Bind9 startet?"
diff --git a/debian/po/es.po b/debian/po/es.po
new file mode 100644
index 0000000..c909428
--- /dev/null
+++ b/debian/po/es.po
@@ -0,0 +1,86 @@
+# bind9 translation to spanish
+# Copyright (C) 2008 Software in the Public Interest
+# This file is distributed under the same license as the bind9 package.
+# Changes:
+# - Initial translation
+# Ignacio Mondino <ignacio.mondino@gmail.com>, 2008
+# Traductores, si no conoce el formato PO, merece la pena leer la 
+# documentación de gettext, especialmente las secciones dedicadas a este
+# formato, por ejemplo ejecutando:
+# info -n '(gettext)PO Files'
+# info -n '(gettext)Header Entry'
+# Equipo de traducción al español, por favor lean antes de traducir
+# los siguientes documentos:
+# - El proyecto de traducción de Debian al español
+# http://www.debian.org/intl/spanish
+# especialmente las notas de traducción en
+# http://www.debian.org/intl/spanish/notas
+# - La guía de traducción de po's de debconf:
+# /usr/share/doc/po-debconf/README-trans
+# o http://www.debian.org/intl/l10n/po-debconf/README-trans
+#
+#
+msgid ""
+msgstr ""
+"Project-Id-Version: bind9_1:9.5.0.dfsg-3\n"
+"Report-Msgid-Bugs-To: Source: bind9@packages.debian.org\n"
+"POT-Creation-Date: 2008-06-13 16:56-0600\n"
+"PO-Revision-Date: 2008-07-08 20:18-0300\n"
+"Last-Translator: Ignacio Mondino <ignacio.mondino@gmail.com>\n"
+"Language-Team: Debian Spanish team <debian-l10n-spanish@lists.debian.org>\n"
+"Language: \n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid "User account for running the BIND9 daemon:"
+msgstr "Cuenta de usuario que ejecuta el demonio BIND9:"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid ""
+"The default is to run the BIND9 daemon (named) under the 'bind' user "
+"account. To use a different account, please enter the appropriate username."
+msgstr ""
+"La cuenta de usuario por omisión que ejecuta el demonio BIND9 («named») es "
+"«bind». Para usar una cuenta diferente, por favor ingrese el nombre de "
+"usuario apropiado."
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid "Other startup options for named:"
+msgstr "Otras opciones de inicio para «named»:"
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid ""
+"Please provide any additional options (other than username) that should be "
+"passed to the BIND9 daemon (named) on startup."
+msgstr ""
+"Ingrese cualquier opción adicional (además del nombre de usuario) que "
+"debiera pasarse como parámetro al demonio BIND9 («named») al inicio del "
+"sistema."
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid "Should resolv.conf settings be overridden?"
+msgstr "¿Debería sobreescribirse el archivo «resolv.conf»?"
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid ""
+"Please choose whether the resolver should be forced to use the local BIND9 "
+"daemon (named) rather than what the current connection recommends, when this "
+"machine moves around."
+msgstr ""
+"Indique si se debería forzar al cliente a utilizar el demonio BIND9 "
+"(«named») local en lugar de lo que la conexión actual recomiende, cuando "
+"este equipo este en movimiento."
diff --git a/debian/po/eu.po b/debian/po/eu.po
new file mode 100644
index 0000000..d0d0acf
--- /dev/null
+++ b/debian/po/eu.po
@@ -0,0 +1,68 @@
+# translation of eu.po to Euskara
+# Copyright (C) YEAR THE PACKAGE'S COPYRIGHT HOLDER
+# This file is distributed under the same license as the PACKAGE package.
+#
+# Piarres Beobide <pi@beobide.net>, 2009.
+msgid ""
+msgstr ""
+"Project-Id-Version: eu\n"
+"Report-Msgid-Bugs-To: Source: bind9@packages.debian.org\n"
+"POT-Creation-Date: 2008-06-13 16:56-0600\n"
+"PO-Revision-Date: 2009-02-22 10:36+0100\n"
+"Last-Translator: Piarres Beobide <pi@beobide.net>\n"
+"Language-Team: Euskara <debian-l10n-basque@lists.debian.org>\n"
+"Language: \n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+"X-Generator: KBabel 1.11.4\n"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid "User account for running the BIND9 daemon:"
+msgstr "BIND9 exekutatuko duen erabiltzaile kontua:"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid ""
+"The default is to run the BIND9 daemon (named) under the 'bind' user "
+"account. To use a different account, please enter the appropriate username."
+msgstr ""
+"Lehenetsia BIND9 deabrua (named) 'bind' erabiltzaile kontuarekin exekutatzea "
+"da. Beste kontu bat erabiltzeko, idatzi dagokion erabiltzaile-izena"
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid "Other startup options for named:"
+msgstr "Beste abio aukera batzuek named-rentzat:"
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid ""
+"Please provide any additional options (other than username) that should be "
+"passed to the BIND9 daemon (named) on startup."
+msgstr ""
+"Mesedez zehaztu BIND9 deabruari abioan pasa behar zaizkion beste aukera "
+"gehigarriak (erabiltzaile-izenaz beste)."
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid "Should resolv.conf settings be overridden?"
+msgstr "resolv.conf ezarpenak gainidatzi behar al dira?"
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid ""
+"Please choose whether the resolver should be forced to use the local BIND9 "
+"daemon (named) rather than what the current connection recommends, when this "
+"machine moves around."
+msgstr ""
+"Mesedez hautatu ebazlea nola behartu behar den BIND9 deabru kopia lokala "
+"erabiltzeko ekipo hau mugitzen ari denean konexioak gomendatzen dionaren "
+"ordez."
diff --git a/debian/po/fi.po b/debian/po/fi.po
new file mode 100644
index 0000000..ef9aae0
--- /dev/null
+++ b/debian/po/fi.po
@@ -0,0 +1,64 @@
+msgid ""
+msgstr ""
+"Project-Id-Version: bind9\n"
+"Report-Msgid-Bugs-To: Source: bind9@packages.debian.org\n"
+"POT-Creation-Date: 2008-06-13 16:56-0600\n"
+"PO-Revision-Date: 2008-07-13 08:08-0000\n"
+"Last-Translator: Esko Arajärvi <edu@iki.fi>\n"
+"Language-Team: Finnish <debian-l10n-finnish@lists.debian.org>\n"
+"Language: fi\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=utf-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+"X-Poedit-Language: Finnish\n"
+"X-Poedit-Country: FINLAND\n"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid "User account for running the BIND9 daemon:"
+msgstr "Käyttäjätunnus, jolla BIND9-taustaohjelmaa ajetaan:"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid ""
+"The default is to run the BIND9 daemon (named) under the 'bind' user "
+"account. To use a different account, please enter the appropriate username."
+msgstr ""
+"Oletuksena BIND9-taustaohjelmaa (named) ajetaan käyttäjätunnuksella ”bind”. "
+"Jos halutaan käyttää jotain muuta tunnusta, syötä se tähän."
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid "Other startup options for named:"
+msgstr "Ohjelman named muut käynnistysvalitsimet:"
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid ""
+"Please provide any additional options (other than username) that should be "
+"passed to the BIND9 daemon (named) on startup."
+msgstr ""
+"Anna mahdolliset muut valitsimet (muut kuin käyttäjätunnus), jotka BIND9-"
+"taustaohjelmalle (named) tulisi antaa käynnistyksessä."
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid "Should resolv.conf settings be overridden?"
+msgstr "Tulisiko tiedoston resolv.conf asetukset jättää huomioitta?"
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid ""
+"Please choose whether the resolver should be forced to use the local BIND9 "
+"daemon (named) rather than what the current connection recommends, when this "
+"machine moves around."
+msgstr ""
+"Valitse tulisiko selvittäjä pakottaa käyttämään paikallista BIND9-"
+"taustaohjelmaa (named) sen sijaan mitä nykyinen yhteys suosittelee, kun "
+"konetta siirrellään eri paikkoihin."
diff --git a/debian/po/fr.po b/debian/po/fr.po
new file mode 100644
index 0000000..757f05d
--- /dev/null
+++ b/debian/po/fr.po
@@ -0,0 +1,69 @@
+# Translation of bind9 debconf templates to French
+# Copyright (C) 2008 CALARESU Luc <luc.calaresu@gmail.com>
+# This file is distributed under the same license as the bind9 package.
+# CALARESU Luc <luc.calaresu@gmail.com>, 2008.
+#
+#
+msgid ""
+msgstr ""
+"Project-Id-Version: bind9\n"
+"Report-Msgid-Bugs-To: Source: bind9@packages.debian.org\n"
+"POT-Creation-Date: 2008-06-13 16:56-0600\n"
+"PO-Revision-Date: 2008-06-14 14:26+0200\n"
+"Last-Translator: CALARESU Luc <luc.calaresu@gmail.com>\n"
+"Language-Team: French <debian-l10n-french@lists.debian.org>\n"
+"Language: fr\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid "User account for running the BIND9 daemon:"
+msgstr "Identifiant pour l'exécution du démon de BIND9 :"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid ""
+"The default is to run the BIND9 daemon (named) under the 'bind' user "
+"account. To use a different account, please enter the appropriate username."
+msgstr ""
+"Par défaut, le démon de BIND9 est lancé avec les privilèges de l'identifiant "
+"« bind ». Si vous souhaitez utiliser un autre identifiant, veuillez "
+"l'indiquer ici."
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid "Other startup options for named:"
+msgstr "Autres options à transmettre pour « named » :"
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid ""
+"Please provide any additional options (other than username) that should be "
+"passed to the BIND9 daemon (named) on startup."
+msgstr ""
+"Veuillez indiquer toute option supplémentaire (autre que l'identifiant) qui "
+"doit être transmise au démarrage du démon de BIND9 (« named »)."
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid "Should resolv.conf settings be overridden?"
+msgstr "Faut-il écraser les paramètres de resolv.conf ?"
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid ""
+"Please choose whether the resolver should be forced to use the local BIND9 "
+"daemon (named) rather than what the current connection recommends, when this "
+"machine moves around."
+msgstr ""
+"Veuillez choisir si la résolution de noms doit utiliser le démon BIND9 local "
+"(« named ») plutôt que les paramètres recommandés pour la connexion "
+"actuelle, lorsque cette machine est déplacée."
diff --git a/debian/po/gl.po b/debian/po/gl.po
new file mode 100644
index 0000000..f299cb3
--- /dev/null
+++ b/debian/po/gl.po
@@ -0,0 +1,66 @@
+# Galician translation of bind9's debconf templates
+# This file is distributed under the same license as the bind9 package.
+# Jacobo Tarrio <jtarrio@debian.org>, 2008.
+#
+msgid ""
+msgstr ""
+"Project-Id-Version: bind9\n"
+"Report-Msgid-Bugs-To: Source: bind9@packages.debian.org\n"
+"POT-Creation-Date: 2008-06-13 16:56-0600\n"
+"PO-Revision-Date: 2008-06-14 11:36+0100\n"
+"Last-Translator: Jacobo Tarrio <jtarrio@debian.org>\n"
+"Language-Team: Galician <proxecto@trasno.net>\n"
+"Language: gl\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid "User account for running the BIND9 daemon:"
+msgstr "Conta de usuario que executa o servizo de BIND9:"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid ""
+"The default is to run the BIND9 daemon (named) under the 'bind' user "
+"account. To use a different account, please enter the appropriate username."
+msgstr ""
+"A elección por defecto é executar o servizo de BIND9 (named) baixo a conta "
+"de usuario \"bind\". Para empregar unha conta diferente, introduza o nome."
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid "Other startup options for named:"
+msgstr "Outras opcións de inicio para named:"
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid ""
+"Please provide any additional options (other than username) that should be "
+"passed to the BIND9 daemon (named) on startup."
+msgstr ""
+"Forneza as opcións adicionais (que non sexan o nome de usuario) que se deban "
+"pasar ao servizo de BIND9 (named) no inicio."
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid "Should resolv.conf settings be overridden?"
+msgstr "¿Quere substituír a configuración de resolv.conf?"
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid ""
+"Please choose whether the resolver should be forced to use the local BIND9 "
+"daemon (named) rather than what the current connection recommends, when this "
+"machine moves around."
+msgstr ""
+"Indique se quere forzar o resolvedor a que empregue o servizo de BIND9 local "
+"(named) no canto do que recomenda a conexión actual, cando esta máquina "
+"estea en movemento."
diff --git a/debian/po/id.po b/debian/po/id.po
new file mode 100644
index 0000000..e389970
--- /dev/null
+++ b/debian/po/id.po
@@ -0,0 +1,51 @@
+msgid ""
+msgstr ""
+"Project-Id-Version: bind9\n"
+"Report-Msgid-Bugs-To: Source: bind9@packages.debian.org\n"
+"POT-Creation-Date: 2008-06-13 16:56-0600\n"
+"PO-Revision-Date: \n"
+"Last-Translator: Mahyuddin Susanto <udienz@gmail.com>\n"
+"Language-Team: Debian Indonesia Translator <debian-l10n-indonesian@lists.debian.org>\n"
+"Language: \n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+"X-Poedit-Language: Indonesian\n"
+"X-Poedit-Country: INDONESIA\n"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid "User account for running the BIND9 daemon:"
+msgstr "Akun pengguna untuk menjalankan daemon BIND9:"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid "The default is to run the BIND9 daemon (named) under the 'bind' user account. To use a different account, please enter the appropriate username."
+msgstr "Bawaan dari daemon BIND9 adalah menjalankan dengan user akun 'bind'. Untuk menggunakan akun berbeda, silakan masukkan nama pengguna yang sesuai."
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid "Other startup options for named:"
+msgstr "Opsi lain startup untuk named:"
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid "Please provide any additional options (other than username) that should be passed to the BIND9 daemon (named) on startup."
+msgstr "Harap menyediakan opsi tambahan (selain nama pengguna) yang digunakan daemon BIND9 untuk startup"
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid "Should resolv.conf settings be overridden?"
+msgstr "haruskah resolv.conf ditimpa?"
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid "Please choose whether the resolver should be forced to use the local BIND9 daemon (named) rather than what the current connection recommends, when this machine moves around."
+msgstr "Silakan tentukan resolver mana yang akan digunakan untuk daemon lokal BIND9 (named) dari koneksi sekarang yang digunakan, ketika mesin ini berjalan"
+
diff --git a/debian/po/it.po b/debian/po/it.po
new file mode 100644
index 0000000..2e3ef2e
--- /dev/null
+++ b/debian/po/it.po
@@ -0,0 +1,69 @@
+# translation of bind9_1:9.5.0.dfsg.P1-2_templates.po to Italian
+# Copyright (C) YEAR THE PACKAGE'S COPYRIGHT HOLDER
+# This file is distributed under the same license as the PACKAGE package.
+#
+# Alex <animainvendita@gmail.com>, 2008.
+msgid ""
+msgstr ""
+"Project-Id-Version: bind9_1:9.5.0.dfsg.P1-2_templates\n"
+"Report-Msgid-Bugs-To: Source: bind9@packages.debian.org\n"
+"POT-Creation-Date: 2008-06-13 16:56-0600\n"
+"PO-Revision-Date: 2008-07-27 16:10+0200\n"
+"Last-Translator: Alex <animainvendita@gmail.com>\n"
+"Language-Team: Italian <debian-l10n-italian@lists.debian.org>\n"
+"Language: it\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+"X-Generator: KBabel 1.11.4\n"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid "User account for running the BIND9 daemon:"
+msgstr "Account utente con cui eseguire il demone BIND9:"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid ""
+"The default is to run the BIND9 daemon (named) under the 'bind' user "
+"account. To use a different account, please enter the appropriate username."
+msgstr ""
+"L'opzione predefinita prevede l'esecuzione del demone BIND9 (named) "
+"utilizzando l'utente 'bind'. Se si desidera utilizzare un differente account "
+"utente, inserire il nome corrispondente."
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid "Other startup options for named:"
+msgstr "Altre opzioni di avvio per named:"
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid ""
+"Please provide any additional options (other than username) that should be "
+"passed to the BIND9 daemon (named) on startup."
+msgstr ""
+"Inserire qualsiasi opzione addizionale (differente dal nome utente) che "
+"dovrebbe essere inviata al demone BIND9 (named) durante l'avvio."
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid "Should resolv.conf settings be overridden?"
+msgstr "Si desidera non tener conto delle impostazioni in resolv.conf?"
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid ""
+"Please choose whether the resolver should be forced to use the local BIND9 "
+"daemon (named) rather than what the current connection recommends, when this "
+"machine moves around."
+msgstr ""
+"Scegliere se si desidera forzare la risoluzione di tutte le query DNS con il "
+"demone BIND9 locale (named) non utilizzando i server raccomandati dalla "
+"connessione attiva."
diff --git a/debian/po/ja.po b/debian/po/ja.po
new file mode 100644
index 0000000..c931748
--- /dev/null
+++ b/debian/po/ja.po
@@ -0,0 +1,66 @@
+# Copyright (C) 2008 LaMont Jones <lamont@debian.org>
+# This file is distributed under the same license as the bind9 package.
+# Hideki Yamane <henrich@debian.or.jp>, 2008.
+#
+msgid ""
+msgstr ""
+"Project-Id-Version: bind9 1:9.5.0.dfsg.P1-2\n"
+"Report-Msgid-Bugs-To: Source: bind9@packages.debian.org\n"
+"POT-Creation-Date: 2008-06-13 16:56-0600\n"
+"PO-Revision-Date: 2008-07-22 00:03+0900\n"
+"Last-Translator: Hideki Yamane (Debian-JP) <henrich@debian.or.jp>\n"
+"Language-Team: Japanese <debian-japanese@lists.debian.org>\n"
+"Language: ja\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid "User account for running the BIND9 daemon:"
+msgstr "BIND9 デーモンの動作に使うユーザアカウント:"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid ""
+"The default is to run the BIND9 daemon (named) under the 'bind' user "
+"account. To use a different account, please enter the appropriate username."
+msgstr ""
+"デフォルトでは BIND9 デーモン (named) は「bind」ユーザアカウントで動作しま"
+"す。異なるアカウントを使いたい場合は、適切なユーザ名を入力してください。"
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid "Other startup options for named:"
+msgstr "起動時に named に指定するオプション:"
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid ""
+"Please provide any additional options (other than username) that should be "
+"passed to the BIND9 daemon (named) on startup."
+msgstr ""
+"BIND9 デーモン (named) の起動時に指定したい (ユーザ名以外の) 追加オプションを"
+"入力してください。"
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid "Should resolv.conf settings be overridden?"
+msgstr "resolv.conf の設定を上書きしますか?"
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid ""
+"Please choose whether the resolver should be forced to use the local BIND9 "
+"daemon (named) rather than what the current connection recommends, when this "
+"machine moves around."
+msgstr ""
+"このマシンを移動した際、リゾルバがローカルの BIND9 デーモン (named) を使うよ"
+"うにするか、現在の接続先で推奨されるネームサーバを使うようにするかを選んでく"
+"ださい。"
diff --git a/debian/po/ko.po b/debian/po/ko.po
new file mode 100644
index 0000000..9da0f6f
--- /dev/null
+++ b/debian/po/ko.po
@@ -0,0 +1,69 @@
+# SOME DESCRIPTIVE TITLE.
+# Copyright (C) YEAR THE PACKAGE'S COPYRIGHT HOLDER
+# This file is distributed under the same license as the PACKAGE package.
+# FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.
+#
+msgid ""
+msgstr ""
+"Project-Id-Version: debconf template\n"
+"Report-Msgid-Bugs-To: Source: bind9@packages.debian.org\n"
+"POT-Creation-Date: 2008-06-13 16:56-0600\n"
+"PO-Revision-Date: 2011-06-24 18:37+0900\n"
+"Last-Translator: 강민지 <justminji@gmail.com>\n"
+"Language-Team: opensource <justminji@gmail.com>\n"
+"Language: \n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+"X-Poedit-Language: Korean\n"
+"X-Poedit-Country: KOREA, REPUBLIC OF\n"
+"X-Poedit-SourceCharset: utf-8\n"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid "User account for running the BIND9 daemon:"
+msgstr "BIND9 데몬을 실행하기 위한 사용자 계정:"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid ""
+"The default is to run the BIND9 daemon (named) under the 'bind' user "
+"account. To use a different account, please enter the appropriate username."
+msgstr ""
+"기본값은 '바인드' 사용자 계정에서 BIND9 데몬(지정된 이름)을 실행합니다. 다른 "
+"계정을 사용하려면 해당 사용자 이름을 입력하세요."
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid "Other startup options for named:"
+msgstr "지명된 다른 시작 옵션:"
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid ""
+"Please provide any additional options (other than username) that should be "
+"passed to the BIND9 daemon (named) on startup."
+msgstr ""
+"BIND9 데몬(지정된 이름)이 실행으로 전달되기 위해서 추가옵션(사용자 이름 이외)"
+"을 입력하세요."
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid "Should resolv.conf settings be overridden?"
+msgstr "resolv.conf 설정은 재정의 되어야하는가?"
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid ""
+"Please choose whether the resolver should be forced to use the local BIND9 "
+"daemon (named) rather than what the current connection recommends, when this "
+"machine moves around."
+msgstr ""
+"이 기계가 근처로 이동될 때 해결자는 현재의 연결을 권장하는 것보다 로컬 BIND9 "
+"데몬(지정된 이름)을 사용하도록 강요해야하는지 여부를 선택하세요."
diff --git a/debian/po/nb.po b/debian/po/nb.po
new file mode 100644
index 0000000..2d42047
--- /dev/null
+++ b/debian/po/nb.po
@@ -0,0 +1,69 @@
+# Copyright (C) YEAR THE PACKAGE'S COPYRIGHT HOLDER
+# This file is distributed under the same license as the PACKAGE package.
+#
+# Bjørn Steensrud <bjornst@skogkatt.homelinux.org>, 2012.
+msgid ""
+msgstr ""
+"Project-Id-Version: \n"
+"Report-Msgid-Bugs-To: Source: bind9@packages.debian.org\n"
+"POT-Creation-Date: 2008-06-13 16:56-0600\n"
+"PO-Revision-Date: 2012-01-03 21:33+0100\n"
+"Last-Translator: Bjørn Steensrud <bjornst@skogkatt.homelinux.org>\n"
+"Language-Team: Norwegian Bokmål <i18n-nb@lister.ping.uio.no>\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+"Language: nb\n"
+"X-Generator: Lokalize 1.2\n"
+"Plural-Forms: nplurals=2; plural=n != 1;\n"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid "User account for running the BIND9 daemon:"
+msgstr "Brukerkonto for å kjøre BIND9-daemonen:"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid ""
+"The default is to run the BIND9 daemon (named) under the 'bind' user "
+"account. To use a different account, please enter the appropriate username."
+msgstr ""
+"Standard er å kjøre BIND8-daemonen (named) under brukerkontoen «bind». Skriv "
+"inn et passende navn for å bruke en annen konto."
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid "Other startup options for named:"
+msgstr "Andre oppstartsvalg for named:"
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid ""
+"Please provide any additional options (other than username) that should be "
+"passed to the BIND9 daemon (named) on startup."
+msgstr ""
+"Skriv inn flere valg (annet enn brukernavn) som skal sendes over til "
+"BIND9-daemonen (named) ved oppstart."
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid "Should resolv.conf settings be overridden?"
+msgstr "Skal innstillingene i resolv.conf oveerstyres?"
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid ""
+"Please choose whether the resolver should be forced to use the local BIND9 "
+"daemon (named) rather than what the current connection recommends, when this "
+"machine moves around."
+msgstr ""
+"Velg om adresseløseren skal tvinges til å bruke den lokale BIND9-daemonen "
+"(named) i stedet for det den gjeldende tilkoblingen anbefaler, når denne "
+"maskinen flyttes omkring."
+
diff --git a/debian/po/nl.po b/debian/po/nl.po
new file mode 100644
index 0000000..b710b34
--- /dev/null
+++ b/debian/po/nl.po
@@ -0,0 +1,72 @@
+# translation of bind9_1:9.5.0.dfsg.P2-1_nl.po to Dutch
+# translation of bind9 debconf template to Dutch
+# Copyright (C) 2008 THE PACKAGE'S COPYRIGHT HOLDER
+# This file is distributed under the same license as the bind9 package.
+#
+# Paul Gevers <paul@climbing.nl>, 2008.
+msgid ""
+msgstr ""
+"Project-Id-Version: bind9_1:9.5.0.dfsg.P2-1_nl\n"
+"Report-Msgid-Bugs-To: Source: bind9@packages.debian.org\n"
+"POT-Creation-Date: 2008-06-13 16:56-0600\n"
+"PO-Revision-Date: 2008-09-17 21:15-0500\n"
+"Last-Translator: Paul Gevers <paul@climbing.nl>\n"
+"Language-Team: Dutch <debian-l10n-dutch@lists.debian.org>\n"
+"Language: nl\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+"X-Generator: KBabel 1.11.4\n"
+"Plural-Forms:  nplurals=2; plural=(n != 1);\n"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid "User account for running the BIND9 daemon:"
+msgstr ""
+"Gebruikersaccount waaronder de BIND9 achtergronddienst dient te draaien:"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid ""
+"The default is to run the BIND9 daemon (named) under the 'bind' user "
+"account. To use a different account, please enter the appropriate username."
+msgstr ""
+"Standaard wordt 'named', de BIND9-achtergronddienst, uitgevoerd onder de "
+"'bind' gebruikersaccount. Als u een andere account wilt gebruiken kunt hier "
+"de geschikte gebruikersnaam invullen."
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid "Other startup options for named:"
+msgstr "Andere opstartopties voor 'named':"
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid ""
+"Please provide any additional options (other than username) that should be "
+"passed to the BIND9 daemon (named) on startup."
+msgstr ""
+"Welke aanvullende opties (anders dan de gebruikersnaam) wilt u bij het "
+"opstarten meegeven aan 'named', de BIND9 achtergronddienst?"
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid "Should resolv.conf settings be overridden?"
+msgstr "Wilt u dat de 'resolv.conf' instellingen omzeild worden?"
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid ""
+"Please choose whether the resolver should be forced to use the local BIND9 "
+"daemon (named) rather than what the current connection recommends, when this "
+"machine moves around."
+msgstr ""
+"Wilt u afdwingen dat de 'resolver' gebruik maakt van de lokale BIND9 "
+"achtergronddienst (named), in plaats van de aanbevelingen van de huidige "
+"connectie. Bijvoorbeeld, wanneer deze computer veel verplaatst wordt."
diff --git a/debian/po/pl.po b/debian/po/pl.po
new file mode 100644
index 0000000..9cc79bd
--- /dev/null
+++ b/debian/po/pl.po
@@ -0,0 +1,68 @@
+# debconf templates for bind9 package
+# Polish translation
+# Copyright (C) 2008
+# This file is distributed under the same license as the bind9 package.
+# Łukasz Paździora <lukpaz@gmail.com>, 2008
+#
+msgid ""
+msgstr ""
+"Project-Id-Version: bind9 9.5.0.dfsg.P2-4\n"
+"Report-Msgid-Bugs-To: Source: bind9@packages.debian.org\n"
+"POT-Creation-Date: 2008-06-13 16:56-0600\n"
+"PO-Revision-Date: 2008-11-24 18:30+0100\n"
+"Last-Translator: Łukasz Paździora <lukpaz@gmail.com>\n"
+"Language-Team: Polish <debian-l10n-polish@lists.debian.org>\n"
+"Language: pl\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid "User account for running the BIND9 daemon:"
+msgstr "Konto użytkownika, jako który powinien działać BIND9:"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid ""
+"The default is to run the BIND9 daemon (named) under the 'bind' user "
+"account. To use a different account, please enter the appropriate username."
+msgstr ""
+"Domyślnie demon BIND9 (named) działa jako użytkownik 'bind'. Aby użyć innego "
+"konta podaj inną nazwę użytkownika."
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid "Other startup options for named:"
+msgstr "Inne opcje startowe dla named:"
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid ""
+"Please provide any additional options (other than username) that should be "
+"passed to the BIND9 daemon (named) on startup."
+msgstr ""
+"Proszę podać dodatkowe opcje (inne niż nazwa użytkownika), które powinny "
+"zostać podane demonowi BIND9 (named) przy starcie."
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid "Should resolv.conf settings be overridden?"
+msgstr "Czy ustawienia resolv.conf mają zostać nadpisane?"
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid ""
+"Please choose whether the resolver should be forced to use the local BIND9 "
+"daemon (named) rather than what the current connection recommends, when this "
+"machine moves around."
+msgstr ""
+"Proszę wybrać czy do rozwiązywania nazw powinna być używana lokalna usługa "
+"BIND9 (named), kiedy maszyna zmienia miejsce, czy też powinien korzystać z "
+"zalecanych ustawień aktualnego połączenia."
diff --git a/debian/po/pt.po b/debian/po/pt.po
new file mode 100644
index 0000000..2d3347f
--- /dev/null
+++ b/debian/po/pt.po
@@ -0,0 +1,69 @@
+# translation of bind9_1:9.5.0.dfsg-2_pt debconf to Portuguese
+# Copyright (C) 2008 Américo Monteiro
+# This file is distributed under the same license as the bind9 package.
+#
+# Américo Monteiro <a_monteiro@netcabo.pt>, 2008.
+msgid ""
+msgstr ""
+"Project-Id-Version: bind9_1:9.5.0.dfsg-2_pt\n"
+"Report-Msgid-Bugs-To: Source: bind9@packages.debian.org\n"
+"POT-Creation-Date: 2008-06-13 16:56-0600\n"
+"PO-Revision-Date: 2008-06-14 11:55+0100\n"
+"Last-Translator: Américo Monteiro <a_monteiro@netcabo.pt>\n"
+"Language-Team: Portuguese <traduz@debianpt.org>\n"
+"Language: pt\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+"X-Generator: KBabel 1.11.4\n"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid "User account for running the BIND9 daemon:"
+msgstr "Conta de utilizador para correr o deamon BIND9:"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid ""
+"The default is to run the BIND9 daemon (named) under the 'bind' user "
+"account. To use a different account, please enter the appropriate username."
+msgstr ""
+"A pré-definição é correr o deamon BIND9 (named) sob a conta de utilizador "
+"'bind'. Para usar uma conta diferente, por favor indique o nome de "
+"utilizador apropriado."
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid "Other startup options for named:"
+msgstr "Outras opções de arranque para o named:"
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid ""
+"Please provide any additional options (other than username) that should be "
+"passed to the BIND9 daemon (named) on startup."
+msgstr ""
+"Por favor forneça quaisquer opções adicionais (além do nome de utilizador) "
+"que deverão ser enviadas ao deamon BIND9 (named) durante o arranque. "
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid "Should resolv.conf settings be overridden?"
+msgstr "Devem as configurações de resolv.conf ser substituidas?"
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid ""
+"Please choose whether the resolver should be forced to use the local BIND9 "
+"daemon (named) rather than what the current connection recommends, when this "
+"machine moves around."
+msgstr ""
+"Por favor escolha se a resolução de nomes deverá ser forçada a usar o deamon "
+"local BIND9 (named) em vez do que a corrente ligação recomenda, quando esta "
+"máquina está ligada."
diff --git a/debian/po/pt_BR.po b/debian/po/pt_BR.po
new file mode 100644
index 0000000..f10725d
--- /dev/null
+++ b/debian/po/pt_BR.po
@@ -0,0 +1,71 @@
+# bind9 Brazilian Portuguese translation
+# Copyright (C) 2009 bind9's COPYRIGHT HOLDER
+# This file is distributed under the same license as the bind9 package.
+# Luís Gustavo Pessoa Sales <vatsu@gmx.net>, 2009.
+# José Figueiredo <deb.gnulinux@gmail.com>, 2010.
+#
+#
+msgid ""
+msgstr ""
+"Project-Id-Version: bind9\n"
+"Report-Msgid-Bugs-To: Source: bind9@packages.debian.org\n"
+"POT-Creation-Date: 2008-06-13 16:56-0600\n"
+"PO-Revision-Date: 2010-09-10 22:37-0300\n"
+"Last-Translator: José de Figueiredo <deb.gnulinux@gmail.com>\n"
+"Language-Team: Brazilian Portuguese <debian-l10n-portuguese@lists.debian."
+"org>\n"
+"Language: pt_BR\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+"pt_BR utf-8\n"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid "User account for running the BIND9 daemon:"
+msgstr "Conta de usuário para execução do daemon do BIND9:"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid ""
+"The default is to run the BIND9 daemon (named) under the 'bind' user "
+"account. To use a different account, please enter the appropriate username."
+msgstr ""
+"O padrão é executar o daemon do BIND9 (named) com a conta de usuário 'bind'. "
+"Para usar uma conta diferente, por favor informe o nome do usuário."
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid "Other startup options for named:"
+msgstr "Outras opções de inicialização para o named:"
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid ""
+"Please provide any additional options (other than username) that should be "
+"passed to the BIND9 daemon (named) on startup."
+msgstr ""
+"Por favor, forneça outras opções adicionais (além de nome de usuário), que "
+"devam ser passadas ao daemon do BIND9 (named) na inicialização."
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid "Should resolv.conf settings be overridden?"
+msgstr "As configurações do resolv.conf devem ser sobrescritas?"
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid ""
+"Please choose whether the resolver should be forced to use the local BIND9 "
+"daemon (named) rather than what the current connection recommends, when this "
+"machine moves around."
+msgstr ""
+"Por favor, escolha se o resolvedor de nomes deve ser forçado a usar o daemon "
+"do BIND9 local (named) em vez daquele que a conexão atual recomendar, quando "
+"esta máquina for movida."
diff --git a/debian/po/ru.po b/debian/po/ru.po
new file mode 100644
index 0000000..b182747
--- /dev/null
+++ b/debian/po/ru.po
@@ -0,0 +1,70 @@
+# translation of ru.po to Russian
+# Copyright (C) YEAR THE PACKAGE'S COPYRIGHT HOLDER
+# This file is distributed under the same license as the PACKAGE package.
+#
+# Yuri Kozlov <kozlov.y@gmail.com>, 2008.
+msgid ""
+msgstr ""
+"Project-Id-Version: bind9 1:9.5.0.dfsg-2\n"
+"Report-Msgid-Bugs-To: Source: bind9@packages.debian.org\n"
+"POT-Creation-Date: 2008-06-13 16:56-0600\n"
+"PO-Revision-Date: 2008-06-14 11:08+0400\n"
+"Last-Translator: Yuri Kozlov <kozlov.y@gmail.com>\n"
+"Language-Team: Russian <debian-l10n-russian@lists.debian.org>\n"
+"Language: ru\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+"X-Generator: KBabel 1.11.4\n"
+"Plural-Forms:  nplurals=3; plural=(n%10==1 && n%100!=11 ? 0 : n%10>=2 && n"
+"%10<=4 && (n%100<10 || n%100>=20) ? 1 : 2);\n"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid "User account for running the BIND9 daemon:"
+msgstr "Учётная запись для запуска службы BIND9:"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid ""
+"The default is to run the BIND9 daemon (named) under the 'bind' user "
+"account. To use a different account, please enter the appropriate username."
+msgstr ""
+"По умолчанию, служба BIND9 (файл named) запускается с правами учётной записи "
+"'bind'. Если вы хотите использовать другую учётную запись, то введите это "
+"имя здесь."
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid "Other startup options for named:"
+msgstr "Другие параметры запуска named:"
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid ""
+"Please provide any additional options (other than username) that should be "
+"passed to the BIND9 daemon (named) on startup."
+msgstr ""
+"Укажите любые дополнительные параметры (кроме имени учётной записи), которые "
+"нужно передать службе BIND9 (файлу named) при запуске."
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid "Should resolv.conf settings be overridden?"
+msgstr "Переписать настройки resolv.conf?"
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid ""
+"Please choose whether the resolver should be forced to use the local BIND9 "
+"daemon (named) rather than what the current connection recommends, when this "
+"machine moves around."
+msgstr ""
+"Укажите, хотите ли вы, чтобы определитель имён машины использовал локальную "
+"службу BIND9 (named), а не настройки имеющегося подключения."
diff --git a/debian/po/sk.po b/debian/po/sk.po
new file mode 100644
index 0000000..4ea69c6
--- /dev/null
+++ b/debian/po/sk.po
@@ -0,0 +1,67 @@
+# Slovak translation of bind9
+# Copyright (C) YEAR THE PACKAGE'S COPYRIGHT HOLDER
+# This file is distributed under the same license as the bind9 package.
+# Ivan Masár <helix84@centrum.sk>, 2008.
+#
+msgid ""
+msgstr ""
+"Project-Id-Version: bind9\n"
+"Report-Msgid-Bugs-To: Source: bind9@packages.debian.org\n"
+"POT-Creation-Date: 2008-06-13 16:56-0600\n"
+"PO-Revision-Date: \n"
+"Last-Translator: Ivan Masár <helix84@centrum.sk>\n"
+"Language-Team: \n"
+"Language: \n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid "User account for running the BIND9 daemon:"
+msgstr "Používateľský účet démona BIND9:"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid ""
+"The default is to run the BIND9 daemon (named) under the 'bind' user "
+"account. To use a different account, please enter the appropriate username."
+msgstr ""
+"Štandardne sa démon BIND9 (named) spúšťa s používateľským účtom „bind”. Ak "
+"chcete použiť iný účet, prosím zadajte príslušný názov účtu."
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid "Other startup options for named:"
+msgstr "Ďalšie spúšťacie voľby pre named:"
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid ""
+"Please provide any additional options (other than username) that should be "
+"passed to the BIND9 daemon (named) on startup."
+msgstr ""
+"Zadajte ďalšie voľby (okrem používateľského mena), ktoré sa majú odovzdať "
+"démonovi BIND9 (named) pri spustení."
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid "Should resolv.conf settings be overridden?"
+msgstr "Má sa nastaviť priorita pred resolv.conf?"
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid ""
+"Please choose whether the resolver should be forced to use the local BIND9 "
+"daemon (named) rather than what the current connection recommends, when this "
+"machine moves around."
+msgstr ""
+"Zvoľte, či má sa má vynútiť, aby prekladač adries používal lokálneho démona "
+"BIND9 (named) namiesto toho, čo odporúča aktuálne pripojenie, keď sa "
+"umiestnenie tohto počítača mení."
diff --git a/debian/po/sr.po b/debian/po/sr.po
new file mode 100644
index 0000000..98b67be
--- /dev/null
+++ b/debian/po/sr.po
@@ -0,0 +1,66 @@
+# SOME DESCRIPTIVE TITLE.
+# Copyright (C) YEAR THE PACKAGE'S COPYRIGHT HOLDER
+# This file is distributed under the same license as the PACKAGE package.
+# FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.
+#
+msgid ""
+msgstr ""
+"Project-Id-Version: PACKAGE VERSION\n"
+"Report-Msgid-Bugs-To: Source: bind9@packages.debian.org\n"
+"POT-Creation-Date: 2008-06-13 16:56-0600\n"
+"PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
+"Last-Translator: Zlatan Todoric <zlatan.todoric@gmail.com>\n"
+"Language-Team: Serbian <debian-l10n-serbian@lists.debian.org>\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid "User account for running the BIND9 daemon:"
+msgstr "Кориснички налог за покретање BIND9 процеса у позадини:"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid ""
+"The default is to run the BIND9 daemon (named) under the 'bind' user "
+"account. To use a different account, please enter the appropriate username."
+msgstr ""
+"Подразумијевано је да се BIND9 процес у позадини (Named) покреће под 'bind'"
+"корисничким налогом. Да бисте користили другачији налог, унесите адекватно корисничко име."
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid "Other startup options for named:"
+msgstr "Друге опције приликом покретања за (Named):"
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid ""
+"Please provide any additional options (other than username) that should be "
+"passed to the BIND9 daemon (named) on startup."
+msgstr ""
+"Молимо вас обезбједите додатне опције (осим корисничког имена) који би требали"
+"бити прослијеђени BIND9 процесу у позадини (Named) приликом покретања."
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid "Should resolv.conf settings be overridden?"
+msgstr "Желите ли поништити постојећа resolv.conf подешавања?"
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid ""
+"Please choose whether the resolver should be forced to use the local BIND9 "
+"daemon (named) rather than what the current connection recommends, when this "
+"machine moves around."
+msgstr ""
+"Одаберите желите ли да аутоматски помагач (Resolver) буде присиљен користити "
+"локални BIND9 процес у позадини (Named) умјесто препорука тренутне мреже, када "
+"ова машина буде помјерана."
diff --git a/debian/po/sr@latin.po b/debian/po/sr@latin.po
new file mode 100644
index 0000000..5456ba6
--- /dev/null
+++ b/debian/po/sr@latin.po
@@ -0,0 +1,66 @@
+# SOME DESCRIPTIVE TITLE.
+# Copyright (C) 2011
+# This file is distributed under the same license as the PACKAGE package.
+# FIRST AUTHOR <zlatan.todoric@gmail.com>, 2011.
+#
+msgid ""
+msgstr ""
+"Project-Id-Version: PACKAGE VERSION\n"
+"Report-Msgid-Bugs-To: Source: bind9@packages.debian.org\n"
+"POT-Creation-Date: 2008-06-13 16:56-0600\n"
+"PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
+"Last-Translator: Zlatan Todorić <zlatan.todoric@gmail.com>\n"
+"Language-Team: Serbian <debian-l10n-serbian@lists.debian.org>\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid "User account for running the BIND9 daemon:"
+msgstr "Korisnički nalog za pokretanje BIND9 procesa u pozadini:"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid ""
+"The default is to run the BIND9 daemon (named) under the 'bind' user "
+"account. To use a different account, please enter the appropriate username."
+msgstr ""
+"Podrazumijevano je da se BIND9 proces u pozadini (Named) pokreće pod 'bind'"
+"korisničkim nalogom. Da biste koristili drugačiji nalog, unesite adekvatno korisničko ime."
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid "Other startup options for named:"
+msgstr "Druge opcije prilikom pokretanja za (Named):"
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid ""
+"Please provide any additional options (other than username) that should be "
+"passed to the BIND9 daemon (named) on startup."
+msgstr ""
+"Molimo vas obezbjedite dodatne opcije (osim korisničkog imena) koji bi trebali"
+"biti proslijeđeni BIND9 procesu u pozadini (Named) prilikom pokretanja."
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid "Should resolv.conf settings be overridden?"
+msgstr "Želite li poništiti postojeća resolv.conf podešavanja?"
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid ""
+"Please choose whether the resolver should be forced to use the local BIND9 "
+"daemon (named) rather than what the current connection recommends, when this "
+"machine moves around."
+msgstr ""
+"Odaberite želite li da automatski pomagač (Resolver) bude prisiljen koristiti"
+"lokalni BIND9 proces u pozadini umjesto preporuka trenutne mreže, kada ova"
+"mašina bude pomjerana."
diff --git a/debian/po/sv.po b/debian/po/sv.po
new file mode 100644
index 0000000..4dbd1e2
--- /dev/null
+++ b/debian/po/sv.po
@@ -0,0 +1,69 @@
+# translation of bind9_1:9.5.0.dfsg.P1-2_sv.po to Swedish
+# Copyright (C) 2008
+# This file is distributed under the same license as the bind9 package.
+#
+# Martin Ågren <martin.agren@gmail.com>, 2008.
+msgid ""
+msgstr ""
+"Project-Id-Version: bind9_1:9.5.0.dfsg.P1-2_sv\n"
+"Report-Msgid-Bugs-To: Source: bind9@packages.debian.org\n"
+"POT-Creation-Date: 2008-06-13 16:56-0600\n"
+"PO-Revision-Date: 2008-07-18 19:24+0200\n"
+"Last-Translator: Martin Ågren <martin.agren@gmail.com>\n"
+"Language-Team: Swedish <debian-l10n-swedish@lists.debian.org>\n"
+"Language: sv\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+"X-Generator: KBabel 1.11.4\n"
+"Plural-Forms:  nplurals=2; plural=(n != 1);\n"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid "User account for running the BIND9 daemon:"
+msgstr "Användarkonto att köra BIND9-demonen under:"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid ""
+"The default is to run the BIND9 daemon (named) under the 'bind' user "
+"account. To use a different account, please enter the appropriate username."
+msgstr ""
+"Standardvalet är att köra BIND9-demonen (named) under användarkontot 'bind'. "
+"För att använda ett annat konto, var vänlig ange användarnamnet."
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid "Other startup options for named:"
+msgstr "Övriga uppstartsval för named:"
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid ""
+"Please provide any additional options (other than username) that should be "
+"passed to the BIND9 daemon (named) on startup."
+msgstr ""
+"Var vänlig ange eventuella ytterligare val (förutom användarnamn) som ska "
+"skickas till BIND9-demonen (named) vid uppstart."
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid "Should resolv.conf settings be overridden?"
+msgstr "Ska resolv.conf-inställningar hoppas över?"
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid ""
+"Please choose whether the resolver should be forced to use the local BIND9 "
+"daemon (named) rather than what the current connection recommends, when this "
+"machine moves around."
+msgstr ""
+"Var vänlig välj huruvida uppslagaren ska tvingas använda den lokala BIND9-"
+"demonen (named) snarare än vad den aktuella uppkopplingen rekommenderar när "
+"den här maskinen flyttar runt."
diff --git a/debian/po/templates.pot b/debian/po/templates.pot
new file mode 100644
index 0000000..6001e43
--- /dev/null
+++ b/debian/po/templates.pot
@@ -0,0 +1,60 @@
+# SOME DESCRIPTIVE TITLE.
+# Copyright (C) YEAR THE PACKAGE'S COPYRIGHT HOLDER
+# This file is distributed under the same license as the PACKAGE package.
+# FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.
+#
+#, fuzzy
+msgid ""
+msgstr ""
+"Project-Id-Version: PACKAGE VERSION\n"
+"Report-Msgid-Bugs-To: Source: bind9@packages.debian.org\n"
+"POT-Creation-Date: 2008-06-13 16:56-0600\n"
+"PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
+"Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
+"Language-Team: LANGUAGE <LL@li.org>\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=CHARSET\n"
+"Content-Transfer-Encoding: 8bit\n"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid "User account for running the BIND9 daemon:"
+msgstr ""
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid ""
+"The default is to run the BIND9 daemon (named) under the 'bind' user "
+"account. To use a different account, please enter the appropriate username."
+msgstr ""
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid "Other startup options for named:"
+msgstr ""
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid ""
+"Please provide any additional options (other than username) that should be "
+"passed to the BIND9 daemon (named) on startup."
+msgstr ""
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid "Should resolv.conf settings be overridden?"
+msgstr ""
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid ""
+"Please choose whether the resolver should be forced to use the local BIND9 "
+"daemon (named) rather than what the current connection recommends, when this "
+"machine moves around."
+msgstr ""
diff --git a/debian/po/tr.po b/debian/po/tr.po
new file mode 100644
index 0000000..3d44ff8
--- /dev/null
+++ b/debian/po/tr.po
@@ -0,0 +1,70 @@
+# turkish translation of bind9 debconf template
+# Copyright (C) YEAR THE PACKAGE'S COPYRIGHT HOLDER
+# This file is distributed under the same license as the PACKAGE package.
+# Mert Dirik <mertdirik@gmail.com>, 2008.
+#
+msgid ""
+msgstr ""
+"Project-Id-Version: bind9\n"
+"Report-Msgid-Bugs-To: Source: bind9@packages.debian.org\n"
+"POT-Creation-Date: 2008-06-13 16:56-0600\n"
+"PO-Revision-Date: 2008-06-15 23:31+0200\n"
+"Last-Translator: Mert Dirik <mertdirik@gmail.com>\n"
+"Language-Team: Debian L10n Turkish <debian-l10n-turkish@lists.debian.org>\n"
+"Language: \n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=utf-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+"Plural-Forms: nplurals=1; plural=0;\n"
+"X-Poedit-Language: Turkish\n"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid "User account for running the BIND9 daemon:"
+msgstr "BIND9 bekletici programının (named) kullanacağı kullanıcı hesabı:"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid ""
+"The default is to run the BIND9 daemon (named) under the 'bind' user "
+"account. To use a different account, please enter the appropriate username."
+msgstr ""
+"Öntanımlı olarak BIND9 bekletici (daemon) programı 'bind' kullanıcı "
+"hesabıyla çalışır. Farklı bir hesap kullanmak için kullanmak istediğiniz "
+"hesabın adını girin."
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid "Other startup options for named:"
+msgstr "'named'in kullanacağı diğer başlatma seçenekleri:"
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid ""
+"Please provide any additional options (other than username) that should be "
+"passed to the BIND9 daemon (named) on startup."
+msgstr ""
+"Lütfen BIND9 bekletici programına (named) geçilmesini istediğiniz, kullanıcı "
+"adı dışındaki ek seçenekleri yazın."
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid "Should resolv.conf settings be overridden?"
+msgstr "'resolv.conf' ayarları ezilmeli mi (override)?"
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid ""
+"Please choose whether the resolver should be forced to use the local BIND9 "
+"daemon (named) rather than what the current connection recommends, when this "
+"machine moves around."
+msgstr ""
+"Lütfen bu makine gezerken; çözümleyicinin o anda kullanılan bağlantının "
+"önerdiği sunucu yerine yerel BIND9 bekletici programını (named) kullanmaya "
+"zorlanması gerekip gerekmediğini seçin."
diff --git a/debian/po/vi.po b/debian/po/vi.po
new file mode 100644
index 0000000..99865f7
--- /dev/null
+++ b/debian/po/vi.po
@@ -0,0 +1,67 @@
+# Vietnamese translation for Bind 9.
+# Copyright © 2008 Free Software Foundation, Inc.
+# Clytie Siddall <clytie@riverland.net.au>, 2008.
+#
+msgid ""
+msgstr ""
+"Project-Id-Version: bind9 1:9.5.0.dfsg-2\n"
+"Report-Msgid-Bugs-To: Source: bind9@packages.debian.org\n"
+"POT-Creation-Date: 2008-06-13 16:56-0600\n"
+"PO-Revision-Date: 2008-06-14 15:35+0930\n"
+"Last-Translator: Clytie Siddall <clytie@riverland.net.au>\n"
+"Language-Team: Vietnamese <vi-VN@googlegroups.com>\n"
+"Language: vi\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+"Plural-Forms: nplurals=1; plural=0;\n"
+"X-Generator: LocFactoryEditor 1.7b3\n"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid "User account for running the BIND9 daemon:"
+msgstr "Tài khoản người dùng để chạy trình nền BIND9:"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid ""
+"The default is to run the BIND9 daemon (named) under the 'bind' user "
+"account. To use a different account, please enter the appropriate username."
+msgstr ""
+"Mặc định là chạy trình nền BIND9 (đặt tên) dưới tài khoản người dùng « bind "
+"». Để sử dụng tài khoản khác, hãy nhập tên người dùng thích hợp."
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid "Other startup options for named:"
+msgstr "Tùy chọn khởi chạy khác cần đặt tên:"
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid ""
+"Please provide any additional options (other than username) that should be "
+"passed to the BIND9 daemon (named) on startup."
+msgstr ""
+"Hãy nhập vào đây bất kỳ tùy chọn bổ sung (khác với tên người dùng) nên gửi "
+"cho trình nền BIND9 vào lúc khởi chạy."
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid "Should resolv.conf settings be overridden?"
+msgstr "Co nên ghi đè lên thiết lập « resolv.conf » không?"
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid ""
+"Please choose whether the resolver should be forced to use the local BIND9 "
+"daemon (named) rather than what the current connection recommends, when this "
+"machine moves around."
+msgstr ""
+"Hãy chọn có nên ép buộc trình giải quyết sử dụng trình nền BIND9 cục bộ (đặt "
+"tên) hơn là kết nối hiện thời đề nghị gì khi máy này ở nơi khác."
diff --git a/debian/po/zh_CN.po b/debian/po/zh_CN.po
new file mode 100644
index 0000000..9296c1a
--- /dev/null
+++ b/debian/po/zh_CN.po
@@ -0,0 +1,64 @@
+# Chinese translations for bind package.
+# Copyright (C) 2008 THE bind'S COPYRIGHT HOLDER
+# This file is distributed under the same license as the bind package.
+# LI Daobing <lidaobing@gmail.com>, 2008.
+#
+msgid ""
+msgstr ""
+"Project-Id-Version: bind 9-9.5.0.dfsg.P2\n"
+"Report-Msgid-Bugs-To: Source: bind9@packages.debian.org\n"
+"POT-Creation-Date: 2008-06-13 16:56-0600\n"
+"PO-Revision-Date: 2008-10-04 14:36+0800\n"
+"Last-Translator: LI Daobing <lidaobing@gmail.com>\n"
+"Language-Team: Chinese (simplified)\n"
+"Language: \n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid "User account for running the BIND9 daemon:"
+msgstr "运行 BIND9 服务的用户账号:"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid ""
+"The default is to run the BIND9 daemon (named) under the 'bind' user "
+"account. To use a different account, please enter the appropriate username."
+msgstr ""
+"缺省使用 'bind' 用户来运行 BIND9 服务(named)。 想使用其他的账号, 请输入合适的"
+"用户名。"
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid "Other startup options for named:"
+msgstr "named 的其他启动选项:"
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid ""
+"Please provide any additional options (other than username) that should be "
+"passed to the BIND9 daemon (named) on startup."
+msgstr "请提供需要传给 BIND9 服务(named)的启动选项(用户名除外)。"
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid "Should resolv.conf settings be overridden?"
+msgstr "是否覆盖 resolv.conf 的设置?"
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid ""
+"Please choose whether the resolver should be forced to use the local BIND9 "
+"daemon (named) rather than what the current connection recommends, when this "
+"machine moves around."
+msgstr ""
+"请选择是否强制使用本地 BIND9 服务(named)来做域名解析, 而不是使用当前连接所推"
+"荐的域名解析服务器, 特别是当机器需要移动时。"
diff --git a/debian/rules b/debian/rules
new file mode 100755
index 0000000..14071f2
--- /dev/null
+++ b/debian/rules
@@ -0,0 +1,104 @@
+#!/usr/bin/make -f
+# Sample debian/rules that uses debhelper.
+# GNU copyright 1997 to 1999 by Joey Hess.
+
+export DEB_BUILD_MAINT_OPTIONS = hardening=+all
+DPKG_EXPORT_BUILDFLAGS = 1
+
+export DEB_CFLAGS_MAINT_APPEND = -fno-strict-aliasing -fno-delete-null-pointer-checks -DNO_VERSION_DATE -DDIG_SIGCHASE
+
+export DPKG_GENSYMBOLS_CHECK_LEVEL := 4
+
+include /usr/share/dpkg/default.mk
+
+# Uncomment this to turn on verbose mode.
+#export DH_VERBOSE=1
+
+COMMA = ,
+ifneq (,$(filter parallel=%,$(subst $(COMMA), ,$(DEB_BUILD_OPTIONS))))
+  NJOBS := -j $(subst parallel=,,$(filter parallel=%,$(subst $(COMMA), ,$(DEB_BUILD_OPTIONS))))
+endif
+
+export arch = $(DEB_HOST_ARCH)
+
+ifeq ($(DEB_HOST_ARCH_OS),kfreebsd)
+EXTRA_FEATURES=--disable-linux-caps
+endif
+
+SED_VERSION_EXTENSIONS := \
+	sed -e 's,^EXTENSIONS=,EXTENSIONS="$$(dpkg-parsechangelog --file=../debian/changelog | sed -n '/^Version/s/[^-]*//p')-$$(dpkg-vendor --query Vendor)",'
+
+%:
+	dh $@ --with python3
+
+prepare_version_extensions:
+	if [ ! -f version.bak ]; then \
+	  mv version version.bak; \
+	  $(SED_VERSION_EXTENSIONS) < version.bak > version; \
+	fi
+
+clean_version_extensions:
+	if [ -f version.bak ]; then \
+	  mv version.bak version; \
+	fi
+
+override_dh_autoreconf: prepare_version_extensions
+	dh_autoreconf
+
+override_dh_auto_configure:
+	dh_auto_configure -- \
+		--libdir=/usr/lib/$(DEB_HOST_MULTIARCH) \
+		--sysconfdir=/etc/bind \
+		--with-python=python3 \
+		--localstatedir=/ \
+		--enable-threads \
+		--enable-largefile \
+		--with-libtool \
+		--enable-shared \
+		--enable-static \
+		--with-gost=no \
+		--with-openssl=/usr \
+		--with-gssapi=/usr \
+		--with-libidn2 \
+		--with-json-c \
+		--with-lmdb=/usr \
+		--with-gnu-ld \
+		--with-maxminddb \
+		--with-atf=no \
+		--enable-ipv6 \
+		--enable-rrl \
+		--enable-filter-aaaa \
+		--disable-native-pkcs11 \
+		--enable-dnstap \
+		$(EXTRA_FEATURES)
+
+override_dh_auto_build:
+	dh_auto_build -- all doc
+
+override_dh_auto_clean: clean_version_extensions
+	dh_auto_clean
+
+override_dh_auto_install:
+	dh_auto_install --destdir=$(CURDIR)/debian/tmp
+
+override_dh_auto_test:
+	:
+
+override_dh_installinit:
+	dh_installinit -pbind9 --name=named
+	dh_installinit --remaining
+
+override_dh_installsystemd:
+	dh_installsystemd -pbind9 --no-enable --name=named-resolvconf named-resolvconf.service
+	dh_installsystemd -pbind9 --name=named named.service
+	dh_installsystemd --remaining
+
+override_dh_install:
+	dh_install
+	# Install apparmor profile
+	dh_apparmor -pbind9 --profile-name=usr.sbin.named
+
+override_dh_missing:
+	dh_missing --exclude=.la --exclude=lwresd --exclude=__pycache_ --fail-missing
+
+.PHONY: prepare_version_extensions clean_version_extensions
diff --git a/debian/source/format b/debian/source/format
new file mode 100644
index 0000000..163aaf8
--- /dev/null
+++ b/debian/source/format
@@ -0,0 +1 @@
+3.0 (quilt)
diff --git a/debian/tests/control b/debian/tests/control
new file mode 100644
index 0000000..21bbc87
--- /dev/null
+++ b/debian/tests/control
@@ -0,0 +1,9 @@
+Tests: simpletest
+Restrictions: isolation-container, needs-internet, needs-root
+Depends: bind9,
+         bind9-dnsutils
+
+Tests: validation
+Restrictions: isolation-container, needs-internet, needs-root, flaky
+Depends: bind9,
+         bind9-dnsutils
diff --git a/debian/tests/simpletest b/debian/tests/simpletest
new file mode 100644
index 0000000..49ca351
--- /dev/null
+++ b/debian/tests/simpletest
@@ -0,0 +1,21 @@
+#!/bin/sh
+
+set -e
+
+setup() (
+	service bind9 stop
+	service bind9 start
+)
+
+run() (
+	# Make a query against a local zone
+	dig -x 127.0.0.1 @127.0.0.1
+)
+
+teardown() (
+	service bind9 stop
+)
+
+setup
+run
+teardown
diff --git a/debian/tests/validation b/debian/tests/validation
new file mode 100644
index 0000000..bf10e12
--- /dev/null
+++ b/debian/tests/validation
@@ -0,0 +1,28 @@
+#!/bin/sh
+
+set -e
+
+setup() (
+	service bind9 stop
+	service bind9 start
+)
+
+run() (
+	repeats=10
+	while [ "${repeats}" -gt "0" ]; do
+		# Make a query against an external nameserver and check for DNSSEC validation
+		echo "Checking for DNSSEC validation status of internetsociety.org"
+		dig -t a internetsociety.org @127.0.0.1 | grep -E 'flags:.+ad; QUERY' && break
+		repeats=$((repeats-1))
+		sleep 1
+	done
+	[ "$repeats" -eq "0" ] && exit 1
+)
+
+teardown() (
+	service bind9 stop
+)
+
+setup
+run
+teardown
diff --git a/debian/upstream/signing-key.asc b/debian/upstream/signing-key.asc
new file mode 100644
index 0000000..3750f41
--- /dev/null
+++ b/debian/upstream/signing-key.asc
@@ -0,0 +1,151 @@
+-----BEGIN PGP PUBLIC KEY BLOCK-----
+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+=C1ed
+-----END PGP PUBLIC KEY BLOCK-----
diff --git a/debian/watch b/debian/watch
new file mode 100644
index 0000000..3b54509
--- /dev/null
+++ b/debian/watch
@@ -0,0 +1,9 @@
+version=3
+
+opts=\
+compression=xz,\
+uversionmangle=s/((rc|b)\d+)$/~$1/;s/-P(\d+)$/.P$1/,\
+dirversionmangle=s/((rc|b)\d+)$/~$1/;s/-P(\d+)$/.P$1/,\
+dversionmangle=s/\.dfsg\./-/;s/[\.\+]dfsg$//,\
+pgpsigurlmangle=s/$/.asc/ \
+  https://ftp.isc.org/isc/bind9/(9\.16\.\d+(?:(?:rc|b|-P)\d)?)/ bind-@ANY_VERSION@\.tar\.xz
-- 
cgit v1.2.3