diff --git a/nsd-4.3.8.tar.gz b/nsd-4.3.8.tar.gz
deleted file mode 100644
index b08b88d..0000000
--- a/nsd-4.3.8.tar.gz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:11897e25f72f5a98f9202bd5378c936886d54376051a614d3688e451e9cb99e1
-size 1225840
diff --git a/nsd-4.3.8.tar.gz.asc b/nsd-4.3.8.tar.gz.asc
deleted file mode 100644
index d65cf3a..0000000
--- a/nsd-4.3.8.tar.gz.asc
+++ /dev/null
@@ -1,16 +0,0 @@
------BEGIN PGP SIGNATURE-----
-
-iQIzBAABCAAdFiEE7fqj8spObrBWga+On28cLX4EX40FAmFlMNIACgkQn28cLX4E
-X41mPg//QnZzqTGCM22hjg9e4gW5aH9xXrGJEqul8Em+NyGxz769vOa7NFE9z3x3
-afeFKW1ZrbflMmjzud2rI8OOrv5nv1eVg56lBpR529vmkDQbZ0UuulxB4B8Eoom5
-Sr2YsB1ulCN4khwU4mV4Uy4SgqSVsL+zCxeZTOwR3T6SO8TCmxTkugfBaBsZTeWa
-cmncsC+gc0XsRaVSmOCb6S3T1S3eBDUuo/HXp71ryeGhUWPRkyHYb233HSUoZkod
-OIAixTw1CDzuRVo1U9kAnUa3A6Ntm1cCGuUpT5ZcSXvFqYjQuI9COi9smSZ1mrZ4
-K0C8B2gxKPZXlSzuwyYkquhH1R4JHO5EgbTAHLw1ZYgBNCds3od/gq3jjNt5fALL
-uBKRKMehzWtzbafoXx78fbYLioic+goLpf2SwqJP80dBl9FG4EhEURDuAmTbmsTx
-AJo6vSSzqXSV7NHD9/5iofi2CcsHJbZWTcduAFKMOUkGTQ8rGHKR7dXDPHJcUyNs
-8eOLfbPX/21LO6EeydMa6ZlII5mu7RIqCh7xRXemkr7uBz7jjkgvnxDaRq8jfAhi
-Vo7/tAuwRA5Rtqmp6luybEdg2nPfn7vDgBiaevSZZsMPDOTxpvYjeTWEsC/4fEzQ
-MhdoPLIjD5MPVTRLRPKcuh7X+CHzQKILg4olOWT4Yz5Hk9p8e+c=
-=m3zM
------END PGP SIGNATURE-----
diff --git a/nsd-4.3.9.tar.gz b/nsd-4.3.9.tar.gz
new file mode 100644
index 0000000..630180d
--- /dev/null
+++ b/nsd-4.3.9.tar.gz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:531549f09289ecbd05829e14bb34563294d85b9edde2c613a00f597af2135e8d
+size 1222919
diff --git a/nsd-4.3.9.tar.gz.asc b/nsd-4.3.9.tar.gz.asc
new file mode 100644
index 0000000..5e4bdcd
--- /dev/null
+++ b/nsd-4.3.9.tar.gz.asc
@@ -0,0 +1,16 @@
+-----BEGIN PGP SIGNATURE-----
+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+=Fggm
+-----END PGP SIGNATURE-----
diff --git a/nsd.changes b/nsd.changes
index 18d2d58..1810a59 100644
--- a/nsd.changes
+++ b/nsd.changes
@@ -1,3 +1,13 @@
+-------------------------------------------------------------------
+Thu Dec  9 18:23:11 UTC 2021 - Michael Ströder <michael@stroeder.com>
+
+- New upstream release 4.3.9
+  * Fix #198: nsd-control reconfig core dump.
+  * Fix to remove git tracking and ci information from release tarballs.
+  * Fix unit tests for new answer-cookie default.
+  * Fix socket_partitioning unit test for FreeBSD.
+  * Fix SVCB test to work around older dig with drill.
+
 -------------------------------------------------------------------
 Sat Nov 13 18:17:30 UTC 2021 - Michael Ströder <michael@stroeder.com>
 
diff --git a/nsd.spec b/nsd.spec
index f19b846..84fe06a 100644
--- a/nsd.spec
+++ b/nsd.spec
@@ -23,7 +23,7 @@
 %define zonesdir   %{configdir}/zones
 %define pidfile    %{_rundir}/nsd/nsd.pid
 Name:           nsd
-Version:        4.3.8
+Version:        4.3.9
 Release:        0
 #
 Summary:        An authoritative-only domain name server