Built a eoan package with xnox's updated patch in my ppa:
https://launchpad.net/~bryanquigley/+archive/ubuntu/1796501/+packages
1. Confirm failure with DNSSEC=yes, DNS server 1.1.1.1
$ resolvectl query people.com.cn
people.com.cn: resolve call failed: DNSSEC validation failed: failed-auxiliary
2. Add PPA and upgrade systemd to PPA version.
3. Confirm success:
resolvectl query people.com.cn
people.com.cn: 106.48.12.140 -- link: ens2
106.48.12.141 -- link: ens2
(hpcc-download-foreign.chinacache.net)
** Patch added: "eoan debdiff"
https://bugs.launchpad.net/ubuntu/+source/systemd/+bug/1796501/+attachment/5288416/+files/systemd_241-7ubuntu2.debdiff
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1796501
Title:
systemd-resolved tries to mitigate DVE-2018-0001 even if DNSSEC=yes
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/systemd/+bug/1796501/+subscriptions
--
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
