This bug was fixed in the package systemd - 255.4-1ubuntu8.18
---------------
systemd (255.4-1ubuntu8.18) noble-security; urgency=medium
* d/p/lp2170538-resolved-pick-up-new-DNSSEC-KSK-from-2024.patch: add
the root zone KSK-2024 (key tag 38696) to the built-in DNSSEC trust
anchor. Since 2026-10-11 the root DNSKEY RRset is signed only by
this key, so with DNSSEC enabled and no local trust anchor file
every lookup failed with "missing-key" (LP: #2170538)
-- CyberNative AI LLC <[email protected]> Mon, 12 Oct 2026 07:36:16
+0000
** Changed in: systemd (Ubuntu)
Status: In Progress => Fix Released
** Changed in: systemd (Ubuntu)
Status: In Progress => Fix Released
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2170538
Title:
Ubuntu 24.04: systemd-resolved DNSSEC fails after root KSK rollover;
built-in trust anchor lacks key 38696
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/systemd/+bug/2170538/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
