237-3ubuntu10.57+esm5 fixes this.
From the libsystemd0/changelog:
systemd (237-3ubuntu10.57+esm5) bionic-security; urgency=medium
* Regression Fix:
- d/p/lp2170538-resolved-pick-up-new-DNSSEC-KSK-from-2024-fix.patch:
Correct the allocation size for dns_answer_new
-- Bruce Cable <[email protected]> Thu, 15 Oct 2026 10:28:31
+1100
Confirmed on multiple ubuntu 18 servers, no need for any additional
workaround.
Once applied after restart of the systemd-resolved you should see 38696 in
journalctl -u systemd-resolved.service
". IN DS 38696 8 2
683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16"
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2170538
Title:
Ubuntu 24.04: systemd-resolved DNSSEC fails after root KSK rollover;
built-in trust anchor lacks key 38696
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/systemd/+bug/2170538/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
