| 2017-04-13 16:31:52 |
Dimitri John Ledkov |
bug |
|
|
added bug |
| 2017-04-13 16:32:01 |
Dimitri John Ledkov |
nominated for series |
|
Ubuntu Zesty |
|
| 2017-04-13 16:32:01 |
Dimitri John Ledkov |
bug task added |
|
systemd (Ubuntu Zesty) |
|
| 2017-04-13 18:17:50 |
Launchpad Janitor |
systemd (Ubuntu): status |
New |
Confirmed |
|
| 2017-04-17 12:20:57 |
Jaromir Obr |
bug |
|
|
added subscriber Jaromir Obr |
| 2017-04-17 17:50:51 |
Brian Murray |
systemd (Ubuntu Zesty): milestone |
|
zesty-updates |
|
| 2017-04-18 03:41:37 |
Simon Quigley |
bug |
|
|
added subscriber Simon Quigley |
| 2017-04-18 04:06:54 |
Jeremy Bícha |
bug |
|
|
added subscriber Jeremy Bicha |
| 2017-04-18 07:04:17 |
Sudeep Duggal |
bug |
|
|
added subscriber Sudeep Duggal |
| 2017-04-18 14:38:06 |
Adolfo Jayme Barrientos |
systemd (Ubuntu Zesty): importance |
Undecided |
High |
|
| 2017-04-18 17:02:41 |
Dimitri John Ledkov |
description |
because pitti says so
cherrypick from debian |
[Impact]
* dnssec functionality in systemd-resolved prevents network access in certain intra and extra net cases, due to failure to correctly validate dnssec entries. As a work-around we should disable dnssec by default.
[Test Case]
* Validate systemd-resolved is compiled with --with-default-dnssec=no
* Validate that systemd-resolve --status says that DNSSEC setting is no
[Regression Potential]
* People who expect DNSSEC to be available by default will need to re-enable it by modifying systemd-resolve configuration file
[Other Info]
* See duplicate bugs and other bug reports in systemd for scenarios of DNS resolution failures when DNSSEC is enabled. |
|
| 2017-04-18 17:04:04 |
Dimitri John Ledkov |
description |
[Impact]
* dnssec functionality in systemd-resolved prevents network access in certain intra and extra net cases, due to failure to correctly validate dnssec entries. As a work-around we should disable dnssec by default.
[Test Case]
* Validate systemd-resolved is compiled with --with-default-dnssec=no
* Validate that systemd-resolve --status says that DNSSEC setting is no
[Regression Potential]
* People who expect DNSSEC to be available by default will need to re-enable it by modifying systemd-resolve configuration file
[Other Info]
* See duplicate bugs and other bug reports in systemd for scenarios of DNS resolution failures when DNSSEC is enabled. |
[Impact]
* dnssec functionality in systemd-resolved prevents network access in certain intra and extra net cases, due to failure to correctly validate dnssec entries. As a work-around we should disable dnssec by default.
[Test Case]
* Validate systemd-resolved is compiled with --with-default-dnssec=no
* Validate that systemd-resolve --status says that DNSSEC setting is no
$ systemd-resolve --status
good output:
...
DNSSEC setting: no
DNSSEC supported: no
...
bad output:
...
DNSSEC setting: allow-downgrade
DNSSEC supported: yes
...
[Regression Potential]
* People who expect DNSSEC to be available by default will need to re-enable it by modifying systemd-resolve configuration file
[Other Info]
* See duplicate bugs and other bug reports in systemd for scenarios of DNS resolution failures when DNSSEC is enabled. |
|
| 2017-04-18 18:07:22 |
Adam Conrad |
systemd (Ubuntu Zesty): status |
Confirmed |
Fix Committed |
|
| 2017-04-18 18:07:24 |
Adam Conrad |
bug |
|
|
added subscriber Ubuntu Stable Release Updates Team |
| 2017-04-18 18:07:26 |
Adam Conrad |
bug |
|
|
added subscriber SRU Verification |
| 2017-04-18 18:07:32 |
Adam Conrad |
tags |
|
verification-needed |
|
| 2017-04-18 21:26:00 |
Török Edwin |
tags |
verification-needed |
verification-done |
|
| 2017-04-20 20:11:08 |
Launchpad Janitor |
systemd (Ubuntu Zesty): status |
Fix Committed |
Fix Released |
|
| 2017-04-20 20:11:39 |
Steve Langasek |
removed subscriber Ubuntu Stable Release Updates Team |
|
|
|
| 2017-04-22 09:28:49 |
Launchpad Janitor |
systemd (Ubuntu): status |
Fix Committed |
Fix Released |
|
| 2017-04-24 12:31:15 |
hrvooje |
bug |
|
|
added subscriber hrvooje |
| 2017-05-02 15:55:12 |
allfox_wy |
bug watch added |
|
https://github.com/systemd/systemd/issues/5352 |
|
| 2017-05-02 16:04:56 |
allfox_wy |
bug |
|
|
added subscriber allfox_wy |
| 2017-07-27 03:38:30 |
Mathew Hodson |
summary |
disable dnssec |
Disable DNSSEC by default |
|
| 2017-07-27 03:38:36 |
Mathew Hodson |
systemd (Ubuntu): milestone |
zesty-updates |
|
|
| 2017-10-30 23:26:45 |
Andrew Gunnerson |
bug |
|
|
added subscriber Andrew Gunnerson |
