Bug#988132: systemd-resolved stub resolver does not pass RRSIG data for applications to answer DNSSEC queries

[Michael Biebl]

Control: tags -1 + fixed-upstream patch


Hi Philip,

thanks for the detailed bug report.

Am 06.05.2021 um 12:29 schrieb Philip Stewart:
> I've found a series of issues [1, 2] had already been opened upstream 
> for this along with a related issue concerning a (possibly) incorrect 
> return type [3]. Fixes for all have been committed in the v248 tag 
> [4-6], but it should be noted that the bulk of the fix [4] is fairly 
> substantial, so I'm not sure whether there is any appetite to patch 
> bullseye post-release.

This would need convincing of the stable release managers, who usually 
prefer targetted, small fixes for stable uploads. I'm a bit skeptical 
that this one would qualify.

We do offer newer releases via stable backports though. So if this is an 
issue which concerns you, you will be able to get v248 (and later) via 
bullseye-backports.

Hopefully, this is an acceptable compromise for you.

Regards,
Michael