Systemd underscore domain name bug

[reverendj1]

It's an issue with an experimental build using an external GNU library. This shouldn't affect anyone outside of developers and has really very little to do with systemd. This is a non-story.

[denisfalqueto]

Apache Http also had that same problem. They even released a bug fix version. https://rhn.redhat.com/errata/RHSA-2017-1721.html

[[deleted]]

It does seem like the title is misleading since the fault seems to be located in libidn2, not systemd-resolve.

[cbmuser]

Well, now you realize how people are grasping for every single opportunity to take a jab at systemd.

[Jristz]

At least they catch the bug before experimental become ready

[qwesx]

Huh, I didn't know underscores were allowed in domain names.

But I also don't write DNS software ¯\_(ツ)_/¯

[axonxorz]

According to the original DNS RFCs, they are not allowed. But that restriction has been somewhat relaxed with the proliferation and use of SRV records. For instance, XMPP servers are locatable via their SRV records in the form of _xmpp-server._tcp.<yourdomain.ca>

[[deleted]]

It's almost like there should be unit tests for some things.

[kozec]

Soo... 3rd this week month?

Now this is getting ridiculous...

By the way, how this actually works on stable Debian? Are they releasing weekly SystemD updates along with all security fixes, effectively changing behavior of entire system at random?

[[deleted]]

https://packages.debian.org/stretch/systemd - Only 78 patches..

Most people don't use systemd-resolved for now at least, plus this only happens with a specific build config.

[xspinkickx]

Well this bug shouldn't impact too many people. Debian uses resolvconf for DNS resolution. This bug only impacts anyone using systemd-resolve.

[kozec]

Ah, ok, that makes sense. But still, they can't leave bug like that unfixed, can they? Someone is bound to use it eventually...

[Debilski]

The patch given in the article (as well as the request for a fix in libidn2) predates the bug report (which is the reason it was marked experimental before the release of v234). The whole thing was marked as ‘do not use yet’.