The Debian Extended LTS team has released updated dns-root-data packages for both Debian GNU/Linux versions 9 (Stretch) and 10 (Buster) as part of the ELA-1500-1 update. This update focuses on DNSSEC trust anchors, specifically the addition of the DNSKEY record for the KSK-2024 trust anchor. The new key is scheduled for use starting in October 2026, while the previous key, KSK-2017, is set to be revoked in January 2027. This timeline allows for the gradual propagation of the new trust anchor, ensuring that users can transition to it seamlessly or switch earlier if necessary due to urgent circumstances.
In summary, the update ensures that Debian users are prepared for the upcoming changes in DNS security infrastructure, maintaining the integrity and reliability of DNS responses. It is important for system administrators to apply this update promptly to stay ahead of the transition schedule and to ensure continued secure DNS operations. Users should also monitor any related announcements from IANA and Debian regarding future updates or changes to DNSSEC trust anchors
In summary, the update ensures that Debian users are prepared for the upcoming changes in DNS security infrastructure, maintaining the integrity and reliability of DNS responses. It is important for system administrators to apply this update promptly to stay ahead of the transition schedule and to ensure continued secure DNS operations. Users should also monitor any related announcements from IANA and Debian regarding future updates or changes to DNSSEC trust anchors
Dns-Root-Data DNSSEC trust anchors update for Debian ELTS
Updated dns-root-data packages have been released for both Debian GNU/Linux 9 (Stretch) and 10 (Buster) Extended LTS:
ELA-1500-1 dns-root-data DNSSEC trust anchors updateDns-Root-Data DNSSEC trust anchors update for Debian ELTS @ Linux Compatible
