diff --git a/systemd.spec b/systemd.spec
index aea0655..3a8be22 100644
--- a/systemd.spec
+++ b/systemd.spec
@@ -27,7 +27,7 @@
 Name:          systemd
 Epoch:         2
 Version:       254.5
-Release:       3mamba
+Release:       4mamba
 Summary:       A system and service manager compatible with SysV and LSB init scripts
 Group:         System/Configuration
 Vendor:        openmamba
@@ -226,7 +226,7 @@ This package include development files for building software using udev librarie
 #%ifarch %{ix86}
 #%patch 23 -p1
 #%endif
-%patch24 -p 1
+%patch 24 -p 1
 
 #sed -i "s|@bindir@|/bin|g" src/core/macros.systemd.in
 
@@ -260,6 +260,7 @@ export LC_ALL="en_US.UTF-8"
    -Dsysvinit-path=%{_initrddir} \
    -Drc-local=%{_initrddir}/rc.local \
    -Ddebug-shell=/bin/sh \
+   -Ddefault-dnssec=no \
    -Dsystem-uid-max=998 \
    -Dsystem-gid-max=998 \
    -Ddefault-kill-user-processes=false \
@@ -852,6 +853,9 @@ systemctl daemon-reload &>/dev/null || :
 %{_libdir}/pkgconfig/libudev.pc
 
 %changelog
+* Wed Nov 01 2023 Silvan Calarco <silvan.calarco@mambasoft.it> 254.5-4mamba
+- rebuilt with -Ddefault-dnssec=no as support is considered experimental and buggy (see https://github.com/systemd/systemd/issues/25676#issuecomment-1634810897 )
+
 * Sun Oct 15 2023 Silvan Calarco <silvan.calarco@mambasoft.it> 254.5-3mamba
 - patch systemd-networkd-wait-online.service so that it doesn't wait if no networks are configured