diff --git a/systemd.changes b/systemd.changes
index c6c4f4b7..d80c30e0 100644
--- a/systemd.changes
+++ b/systemd.changes
@@ -1,3 +1,11 @@
+-------------------------------------------------------------------
+Wed Jan 26 15:20:57 UTC 2022 - Franck Bui <fbui@suse.com>
+
+- resolved: disable DNSSEC until the following issue is solved:
+  https://github.com/systemd/systemd/issues/10579
+
+- Replace '%setup+%autopatch' with '%autosetup'
+
 -------------------------------------------------------------------
 Mon Jan 24 15:51:07 UTC 2022 - Franck Bui <fbui@suse.com>
 
diff --git a/systemd.spec b/systemd.spec
index 25b2542b..7f248fdd 100644
--- a/systemd.spec
+++ b/systemd.spec
@@ -619,8 +619,7 @@ Have fun with these services at your own risk.
 %endif
 
 %prep
-%setup -q -n systemd-v%{version}%{suse_version}
-%autopatch -p1
+%autosetup -p1 -n systemd-v%{version}%{suse_version}
 
 %build
 # keep split-usr until all packages have moved their systemd rules to /usr
@@ -702,6 +701,9 @@ Have fun with these services at your own risk.
 %endif
 %if %{without resolved}
         -Dresolve=false \
+%else
+        -Ddefault-dnssec=no \
+        -Ddns-over-tls=openssl \
 %endif
 %if %{without sysvcompat}
         -Dsysvinit-path= \