diff --git a/base/comps/systemd/systemd.comp.toml b/base/comps/systemd/systemd.comp.toml
index c5da8905acc..2586e7cfd18 100644
--- a/base/comps/systemd/systemd.comp.toml
+++ b/base/comps/systemd/systemd.comp.toml
@@ -34,3 +34,9 @@ type = "file-search-replace"
 file = "60-block-scheduler.rules"
 regex = "(?m)^"
 replacement = "#"
+
+[[components.systemd.overlays]]
+description = "Set default llmnr support to disabled"
+type = "spec-search-replace"
+regex = '-Ddefault-llmnr=.*$'
+replacement = "-Ddefault-llmnr=no"
diff --git a/locks/systemd.lock b/locks/systemd.lock
index 015aa557e46..76ca593cc58 100644
--- a/locks/systemd.lock
+++ b/locks/systemd.lock
@@ -2,5 +2,5 @@
 version = 1
 import-commit = '5218dd0c26aa860bf163e326fa9733c03e8b381f'
 upstream-commit = '5218dd0c26aa860bf163e326fa9733c03e8b381f'
-input-fingerprint = 'sha256:20f79e6487aaebfff8b502093b3cd2804c2e435e642d3b8db2f54caa6f681217'
+input-fingerprint = 'sha256:2c7c3721c8b6485be5dc370dcd1f5ee7b862a80f4db9292c8cb9f14382c3601d'
 resolution-input-hash = 'sha256:466421704711c4fd3c71f0b2ed715a0e61d49e3e26f3a2637fee755795849c8e'
diff --git a/specs/s/systemd/systemd.spec b/specs/s/systemd/systemd.spec
index 8184f02f853..7b61e6a3597 100644
--- a/specs/s/systemd/systemd.spec
+++ b/specs/s/systemd/systemd.spec
@@ -2,7 +2,7 @@
 ## (rpmautospec version 0.8.3)
 ## RPMAUTOSPEC: autorelease, autochangelog
 %define autorelease(e:s:pb:n) %{?-p:0.}%{lua:
-    release_number = 2;
+    release_number = 3;
     base_release_number = tonumber(rpm.expand("%{?-b*}%{!?-b:1}"));
     print(release_number + base_release_number - 1);
 }%{?-e:.%{-e*}}%{?-s:.%{-s*}}%{!?-n:%{?dist}}
@@ -881,7 +881,7 @@ CONFIGURE_OPTS=(
         -Ddefault-dns-over-tls=no
         # https://bugzilla.redhat.com/show_bug.cgi?id=1867830
         -Ddefault-mdns=no
-        -Ddefault-llmnr=resolve
+        -Ddefault-llmnr=no
         # https://bugzilla.redhat.com/show_bug.cgi?id=2028169
         -Dstatus-unit-format-default=combined
 %if 0%{?fedora}
@@ -1577,6 +1577,9 @@ rm -rf \
 
 %changelog
 ## START: Generated by rpmautospec
+* Fri May 08 2026 Dan Streetman <ddstreet@ieee.org> - 258.4-3
+- fix(systemd): set default llmnr support to disabled
+
 * Thu Apr 30 2026 Daniel McIlvaney <damcilva@microsoft.com> - 258.4-2
 - feat: introduce deterministic commit resolution via Azure Linux lock file