Bug 2481284
| Summary: | dnf5 upgrade --security does not install all available security updates | ||
|---|---|---|---|
| Product: | [Fedora] Fedora | Reporter: | Markus Gut <bugzilla.spouse642> |
| Component: | dnf5 | Assignee: | rpm-software-management |
| Status: | CLOSED ERRATA | QA Contact: | |
| Severity: | medium | Docs Contact: | |
| Priority: | high | ||
| Version: | 44 | CC: | jonathan, pkratoch, ppisar, rpm-software-management |
| Target Milestone: | --- | Keywords: | Triaged |
| Target Release: | --- | Flags: | fedora-admin-xmlrpc:
mirror+
|
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Fixed In Version: | dnf5-5.4.3.0-1.fc44 dnf5-5.4.3.0-2.fc44 | Doc Type: | --- |
| Doc Text: | Story Points: | --- | |
| Clone Of: | Environment: | ||
| Last Closed: | 2026-08-22 01:24:08 UTC | Type: | --- |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
FEDORA-2026-958b875d17 (dnf5-5.4.3.0-1.fc44) has been submitted as an update to Fedora 44. https://bodhi.fedoraproject.org/updates/FEDORA-2026-958b875d17 FEDORA-2026-958b875d17 has been pushed to the Fedora 44 testing repository. Soon you'll be able to install the update with the following command: `sudo dnf upgrade --enablerepo=updates-testing --refresh --advisory=FEDORA-2026-958b875d17` You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2026-958b875d17 See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates. FEDORA-2026-958b875d17 has been pushed to the Fedora 44 testing repository. Soon you'll be able to install the update with the following command: `sudo dnf upgrade --enablerepo=updates-testing --refresh --advisory=FEDORA-2026-958b875d17` You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2026-958b875d17 See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates. FEDORA-2026-958b875d17 (dnf5-5.4.3.0-2.fc44) has been pushed to the Fedora 44 stable repository. If problem still persists, please make note of it in this bug report. |
There are package updates available with correct metadata tagging them as `security` updates: markus@blackbox:~$ dnf5 advisory list --security Updating and loading repositories: Repositories loaded. Name Type Severity Package Issued FEDORA-2026-66bba52149 security Important kernel-7.0.9-205.fc44.x86_64 2026-05-21 23:20:37 FEDORA-2026-66bba52149 security Important kernel-core-7.0.9-205.fc44.x86_64 2026-05-21 23:20:37 FEDORA-2026-66bba52149 security Important kernel-modules-7.0.9-205.fc44.x86_64 2026-05-21 23:20:37 FEDORA-2026-66bba52149 security Important kernel-modules-core-7.0.9-205.fc44.x86_64 2026-05-21 23:20:37 FEDORA-2026-66bba52149 security Important kernel-modules-extra-7.0.9-205.fc44.x86_64 2026-05-21 23:20:37 FEDORA-2026-66bba52149 security Important kernel-tools-7.0.9-205.fc44.x86_64 2026-05-21 23:20:37 FEDORA-2026-66bba52149 security Important kernel-tools-libs-7.0.9-205.fc44.x86_64 2026-05-21 23:20:37 FEDORA-2026-66bba52149 security Important python3-perf-7.0.9-205.fc44.x86_64 2026-05-21 23:20:37 But `dnf5 upgrade --security` does not install them: markus@blackbox:~$ sudo dnf upgrade --security Updating and loading repositories: Repositories loaded. No match in selected advisories Nothing to do. However, not all security updates are missed - sometimes some are installed, while others are not. On systems with `dnf automatic` configured to apply security updates automatically, this may result in unpatched systems. Updates need to be applied manually by applying all updates (`dnf upgrade`) or by specifying a specific advisory (`dnf upgrade --advisory=FEDORA-2026-66bba52149`). Reproducible: Sometimes Steps to Reproduce: Steps to reproduce - on systems with recent security updates not yet applied: 1. dnf5 advisory list --security 2. dnf5 dnf upgrade --security 3. Compare Actual Results: Some packages shown for `dnf5 advisory list --security` are not applied when running `dnf upgrade --security`. Expected Results: All packages shown for `dnf5 advisory list --security` should be applied when running `dnf upgrade --security`. Additional Information: markus@blackbox:~$ dnf5 --version dnf5 version 5.4.2.1 dnf5 plugin API version 2.0 libdnf5 version 5.4.2.1 libdnf5 plugin API version 2.2 Loaded dnf5 plugins: name: builddep version: 1.0.0 API version: 2.0 name: changelog version: 1.0.0 API version: 2.0 name: config-manager version: 0.1.0 API version: 2.0 name: copr version: 0.1.0 API version: 2.0 name: needs_restarting version: 1.0.0 API version: 2.0 name: repoclosure version: 1.0.0 API version: 2.0 name: repomanage version: 1.0.0 API version: 2.0 name: reposync version: 1.0.0 API version: 2.0 Loaded libdnf5 plugins: name: appstream version: 1.0.0 API version: 2.0 name: expired-pgp-keys version: 1.0.0 API version: 2.1 markus@blackbox:~$ cat /etc/system-release Fedora release 44 (Forty Four)