Bug 2481284 - dnf5 upgrade --security does not install all available security updates
Summary: dnf5 upgrade --security does not install all available security updates
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Fedora
Classification: Fedora
Component: dnf5
Version: 44
Hardware: All
OS: Linux
high
medium
Target Milestone: ---
Assignee: rpm-software-management
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2026-05-25 20:40 UTC by Markus Gut
Modified: 2026-08-22 01:24 UTC (History)
4 users (show)

Fixed In Version: dnf5-5.4.3.0-1.fc44 dnf5-5.4.3.0-2.fc44
Clone Of:
Environment:
Last Closed: 2026-08-22 01:24:08 UTC
Type: ---
Embargoed:
fedora-admin-xmlrpc: mirror+


Attachments (Terms of Use)

Description Markus Gut 2026-05-25 20:40:32 UTC
There are package updates available with correct metadata tagging them as `security` updates:

    markus@blackbox:~$ dnf5 advisory list --security
    Updating and loading repositories:
    Repositories loaded.
    Name                   Type     Severity                                     Package              Issued
    FEDORA-2026-66bba52149 security Important               kernel-7.0.9-205.fc44.x86_64 2026-05-21 23:20:37
    FEDORA-2026-66bba52149 security Important          kernel-core-7.0.9-205.fc44.x86_64 2026-05-21 23:20:37
    FEDORA-2026-66bba52149 security Important       kernel-modules-7.0.9-205.fc44.x86_64 2026-05-21 23:20:37
    FEDORA-2026-66bba52149 security Important  kernel-modules-core-7.0.9-205.fc44.x86_64 2026-05-21 23:20:37
    FEDORA-2026-66bba52149 security Important kernel-modules-extra-7.0.9-205.fc44.x86_64 2026-05-21 23:20:37
    FEDORA-2026-66bba52149 security Important         kernel-tools-7.0.9-205.fc44.x86_64 2026-05-21 23:20:37
    FEDORA-2026-66bba52149 security Important    kernel-tools-libs-7.0.9-205.fc44.x86_64 2026-05-21 23:20:37
    FEDORA-2026-66bba52149 security Important         python3-perf-7.0.9-205.fc44.x86_64 2026-05-21 23:20:37

But `dnf5 upgrade --security` does not install them:

    markus@blackbox:~$ sudo dnf upgrade --security
    Updating and loading repositories:
    Repositories loaded.
    No match in selected advisories

    Nothing to do.

However, not all security updates are missed - sometimes some are installed, while others are not. On systems with `dnf automatic` configured to apply security updates automatically, this may result in unpatched systems. Updates need to be applied manually by applying all updates (`dnf upgrade`) or by specifying a specific advisory (`dnf upgrade --advisory=FEDORA-2026-66bba52149`).

Reproducible: Sometimes

Steps to Reproduce:
Steps to reproduce - on systems with recent security updates not yet applied:
1. dnf5 advisory list --security
2. dnf5 dnf upgrade --security
3. Compare
Actual Results:
Some packages shown for `dnf5 advisory list --security` are not applied when running `dnf upgrade --security`.

Expected Results:
All packages shown for `dnf5 advisory list --security` should be applied when running `dnf upgrade --security`.

Additional Information:
markus@blackbox:~$ dnf5 --version
dnf5 version 5.4.2.1
dnf5 plugin API version 2.0
libdnf5 version 5.4.2.1
libdnf5 plugin API version 2.2

Loaded dnf5 plugins:
  name: builddep
  version: 1.0.0
  API version: 2.0

  name: changelog
  version: 1.0.0
  API version: 2.0

  name: config-manager
  version: 0.1.0
  API version: 2.0

  name: copr
  version: 0.1.0
  API version: 2.0

  name: needs_restarting
  version: 1.0.0
  API version: 2.0

  name: repoclosure
  version: 1.0.0
  API version: 2.0

  name: repomanage
  version: 1.0.0
  API version: 2.0

  name: reposync
  version: 1.0.0
  API version: 2.0

Loaded libdnf5 plugins:
  name: appstream
  version: 1.0.0
  API version: 2.0

  name: expired-pgp-keys
  version: 1.0.0
  API version: 2.1

markus@blackbox:~$ cat /etc/system-release
Fedora release 44 (Forty Four)

Comment 1 Markus Gut 2026-05-25 20:41:56 UTC
Upstream: https://github.com/rpm-software-management/dnf5/issues/2754

Comment 2 Pavla Kratochvilova 2026-06-30 10:08:20 UTC
PR: https://github.com/rpm-software-management/dnf5/pull/2759

Comment 3 Fedora Update System 2026-08-18 14:22:29 UTC
FEDORA-2026-958b875d17 (dnf5-5.4.3.0-1.fc44) has been submitted as an update to Fedora 44.
https://bodhi.fedoraproject.org/updates/FEDORA-2026-958b875d17

Comment 4 Fedora Update System 2026-08-19 01:39:59 UTC
FEDORA-2026-958b875d17 has been pushed to the Fedora 44 testing repository.
Soon you'll be able to install the update with the following command:
`sudo dnf upgrade --enablerepo=updates-testing --refresh --advisory=FEDORA-2026-958b875d17`
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2026-958b875d17

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.

Comment 5 Fedora Update System 2026-08-20 16:39:14 UTC
FEDORA-2026-958b875d17 has been pushed to the Fedora 44 testing repository.
Soon you'll be able to install the update with the following command:
`sudo dnf upgrade --enablerepo=updates-testing --refresh --advisory=FEDORA-2026-958b875d17`
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2026-958b875d17

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.

Comment 6 Fedora Update System 2026-08-22 01:24:08 UTC
FEDORA-2026-958b875d17 (dnf5-5.4.3.0-2.fc44) has been pushed to the Fedora 44 stable repository.
If problem still persists, please make note of it in this bug report.


Note You need to log in before you can comment on or make changes to this bug.