# DNF Automatic No security updates needed, but 123 updates available

**URL:** <https://forums.rockylinux.org/t/dnf-automatic-no-security-updates-needed-but-123-updates-available/20117>\
**Category:** Rocky Linux Help & Support\
**Created:** [January 13, 2026, 6:26pm UTC](https://forums.rockylinux.org/t/dnf-automatic-no-security-updates-needed-but-123-updates-available/20117 "2026-01-13T18:26:00Z")\
**Posts on this page:** 15\
**Page:** 1

<div class="post-metadata">

**Author:** ![rglinux](https://sea2.discourse-cdn.com/flex020/user_avatar/forums.rockylinux.org/rglinux/32/4035_2.png) [@rglinux](https://forums.rockylinux.org/u/rglinux)\
**Post date:** [January 13, 2026, 6:26pm UTC](https://forums.rockylinux.org/t/dnf-automatic-no-security-updates-needed-but-123-updates-available/20117/1 "2026-01-13T18:26:00Z")

</div>

Hi,

I am using rocky8.10 and configured to pull security updates through dnf. I see nd flog is printing “Automatic No security updates needed, but 123 updates available”, I am bit confused why dnf is not installing those security patches/updates as it see there are some updates available? I am missing anything?

```auto
systemctl list-timers --all | grep dnf-automaticWed 2026-01-14 06:55:23 UTC 12h left Tue 2026-01-13 06:05:26 UTC 12h ago dnf-automatic.timer dnf-automatic.service

```

dnf.log

```auto
grep "security updates" /var/log/dnf.*
/var/log/dnf.log:2025-12-30T06:45:58+0000 WARNING No security updates needed, but 123 updates available
/var/log/dnf.log:2025-12-31T06:04:58+0000 WARNING No security updates needed, but 123 updates available
/var/log/dnf.log:2026-01-01T06:16:35+0000 WARNING No security updates needed, but 123 updates available
/var/log/dnf.log:2026-01-02T06:48:58+0000 WARNING No security updates needed, but 123 updates available
/var/log/dnf.log:2026-01-03T06:51:31+0000 WARNING No security updates needed, but 123 updates available
/var/log/dnf.log:2026-01-04T06:23:33+0000 WARNING No security updates needed, but 123 updates available
/var/log/dnf.log:2026-01-05T06:27:59+0000 WARNING No security updates needed, but 123 updates available
/var/log/dnf.log:2026-01-06T06:34:59+0000 WARNING No security updates needed, but 123 updates available
/var/log/dnf.log:2026-01-07T06:02:00+0000 WARNING No security updates needed, but 123 updates available
/var/log/dnf.log:2026-01-08T06:20:08+0000 WARNING No security updates needed, but 123 updates available
/var/log/dnf.log:2026-01-09T06:34:26+0000 WARNING No security updates needed, but 124 updates available
/var/log/dnf.log:2026-01-11T06:27:36+0000 WARNING No security updates needed, but 123 updates available
/var/log/dnf.log:2026-01-12T06:37:00+0000 WARNING No security updates needed, but 123 updates available
/var/log/dnf.log:2026-01-13T06:05:34+0000 WARNING No security updates needed, but 123 updates available
/var/log/dnf.log.1:2025-12-09T06:32:06+0000 WARNING No security updates needed, but 105 updates available
/var/log/dnf.log.1:2025-12-10T06:17:57+0000 WARNING No security updates needed, but 105 updates available

```

---

<div class="post-metadata">

**Author:** ![label](https://avatars.discourse-cdn.com/v4/letter/l/c5a1d2/32.png) [@label](https://forums.rockylinux.org/u/label)\
**Post date:** [January 13, 2026, 6:54pm UTC](https://forums.rockylinux.org/t/dnf-automatic-no-security-updates-needed-but-123-updates-available/20117/2 "2026-01-13T18:54:15Z")

</div>

Not all updates are security updates. Not all updates are tagged as security updates in the errata though there has been work to correct a lot of this.

IMO: You are recommended to update your system fully using `dnf update`. I would not fully rely on the security only updates feature of dnf.

---

<div class="post-metadata">

**Author:** ![rglinux](https://sea2.discourse-cdn.com/flex020/user_avatar/forums.rockylinux.org/rglinux/32/4035_2.png) [@rglinux](https://forums.rockylinux.org/u/rglinux)\
**Post date:** [January 13, 2026, 8:13pm UTC](https://forums.rockylinux.org/t/dnf-automatic-no-security-updates-needed-but-123-updates-available/20117/3 "2026-01-13T20:13:47Z")

</div>

OK. Thank you. But `dnf updateinfo list security` should only list security right ? and if your automatic config only enable security it should only look for security updates?

---

<div class="post-metadata">

**Author:** ![jlehtone](https://avatars.discourse-cdn.com/v4/letter/j/e9a140/32.png) [@jlehtone](https://forums.rockylinux.org/u/jlehtone)\
**Post date:** [January 13, 2026, 8:51pm UTC](https://forums.rockylinux.org/t/dnf-automatic-no-security-updates-needed-but-123-updates-available/20117/4 "2026-01-13T20:51:26Z")

</div>

> [@rglinux](#):
>
> should only list security right ?

should only list available updates **that have been correctly marked as** security

It is way easier and safer to run `dnf up` – auto or manual is up to you.

---

<div class="post-metadata">

**Author:** ![rglinux](https://sea2.discourse-cdn.com/flex020/user_avatar/forums.rockylinux.org/rglinux/32/4035_2.png) [@rglinux](https://forums.rockylinux.org/u/rglinux)\
**Post date:** [January 27, 2026, 8:03pm UTC](https://forums.rockylinux.org/t/dnf-automatic-no-security-updates-needed-but-123-updates-available/20117/5 "2026-01-27T20:03:16Z")

</div>

I also observed this, there are security patches available from cloud-kernal repo but dnf automatic is not installing them. This is in GCP (google cloud)

```auto
sudo dnf check-update --security
Last metadata expiration check: 0:00:21 ago on Tue 27 Jan 2026 07:45:02 PM UTC.

kernel.x86_64 4.18.0-553.51.1.el8_10.cloud.0.1 cloud-kernel
kernel-core.x86_64 4.18.0-553.51.1.el8_10.cloud.0.1 cloud-kernel
kernel-headers.x86_64 4.18.0-553.51.1.el8_10.cloud.0.1 cloud-kernel
kernel-modules.x86_64 4.18.0-553.51.1.el8_10.cloud.0.1 cloud-kernel
kernel-tools.x86_64 4.18.0-553.51.1.el8_10.cloud.0.1 cloud-kernel
kernel-tools-libs.x86_64 4.18.0-553.51.1.el8_10.cloud.0.1 cloud-kernel
Obsoleting Packages
kernel-headers.x86_64 4.18.0-553.51.1.el8_10.cloud.0.1 cloud-kernel
    kernel-headers.x86_64 4.18.0-553.16.1.el8_10.cloud.0.1 @cloud-kernel

```

Previously installed:

```auto
 sudo dnf updateinfo list security --installed |grep "kernel-4.18.0-553"
RXSA-2024:5101 Important/Sec. kernel-4.18.0-553.16.1.el8_10.cloud.0.1.x86_64
RLSA-2024:5101 Important/Sec. kernel-4.18.0-553.16.1.el8_10.x86_64
RLSA-2024:3618 Moderate/Sec. kernel-4.18.0-553.5.1.el8_10.x86_64
RLSA-2024:4211 Important/Sec. kernel-4.18.0-553.8.1.el8_10.x86_64
RLSA-2024:3138 Moderate/Sec. kernel-4.18.0-553.el8_10.x86_64

```

```auto

 rpm -qa |grep kernel
kernel-4.18.0-553.16.1.el8_10.cloud.0.1.x86_64
kernel-headers-4.18.0-553.16.1.el8_10.cloud.0.1.x86_64
kernel-tools-libs-4.18.0-553.34.1.el8_10.x86_64
kernel-modules-4.18.0-553.16.1.el8_10.cloud.0.1.x86_64
kernel-core-4.18.0-553.16.1.el8_10.cloud.0.1.x86_64
kernel-tools-4.18.0-553.34.1.el8_10.x86_64

```

dnf automatic timer status:

```auto
systemctl status dnf-automatic
● dnf-automatic.service - dnf automatic
   Loaded: loaded (/usr/lib/systemd/system/dnf-automatic.service; static; vendor preset: disabled)
   Active: inactive (dead) since Tue 2026-01-27 06:24:32 UTC; 13h ago
  Process: 2549752 ExecStart=/usr/bin/dnf-automatic /etc/dnf/automatic.conf --timer (code=exited, status=0/SUCCESS)
 Main PID: 2549752 (code=exited, status=0/SUCCESS)

```

dnf automatic config:

```auto
 cat /etc/dnf/automatic.conf |grep -v "^#"
[commands]
upgrade_type = security
random_sleep = 0

network_online_timeout = 60

download_updates = yes

apply_updates = yes

```

Note: Rocky-BaseOS repo exlcuding the kernel\* packages though

```auto
cat /etc/yum.repos.d/Rocky-BaseOS.repo |grep exclude
exclude=kernel*

```

---

<div class="post-metadata">

**Author:** ![iwalker](https://sea2.discourse-cdn.com/flex020/user_avatar/forums.rockylinux.org/iwalker/32/2599_2.png) [@iwalker](https://forums.rockylinux.org/u/iwalker)\
**Post date:** [January 27, 2026, 8:16pm UTC](https://forums.rockylinux.org/t/dnf-automatic-no-security-updates-needed-but-123-updates-available/20117/6 "2026-01-27T20:16:28Z")

</div>

According to RHEL documentation:

 ![image](https://us1.discourse-cdn.com/flex020/uploads/rockylinux/original/2X/2/21142a73fde31589b0f727f8cb7bd018253c1550.png)

seems to state that this is not responsible for installing packages. There is another item called `dnf-automatic-install.timer`

![image](https://us1.discourse-cdn.com/flex020/uploads/rockylinux/original/2X/5/5f8516f7e6222bb4665a0bf0c82d84dcc86c24e3.png)

which is responsible for downloading and installing. So just wondering if the correct ones are actually enabled or not? Now, when I just installed `dnf-automatic`, this is how it looks:

```auto
root@rhel8:/var/log# systemctl list-timers --all | grep -i dnf
Tue 2026-01-27 21:57:06 CET 40min left Tue 2026-01-27 20:22:53 CET 53min ago dnf-makecache.timer dnf-makecache.service

```

so nothing by default, but now when I enable the appropriate timer:

```auto
root@rhel8:/var/log# systemctl list-timers --all | grep -i dnf
Tue 2026-01-27 22:09:05 CET 52min left Tue 2026-01-27 20:22:53 CET 54min ago dnf-makecache.timer dnf-makecache.service
n/a n/a n/a n/a dnf-automatic-install.timer dnf-automatic-install.service

```

now you can see I have enabled the timer to take care of downloading and installing.

---

<div class="post-metadata">

**Author:** ![rglinux](https://sea2.discourse-cdn.com/flex020/user_avatar/forums.rockylinux.org/rglinux/32/4035_2.png) [@rglinux](https://forums.rockylinux.org/u/rglinux)\
**Post date:** [January 27, 2026, 11:19pm UTC](https://forums.rockylinux.org/t/dnf-automatic-no-security-updates-needed-but-123-updates-available/20117/7 "2026-01-27T23:19:04Z")

</div>

I have these enabled

```auto
 sudo systemctl list-timers --all | grep -i dnf
Wed 2026-01-28 00:32:30 UTC 1h 16min left Tue 2026-01-27 22:56:30 UTC 19min ago dnf-makecache.timer dnf-makecache.service
Wed 2026-01-28 06:05:36 UTC 6h left Tue 2026-01-27 06:27:44 UTC 16h ago dnf-automatic.timer dnf-automatic.service

```

---

<div class="post-metadata">

**Author:** ![iwalker](https://sea2.discourse-cdn.com/flex020/user_avatar/forums.rockylinux.org/iwalker/32/2599_2.png) [@iwalker](https://forums.rockylinux.org/u/iwalker)\
**Post date:** [January 28, 2026, 8:20am UTC](https://forums.rockylinux.org/t/dnf-automatic-no-security-updates-needed-but-123-updates-available/20117/8 "2026-01-28T08:20:33Z")

</div>

On mine yesterday I installed and used the `dnf-automatic-install.timer` as per my previous post. The list of updates:

```auto
root@rhel8:~# dnf check-update --security

Updating Subscription Management repositories.
Last metadata expiration check: 1:08:54 ago on Tue 27 Jan 2026 08:23:50 PM CET.

java-1.8.0-openjdk.x86_64 1:1.8.0.482.b08-1.el8 rhel-8-for-x86_64-appstream-rpms
java-1.8.0-openjdk-devel.x86_64 1:1.8.0.482.b08-1.el8 rhel-8-for-x86_64-appstream-rpms
java-1.8.0-openjdk-headless.x86_64 1:1.8.0.482.b08-1.el8 rhel-8-for-x86_64-appstream-rpms
kernel.x86_64 4.18.0-553.97.1.el8_10 rhel-8-for-x86_64-baseos-rpms   
kernel-core.x86_64 4.18.0-553.97.1.el8_10 rhel-8-for-x86_64-baseos-rpms   
kernel-devel.x86_64 4.18.0-553.97.1.el8_10 rhel-8-for-x86_64-baseos-rpms   
kernel-headers.x86_64 4.18.0-553.97.1.el8_10 rhel-8-for-x86_64-baseos-rpms   
kernel-modules.x86_64 4.18.0-553.97.1.el8_10 rhel-8-for-x86_64-baseos-rpms   
kernel-tools.x86_64 4.18.0-553.97.1.el8_10 rhel-8-for-x86_64-baseos-rpms   
kernel-tools-libs.x86_64 4.18.0-553.97.1.el8_10 rhel-8-for-x86_64-baseos-rpms   
python3-perf.x86_64 4.18.0-553.97.1.el8_10 rhel-8-for-x86_64-baseos-rpms   
python3-urllib3.noarch 1.24.2-9.el8_10 rhel-8-for-x86_64-baseos-rpms   
python3.11.x86_64 3.11.13-4.el8_10 rhel-8-for-x86_64-appstream-rpms
python3.11-libs.x86_64 3.11.13-4.el8_10 rhel-8-for-x86_64-appstream-rpms
Obsoleting Packages
kernel-headers.x86_64 4.18.0-553.97.1.el8_10 rhel-8-for-x86_64-baseos-rpms   
    kernel-headers.x86_64 4.18.0-553.94.1.el8_10 @rhel-8-for-x86_64-baseos-rpms  

```

the timer I enabled ran about 06:00 this morning, so when I now check my server with the same command:

```auto
root@rhel8:~# dnf check-update --security

Updating Subscription Management repositories.
Last metadata expiration check: 1:53:46 ago on Wed 28 Jan 2026 07:23:48 AM CET.
No security updates needed, but 1 update available
Security: kernel-core-4.18.0-553.97.1.el8_10.x86_64 is an installed security update
Security: kernel-core-4.18.0-553.94.1.el8_10.x86_64 is the currently running version

```

suggests that it works. The only change I made to `/etc/dnf/automatic.conf` was to choose only security updates. Then I left it to enabling the appropriate timer to ensure updates were downloaded and installed.

When I run a standard `dnf update` command, the remaining updates are:

```auto
root@rhel8:~# dnf update

Updating Subscription Management repositories.
Last metadata expiration check: 1:55:00 ago on Wed 28 Jan 2026 07:23:48 AM CET.
Dependencies resolved.
========================================================================================================================
 Package Architecture Version Repository Size
========================================================================================================================
Upgrading:
 shim-x64 x86_64 15.8-6.el8_10 rhel-8-for-x86_64-baseos-rpms 467 k

Transaction Summary
========================================================================================================================
Upgrade 1 Package

Total download size: 467 k

```

so would suggest that when using `dnf-automatic-install.timer` it works correctly. I haven’t tried the one you enabled, but perhaps it would be better for you to try the one I used.

I’d have to repeat this on Rocky 8, since this is RHEL8, but assuming both are the same in terms of marking the appropriate update packages correctly as security updates, then it should work just the same as my above example.

---

<div class="post-metadata">

**Author:** ![rglinux](https://sea2.discourse-cdn.com/flex020/user_avatar/forums.rockylinux.org/rglinux/32/4035_2.png) [@rglinux](https://forums.rockylinux.org/u/rglinux)\
**Post date:** [January 28, 2026, 6:08pm UTC](https://forums.rockylinux.org/t/dnf-automatic-no-security-updates-needed-but-123-updates-available/20117/9 "2026-01-28T18:08:11Z")

</div>

As per [rhel doc](https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/10/html/managing_software_with_the_dnf_tool/automating-software-updates-in-rhel#enabling-dnf-automatic) - ``dnf-automatic.timer`: Downloads, downloads and installs, or reports available updates.` so just enabling should do the download and install not sure the necessity of enabling install timer but any way i will try to enable that and see if it works.

---

<div class="post-metadata">

**Author:** ![iwalker](https://sea2.discourse-cdn.com/flex020/user_avatar/forums.rockylinux.org/iwalker/32/2599_2.png) [@iwalker](https://forums.rockylinux.org/u/iwalker)\
**Post date:** [January 28, 2026, 6:25pm UTC](https://forums.rockylinux.org/t/dnf-automatic-no-security-updates-needed-but-123-updates-available/20117/10 "2026-01-28T18:25:13Z")

</div>

> [@rglinux](#):
>
> As per [rhel doc](https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/10/html/managing_software_with_the_dnf_tool/automating-software-updates-in-rhel#enabling-dnf-automatic) - ``dnf-automatic.timer`: Downloads, downloads and installs, or reports available updates.` so just enabling should do the download and install

Yes, in theory it should - unless something is broken with it. Hence the reason for asking to use the other timer and see if there is any difference in behaviour.

---

<div class="post-metadata">

**Author:** ![jlehtone](https://avatars.discourse-cdn.com/v4/letter/j/e9a140/32.png) [@jlehtone](https://forums.rockylinux.org/u/jlehtone)\
**Post date:** [January 28, 2026, 7:21pm UTC](https://forums.rockylinux.org/t/dnf-automatic-no-security-updates-needed-but-123-updates-available/20117/11 "2026-01-28T19:21:19Z")

</div>

> [@iwalker](#):
>
> According to RHEL doc …

> [@rglinux](#):
>
> As per rhel doc …

One says “does not” and the other “does too”. Either one of them has error, or they are not talking about the same thing?

How about this: read the timer’s definition. It must call some program with some options. What doc do they agree with?

---

<div class="post-metadata">

**Author:** ![rglinux](https://sea2.discourse-cdn.com/flex020/user_avatar/forums.rockylinux.org/rglinux/32/4035_2.png) [@rglinux](https://forums.rockylinux.org/u/rglinux)\
**Post date:** [January 28, 2026, 11:20pm UTC](https://forums.rockylinux.org/t/dnf-automatic-no-security-updates-needed-but-123-updates-available/20117/12 "2026-01-28T23:20:12Z")

</div>

OK, i have enabled the other timer as well

```auto
systemctl status dnf-automatic-install.timer
● dnf-automatic-install.timer - dnf-automatic-install timer
   Loaded: loaded (/usr/lib/systemd/system/dnf-automatic-install.timer; enabled; vendor preset: disabled)
   Active: active (waiting) since Wed 2026-01-28 18:18:10 UTC; 25s ago
  Trigger: Wed 2026-01-28 18:34:10 UTC; 15min left

```

Kernel rpms installed before install timer:

```auto
 rpm -qa |grep kernel
kernel-4.18.0-553.16.1.el8_10.cloud.0.1.x86_64
kernel-headers-4.18.0-553.16.1.el8_10.cloud.0.1.x86_64
kernel-tools-libs-4.18.0-553.34.1.el8_10.x86_64
kernel-modules-4.18.0-553.16.1.el8_10.cloud.0.1.x86_64
kernel-core-4.18.0-553.16.1.el8_10.cloud.0.1.x86_64
kernel-tools-4.18.0-553.34.1.el8_10.x86_64

```

But I still didnt see it installed the security updates.

DNF logs:

```auto
2026-01-28T18:34:27+0000 DEBUG Started dnf-automatic.
2026-01-28T18:34:27+0000 DEBUG Sleep for 0 seconds
2026-01-28T18:34:27+0000 DEBUG Unknown configuration option: http_caching = none in /etc/yum.repos.d/ops.repo
2026-01-28T18:34:27+0000 DEBUG Unknown configuration option: http_caching = none in /etc/yum.repos.d/ops.repo
2026-01-28T18:34:27+0000 DEBUG Waiting for internet connection...
2026-01-28T18:34:27+0000 DEBUG User-Agent: constructed: 'libdnf (Rocky Linux 8.10; generic; Linux.x86_64)'
2026-01-28T18:34:27+0000 DEBUG repo: using cache for: cloud-kernel
2026-01-28T18:34:27+0000 DEBUG cloud-kernel: using metadata from Mon 09 Jun 2025 04:59:53 PM UTC.
2026-01-28T18:34:27+0000 DEBUG reviving: 'opsbase' can be revived - repomd matches.
2026-01-28T18:34:27+0000 DEBUG opsbase: using metadata from Tue 10 Dec 2024 12:31:48 AM UTC.
2026-01-28T18:34:27+0000 DEBUG repo: using cache for: ops-thirdparty
2026-01-28T18:34:27+0000 DEBUG ops-thirdparty: using metadata from Tue 18 Nov 2025 12:00:06 PM UTC.
2026-01-28T18:34:27+0000 DEBUG repo: using cache for: ops-repo
2026-01-28T18:34:27+0000 DEBUG ops-repo: using metadata from Wed 28 Jan 2026 05:26:34 PM UTC.
2026-01-28T18:34:27+0000 DEBUG repo: using cache for: appstream
2026-01-28T18:34:27+0000 DEBUG appstream: using metadata from Sat 24 Jan 2026 03:02:41 AM UTC.
2026-01-28T18:34:27+0000 DEBUG repo: using cache for: baseos
2026-01-28T18:34:28+0000 DEBUG baseos: using metadata from Sat 24 Jan 2026 03:02:54 AM UTC.
2026-01-28T18:34:28+0000 DEBUG repo: using cache for: extras
2026-01-28T18:34:28+0000 DEBUG extras: using metadata from Fri 23 Jan 2026 10:27:37 PM UTC.
2026-01-28T18:34:28+0000 DEBUG repo: using cache for: ops-integration
2026-01-28T18:34:28+0000 DEBUG ops-integration: using metadata from Wed 28 Jan 2026 05:26:34 PM UTC.
2026-01-28T18:34:28+0000 DEBUG repo: using cache for: epel
2026-01-28T18:34:28+0000 DEBUG epel: using metadata from Tue 27 Jan 2026 06:50:01 AM UTC.
2026-01-28T18:34:28+0000 DEBUG repo: using cache for: google-compute-engine
2026-01-28T18:34:28+0000 DEBUG google-compute-engine: using metadata from Fri 26 Nov 1982 08:12:17 AM UTC.
2026-01-28T18:34:28+0000 DEBUG repo: using cache for: google-cloud-sdk
2026-01-28T18:34:28+0000 DEBUG google-cloud-sdk: using metadata from Thu 19 Oct 1978 12:02:11 PM UTC.
2026-01-28T18:34:28+0000 DEBUG repo: using cache for: google-cloud-cli
2026-01-28T18:34:28+0000 DEBUG google-cloud-cli: using metadata from Fri 15 Jul 2022 03:24:15 PM UTC.
2026-01-28T18:34:28+0000 DDEBUG timer: sack setup: 1261 ms
2026-01-28T18:34:28+0000 WARNING No security updates needed, but 137 updates available
2026-01-28T18:34:29+0000 DDEBUG timer: depsolve: 135 ms
2026-01-28T18:34:29+0000 DDEBUG Cleaning up.
2026-01-28T18:34:29+0000 DDEBUG Plugins were unloaded.

```

```auto
sudo dnf check-update --security
Apigee Base Repo For Rocky 8 - x86_64 26 kB/s | 1.5 kB 00:00

kernel.x86_64 4.18.0-553.51.1.el8_10.cloud.0.1 cloud-kernel
kernel-core.x86_64 4.18.0-553.51.1.el8_10.cloud.0.1 cloud-kernel
kernel-headers.x86_64 4.18.0-553.51.1.el8_10.cloud.0.1 cloud-kernel
kernel-modules.x86_64 4.18.0-553.51.1.el8_10.cloud.0.1 cloud-kernel
kernel-tools.x86_64 4.18.0-553.51.1.el8_10.cloud.0.1 cloud-kernel
kernel-tools-libs.x86_64 4.18.0-553.51.1.el8_10.cloud.0.1 cloud-kernel
Obsoleting Packages
kernel-headers.x86_64 4.18.0-553.51.1.el8_10.cloud.0.1 cloud-kernel
    kernel-headers.x86_64

```

Current rpm versions:

```auto
 rpm -qa |grep kernel
kernel-4.18.0-553.16.1.el8_10.cloud.0.1.x86_64
kernel-headers-4.18.0-553.16.1.el8_10.cloud.0.1.x86_64
kernel-tools-libs-4.18.0-553.34.1.el8_10.x86_64
kernel-modules-4.18.0-553.16.1.el8_10.cloud.0.1.x86_64
kernel-core-4.18.0-553.16.1.el8_10.cloud.0.1.x86_64
kernel-tools-4.18.0-553.34.1.el8_10.x86_64

```

Updateinfo installed for kernel

```auto
sudo dnf updateinfo list security --installed|grep kernel-4.18.0-553
RXSA-2024:5101 Important/Sec. kernel-4.18.0-553.16.1.el8_10.cloud.0.1.x86_64
RLSA-2024:5101 Important/Sec. kernel-4.18.0-553.16.1.el8_10.x86_64
RLSA-2024:3618 Moderate/Sec. kernel-4.18.0-553.5.1.el8_10.x86_64
RLSA-2024:4211 Important/Sec. kernel-4.18.0-553.8.1.el8_10.x86_64
RLSA-2024:3138 Moderate/Sec. kernel-4.18.0-553.el8_10.x86_64

```

---

<div class="post-metadata">

**Author:** ![iwalker](https://sea2.discourse-cdn.com/flex020/user_avatar/forums.rockylinux.org/iwalker/32/2599_2.png) [@iwalker](https://forums.rockylinux.org/u/iwalker)\
**Post date:** [January 29, 2026, 6:48am UTC](https://forums.rockylinux.org/t/dnf-automatic-no-security-updates-needed-but-123-updates-available/20117/13 "2026-01-29T06:48:45Z")

</div>

It works in RHEL8, which would suggest that this is a bug in Rocky 8 if it’s not behaving the same. In one of my previous posts here, I checked the list of packages before and after, and they were all installed, including the kernel. With the exception of one package because it wasn’t a security update.

Info on how to report a bug here: [Reporting Bugs and RFE's - Rocky Linux Wiki](https://wiki.rockylinux.org/rocky/bugs/)

---

<div class="post-metadata">

**Author:** ![rglinux](https://sea2.discourse-cdn.com/flex020/user_avatar/forums.rockylinux.org/rglinux/32/4035_2.png) [@rglinux](https://forums.rockylinux.org/u/rglinux)\
**Post date:** [January 30, 2026, 5:17pm UTC](https://forums.rockylinux.org/t/dnf-automatic-no-security-updates-needed-but-123-updates-available/20117/14 "2026-01-30T17:17:35Z")

</div>

Thanks @iwalker . I will wait to see if any rocky8 user will reply with the working solution before opening a bug with rocky8.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex020/uploads/rockylinux/original/1X/91b7219eec10e30013422e4df76c1d898711a5d5.svg) [@system](https://forums.rockylinux.org/u/system)\
**Post date:** [March 31, 2026, 5:17pm UTC](https://forums.rockylinux.org/t/dnf-automatic-no-security-updates-needed-but-123-updates-available/20117/15 "2026-03-31T17:17:37Z")

</div>

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.