dnf5 - Debian Package Tracker

general

source: dnf5 (main)
version: 5.4.6.0-2
maintainer: RPM packaging team (DMD)
uploaders: Luca Boccassi (DMD)
arch: amd64 arm64 loong64 ppc64el riscv64 s390x
std-ver: 4.7.4
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

testing: 5.4.6.0-2
unstable: 5.4.6.0-2

versioned links

5.4.6.0-2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

dnf5
dnf5-dev
dnf5-server
libdnf5-2
libdnf5-cli-dev
libdnf5-cli3
libdnf5-dev
python3-libdnf5
python3-libdnf5-cli
python3-libdnf5-python-plugins-loader

action needed

Marked for autoremoval on 02 December due to debugpy, ipykernel, librepo, mistune, python-hypothesis, towncrier: #1145330, #1145439, #1146434, #1151149, #1152592, #1152757 high

Version 5.4.6.0-2 of dnf5 is marked for autoremoval from testing on Wed 02 Dec 2026. It depends (transitively) on debugpy, ipykernel, librepo, mistune, python-hypothesis, towncrier, affected by #1145330, #1145439, #1146434, #1151149, #1152592, #1152757. You should try to prevent the removal by fixing these RC bugs.

Created: 2026-10-24 Last update: 2026-11-12 11:03

A new upstream version is available: 5.4.7.0 high

A new upstream version 5.4.7.0 is available, you should consider packaging it.

Created: 2026-11-06 Last update: 2026-11-12 06:32

1 security issue in sid high

There is 1 open security issue in sid.

1 important issue:

CVE-2026-111253: A flaw was found in dnf5daemon-server. Session methods on dynamically exported D-Bus session objects do not verify that the caller is the unique sender that created the session. A local attacker can modify another user's live package-management session and replace its resolved transaction plan. If the legitimate session party later authorizes execution, the root daemon may apply the attacker-chosen package operations.

Created: 2026-11-06 Last update: 2026-11-06 23:00

1 security issue in forky high

There is 1 open security issue in forky.

1 important issue:

CVE-2026-111253: A flaw was found in dnf5daemon-server. Session methods on dynamically exported D-Bus session objects do not verify that the caller is the unique sender that created the session. A local attacker can modify another user's live package-management session and replace its resolved transaction plan. If the legitimate session party later authorizes execution, the root daemon may apply the attacker-chosen package operations.

Created: 2026-11-06 Last update: 2026-11-06 23:00

lintian reports 1 warning normal

Lintian reports 1 warning about this package. You should make the package lintian clean getting rid of them.

Created: 2026-08-23 Last update: 2026-08-23 21:19

Issues found with some translations low

Automatic checks made by the Debian l10n team found some issues with the translations contained in this package. You should check the l10n status report for more information.

Issues can be things such as missing translations, problematic translated strings, outdated PO files, unknown languages, etc.

Created: 2026-02-17 Last update: 2026-09-28 10:13

testing migrations

This package will soon be part of the auto-fmtlib transition. You might want to ensure that your package is ready for it. You can probably find supplementary information in the debian-release archives or in the corresponding release.debian.org bug.
This package will soon be part of the fmtlib-12 transition. You might want to ensure that your package is ready for it. You can probably find supplementary information in the debian-release archives or in the corresponding release.debian.org bug.

news

[rss feed]

[2026-10-23] dnf5 5.4.6.0-2 MIGRATED to testing (Debian testing watch)
[2026-10-21] Accepted dnf5 5.4.6.0-2 (source amd64) into unstable (Debian FTP Masters) (signed by: Luca Boccassi)
[2026-10-01] dnf5 5.4.6.0-1 MIGRATED to testing (Debian testing watch)
[2026-09-27] Accepted dnf5 5.4.6.0-1 (source) into unstable (Luca Boccassi)
[2026-09-20] dnf5 5.4.5.0-1 MIGRATED to testing (Debian testing watch)
[2026-09-18] Accepted dnf5 5.4.5.0-1 (source) into unstable (Luca Boccassi)
[2026-08-28] dnf5 5.4.4.0-1 MIGRATED to testing (Debian testing watch)
[2026-08-23] Accepted dnf5 5.4.4.0-1 (source) into unstable (Luca Boccassi)
[2026-08-19] dnf5 5.4.3.0-1 MIGRATED to testing (Debian testing watch)
[2026-08-14] Accepted dnf5 5.4.3.0-1 (source) into unstable (Luca Boccassi)
[2026-05-15] dnf5 5.4.2.1-1 MIGRATED to testing (Debian testing watch)
[2026-05-10] Accepted dnf5 5.4.2.1-1 (source) into unstable (Luca Boccassi)
[2026-04-26] dnf5 5.4.2.0-1 MIGRATED to testing (Debian testing watch)
[2026-04-23] Accepted dnf5 5.4.2.0-1 (source) into unstable (Luca Boccassi)
[2026-02-22] dnf5 5.4.0.0-1 MIGRATED to testing (Debian testing watch)
[2026-02-19] Accepted dnf5 5.4.0.0-1 (source) into unstable (Luca Boccassi)
[2026-02-19] dnf5 5.3.0.0-2 MIGRATED to testing (Debian testing watch)
[2026-02-17] Accepted dnf5 5.3.0.0-2 (source) into unstable (Luca Boccassi)
[2026-02-16] Accepted dnf5 5.3.0.0-1 (source amd64) into unstable (Debian FTP Masters) (signed by: Luca Boccassi)

bugs [bug history graph]

all: 1
RC: 1
I&N: 0
M&W: 0
F&P: 0
patch: 0

links

homepage
lintian (0, 1)
buildd: logs, reproducibility, cross
popcon
browse source code
other distros
security tracker
l10n (-, 58)
debian patches
debci

ubuntu

[Information about Ubuntu for Debian Developers]

version: 5.4.6.0-2