.\" Man page generated from reStructuredText
.\" by the Docutils 0.23 manpage writer.
.
.
.nr rst2man-indent-level 0
.
.de1 rstReportMargin
\\$1 \\n[an-margin]
level \\n[rst2man-indent-level]
level margin: \\n[rst2man-indent\\n[rst2man-indent-level]]
-
\\n[rst2man-indent0]
\\n[rst2man-indent1]
\\n[rst2man-indent2]
..
.de1 INDENT
.\" .rstReportMargin pre:
. RS \\$1
. nr rst2man-indent\\n[rst2man-indent-level] \\n[an-margin]
. nr rst2man-indent-level +1
.\" .rstReportMargin post:
..
.de UNINDENT
. RE
.\" indent \\n[an-margin]
.\" old: \\n[rst2man-indent\\n[rst2man-indent-level]]
.nr rst2man-indent-level -1
.\" new: \\n[rst2man-indent\\n[rst2man-indent-level]]
.in \\n[rst2man-indent\\n[rst2man-indent-level]]u
..
.TH "DNF5-ADVISORY" "8" "Sep 06, 2026" "" "dnf5"
.SH NAME
dnf5-advisory \- Advisory Command
.SH SYNOPSIS
.sp
\fBdnf5 advisory <subcommand> [options] [<advisory\-spec>...]\fP
.SH DESCRIPTION
.sp
The \fBadvisory\fP command in \fBDNF5\fP offers several queries for getting information about
advisories and packages related to them.
.sp
Optional \fBadvisory\-spec\fP arguments could be passed to filter only advisories with given names.
.sp
\fBNote:\fP
.INDENT 0.0
.INDENT 3.5
The \fBupdateinfo\fP command is available as a compatibility alias for \fBadvisory\fP\&.
For example, \fBdnf5 updateinfo list\fP is equivalent to \fBdnf5 advisory list\fP\&.
.UNINDENT
.UNINDENT
.SH SUBCOMMANDS
.INDENT 0.0
.TP
.B \fBlist\fP
.nf
List advisories matching the specified criteria.
Displays a table with the following columns: Name (advisory ID), Type, Severity, Package (NEVRA), and Issued (date).
When \fB\-\-with\-bz\fP or \fB\-\-with\-cve\fP is specified, the first column shows the Bugzilla or CVE reference ID instead of the advisory name.
Installed advisory packages are highlighted in green.
.fi
.sp
.TP
.B \fBinfo\fP
.nf
Print detailed information about advisories.
For each matching advisory, displays: Name, Title, Severity, Type, Status, Vendor, Issued date, Description, Message, Rights, References (with Title, Id, Type, and URL), and affected packages/modules organized by collection.
.fi
.sp
.TP
.B \fBsummary\fP
.nf
Print a summary count of advisories by type and severity.
Displays a hierarchical summary showing the number of advisories in each category:
Security (with subcategories: Critical, Important, Moderate, Low, Other), Bugfix, Enhancement, and Other.
The output header indicates the filter mode: Available (default), All, Installed, or Updates.
.fi
.sp
.UNINDENT
.SH OPTIONS
.INDENT 0.0
.TP
.B \fB\-\-all\fP
.nf
Show advisories containing any version of installed packages.
.fi
.sp
.TP
.B \fB\-\-available\fP
.nf
Show advisories containing newer versions of installed packages. This is the default behavior.
.fi
.sp
.TP
.B \fB\-\-installed\fP
.nf
Show advisories containing equal and older versions of installed packages.
.fi
.sp
.TP
.B \fB\-\-updates\fP
.nf
Show advisories containing newer versions of installed packages for which a newer version is available.
.fi
.sp
.TP
.B \fB\-\-contains\-pkgs=PACKAGE_NAME,...\fP
.nf
Show only advisories containing packages with specified names.
This is a list option.
Only installed packages are matched. Globs are supported.
.fi
.sp
.UNINDENT
.INDENT 0.0
.TP
.B \fB\-\-security\fP
.nf
Include content contained in security advisories.
.fi
.sp
.UNINDENT
.INDENT 0.0
.TP
.B \fB\-\-bugfix\fP
.nf
Include content contained in bugfix advisories.
.fi
.sp
.UNINDENT
.INDENT 0.0
.TP
.B \fB\-\-enhancement\fP
.nf
Include content contained in enhancement advisories.
.fi
.sp
.UNINDENT
.INDENT 0.0
.TP
.B \fB\-\-newpackage\fP
.nf
Include content contained in newpackage advisories.
.fi
.sp
.UNINDENT
.INDENT 0.0
.TP
.B \fB\-\-advisory\-severities=ADVISORY_SEVERITY,...\fP
.nf
Include content contained in advisories with specified severity.
This is a list option.
Accepted values are: \fIcritical\fP, \fIimportant\fP, \fImoderate\fP, \fIlow\fP, \fInone\fP\&.
.fi
.sp
.UNINDENT
.INDENT 0.0
.TP
.B \fB\-\-bzs=BUGZILLA_ID,...\fP
.nf
Include content contained in advisories that fix a ticket of the given Bugzilla ID.
This is a list option.
Expected values are numeric IDs, e.g. \fI123123\fP\&.
Any transaction command (install, upgrade) will fail with an error if there is no advisory fixing the given ticket; this can be bypassed by using the \-\-skip\-unavailable switch.
.fi
.sp
.UNINDENT
.INDENT 0.0
.TP
.B \fB\-\-cves=CVE_ID,...\fP
.nf
Include content contained in advisories that fix a ticket of the given CVE (Common Vulnerabilities and Exposures) ID.
This is a list option.
Expected values are string IDs in CVE format, e.g. \fICVE\-2201\-0123\fP\&.
Any transaction command (install, upgrade) will fail with an error if there is no advisory fixing the given ticket; this can be bypassed by using the \-\-skip\-unavailable switch.
.fi
.sp
.UNINDENT
.INDENT 0.0
.TP
.B \fB\-\-with\-bz\fP
.nf
Show only advisories referencing a Bugzilla ticket.
.fi
.sp
.TP
.B \fB\-\-with\-cve\fP
.nf
Show only advisories referencing a CVE ticket.
.fi
.sp
.TP
.B \fB\-\-json\fP
.nf
Request JSON output format for machine\-readable results.
Available for \fBlist\fP and \fBinfo\fP subcommands only.
.fi
.sp
.UNINDENT
.SH EXAMPLES
.INDENT 0.0
.TP
.B \fBdnf5 advisory info FEDORA\-2022\-07aa56297a\fP
.nf
Show detailed info about advisory with given name.
.fi
.sp
.TP
.B \fBdnf5 advisory summary \-\-contains\-pkgs=kernel,kernel\-core \-\-with\-bz\fP
.nf
Show a summary of advisories containing \fBkernel\fP or \fBkernel\-core\fP packages and referencing any Bugzilla ticket.
.fi
.sp
.TP
.B \fBdnf5 advisory list \-\-security \-\-advisory\-severities=important\fP
.nf
Show a list of security advisories or advisories with \fBimportant\fP severity.
.fi
.sp
.TP
.B \fBdnf5 advisory list \-\-json\fP
.nf
List all advisories in JSON format for programmatic processing.
.fi
.sp
.TP
.B \fBdnf5 advisory list \-\-json \-\-with\-cve\fP
.nf
List advisories with CVE references in JSON format (extended format).
.fi
.sp
.TP
.B \fBdnf5 advisory info FEDORA\-2022\-07aa56297a \-\-json\fP
.nf
Show detailed info about advisory in JSON format.
.fi
.sp
.UNINDENT
.SH JSON OUTPUT
.INDENT 0.0
.IP \(bu 2
\fBdnf5 advisory list \-\-json\fP
.UNINDENT
.sp
The command returns a JSON array, each element describing one advisory.
.sp
\fBBasic format\fP (without \fB\-\-with\-cve\fP or \fB\-\-with\-bz\fP):
.INDENT 0.0
.INDENT 3.5
.INDENT 0.0
.IP \(bu 2
\fBname\fP (string) \- Advisory identifier.
.IP \(bu 2
\fBtype\fP (string) \- Advisory type (security, bugfix, enhancement).
.IP \(bu 2
\fBseverity\fP (string) \- Advisory severity level.
.IP \(bu 2
\fBnevra\fP (string) \- Package name\-epoch:version\-release.architecture.
.IP \(bu 2
\fBbuildtime\fP (integer) \- Advisory build time, UNIX time.
.UNINDENT
.UNINDENT
.UNINDENT
.sp
\fBExtended format\fP (with \fB\-\-with\-cve\fP or \fB\-\-with\-bz\fP):
.INDENT 0.0
.INDENT 3.5
.INDENT 0.0
.IP \(bu 2
\fBadvisory_name\fP (string) \- Advisory identifier.
.IP \(bu 2
\fBadvisory_type\fP (string) \- Advisory type (security, bugfix, enhancement).
.IP \(bu 2
\fBadvisory_severity\fP (string) \- Advisory severity level.
.IP \(bu 2
\fBadvisory_buildtime\fP (integer) \- Advisory build time, UNIX time.
.IP \(bu 2
\fBnevra\fP (string) \- Package name\-epoch:version\-release.architecture.
.IP \(bu 2
\fBreferences\fP (array) \- List of references (CVE/Bugzilla). Each reference contains:
.UNINDENT
.INDENT 0.0
.INDENT 3.5
.INDENT 0.0
.IP \(bu 2
\fBreference_id\fP (string) \- Reference identifier (e.g., CVE\-2024\-1234).
.IP \(bu 2
\fBreference_type\fP (string) \- Reference type (cve or bugzilla).
.UNINDENT
.UNINDENT
.UNINDENT
.UNINDENT
.UNINDENT
.INDENT 0.0
.IP \(bu 2
\fBdnf5 advisory info \-\-json\fP
.UNINDENT
.sp
The command returns a JSON array, each element containing detailed advisory information.
Each advisory object contains the following fields:
.INDENT 0.0
.IP \(bu 2
\fBName\fP (string) \- Advisory name/identifier.
.IP \(bu 2
\fBTitle\fP (string) \- Advisory title.
.IP \(bu 2
\fBType\fP (string) \- Advisory type (security, bugfix, enhancement).
.IP \(bu 2
\fBSeverity\fP (string) \- Advisory severity level.
.IP \(bu 2
\fBStatus\fP (string) \- Advisory status.
.IP \(bu 2
\fBVendor\fP (string) \- Advisory vendor.
.IP \(bu 2
\fBIssued\fP (integer) \- Advisory issue time, UNIX time.
.IP \(bu 2
\fBDescription\fP (string) \- Detailed advisory description.
.IP \(bu 2
\fBMessage\fP (string) \- Advisory message.
.IP \(bu 2
\fBRights\fP (string) \- Advisory rights/copyright information.
.IP \(bu 2
\fBreferences\fP (array) \- List of references (CVE, Bugzilla, etc.). Each reference contains:
.INDENT 2.0
.IP \(bu 2
\fBTitle\fP (string) \- Reference title.
.IP \(bu 2
\fBId\fP (string) \- Reference identifier (e.g., CVE\-2024\-1234).
.IP \(bu 2
\fBType\fP (string) \- Reference type (cve, bugzilla, etc.).
.IP \(bu 2
\fBUrl\fP (string) \- Reference URL.
.UNINDENT
.IP \(bu 2
\fBcollections\fP (object) \- Package and module collections affected by the advisory:
.INDENT 2.0
.IP \(bu 2
\fBpackages\fP (array) \- List of affected package NEVRAs (only present if packages exist).
.IP \(bu 2
\fBmodules\fP (array) \- List of affected module NSVCAs (only present if modules exist).
.UNINDENT
.UNINDENT
.sp
For empty results:
.INDENT 0.0
.IP \(bu 2
\fBdnf5 advisory list \-\-json\fP returns \fB[]\fP (empty array).
.IP \(bu 2
\fBdnf5 advisory info \-\-json\fP returns \fB[]\fP (empty array).
.UNINDENT
.SH Author
See AUTHORS.md in dnf5 source distribution.
.SH Copyright
Contributors to the dnf5 project.
.\" End of generated man page.