DNF5-ADVISORY(8)

📦
version 5.4.6.0 · 4 versions
, in fedora 44

💖 NAME 💖

dnf5-advisory — the Advisory Command, aka your personal gossip channel for what's up with your packages ✨

🌸 SYNOPSIS 🌸

dnf5 advisory <subcommand> [options] [<advisory-spec>...]

🦋 DESCRIPTION 🦋

okay so the advisory command in DNF5 is literally your one-stop shop for stalking advisories 👀 it gives you a bunch of queries to pull info about advisories and the packages that come with them.

You can also yeet in optional advisory-spec arguments if you only wanna see advisories with specific names. filtering? we love her. 💅

Note: bestie, updateinfo is available as a compatibility alias for advisory. so like, dnf5 updateinfo list is equivalent to dnf5 advisory list. same energy, different name. 🫶

👑 SUBCOMMANDS 👑

  • list — Lists advisories that match whatever criteria you threw at it. It shows you a table with these columns: Name (that's the advisory ID), Type, Severity, Package (NEVRA), and Issued (date). When you pass --with-bz or --with-cve, the first column shows the Bugzilla or CVE reference ID instead of the advisory name. and installed advisory packages? they get highlighted in green, iconic behavior 🌈
  • info — Prints the detailed tea ☕ about advisories. For every matching advisory it displays: Name, Title, Severity, Type, Status, Vendor, Issued date, Description, Message, Rights, References (with Title, Id, Type, and URL), plus the affected packages/modules organized by collection.
  • summary — Prints a summary count of advisories by type and severity. It displays a hierarchical summary showing how many advisories are in each category: Security (with the subcategories Critical, Important, Moderate, Low, Other), Bugfix, Enhancement, and Other. The output header tells you the filter mode: Available (that's the default), All, Installed, or Updates.

✨ OPTIONS ✨

  • --all — Shows advisories containing any version of installed packages.
  • --available — Shows advisories containing newer versions of installed packages. this is the default behavior, so if you don't say anything, this is what you get 💁‍♀️
  • --installed — Shows advisories containing equal and older versions of installed packages.
  • --updates — Shows advisories containing newer versions of installed packages for which a newer version is available.
  • --contains-pkgs=PACKAGE_NAME,... — Shows only advisories containing packages with the specified names. This is a list option. Only installed packages are matched. Globs are supported, so go wild 🎀
  • --security — Include content contained in security advisories.
  • --bugfix — Include content contained in bugfix advisories.
  • --enhancement — Include content contained in enhancement advisories.
  • --newpackage — Include content contained in newpackage advisories.
  • --advisory-severities=ADVISORY_SEVERITY,... — Include content contained in advisories with the specified severity. This is a list option. Accepted values are: critical, important, moderate, low, none.
  • --bzs=BUGZILLA_ID,... — Include content contained in advisories that fix a ticket of the given Bugzilla ID. This is a list option. Expected values are numeric IDs, e.g. 123123. ⚠️ Any transaction command (install, upgrade) will fail with an error if there is no advisory fixing the given ticket — you can bypass this by using the --skip-unavailable switch.
  • --cves=CVE_ID,... — Include content contained in advisories that fix a ticket of the given CVE (Common Vulnerabilities and Exposures) ID. This is a list option. Expected values are string IDs in CVE format, e.g. CVE-2201-0123. ⚠️ Any transaction command (install, upgrade) will fail with an error if there is no advisory fixing the given ticket — you can bypass this by using the --skip-unavailable switch.
  • --with-bz — Show only advisories referencing a Bugzilla ticket.
  • --with-cve — Show only advisories referencing a CVE ticket.
  • --json — Requests JSON output format for machine-readable results. Available for the list and info subcommands only. sorry to summary, she didn't make the cut 😭

🌈 EXAMPLES 🌈

dnf5 advisory info FEDORA-2022-07aa56297a

Show detailed info about the advisory with the given name.

dnf5 advisory summary --contains-pkgs=kernel,kernel-core --with-bz

Show a summary of advisories containing kernel or kernel-core packages and referencing any Bugzilla ticket.

dnf5 advisory list --security --advisory-severities=important

Show a list of security advisories or advisories with important severity.

dnf5 advisory list --json

List all advisories in JSON format for programmatic processing.

dnf5 advisory list --json --with-cve

List advisories with CVE references in JSON format (extended format).

dnf5 advisory info FEDORA-2022-07aa56297a --json

Show detailed info about an advisory in JSON format.

💜 JSON OUTPUT 💜

  • dnf5 advisory list --json

The command returns a JSON array, each element describing one advisory.

Basic format (without --with-cve or --with-bz):

  • name (string) — Advisory identifier.
  • type (string) — Advisory type (security, bugfix, enhancement).
  • severity (string) — Advisory severity level.
  • nevra (string) — Package name-epoch:version-release.architecture.
  • buildtime (integer) — Advisory build time, UNIX time.

Extended format (with --with-cve or --with-bz):

  • advisory_name (string) — Advisory identifier.
  • advisory_type (string) — Advisory type (security, bugfix, enhancement).
  • advisory_severity (string) — Advisory severity level.
  • advisory_buildtime (integer) — Advisory build time, UNIX time.
  • nevra (string) — Package name-epoch:version-release.architecture.
  • references (array) — List of references (CVE/Bugzilla). Each reference contains:
    • reference_id (string) — Reference identifier (e.g., CVE-2024-1234).
    • reference_type (string) — Reference type (cve or bugzilla).
  • dnf5 advisory info --json

The command returns a JSON array, each element containing detailed advisory information. Each advisory object contains the following fields:

  • Name (string) — Advisory name/identifier.
  • Title (string) — Advisory title.
  • Type (string) — Advisory type (security, bugfix, enhancement).
  • Severity (string) — Advisory severity level.
  • Status (string) — Advisory status.
  • Vendor (string) — Advisory vendor.
  • Issued (integer) — Advisory issue time, UNIX time.
  • Description (string) — Detailed advisory description.
  • Message (string) — Advisory message.
  • Rights (string) — Advisory rights/copyright information.
  • references (array) — List of references (CVE, Bugzilla, etc.). Each reference contains:
    • Title (string) — Reference title.
    • Id (string) — Reference identifier (e.g., CVE-2024-1234).
    • Type (string) — Reference type (cve, bugzilla, etc.).
    • Url (string) — Reference URL.
  • collections (object) — Package and module collections affected by the advisory:
    • packages (array) — List of affected package NEVRAs (only present if packages exist).
    • modules (array) — List of affected module NSVCAs (only present if modules exist).

For empty results:

  • dnf5 advisory list --json returns [] (empty array).
  • dnf5 advisory info --json returns [] (empty array).

🎀 Author 🎀

See AUTHORS.md in the dnf5 source distribution. the whole squad is in there 🫶

Contributors to the dnf5 project.

that's the whole page bestie, no cap 💅 this was DNF5-ADVISORY(8) from the dnf5 manual, last touched Sep 24, 2026 — go forth and query your advisories, you absolute icon 👑✨

📦 where this page comes from