Problem Statement

At this point of time, there is no easy way how to rectify CVEs on a Satellite server without updating all packages. Customers who have to apply security updates on regular basis and as fast as they can don't have a supported procedure how to fix CVEs while having minimum impact on Satellite.

The following command usually installs the minimum amount of packages to resolve advisories.

1. dnf --advisory=<advisory1>,<advisory2>,.. upgrade-minimal

Having an option to use 'dnf upgrade-minimal' and install multiple advisories as part of 'satellite-maintain packages install' should help in such use cases.