Merge ~alexmurray/ubuntu-cve-tracker:launchpad-yaml-for-check-syntax into ubuntu-cve-tracker:master

[Alex Murray]

[Alex Murray (alexmurray)]

Merging this now since it works *and* currently appears to be green. Hopefully we can keep it that way.

diff --git a/.launchpad.yaml b/.launchpad.yaml
 new file mode 100644
index 0000000..1773ff9
--- /dev/null
+++ b/.launchpad.yaml
@@ -0,0 +1,50 @@
+license:
+  spdx: GPL-3.0
+
+pipeline:
+  - tests
+jobs:
+  tests:
+    series: jammy
+    architectures: amd64
+    packages:
+      - distro-info
+      - lsb-release
+      - python3
+      - python3-apt
+      - python3-configobj
+      - python3-progressbar
+      - python3-pytest
+      - python3-yaml
+      - rsync
+      - wget
+    run-before: |
+      # configure a basic ~/.ubuntu-cve-tracker.conf and setup packages-mirror
+      # for source_map
+      echo plb_authentication=/dev/null > ~/.ubuntu-cve-tracker.conf
+      echo "packages_mirror=$HOME/mirrors/ubuntu/" >> ~/.ubuntu-cve-tracker.conf
+      for mirror in debian partner; do
+        echo "${mirror}_mirror=$HOME/mirrors/${mirror}/" >> ~/.ubuntu-cve-tracker.conf
+      done
+      echo "Setting up packages-mirror..."
+      # use wget for packages-mirror since rsync is not accessible in lp
+      # builders - also invoke with -v since this seems to make downloading more
+      # reliable (probably slows down wget or somesuch to it doesn't thrash the
+      # internal mirror)
+      echo "./scripts/packages-mirror -w -v"
+      ./scripts/packages-mirror -w -v
+    run: |
+      export UCT=$(pwd)
+      # when lpcraft runs on a local users machine where embargoed already
+      # exists as a symlink it won't point to anywhere so remove that and fake a
+      # new one
+      rm -f embargoed
+      mkdir embargoed
+      echo "Running unit tests..."
+      ./scripts/test_cve_lib.py
+      ./scripts/test_kernel_lib.py
+      ./scripts/test_usn_lib.py
+      ./scripts/check-cves --test
+
+      echo "Checking syntax..."
+      ./scripts/check-syntax
diff --git a/active/CVE-2021-33621 b/active/CVE-2021-33621
index aef178b..eaecb69 100644
--- a/active/CVE-2021-33621
+++ b/active/CVE-2021-33621
@@ -86,7 +86,7 @@ bionic_ruby3.0: DNE
 focal_ruby3.0: DNE
 jammy_ruby3.0: released (3.0.2-7ubuntu2.3)
 kinetic_ruby3.0: released (3.0.4-7ubuntu0.1)
-devel_ruby3.0: released (3.0.4-8ubuntu1)
+devel_ruby3.0: DNE
 
 Patches_ruby3.1:
 upstream_ruby3.1: released (3.1.2-4)
diff --git a/active/CVE-2021-3669 b/active/CVE-2021-3669
index 7f48f42..0657603 100644
--- a/active/CVE-2021-3669
+++ b/active/CVE-2021-3669
@@ -5,6 +5,7 @@ References:
  https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3669
  https://lore.kernel.org/all/[e-mail]/
  https://ubuntu.com/security/notices/USN-5924-1
+ https://ubuntu.com/security/notices/USN-5927-1
 Description:
  A flaw was found in the Linux kernel. Measuring usage of the shared memory
  does not scale with large shared memory segment counts which could lead to
@@ -222,7 +223,7 @@ upstream_linux-azure-4.15: released (5.15~rc1)
 trusty_linux-azure-4.15: DNE
 trusty/esm_linux-azure-4.15: DNE
 xenial_linux-azure-4.15: DNE
-bionic_linux-azure-4.15: needed
+bionic_linux-azure-4.15: released (4.15.0-1162.177)
 focal_linux-azure-4.15: DNE
 hirsute_linux-azure-4.15: DNE
 impish_linux-azure-4.15: DNE
diff --git a/active/CVE-2021-4155 b/active/CVE-2021-4155
index 8055fd5..e60031b 100644
--- a/active/CVE-2021-4155
+++ b/active/CVE-2021-4155
@@ -14,6 +14,7 @@ References:
  https://ubuntu.com/security/notices/USN-5298-1
  https://ubuntu.com/security/notices/USN-5362-1
  https://ubuntu.com/security/notices/USN-5884-1
+ https://ubuntu.com/security/notices/USN-5926-1
 Description:
  A data leak flaw was found in the way XFS_IOC_ALLOCSP IOCTL in the XFS
  filesystem allowed for size increase of files with unaligned size. A local
@@ -40,7 +41,7 @@ upstream_linux: released (5.16)
 trusty_linux: ignored (out of standard support)
 trusty/esm_linux: ignored (was needed ESM criteria)
 xenial_linux: ignored (was needs-triage now end-of-life)
-esm-infra/xenial_linux: pending
+esm-infra/xenial_linux: released (4.4.0-237.271)
 bionic_linux: released (4.15.0-169.177)
 focal_linux: released (5.4.0-100.113)
 hirsute_linux: ignored (reached end-of-life)
@@ -120,7 +121,7 @@ devel_linux-hwe-edge: DNE
 Patches_linux-lts-xenial:
 upstream_linux-lts-xenial: released (5.16)
 trusty_linux-lts-xenial: ignored (out of standard support)
-trusty/esm_linux-lts-xenial: pending
+trusty/esm_linux-lts-xenial: released (4.4.0-237.271~14.04.1)
 xenial_linux-lts-xenial: DNE
 bionic_linux-lts-xenial: DNE
 focal_linux-lts-xenial: DNE
@@ -135,7 +136,7 @@ upstream_linux-kvm: released (5.16)
 trusty_linux-kvm: DNE
 trusty/esm_linux-kvm: DNE
 xenial_linux-kvm: ignored (was needs-triage now end-of-life)
-esm-infra/xenial_linux-kvm: pending
+esm-infra/xenial_linux-kvm: released (4.4.0-1117.127)
 bionic_linux-kvm: released (4.15.0-1107.109)
 focal_linux-kvm: released (5.4.0-1056.58)
 hirsute_linux-kvm: ignored (reached end-of-life)
@@ -147,7 +148,7 @@ devel_linux-kvm: not-affected (5.19.0-1008.8)
 Patches_linux-aws:
 upstream_linux-aws: released (5.16)
 trusty_linux-aws: ignored (out of standard support)
-trusty/esm_linux-aws: pending
+trusty/esm_linux-aws: released (4.4.0-1116.122)
 xenial_linux-aws: ignored (was needs-triage now end-of-life)
 esm-infra/xenial_linux-aws: released (4.4.0-1154.169)
 bionic_linux-aws: released (4.15.0-1121.129)
diff --git a/active/CVE-2021-43618 b/active/CVE-2021-43618
index 25d50fe..4902d72 100644
--- a/active/CVE-2021-43618
+++ b/active/CVE-2021-43618
@@ -5,6 +5,7 @@ References:
  https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-43618
  https://gmplib.org/list-archives/gmp-bugs/2021-September/005077.html
  https://ubuntu.com/security/notices/USN-5672-1
+ https://ubuntu.com/security/notices/USN-5672-2
 Description:
  GNU Multiple Precision Arithmetic Library (GMP) through 6.2.1 has an
  mpz/inp_raw.c integer overflow and resultant buffer overflow via crafted
@@ -25,7 +26,7 @@ CVSS:
 Patches_gmp:
  upstream: https://gmplib.org/repo/gmp-6.2/rev/561a9c25298e
 upstream_gmp: released (2:6.2.1+dfsg-3)
-trusty/esm_gmp: needs-triage
+trusty/esm_gmp: released (2:5.1.3+dfsg-1ubuntu1+esm1)
 esm-infra/xenial_gmp: released (2:6.1.0+dfsg-2ubuntu0.1~esm1)
 trusty_gmp: ignored (out of standard support)
 xenial_gmp: ignored (out of standard support)
diff --git a/active/CVE-2022-20566 b/active/CVE-2022-20566
index f575cbc..5ad5008 100644
--- a/active/CVE-2022-20566
+++ b/active/CVE-2022-20566
@@ -6,6 +6,7 @@ References:
  https://git.kernel.org/linus/d0be8347c623e0ac4202a1d4e0373882821f56b0
  https://ubuntu.com/security/notices/USN-5884-1
  https://ubuntu.com/security/notices/USN-5913-1
+ https://ubuntu.com/security/notices/USN-5926-1
 Description:
  In l2cap_chan_put of l2cap_core, there is a possible use after free due to
  improper locking. This could lead to local escalation of privilege with no
@@ -29,7 +30,7 @@ CVSS:
 Patches_linux:
  break-fix: 4af66c691f4e5c2db9bb00793669a548e9db1974 d0be8347c623e0ac4202a1d4e0373882821f56b0
 upstream_linux: released (5.19)
-esm-infra/xenial_linux: pending
+esm-infra/xenial_linux: released (4.4.0-237.271)
 trusty_linux: ignored (out of standard support)
 xenial_linux: ignored (out of standard support)
 bionic_linux: released (4.15.0-197.208)
@@ -112,11 +113,11 @@ bionic_linux-lts-xenial: DNE
 focal_linux-lts-xenial: DNE
 jammy_linux-lts-xenial: DNE
 kinetic_linux-lts-xenial: DNE
-trusty/esm_linux-lts-xenial: pending
+trusty/esm_linux-lts-xenial: released (4.4.0-237.271~14.04.1)
 
 Patches_linux-kvm:
 upstream_linux-kvm: released (5.19)
-esm-infra/xenial_linux-kvm: pending
+esm-infra/xenial_linux-kvm: released (4.4.0-1117.127)
 trusty_linux-kvm: DNE
 xenial_linux-kvm: ignored (end of standard support)
 bionic_linux-kvm: released (4.15.0-1129.134)
@@ -134,7 +135,7 @@ bionic_linux-aws: released (4.15.0-1143.155)
 focal_linux-aws: released (5.4.0-1086.93)
 jammy_linux-aws: released (5.15.0-1021.25)
 kinetic_linux-aws: not-affected (5.19.0-1005.5)
-trusty/esm_linux-aws: pending
+trusty/esm_linux-aws: released (4.4.0-1116.122)
 devel_linux-aws: not-affected (5.19.0-1009.9)
 
 Patches_linux-aws-5.0:
diff --git a/active/CVE-2022-3424 b/active/CVE-2022-3424
index ea31238..1bb5db9 100644
--- a/active/CVE-2022-3424
+++ b/active/CVE-2022-3424
@@ -8,6 +8,7 @@ References:
  https://ubuntu.com/security/notices/USN-5856-1
  https://ubuntu.com/security/notices/USN-5917-1
  https://ubuntu.com/security/notices/USN-5924-1
+ https://ubuntu.com/security/notices/USN-5927-1
 Description:
  [misc: sgi-gru: fix use-after-free error in gru_set_context_option,
  gru_fault and gru_handle_user_call_os]
@@ -211,7 +212,7 @@ Patches_linux-azure-4.15:
 upstream_linux-azure-4.15: needs-triage
 trusty_linux-azure-4.15: DNE
 xenial_linux-azure-4.15: DNE
-bionic_linux-azure-4.15: needs-triage
+bionic_linux-azure-4.15: released (4.15.0-1162.177)
 focal_linux-azure-4.15: DNE
 jammy_linux-azure-4.15: DNE
 
diff --git a/active/CVE-2022-3521 b/active/CVE-2022-3521
index 2791905..05e5e37 100644
--- a/active/CVE-2022-3521
+++ b/active/CVE-2022-3521
@@ -11,6 +11,8 @@ References:
  https://ubuntu.com/security/notices/USN-5919-1
  https://ubuntu.com/security/notices/USN-5920-1
  https://ubuntu.com/security/notices/USN-5924-1
+ https://ubuntu.com/security/notices/USN-5925-1
+ https://ubuntu.com/security/notices/USN-5927-1
 Description:
  A vulnerability has been found in Linux Kernel and classified as
  problematic. This vulnerability affects the function kcm_tx_work of the
@@ -132,7 +134,7 @@ upstream_linux-kvm: needs-triage
 esm-infra/xenial_linux-kvm: needs-triage
 trusty_linux-kvm: DNE
 xenial_linux-kvm: ignored (end of standard support)
-bionic_linux-kvm: needs-triage
+bionic_linux-kvm: released (4.15.0-1136.141)
 focal_linux-kvm: released (5.4.0-1087.93)
 jammy_linux-kvm: needs-triage
 kinetic_linux-kvm: needs-triage
@@ -247,7 +249,7 @@ Patches_linux-azure-4.15:
 upstream_linux-azure-4.15: needs-triage
 trusty_linux-azure-4.15: DNE
 xenial_linux-azure-4.15: DNE
-bionic_linux-azure-4.15: needs-triage
+bionic_linux-azure-4.15: released (4.15.0-1162.177)
 focal_linux-azure-4.15: DNE
 jammy_linux-azure-4.15: DNE
 kinetic_linux-azure-4.15: DNE
@@ -776,7 +778,7 @@ Patches_linux-raspi2:
 upstream_linux-raspi2: needs-triage
 trusty_linux-raspi2: DNE
 xenial_linux-raspi2: ignored (end of standard support)
-bionic_linux-raspi2: needs-triage
+bionic_linux-raspi2: released (4.15.0-1128.136)
 esm-apps/bionic_linux-raspi2: needs-triage
 focal_linux-raspi2: ignored (replaced by linux-raspi)
 jammy_linux-raspi2: DNE
@@ -838,7 +840,7 @@ Patches_linux-snapdragon:
 upstream_linux-snapdragon: needs-triage
 trusty_linux-snapdragon: DNE
 xenial_linux-snapdragon: ignored (end of standard support)
-bionic_linux-snapdragon: needs-triage
+bionic_linux-snapdragon: released (4.15.0-1146.156)
 focal_linux-snapdragon: DNE
 jammy_linux-snapdragon: DNE
 kinetic_linux-snapdragon: DNE
diff --git a/active/CVE-2022-3545 b/active/CVE-2022-3545
index 27e663c..c88389c 100644
--- a/active/CVE-2022-3545
+++ b/active/CVE-2022-3545
@@ -13,6 +13,8 @@ References:
  https://ubuntu.com/security/notices/USN-5919-1
  https://ubuntu.com/security/notices/USN-5920-1
  https://ubuntu.com/security/notices/USN-5924-1
+ https://ubuntu.com/security/notices/USN-5925-1
+ https://ubuntu.com/security/notices/USN-5927-1
 Description:
  A vulnerability has been found in Linux Kernel and classified as critical.
  Affected by this vulnerability is the function area_cache_get of the file
@@ -135,7 +137,7 @@ upstream_linux-kvm: released (6.0~rc1)
 esm-infra/xenial_linux-kvm: not-affected (4.4.0-1004.9)
 trusty_linux-kvm: DNE
 xenial_linux-kvm: ignored (end of standard support)
-bionic_linux-kvm: pending (4.15.0-1136.141)
+bionic_linux-kvm: released (4.15.0-1136.141)
 focal_linux-kvm: released (5.4.0-1087.93)
 jammy_linux-kvm: pending (5.15.0-1029.34)
 kinetic_linux-kvm: pending (5.19.0-1019.20)
@@ -250,7 +252,7 @@ Patches_linux-azure-4.15:
 upstream_linux-azure-4.15: released (6.0~rc1)
 trusty_linux-azure-4.15: DNE
 xenial_linux-azure-4.15: DNE
-bionic_linux-azure-4.15: needed
+bionic_linux-azure-4.15: released (4.15.0-1162.177)
 focal_linux-azure-4.15: DNE
 jammy_linux-azure-4.15: DNE
 kinetic_linux-azure-4.15: DNE
@@ -779,7 +781,7 @@ Patches_linux-raspi2:
 upstream_linux-raspi2: released (6.0~rc1)
 trusty_linux-raspi2: DNE
 xenial_linux-raspi2: ignored (end of standard support)
-bionic_linux-raspi2: pending (4.15.0-1128.136)
+bionic_linux-raspi2: released (4.15.0-1128.136)
 esm-apps/bionic_linux-raspi2: needed
 focal_linux-raspi2: ignored (replaced by linux-raspi)
 jammy_linux-raspi2: DNE
@@ -841,7 +843,7 @@ Patches_linux-snapdragon:
 upstream_linux-snapdragon: released (6.0~rc1)
 trusty_linux-snapdragon: DNE
 xenial_linux-snapdragon: ignored (end of standard support)
-bionic_linux-snapdragon: pending (4.15.0-1146.156)
+bionic_linux-snapdragon: released (4.15.0-1146.156)
 focal_linux-snapdragon: DNE
 jammy_linux-snapdragon: DNE
 kinetic_linux-snapdragon: DNE
diff --git a/active/CVE-2022-3628 b/active/CVE-2022-3628
index 58f8389..b7d9fda 100644
--- a/active/CVE-2022-3628
+++ b/active/CVE-2022-3628
@@ -22,6 +22,8 @@ References:
  https://ubuntu.com/security/notices/USN-5919-1
  https://ubuntu.com/security/notices/USN-5920-1
  https://ubuntu.com/security/notices/USN-5924-1
+ https://ubuntu.com/security/notices/USN-5925-1
+ https://ubuntu.com/security/notices/USN-5927-1
 Description:
  A buffer overflow flaw was found in the Linux kernel Broadcom Full MAC
  Wi-Fi driver. This issue occurs when a user connects to a malicious USB
@@ -135,7 +137,7 @@ upstream_linux-kvm: released (6.1~rc5)
 esm-infra/xenial_linux-kvm: ignored (was needed ESM criteria)
 trusty_linux-kvm: DNE
 xenial_linux-kvm: ignored (end of standard support)
-bionic_linux-kvm: needed
+bionic_linux-kvm: released (4.15.0-1136.141)
 focal_linux-kvm: released (5.4.0-1086.92)
 jammy_linux-kvm: released (5.15.0-1028.33)
 kinetic_linux-kvm: released (5.19.0-1018.19)
@@ -242,7 +244,7 @@ Patches_linux-azure-4.15:
 upstream_linux-azure-4.15: released (6.1~rc5)
 trusty_linux-azure-4.15: DNE
 xenial_linux-azure-4.15: DNE
-bionic_linux-azure-4.15: needed
+bionic_linux-azure-4.15: released (4.15.0-1162.177)
 focal_linux-azure-4.15: DNE
 jammy_linux-azure-4.15: DNE
 kinetic_linux-azure-4.15: DNE
@@ -725,7 +727,7 @@ Patches_linux-raspi2:
 upstream_linux-raspi2: released (6.1~rc5)
 trusty_linux-raspi2: DNE
 xenial_linux-raspi2: ignored (end of standard support)
-bionic_linux-raspi2: needed
+bionic_linux-raspi2: released (4.15.0-1128.136)
 esm-apps/bionic_linux-raspi2: needs-triage
 focal_linux-raspi2: ignored (replaced by linux-raspi)
 jammy_linux-raspi2: DNE
@@ -782,7 +784,7 @@ Patches_linux-snapdragon:
 upstream_linux-snapdragon: released (6.1~rc5)
 trusty_linux-snapdragon: DNE
 xenial_linux-snapdragon: ignored (end of standard support)
-bionic_linux-snapdragon: needed
+bionic_linux-snapdragon: released (4.15.0-1146.156)
 focal_linux-snapdragon: DNE
 jammy_linux-snapdragon: DNE
 kinetic_linux-snapdragon: DNE
diff --git a/active/CVE-2022-36280 b/active/CVE-2022-36280
index 6485f01..f5d54e7 100644
--- a/active/CVE-2022-36280
+++ b/active/CVE-2022-36280
@@ -6,6 +6,7 @@ References:
  https://ubuntu.com/security/notices/USN-5915-1
  https://ubuntu.com/security/notices/USN-5917-1
  https://ubuntu.com/security/notices/USN-5924-1
+ https://ubuntu.com/security/notices/USN-5927-1
 Description:
  An out-of-bounds(OOB) memory access vulnerability was found in vmwgfx
  driver in drivers/gpu/vmxgfx/vmxgfx_kms.c in GPU component in the Linux
@@ -133,7 +134,7 @@ Patches_linux-azure-4.15:
 upstream_linux-azure-4.15: needs-triage
 trusty_linux-azure-4.15: ignored (out of standard support)
 xenial_linux-azure-4.15: ignored (out of standard support)
-bionic_linux-azure-4.15: needs-triage
+bionic_linux-azure-4.15: released (4.15.0-1162.177)
 focal_linux-azure-4.15: DNE
 jammy_linux-azure-4.15: DNE
 
diff --git a/active/CVE-2022-3640 b/active/CVE-2022-3640
index 30375e2..35a1f63 100644
--- a/active/CVE-2022-3640
+++ b/active/CVE-2022-3640
@@ -21,6 +21,8 @@ References:
  https://ubuntu.com/security/notices/USN-5919-1
  https://ubuntu.com/security/notices/USN-5920-1
  https://ubuntu.com/security/notices/USN-5924-1
+ https://ubuntu.com/security/notices/USN-5925-1
+ https://ubuntu.com/security/notices/USN-5927-1
 Description:
  A vulnerability, which was classified as critical, was found in Linux
  Kernel. Affected is the function l2cap_conn_del of the file
@@ -128,7 +130,7 @@ upstream_linux-kvm: needed
 esm-infra/xenial_linux-kvm: not-affected (4.4.0-1004.9)
 trusty_linux-kvm: DNE
 xenial_linux-kvm: ignored (end of standard support)
-bionic_linux-kvm: needed
+bionic_linux-kvm: released (4.15.0-1136.141)
 focal_linux-kvm: released (5.4.0-1086.92)
 jammy_linux-kvm: released (5.15.0-1028.33)
 kinetic_linux-kvm: released (5.19.0-1018.19)
@@ -227,7 +229,7 @@ Patches_linux-azure-4.15:
 upstream_linux-azure-4.15: needed
 trusty_linux-azure-4.15: DNE
 xenial_linux-azure-4.15: DNE
-bionic_linux-azure-4.15: needed
+bionic_linux-azure-4.15: released (4.15.0-1162.177)
 focal_linux-azure-4.15: DNE
 jammy_linux-azure-4.15: DNE
 
@@ -656,7 +658,7 @@ Patches_linux-raspi2:
 upstream_linux-raspi2: needed
 trusty_linux-raspi2: DNE
 xenial_linux-raspi2: ignored (end of standard support)
-bionic_linux-raspi2: needed
+bionic_linux-raspi2: released (4.15.0-1128.136)
 esm-apps/bionic_linux-raspi2: needed
 focal_linux-raspi2: ignored (replaced by linux-raspi)
 jammy_linux-raspi2: DNE
@@ -708,7 +710,7 @@ Patches_linux-snapdragon:
 upstream_linux-snapdragon: needed
 trusty_linux-snapdragon: DNE
 xenial_linux-snapdragon: ignored (end of standard support)
-bionic_linux-snapdragon: needed
+bionic_linux-snapdragon: released (4.15.0-1146.156)
 focal_linux-snapdragon: DNE
 jammy_linux-snapdragon: DNE
 
diff --git a/active/CVE-2022-41218 b/active/CVE-2022-41218
index e0c106e..b9dc071 100644
--- a/active/CVE-2022-41218
+++ b/active/CVE-2022-41218
@@ -13,6 +13,7 @@ References:
  https://ubuntu.com/security/notices/USN-5915-1
  https://ubuntu.com/security/notices/USN-5917-1
  https://ubuntu.com/security/notices/USN-5924-1
+ https://ubuntu.com/security/notices/USN-5927-1
 Description:
  In drivers/media/dvb-core/dmxdev.c in the Linux kernel through 5.19.10,
  there is a use-after-free caused by refcount races, affecting
@@ -215,7 +216,7 @@ Patches_linux-azure-4.15:
 upstream_linux-azure-4.15: needs-triage
 trusty_linux-azure-4.15: DNE
 xenial_linux-azure-4.15: DNE
-bionic_linux-azure-4.15: needs-triage
+bionic_linux-azure-4.15: released (4.15.0-1162.177)
 focal_linux-azure-4.15: DNE
 jammy_linux-azure-4.15: DNE
 
diff --git a/active/CVE-2022-41858 b/active/CVE-2022-41858
index de076ee..e5f48cb 100644
--- a/active/CVE-2022-41858
+++ b/active/CVE-2022-41858
@@ -6,6 +6,7 @@ References:
  https://git.kernel.org/linus/ec4eb8a86ade4d22633e1da2a7d85a846b7d1798 (5.18-rc2)
  https://access.redhat.com/security/cve/CVE-2022-41858
  https://ubuntu.com/security/notices/USN-5884-1
+ https://ubuntu.com/security/notices/USN-5926-1
 Description:
  A flaw was found in the Linux kernel. A NULL pointer dereference may occur
  while a slip driver is in progress to detach in sl_tx_timeout in
@@ -27,7 +28,7 @@ CVSS:
 Patches_linux:
  break-fix: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 ec4eb8a86ade4d22633e1da2a7d85a846b7d1798
 upstream_linux: released (5.18~rc2)
-esm-infra/xenial_linux: pending
+esm-infra/xenial_linux: released (4.4.0-237.271)
 trusty_linux: ignored (out of standard support)
 xenial_linux: ignored (out of standard support)
 bionic_linux: released (4.15.0-189.200)
@@ -110,11 +111,11 @@ bionic_linux-lts-xenial: DNE
 focal_linux-lts-xenial: DNE
 jammy_linux-lts-xenial: DNE
 kinetic_linux-lts-xenial: DNE
-trusty/esm_linux-lts-xenial: pending
+trusty/esm_linux-lts-xenial: released (4.4.0-237.271~14.04.1)
 
 Patches_linux-kvm:
 upstream_linux-kvm: released (5.18~rc2)
-esm-infra/xenial_linux-kvm: pending
+esm-infra/xenial_linux-kvm: released (4.4.0-1117.127)
 trusty_linux-kvm: DNE
 xenial_linux-kvm: ignored (end of standard support)
 bionic_linux-kvm: released (4.15.0-1123.128)
@@ -132,7 +133,7 @@ bionic_linux-aws: released (4.15.0-1137.148)
 focal_linux-aws: released (5.4.0-1081.88)
 jammy_linux-aws: released (5.15.0-1009.11)
 kinetic_linux-aws: not-affected (5.19.0-1005.5)
-trusty/esm_linux-aws: pending
+trusty/esm_linux-aws: released (4.4.0-1116.122)
 devel_linux-aws: not-affected (5.19.0-1009.9)
 
 Patches_linux-aws-5.0:
diff --git a/active/CVE-2022-42328 b/active/CVE-2022-42328
index db4ffc3..ce43ece 100644
--- a/active/CVE-2022-42328
+++ b/active/CVE-2022-42328
@@ -12,6 +12,8 @@ References:
  https://ubuntu.com/security/notices/USN-5919-1
  https://ubuntu.com/security/notices/USN-5920-1
  https://ubuntu.com/security/notices/USN-5924-1
+ https://ubuntu.com/security/notices/USN-5925-1
+ https://ubuntu.com/security/notices/USN-5927-1
 Description:
  Guests can trigger deadlock in Linux netback driver T[his CNA information
  record relates to multiple CVEs; the text explains which
@@ -128,7 +130,7 @@ upstream_linux-kvm: released (6.1)
 esm-infra/xenial_linux-kvm: not-affected (4.4.0-1004.9)
 trusty_linux-kvm: DNE
 xenial_linux-kvm: ignored (end of standard support)
-bionic_linux-kvm: pending (4.15.0-1136.141)
+bionic_linux-kvm: released (4.15.0-1136.141)
 focal_linux-kvm: released (5.4.0-1087.93)
 jammy_linux-kvm: pending (5.15.0-1029.34)
 kinetic_linux-kvm: needed
@@ -235,7 +237,7 @@ Patches_linux-azure-4.15:
 upstream_linux-azure-4.15: released (6.1)
 trusty_linux-azure-4.15: DNE
 xenial_linux-azure-4.15: DNE
-bionic_linux-azure-4.15: needed
+bionic_linux-azure-4.15: released (4.15.0-1162.177)
 focal_linux-azure-4.15: DNE
 jammy_linux-azure-4.15: DNE
 kinetic_linux-azure-4.15: DNE
@@ -718,7 +720,7 @@ Patches_linux-raspi2:
 upstream_linux-raspi2: released (6.1)
 trusty_linux-raspi2: DNE
 xenial_linux-raspi2: ignored (end of standard support)
-bionic_linux-raspi2: pending (4.15.0-1128.136)
+bionic_linux-raspi2: released (4.15.0-1128.136)
 esm-apps/bionic_linux-raspi2: needs-triage
 focal_linux-raspi2: ignored (replaced by linux-raspi)
 jammy_linux-raspi2: DNE
@@ -775,7 +777,7 @@ Patches_linux-snapdragon:
 upstream_linux-snapdragon: released (6.1)
 trusty_linux-snapdragon: DNE
 xenial_linux-snapdragon: ignored (end of standard support)
-bionic_linux-snapdragon: pending (4.15.0-1146.156)
+bionic_linux-snapdragon: released (4.15.0-1146.156)
 focal_linux-snapdragon: DNE
 jammy_linux-snapdragon: DNE
 kinetic_linux-snapdragon: DNE
diff --git a/active/CVE-2022-42329 b/active/CVE-2022-42329
index 3a0b3f1..e41cfdf 100644
--- a/active/CVE-2022-42329
+++ b/active/CVE-2022-42329
@@ -11,6 +11,8 @@ References:
  https://ubuntu.com/security/notices/USN-5919-1
  https://ubuntu.com/security/notices/USN-5920-1
  https://ubuntu.com/security/notices/USN-5924-1
+ https://ubuntu.com/security/notices/USN-5925-1
+ https://ubuntu.com/security/notices/USN-5927-1
 Description:
  Guests can trigger deadlock in Linux netback driver T[his CNA information
  record relates to multiple CVEs; the text explains which
@@ -127,7 +129,7 @@ upstream_linux-kvm: released (6.1)
 esm-infra/xenial_linux-kvm: not-affected (4.4.0-1004.9)
 trusty_linux-kvm: DNE
 xenial_linux-kvm: ignored (end of standard support)
-bionic_linux-kvm: pending (4.15.0-1136.141)
+bionic_linux-kvm: released (4.15.0-1136.141)
 focal_linux-kvm: released (5.4.0-1087.93)
 jammy_linux-kvm: pending (5.15.0-1029.34)
 kinetic_linux-kvm: needed
@@ -234,7 +236,7 @@ Patches_linux-azure-4.15:
 upstream_linux-azure-4.15: released (6.1)
 trusty_linux-azure-4.15: DNE
 xenial_linux-azure-4.15: DNE
-bionic_linux-azure-4.15: pending (4.15.0-1162.177)
+bionic_linux-azure-4.15: released (4.15.0-1162.177)
 focal_linux-azure-4.15: DNE
 jammy_linux-azure-4.15: DNE
 kinetic_linux-azure-4.15: DNE
@@ -717,7 +719,7 @@ Patches_linux-raspi2:
 upstream_linux-raspi2: released (6.1)
 trusty_linux-raspi2: DNE
 xenial_linux-raspi2: ignored (end of standard support)
-bionic_linux-raspi2: pending (4.15.0-1128.136)
+bionic_linux-raspi2: released (4.15.0-1128.136)
 esm-apps/bionic_linux-raspi2: needs-triage
 focal_linux-raspi2: ignored (replaced by linux-raspi)
 jammy_linux-raspi2: DNE
@@ -774,7 +776,7 @@ Patches_linux-snapdragon:
 upstream_linux-snapdragon: released (6.1)
 trusty_linux-snapdragon: DNE
 xenial_linux-snapdragon: ignored (end of standard support)
-bionic_linux-snapdragon: pending (4.15.0-1146.156)
+bionic_linux-snapdragon: released (4.15.0-1146.156)
 focal_linux-snapdragon: DNE
 jammy_linux-snapdragon: DNE
 kinetic_linux-snapdragon: DNE
diff --git a/active/CVE-2022-42895 b/active/CVE-2022-42895
index 815ce98..6252f94 100644
--- a/active/CVE-2022-42895
+++ b/active/CVE-2022-42895
@@ -25,6 +25,9 @@ References:
  https://ubuntu.com/security/notices/USN-5919-1
  https://ubuntu.com/security/notices/USN-5920-1
  https://ubuntu.com/security/notices/USN-5924-1
+ https://ubuntu.com/security/notices/USN-5925-1
+ https://ubuntu.com/security/notices/USN-5926-1
+ https://ubuntu.com/security/notices/USN-5927-1
 Description:
  There is an infoleak vulnerability in the Linux kernel's
  net/bluetooth/l2cap_core.c's l2cap_parse_conf_req function which can be
@@ -48,7 +51,7 @@ CVSS:
 Patches_linux:
  break-fix: 42dceae2819b5ac6fc9a0d414ae05a8960e2a1d9 b1a2cd50c0357f243b7435a732b4e62ba3157a2e
 upstream_linux: released (6.1~rc4)
-esm-infra/xenial_linux: pending
+esm-infra/xenial_linux: released (4.4.0-237.271)
 trusty_linux: ignored (out of standard support)
 xenial_linux: ignored (out of standard support)
 bionic_linux: released (4.15.0-206.217)
@@ -131,14 +134,14 @@ bionic_linux-lts-xenial: DNE
 focal_linux-lts-xenial: DNE
 jammy_linux-lts-xenial: DNE
 kinetic_linux-lts-xenial: DNE
-trusty/esm_linux-lts-xenial: pending
+trusty/esm_linux-lts-xenial: released (4.4.0-237.271~14.04.1)
 
 Patches_linux-kvm:
 upstream_linux-kvm: released (6.1~rc4)
-esm-infra/xenial_linux-kvm: pending
+esm-infra/xenial_linux-kvm: released (4.4.0-1117.127)
 trusty_linux-kvm: DNE
 xenial_linux-kvm: ignored (end of standard support)
-bionic_linux-kvm: pending (4.15.0-1136.141)
+bionic_linux-kvm: released (4.15.0-1136.141)
 focal_linux-kvm: released (5.4.0-1086.92)
 jammy_linux-kvm: released (5.15.0-1028.33)
 kinetic_linux-kvm: released (5.19.0-1018.19)
@@ -153,7 +156,7 @@ bionic_linux-aws: released (4.15.0-1151.164)
 focal_linux-aws: released (5.4.0-1096.104)
 jammy_linux-aws: released (5.15.0-1030.34)
 kinetic_linux-aws: released (5.19.0-1019.20)
-trusty/esm_linux-aws: pending
+trusty/esm_linux-aws: released (4.4.0-1116.122)
 devel_linux-aws: pending
 
 Patches_linux-aws-5.0:
@@ -245,7 +248,7 @@ Patches_linux-azure-4.15:
 upstream_linux-azure-4.15: released (6.1~rc4)
 trusty_linux-azure-4.15: DNE
 xenial_linux-azure-4.15: DNE
-bionic_linux-azure-4.15: pending (4.15.0-1162.177)
+bionic_linux-azure-4.15: released (4.15.0-1162.177)
 focal_linux-azure-4.15: DNE
 jammy_linux-azure-4.15: DNE
 kinetic_linux-azure-4.15: DNE
@@ -728,7 +731,7 @@ Patches_linux-raspi2:
 upstream_linux-raspi2: released (6.1~rc4)
 trusty_linux-raspi2: DNE
 xenial_linux-raspi2: ignored (end of standard support)
-bionic_linux-raspi2: pending (4.15.0-1128.136)
+bionic_linux-raspi2: released (4.15.0-1128.136)
 esm-apps/bionic_linux-raspi2: needs-triage
 focal_linux-raspi2: ignored (replaced by linux-raspi)
 jammy_linux-raspi2: DNE
@@ -785,7 +788,7 @@ Patches_linux-snapdragon:
 upstream_linux-snapdragon: released (6.1~rc4)
 trusty_linux-snapdragon: DNE
 xenial_linux-snapdragon: ignored (end of standard support)
-bionic_linux-snapdragon: pending (4.15.0-1146.156)
+bionic_linux-snapdragon: released (4.15.0-1146.156)
 focal_linux-snapdragon: DNE
 jammy_linux-snapdragon: DNE
 kinetic_linux-snapdragon: DNE
diff --git a/active/CVE-2022-47929 b/active/CVE-2022-47929
index b11e120..8f957e9 100644
--- a/active/CVE-2022-47929
+++ b/active/CVE-2022-47929
@@ -10,6 +10,7 @@ References:
  https://ubuntu.com/security/notices/USN-5915-1
  https://ubuntu.com/security/notices/USN-5917-1
  https://ubuntu.com/security/notices/USN-5924-1
+ https://ubuntu.com/security/notices/USN-5927-1
 Description:
  In the Linux kernel before 6.1.6, a NULL pointer dereference bug in the
  traffic control subsystem allows an unprivileged user to trigger a denial
@@ -229,7 +230,7 @@ Patches_linux-azure-4.15:
 upstream_linux-azure-4.15: released (6.2~rc4)
 trusty_linux-azure-4.15: DNE
 xenial_linux-azure-4.15: DNE
-bionic_linux-azure-4.15: pending (4.15.0-1162.177)
+bionic_linux-azure-4.15: released (4.15.0-1162.177)
 focal_linux-azure-4.15: DNE
 jammy_linux-azure-4.15: DNE
 kinetic_linux-azure-4.15: DNE
diff --git a/active/CVE-2023-0045 b/active/CVE-2023-0045
index 024671c..10e141f 100644
--- a/active/CVE-2023-0045
+++ b/active/CVE-2023-0045
@@ -13,6 +13,8 @@ References:
  https://ubuntu.com/security/notices/USN-5915-1
  https://ubuntu.com/security/notices/USN-5917-1
  https://ubuntu.com/security/notices/USN-5924-1
+ https://ubuntu.com/security/notices/USN-5926-1
+ https://ubuntu.com/security/notices/USN-5927-1
 Description:
 Ubuntu-Description:
  José Oliveira and Rodrigo Branco discovered that the prctl syscall
@@ -30,7 +32,7 @@ CVSS:
 Patches_linux:
  break-fix: 9137bb27e60e554dab694eafa4cca241fa3a694f a664ec9158eeddd75121d39c9a0758016097fa96
 upstream_linux: released (6.2~rc3)
-esm-infra/xenial_linux: ignored (was needed ESM criteria)
+esm-infra/xenial_linux: released (4.4.0-237.271)
 trusty_linux: ignored (out of standard support)
 xenial_linux: ignored (out of standard support)
 bionic_linux: needed
@@ -113,11 +115,11 @@ bionic_linux-lts-xenial: DNE
 focal_linux-lts-xenial: DNE
 jammy_linux-lts-xenial: DNE
 kinetic_linux-lts-xenial: DNE
-trusty/esm_linux-lts-xenial: ignored (was needed ESM criteria)
+trusty/esm_linux-lts-xenial: released (4.4.0-237.271~14.04.1)
 
 Patches_linux-kvm:
 upstream_linux-kvm: released (6.2~rc3)
-esm-infra/xenial_linux-kvm: ignored (was needed ESM criteria)
+esm-infra/xenial_linux-kvm: released (4.4.0-1117.127)
 trusty_linux-kvm: DNE
 xenial_linux-kvm: ignored (end of standard support)
 bionic_linux-kvm: needed
@@ -135,7 +137,7 @@ bionic_linux-aws: needed
 focal_linux-aws: released (5.4.0-1097.105)
 jammy_linux-aws: needed
 kinetic_linux-aws: needed
-trusty/esm_linux-aws: ignored (was needed ESM criteria)
+trusty/esm_linux-aws: released (4.4.0-1116.122)
 devel_linux-aws: needed
 
 Patches_linux-aws-5.0:
@@ -227,7 +229,7 @@ Patches_linux-azure-4.15:
 upstream_linux-azure-4.15: released (6.2~rc3)
 trusty_linux-azure-4.15: DNE
 xenial_linux-azure-4.15: DNE
-bionic_linux-azure-4.15: needed
+bionic_linux-azure-4.15: released (4.15.0-1162.177)
 focal_linux-azure-4.15: DNE
 jammy_linux-azure-4.15: DNE
 kinetic_linux-azure-4.15: DNE
diff --git a/active/CVE-2023-0266 b/active/CVE-2023-0266
index fee45a2..78ca91f 100644
--- a/active/CVE-2023-0266
+++ b/active/CVE-2023-0266
@@ -7,6 +7,7 @@ References:
  https://ubuntu.com/security/notices/USN-5915-1
  https://ubuntu.com/security/notices/USN-5917-1
  https://ubuntu.com/security/notices/USN-5924-1
+ https://ubuntu.com/security/notices/USN-5927-1
 Description:
  A use after free vulnerability exists in the ALSA PCM package in the Linux
  Kernel. SNDRV_CTL_IOCTL_ELEM_{READ|WRITE}32 is missing locks that can be
@@ -229,7 +230,7 @@ Patches_linux-azure-4.15:
 upstream_linux-azure-4.15: released (6.2~rc4)
 trusty_linux-azure-4.15: DNE
 xenial_linux-azure-4.15: DNE
-bionic_linux-azure-4.15: needed
+bionic_linux-azure-4.15: released (4.15.0-1162.177)
 focal_linux-azure-4.15: DNE
 jammy_linux-azure-4.15: DNE
 kinetic_linux-azure-4.15: DNE
diff --git a/active/CVE-2023-0394 b/active/CVE-2023-0394
index 90e6e73..589081b 100644
--- a/active/CVE-2023-0394
+++ b/active/CVE-2023-0394
@@ -7,6 +7,7 @@ References:
  https://git.kernel.org/linus/cb3e9864cdbe35ff6378966660edbcbac955fe17 (6.2-rc4)
  https://ubuntu.com/security/notices/USN-5917-1
  https://ubuntu.com/security/notices/USN-5924-1
+ https://ubuntu.com/security/notices/USN-5927-1
 Description:
  A NULL pointer dereference flaw was found in rawv6_push_pending_frames in
  net/ipv6/raw.c in the network subcomponent in the Linux kernel. This flaw
@@ -224,7 +225,7 @@ Patches_linux-azure-4.15:
 upstream_linux-azure-4.15: needs-triage
 trusty_linux-azure-4.15: DNE
 xenial_linux-azure-4.15: DNE
-bionic_linux-azure-4.15: needs-triage
+bionic_linux-azure-4.15: released (4.15.0-1162.177)
 focal_linux-azure-4.15: DNE
 jammy_linux-azure-4.15: DNE
 kinetic_linux-azure-4.15: DNE
diff --git a/active/CVE-2023-0461 b/active/CVE-2023-0461
index 5734750..74fa5b6 100644
--- a/active/CVE-2023-0461
+++ b/active/CVE-2023-0461
@@ -13,6 +13,8 @@ References:
  https://ubuntu.com/security/notices/USN-5919-1
  https://ubuntu.com/security/notices/USN-5920-1
  https://ubuntu.com/security/notices/USN-5924-1
+ https://ubuntu.com/security/notices/USN-5925-1
+ https://ubuntu.com/security/notices/USN-5927-1
 Description:
  There is a use-after-free vulnerability in the Linux Kernel which can be
  exploited to achieve local privilege escalation. To reach the vulnerability
@@ -142,7 +144,7 @@ upstream_linux-kvm: released (6.2~rc3)
 esm-infra/xenial_linux-kvm: not-affected (4.4.0-1004.9)
 trusty_linux-kvm: DNE
 xenial_linux-kvm: ignored (end of standard support)
-bionic_linux-kvm: pending (4.15.0-1136.141)
+bionic_linux-kvm: released (4.15.0-1136.141)
 focal_linux-kvm: released (5.4.0-1087.93)
 jammy_linux-kvm: pending (5.15.0-1029.34)
 kinetic_linux-kvm: pending (5.19.0-1019.20)
@@ -249,7 +251,7 @@ Patches_linux-azure-4.15:
 upstream_linux-azure-4.15: released (6.2~rc3)
 trusty_linux-azure-4.15: DNE
 xenial_linux-azure-4.15: DNE
-bionic_linux-azure-4.15: needed
+bionic_linux-azure-4.15: released (4.15.0-1162.177)
 focal_linux-azure-4.15: DNE
 jammy_linux-azure-4.15: DNE
 kinetic_linux-azure-4.15: DNE
@@ -767,7 +769,7 @@ Patches_linux-raspi2:
 upstream_linux-raspi2: released (6.2~rc3)
 trusty_linux-raspi2: DNE
 xenial_linux-raspi2: ignored (end of standard support)
-bionic_linux-raspi2: pending (4.15.0-1128.136)
+bionic_linux-raspi2: released (4.15.0-1128.136)
 focal_linux-raspi2: ignored (replaced by linux-raspi)
 jammy_linux-raspi2: DNE
 kinetic_linux-raspi2: DNE
@@ -824,7 +826,7 @@ Patches_linux-snapdragon:
 upstream_linux-snapdragon: released (6.2~rc3)
 trusty_linux-snapdragon: DNE
 xenial_linux-snapdragon: ignored (end of standard support)
-bionic_linux-snapdragon: pending (4.15.0-1146.156)
+bionic_linux-snapdragon: released (4.15.0-1146.156)
 focal_linux-snapdragon: DNE
 jammy_linux-snapdragon: DNE
 kinetic_linux-snapdragon: DNE
diff --git a/active/CVE-2023-0795 b/active/CVE-2023-0795
index 7dec1e4..483058d 100644
--- a/active/CVE-2023-0795
+++ b/active/CVE-2023-0795
@@ -1,3 +1,4 @@
+PublicDateAtUSN: 2023-02-13 23:15:00 UTC
 Candidate: CVE-2023-0795
 PublicDate: 2023-02-13 23:15:00 UTC
 References:
@@ -5,6 +6,7 @@ References:
  https://gitlab.com/libtiff/libtiff/-/commit/afaabc3e50d4e5d80a94143f7e3c997e7e410f68
  https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-0795.json
  https://gitlab.com/libtiff/libtiff/-/issues/493
+ https://ubuntu.com/security/notices/USN-5923-1
 Description:
  LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in
  tools/tiffcrop.c:3488, allowing attackers to cause a denial-of-service via
@@ -22,12 +24,12 @@ CVSS:
 
 Patches_tiff:
 upstream_tiff: needs-triage
-esm-infra/xenial_tiff: needed
+esm-infra/xenial_tiff: released (4.0.6-1ubuntu0.8+esm10)
 trusty_tiff: ignored (out of standard support)
 xenial_tiff: ignored (out of standard support)
-bionic_tiff: needed
-focal_tiff: needed
-jammy_tiff: needed
-kinetic_tiff: needed
-trusty/esm_tiff: needed
+bionic_tiff: released (4.0.9-5ubuntu0.10)
+focal_tiff: released (4.1.0+git191117-2ubuntu0.20.04.8)
+jammy_tiff: released (4.3.0-6ubuntu0.4)
+kinetic_tiff: released (4.4.0-4ubuntu3.3)
+trusty/esm_tiff: released (4.0.3-7ubuntu0.11+esm7)
 devel_tiff: needed
diff --git a/active/CVE-2023-0796 b/active/CVE-2023-0796
index ac71312..a30205c 100644
--- a/active/CVE-2023-0796
+++ b/active/CVE-2023-0796
@@ -1,3 +1,4 @@
+PublicDateAtUSN: 2023-02-13 23:15:00 UTC
 Candidate: CVE-2023-0796
 PublicDate: 2023-02-13 23:15:00 UTC
 References:
@@ -5,6 +6,7 @@ References:
  https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-0796.json
  https://gitlab.com/libtiff/libtiff/-/commit/afaabc3e50d4e5d80a94143f7e3c997e7e410f68
  https://gitlab.com/libtiff/libtiff/-/issues/499
+ https://ubuntu.com/security/notices/USN-5923-1
 Description:
  LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in
  tools/tiffcrop.c:3592, allowing attackers to cause a denial-of-service via
@@ -22,12 +24,12 @@ CVSS:
 
 Patches_tiff:
 upstream_tiff: needs-triage
-esm-infra/xenial_tiff: needed
+esm-infra/xenial_tiff: released (4.0.6-1ubuntu0.8+esm10)
 trusty_tiff: ignored (out of standard support)
 xenial_tiff: ignored (out of standard support)
-bionic_tiff: needed
-focal_tiff: needed
-jammy_tiff: needed
-kinetic_tiff: needed
-trusty/esm_tiff: needed
+bionic_tiff: released (4.0.9-5ubuntu0.10)
+focal_tiff: released (4.1.0+git191117-2ubuntu0.20.04.8)
+jammy_tiff: released (4.3.0-6ubuntu0.4)
+kinetic_tiff: released (4.4.0-4ubuntu3.3)
+trusty/esm_tiff: released (4.0.3-7ubuntu0.11+esm7)
 devel_tiff: needed
diff --git a/active/CVE-2023-0797 b/active/CVE-2023-0797
index 578240d..704dce7 100644
--- a/active/CVE-2023-0797
+++ b/active/CVE-2023-0797
@@ -1,3 +1,4 @@
+PublicDateAtUSN: 2023-02-13 23:15:00 UTC
 Candidate: CVE-2023-0797
 PublicDate: 2023-02-13 23:15:00 UTC
 References:
@@ -5,6 +6,7 @@ References:
  https://gitlab.com/libtiff/libtiff/-/commit/afaabc3e50d4e5d80a94143f7e3c997e7e410f68
  https://gitlab.com/libtiff/libtiff/-/issues/495
  https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-0797.json
+ https://ubuntu.com/security/notices/USN-5923-1
 Description:
  LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in
  libtiff/tif_unix.c:368, invoked by tools/tiffcrop.c:2903 and
@@ -23,12 +25,12 @@ CVSS:
 
 Patches_tiff:
 upstream_tiff: needs-triage
-esm-infra/xenial_tiff: needed
+esm-infra/xenial_tiff: released (4.0.6-1ubuntu0.8+esm10)
 trusty_tiff: ignored (out of standard support)
 xenial_tiff: ignored (out of standard support)
-bionic_tiff: needed
-focal_tiff: needed
-jammy_tiff: needed
-kinetic_tiff: needed
-trusty/esm_tiff: needed
+bionic_tiff: released (4.0.9-5ubuntu0.10)
+focal_tiff: released (4.1.0+git191117-2ubuntu0.20.04.8)
+jammy_tiff: released (4.3.0-6ubuntu0.4)
+kinetic_tiff: released (4.4.0-4ubuntu3.3)
+trusty/esm_tiff: released (4.0.3-7ubuntu0.11+esm7)
 devel_tiff: needed
diff --git a/active/CVE-2023-0798 b/active/CVE-2023-0798
index 371f0f1..2921a4c 100644
--- a/active/CVE-2023-0798
+++ b/active/CVE-2023-0798
@@ -1,3 +1,4 @@
+PublicDateAtUSN: 2023-02-13 23:15:00 UTC
 Candidate: CVE-2023-0798
 PublicDate: 2023-02-13 23:15:00 UTC
 References:
@@ -5,6 +6,7 @@ References:
  https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-0798.json
  https://gitlab.com/libtiff/libtiff/-/commit/afaabc3e50d4e5d80a94143f7e3c997e7e410f68
  https://gitlab.com/libtiff/libtiff/-/issues/492
+ https://ubuntu.com/security/notices/USN-5923-1
 Description:
  LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in
  tools/tiffcrop.c:3400, allowing attackers to cause a denial-of-service via
@@ -22,12 +24,12 @@ CVSS:
 
 Patches_tiff:
 upstream_tiff: needs-triage
-esm-infra/xenial_tiff: needed
+esm-infra/xenial_tiff: released (4.0.6-1ubuntu0.8+esm10)
 trusty_tiff: ignored (out of standard support)
 xenial_tiff: ignored (out of standard support)
-bionic_tiff: needed
-focal_tiff: needed
-jammy_tiff: needed
-kinetic_tiff: needed
-trusty/esm_tiff: needed
+bionic_tiff: released (4.0.9-5ubuntu0.10)
+focal_tiff: released (4.1.0+git191117-2ubuntu0.20.04.8)
+jammy_tiff: released (4.3.0-6ubuntu0.4)
+kinetic_tiff: released (4.4.0-4ubuntu3.3)
+trusty/esm_tiff: released (4.0.3-7ubuntu0.11+esm7)
 devel_tiff: needed
diff --git a/active/CVE-2023-0799 b/active/CVE-2023-0799
index 67d434b..aa4f1b2 100644
--- a/active/CVE-2023-0799
+++ b/active/CVE-2023-0799
@@ -1,3 +1,4 @@
+PublicDateAtUSN: 2023-02-13 23:15:00 UTC
 Candidate: CVE-2023-0799
 PublicDate: 2023-02-13 23:15:00 UTC
 References:
@@ -5,6 +6,7 @@ References:
  https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-0799.json
  https://gitlab.com/libtiff/libtiff/-/commit/afaabc3e50d4e5d80a94143f7e3c997e7e410f68
  https://gitlab.com/libtiff/libtiff/-/issues/494
+ https://ubuntu.com/security/notices/USN-5923-1
 Description:
  LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in
  tools/tiffcrop.c:3701, allowing attackers to cause a denial-of-service via
@@ -22,12 +24,12 @@ CVSS:
 
 Patches_tiff:
 upstream_tiff: needs-triage
-esm-infra/xenial_tiff: needed
+esm-infra/xenial_tiff: released (4.0.6-1ubuntu0.8+esm10)
 trusty_tiff: ignored (out of standard support)
 xenial_tiff: ignored (out of standard support)
-bionic_tiff: needed
-focal_tiff: needed
-jammy_tiff: needed
-kinetic_tiff: needed
-trusty/esm_tiff: needed
+bionic_tiff: released (4.0.9-5ubuntu0.10)
+focal_tiff: released (4.1.0+git191117-2ubuntu0.20.04.8)
+jammy_tiff: released (4.3.0-6ubuntu0.4)
+kinetic_tiff: released (4.4.0-4ubuntu3.3)
+trusty/esm_tiff: released (4.0.3-7ubuntu0.11+esm7)
 devel_tiff: needed
diff --git a/active/CVE-2023-0800 b/active/CVE-2023-0800
index f75dbe3..157e62e 100644
--- a/active/CVE-2023-0800
+++ b/active/CVE-2023-0800
@@ -1,3 +1,4 @@
+PublicDateAtUSN: 2023-02-13 23:15:00 UTC
 Candidate: CVE-2023-0800
 PublicDate: 2023-02-13 23:15:00 UTC
 References:
@@ -5,6 +6,7 @@ References:
  https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-0800.json
  https://gitlab.com/libtiff/libtiff/-/commit/33aee1275d9d1384791d2206776eb8152d397f00
  https://gitlab.com/libtiff/libtiff/-/issues/496
+ https://ubuntu.com/security/notices/USN-5923-1
 Description:
  LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in
  tools/tiffcrop.c:3502, allowing attackers to cause a denial-of-service via
@@ -22,12 +24,12 @@ CVSS:
 
 Patches_tiff:
 upstream_tiff: needs-triage
-esm-infra/xenial_tiff: needed
+esm-infra/xenial_tiff: released (4.0.6-1ubuntu0.8+esm10)
 trusty_tiff: ignored (out of standard support)
 xenial_tiff: ignored (out of standard support)
-bionic_tiff: needed
-focal_tiff: needed
-jammy_tiff: needed
-kinetic_tiff: needed
-trusty/esm_tiff: needed
+bionic_tiff: released (4.0.9-5ubuntu0.10)
+focal_tiff: released (4.1.0+git191117-2ubuntu0.20.04.8)
+jammy_tiff: released (4.3.0-6ubuntu0.4)
+kinetic_tiff: released (4.4.0-4ubuntu3.3)
+trusty/esm_tiff: released (4.0.3-7ubuntu0.11+esm7)
 devel_tiff: needed
diff --git a/active/CVE-2023-0801 b/active/CVE-2023-0801
index 27f6a21..afea0fe 100644
--- a/active/CVE-2023-0801
+++ b/active/CVE-2023-0801
@@ -1,3 +1,4 @@
+PublicDateAtUSN: 2023-02-13 23:15:00 UTC
 Candidate: CVE-2023-0801
 PublicDate: 2023-02-13 23:15:00 UTC
 References:
@@ -5,6 +6,7 @@ References:
  https://gitlab.com/libtiff/libtiff/-/commit/33aee1275d9d1384791d2206776eb8152d397f00
  https://gitlab.com/libtiff/libtiff/-/issues/498
  https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-0801.json
+ https://ubuntu.com/security/notices/USN-5923-1
 Description:
  LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in
  libtiff/tif_unix.c:368, invoked by tools/tiffcrop.c:2903 and
@@ -23,12 +25,12 @@ CVSS:
 
 Patches_tiff:
 upstream_tiff: needs-triage
-esm-infra/xenial_tiff: needed
+esm-infra/xenial_tiff: released (4.0.6-1ubuntu0.8+esm10)
 trusty_tiff: ignored (out of standard support)
 xenial_tiff: ignored (out of standard support)
-bionic_tiff: needed
-focal_tiff: needed
-jammy_tiff: needed
-kinetic_tiff: needed
-trusty/esm_tiff: needed
+bionic_tiff: released (4.0.9-5ubuntu0.10)
+focal_tiff: released (4.1.0+git191117-2ubuntu0.20.04.8)
+jammy_tiff: released (4.3.0-6ubuntu0.4)
+kinetic_tiff: released (4.4.0-4ubuntu3.3)
+trusty/esm_tiff: released (4.0.3-7ubuntu0.11+esm7)
 devel_tiff: needed
diff --git a/active/CVE-2023-0802 b/active/CVE-2023-0802
index fc74216..6f171af 100644
--- a/active/CVE-2023-0802
+++ b/active/CVE-2023-0802
@@ -1,3 +1,4 @@
+PublicDateAtUSN: 2023-02-13 23:15:00 UTC
 Candidate: CVE-2023-0802
 PublicDate: 2023-02-13 23:15:00 UTC
 References:
@@ -5,6 +6,7 @@ References:
  https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-0802.json
  https://gitlab.com/libtiff/libtiff/-/issues/500
  https://gitlab.com/libtiff/libtiff/-/commit/33aee1275d9d1384791d2206776eb8152d397f00
+ https://ubuntu.com/security/notices/USN-5923-1
 Description:
  LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in
  tools/tiffcrop.c:3724, allowing attackers to cause a denial-of-service via
@@ -22,12 +24,12 @@ CVSS:
 
 Patches_tiff:
 upstream_tiff: needs-triage
-esm-infra/xenial_tiff: needed
+esm-infra/xenial_tiff: released (4.0.6-1ubuntu0.8+esm10)
 trusty_tiff: ignored (out of standard support)
 xenial_tiff: ignored (out of standard support)
-bionic_tiff: needed
-focal_tiff: needed
-jammy_tiff: needed
-kinetic_tiff: needed
-trusty/esm_tiff: needed
+bionic_tiff: released (4.0.9-5ubuntu0.10)
+focal_tiff: released (4.1.0+git191117-2ubuntu0.20.04.8)
+jammy_tiff: released (4.3.0-6ubuntu0.4)
+kinetic_tiff: released (4.4.0-4ubuntu3.3)
+trusty/esm_tiff: released (4.0.3-7ubuntu0.11+esm7)
 devel_tiff: needed
diff --git a/active/CVE-2023-0803 b/active/CVE-2023-0803
index a6c66ad..8d7afc4 100644
--- a/active/CVE-2023-0803
+++ b/active/CVE-2023-0803
@@ -1,3 +1,4 @@
+PublicDateAtUSN: 2023-02-13 23:15:00 UTC
 Candidate: CVE-2023-0803
 PublicDate: 2023-02-13 23:15:00 UTC
 References:
@@ -5,6 +6,7 @@ References:
  https://gitlab.com/libtiff/libtiff/-/issues/501
  https://gitlab.com/libtiff/libtiff/-/commit/33aee1275d9d1384791d2206776eb8152d397f00
  https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-0803.json
+ https://ubuntu.com/security/notices/USN-5923-1
 Description:
  LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in
  tools/tiffcrop.c:3516, allowing attackers to cause a denial-of-service via
@@ -22,12 +24,12 @@ CVSS:
 
 Patches_tiff:
 upstream_tiff: needs-triage
-esm-infra/xenial_tiff: needed
+esm-infra/xenial_tiff: released (4.0.6-1ubuntu0.8+esm10)
 trusty_tiff: ignored (out of standard support)
 xenial_tiff: ignored (out of standard support)
-bionic_tiff: needed
-focal_tiff: needed
-jammy_tiff: needed
-kinetic_tiff: needed
-trusty/esm_tiff: needed
+bionic_tiff: released (4.0.9-5ubuntu0.10)
+focal_tiff: released (4.1.0+git191117-2ubuntu0.20.04.8)
+jammy_tiff: released (4.3.0-6ubuntu0.4)
+kinetic_tiff: released (4.4.0-4ubuntu3.3)
+trusty/esm_tiff: released (4.0.3-7ubuntu0.11+esm7)
 devel_tiff: needed
diff --git a/active/CVE-2023-0804 b/active/CVE-2023-0804
index ca75e81..465e815 100644
--- a/active/CVE-2023-0804
+++ b/active/CVE-2023-0804
@@ -1,3 +1,4 @@
+PublicDateAtUSN: 2023-02-13 23:15:00 UTC
 Candidate: CVE-2023-0804
 PublicDate: 2023-02-13 23:15:00 UTC
 References:
@@ -5,6 +6,7 @@ References:
  https://gitlab.com/libtiff/libtiff/-/commit/33aee1275d9d1384791d2206776eb8152d397f00
  https://gitlab.com/libtiff/libtiff/-/issues/497
  https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-0804.json
+ https://ubuntu.com/security/notices/USN-5923-1
 Description:
  LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in
  tools/tiffcrop.c:3609, allowing attackers to cause a denial-of-service via
@@ -22,12 +24,12 @@ CVSS:
 
 Patches_tiff:
 upstream_tiff: needs-triage
-esm-infra/xenial_tiff: needed
+esm-infra/xenial_tiff: released (4.0.6-1ubuntu0.8+esm10)
 trusty_tiff: ignored (out of standard support)
 xenial_tiff: ignored (out of standard support)
-bionic_tiff: needed
-focal_tiff: needed
-jammy_tiff: needed
-trusty/esm_tiff: needed
-kinetic_tiff: needed
+bionic_tiff: released (4.0.9-5ubuntu0.10)
+focal_tiff: released (4.1.0+git191117-2ubuntu0.20.04.8)
+jammy_tiff: released (4.3.0-6ubuntu0.4)
+trusty/esm_tiff: released (4.0.3-7ubuntu0.11+esm7)
+kinetic_tiff: released (4.4.0-4ubuntu3.3)
 devel_tiff: needed
diff --git a/active/CVE-2023-23455 b/active/CVE-2023-23455
index e2cbebb..23cd932 100644
--- a/active/CVE-2023-23455
+++ b/active/CVE-2023-23455
@@ -10,6 +10,7 @@ References:
  https://ubuntu.com/security/notices/USN-5915-1
  https://ubuntu.com/security/notices/USN-5917-1
  https://ubuntu.com/security/notices/USN-5924-1
+ https://ubuntu.com/security/notices/USN-5927-1
 Description:
  atm_tc_enqueue in net/sched/sch_atm.c in the Linux kernel through 6.1.4
  allows attackers to cause a denial of service because of type confusion
@@ -231,7 +232,7 @@ Patches_linux-azure-4.15:
 upstream_linux-azure-4.15: released (6.2~rc3)
 trusty_linux-azure-4.15: DNE
 xenial_linux-azure-4.15: DNE
-bionic_linux-azure-4.15: pending (4.15.0-1162.177)
+bionic_linux-azure-4.15: released (4.15.0-1162.177)
 focal_linux-azure-4.15: DNE
 jammy_linux-azure-4.15: DNE
 kinetic_linux-azure-4.15: DNE
diff --git a/active/CVE-2023-23559 b/active/CVE-2023-23559
index c54692a..8987ae0 100644
--- a/active/CVE-2023-23559
+++ b/active/CVE-2023-23559
@@ -6,6 +6,8 @@ References:
  https://patchwork.kernel.org/project/linux-wireless/patch/[e-mail]/
  https://ubuntu.com/security/notices/USN-5884-1
  https://ubuntu.com/security/notices/USN-5924-1
+ https://ubuntu.com/security/notices/USN-5926-1
+ https://ubuntu.com/security/notices/USN-5927-1
 Description:
  In rndis_query_oid in drivers/net/wireless/rndis_wlan.c in the Linux kernel
  through 6.1.5, there is an integer overflow in an addition.
@@ -26,7 +28,7 @@ CVSS:
 Patches_linux:
  break-fix: 80f8c5b434f94926c6489d7350d58aecb53ab70f b870e73a56c4cccbec33224233eaf295839f228c
 upstream_linux: released (6.2~rc5)
-esm-infra/xenial_linux: pending
+esm-infra/xenial_linux: released (4.4.0-237.271)
 trusty_linux: ignored (out of standard support)
 xenial_linux: ignored (out of standard support)
 bionic_linux: pending (4.15.0-207.218)
@@ -109,11 +111,11 @@ bionic_linux-lts-xenial: DNE
 focal_linux-lts-xenial: DNE
 jammy_linux-lts-xenial: DNE
 kinetic_linux-lts-xenial: DNE
-trusty/esm_linux-lts-xenial: pending
+trusty/esm_linux-lts-xenial: released (4.4.0-237.271~14.04.1)
 
 Patches_linux-kvm:
 upstream_linux-kvm: released (6.2~rc5)
-esm-infra/xenial_linux-kvm: pending
+esm-infra/xenial_linux-kvm: released (4.4.0-1117.127)
 trusty_linux-kvm: DNE
 xenial_linux-kvm: ignored (end of standard support)
 bionic_linux-kvm: needed
@@ -131,7 +133,7 @@ bionic_linux-aws: needed
 focal_linux-aws: needed
 jammy_linux-aws: needed
 kinetic_linux-aws: needed
-trusty/esm_linux-aws: pending
+trusty/esm_linux-aws: released (4.4.0-1116.122)
 devel_linux-aws: needed
 
 Patches_linux-aws-5.0:
@@ -223,7 +225,7 @@ Patches_linux-azure-4.15:
 upstream_linux-azure-4.15: released (6.2~rc5)
 trusty_linux-azure-4.15: DNE
 xenial_linux-azure-4.15: DNE
-bionic_linux-azure-4.15: pending (4.15.0-1162.177)
+bionic_linux-azure-4.15: released (4.15.0-1162.177)
 focal_linux-azure-4.15: DNE
 jammy_linux-azure-4.15: DNE
 kinetic_linux-azure-4.15: DNE
diff --git a/scripts/packages-mirror b/scripts/packages-mirror
index 3b08dc1..6bac3b4 100755
--- a/scripts/packages-mirror
+++ b/scripts/packages-mirror
@@ -18,6 +18,7 @@ help() {
     cat <<EOM
 Usage: packages_mirror [OPTIONS]
 
+  -w               use wget instead of rsync to fetch the mirror contents
   -t               use timestamps (ie, don't update files if they have been
                    updated within the last day)
   -f               when using timestamps, force updating the files
@@ -31,9 +32,10 @@ EOM
 }
 
 find_devel_release() {
-    PYTHONPATH="$(dirname $0)" python3 -c "import cve_lib; print(cve_lib.devel_release)" || true
+    PYTHONPATH="$(dirname "$0")" python3 -c "import cve_lib; print(cve_lib.devel_release)" || true
 }
 
+use_wget="no"
 use_timestamp="no"
 force_timestamp="no"
 verbosity_args="-q"
@@ -43,9 +45,10 @@ very_verbose=""
 only_partner="no"
 only_ubuntu="no"
 
-while getopts "AhftvVpur:" opt
+while getopts "AwhftvVpur:" opt
 do
     case "$opt" in
+        w) use_wget="yes";;
         f) force_timestamp="yes";;
         t) use_timestamp="yes";;
         v) verbosity_args="";;
@@ -63,9 +66,11 @@ shift $((OPTIND - 1))
 
 #server=se.archive.ubuntu.com
 #server=us.archive.ubuntu.com
-server=archive.ubuntu.com
+server=${server:-archive.ubuntu.com}
 ports=${ports:-ports.ubuntu.com}
+debian=${debian:-ftp.debian.org}
 
+# shellcheck disable=SC1091
 . "$HOME"/.ubuntu-cve-tracker.conf
 
 for var in packages_mirror debian_mirror partner_mirror; do
@@ -74,16 +79,19 @@ for var in packages_mirror debian_mirror partner_mirror; do
     exit 1
   fi
 done
+# shellcheck disable=SC2154
 outPath=$packages_mirror
 mkdir -p "$outPath"
 
+# shellcheck disable=SC2154
 debianPath=$debian_mirror
 mkdir -p "$debianPath"
 
+# shellcheck disable=SC2154
 partnerPath=$partner_mirror
 mkdir -p "$partnerPath"
 
-partner_dir_excludes=$(PYTHONPATH="${PYTHONPATH:+$PYTHONPATH:}$(dirname $0)" python3 -c '#
+partner_dir_excludes=$(PYTHONPATH="${PYTHONPATH:+$PYTHONPATH:}$(dirname "$0")" python3 -c '#
 import cve_lib, sys
 s = ""
 for r in cve_lib.eol_releases + ["breezy", "warty", "hoary"]:
@@ -161,9 +169,9 @@ function gen_packages()
         do
             for arch in $arches
             do
-                spew_bin_lines $rel $repo $arch
+                spew_bin_lines "$rel" "$repo" "$arch"
             done
-            spew_src_lines $rel $repo
+            spew_src_lines "$rel" "$repo"
         done
     done
 }
@@ -185,9 +193,21 @@ function pull_packages()
         log=$(mktemp -t rsync-XXXXXX)
         set +e
         if [ "$verbosity_args" != "-q" ]; then
-            rsync -rlptv --progress --files-from="$filelist" $url $outPath/ 2>&1 | tee "$log"
+            if [ "$use_wget" != "no" ]; then
+                # need to cut dirs to remove any extra dir prefixes
+                cutdirs=$(echo "$url" | grep -o "/" | wc -l)
+                wget -N -np -i "$filelist" --base "http://$url/" --directory-prefix "$outPath/" --force-directories --no-host-directories --cut-dirs="$cutdirs" 2>&1 | tee "$log"
+            else
+                rsync -rlptv --progress --files-from="$filelist" "rsync://$url" "$outPath/" 2>&1 | tee "$log"
+            fi
         else
-            rsync -rlptq --files-from="$filelist" $url $outPath/ >"$log" 2>&1
+            if [ "$use_wget" != "no" ]; then
+                # need to cut dirs to remove any extra dir prefixes
+                cutdirs=$(echo "$url" | grep -o "/" | wc -l)
+                wget --quiet -N -np -i "$filelist" --base "http://$url" --directory-prefix "$outPath/" --force-directories --no-host-directories --cut-dirs="$cutdirs" >"$log" 2>&1
+            else
+                rsync -rlptq --files-from="$filelist" "rsync://$url" "$outPath/" >"$log" 2>&1
+            fi
         fi
         rc=$?
 
@@ -196,9 +216,7 @@ function pull_packages()
             break
         fi
         count=$((count + 1))
-        if [ "$verbosity_args" != "-q" ]; then
-            echo "Try: $count" >&2
-        fi
+        echo "Try: $count (rc: $rc)" >&2
     done
     set -e
     OUT=$(< "$log" grep -Ev '(debian-installer|^rsync.*code 23)' || true)
@@ -210,11 +228,14 @@ function pull_packages()
     fi
 
     # Some unknown error -- die
-    if [ $rc -ne 0 ] && [ $rc -ne 23 ]; then
+    if [ "$rc" -ne 0 ] && [ "$rc" -ne 23 ]; then
+        echo "failed: rc: $rc"
         return 1
     fi
     # Missing files (rc 23), die only if it's not a debian-installer path
-    if [ $rc -eq 23 ] && [ -n "$OUT" ]; then
+    if [ "$rc" -eq 23 ] && [ -n "$OUT" ]; then
+        echo "failed: rc: $rc"
+        echo "$OUT"
         return 1
     fi
 
@@ -255,7 +276,7 @@ function do_use_timestamp() {
     elif [ ! -e "$1" ]; then
         return 0
     else
-        tmp=$(find "$1" -mtime +$mtime)
+        tmp=$(find "$1" -mtime "+$mtime")
         if [ -n "$tmp" ]; then
             return 0
         fi
@@ -269,27 +290,30 @@ if [ "$only_partner" = "no" ]; then
     timestamp="${outPath}.timestamp"
     if [ ! -e "${outPath}/dists" ] || do_use_timestamp "$timestamp" ; then
         pull=$(mktemp -t packages-XXXXXX)
+        # shellcheck disable=SC2064
         trap "rm -f $pull" EXIT HUP INT QUIT TERM
 
         # Sync Packages for non-ports supported arches
         if [ "$verbosity_args" != "-q" ]; then
             echo "Generating arch lists"
         fi
+        # shellcheck disable=SC2129
         gen_packages trusty   "amd64 i386"               >> "$pull"
         gen_packages xenial   "amd64 i386"               >> "$pull"
         gen_packages bionic   "amd64 i386"               >> "$pull"
         gen_packages focal    "amd64 i386"               >> "$pull"
         gen_packages jammy    "amd64 i386"               >> "$pull"
         gen_packages kinetic  "amd64 i386"               >> "$pull"
-        gen_packages lunar  "amd64 i386"               >> "$pull"
+        gen_packages lunar    "amd64 i386"               >> "$pull"
 
-        pull_packages "$pull" rsync://$server/ubuntu || echo "FAIL: supported architectures" >&2
+        pull_packages "$pull" "$server/ubuntu" || echo "FAIL: supported architectures" >&2
         cat /dev/null > "$pull"
 
         # Sync Packages for ports arches
         if [ "$verbosity_args" != "-q" ]; then
             echo "Generating ports arch lists"
         fi
+        # shellcheck disable=SC2129
         gen_packages trusty   "powerpc ppc64el armhf arm64"       >> "$pull"
         gen_packages xenial   "powerpc ppc64el armhf arm64 s390x" >> "$pull"
         gen_packages bionic   "ppc64el armhf arm64 s390x"         >> "$pull"
@@ -298,7 +322,7 @@ if [ "$only_partner" = "no" ]; then
         gen_packages kinetic  "ppc64el armhf arm64 s390x riscv64" >> "$pull"
         gen_packages lunar    "ppc64el armhf arm64 s390x riscv64" >> "$pull"
 
-        pull_packages "$pull" rsync://$ports/ubuntu-ports || echo "FAIL: ports architectures" >&2
+        pull_packages "$pull" "$ports/ubuntu-ports" || echo "FAIL: ports architectures" >&2
         cat /dev/null > "$pull"
 
         if [ "$use_timestamp" = "yes" ]; then
@@ -325,11 +349,11 @@ if [ "$only_ubuntu" = "no" ]; then
             cd "$debianPath"
             for i in main contrib non-free
             do
-                wget $verbosity_args -N -R '*=*' -R 'Contents*' -X '/debian/dists/testing/*/source/Sources.diff,/debian/dists/testing/*/source/by-hash' -np -r http://ftp.debian.org/debian/dists/testing/$i/source/
+                wget $verbosity_args -N -R '*=*' -R 'Contents*' -X '/debian/dists/testing/*/source/Sources.diff,/debian/dists/testing/*/source/by-hash' -np -r "http://$debian/debian/dists/testing/$i/source/"
             done
-            ln -sf ftp.debian.org/debian/dists dists
+            ln -sf "$debian/debian/dists" dists
             # remove dangling symlink
-            rm -f ftp.debian.org/debian/dists/dists || true
+            rm -f "$debian/debian/dists/dists" || true
 
             if [ "$use_timestamp" = "yes" ]; then
                 touch "$timestamp"
@@ -360,7 +384,7 @@ if [ "$only_ubuntu" = "no" ]; then
                 rm -f "$timestamp"
             fi
             has_sources=$(find archive.canonical.com/dists -name Sources$)
-            if [ ! -z "$has_sources" ]; then
+            if [ -n "$has_sources" ]; then
                 echo ""
                 echo "WARNING: $partnerPath has Sources files! These should be removed now that -partner uses Sources.gz"
             fi
@@ -370,5 +394,5 @@ fi
 
 # generate source package lists for umt grep
 for path in "$outPath" "$debianPath" "$partnerPath"; do
-  find $path -name Sources.gz -exec zgrep '^Package: .*' {} \; | cut -c10- | sort -u > $path/sources
+  find "$path" -name Sources.gz -exec zgrep '^Package: .*' {} \; | cut -c10- | sort -u > "$path/sources"
 done