Securityweb-feed
The Ubuntu security notices web page has an option to show only notices for a single release. Is there a way to get notices for a single release as a feed, without setting it up myself? That is, is there an official feed containing all and only Ubuntu 12.04 (for example) security notices?
The end goal is a tool which warns when any of a set of packages (not necessarily the ones installed on a system) for a single Ubuntu release are affected by a security notice.
No, there is no API, but it should be fairly easy to create one by scraping the main CVE or partner CVE list into a db, instead of the USN website or email archive:
Packages in Universe are community maintained. Whether or not they get security updates depends entirely on the community who uses them.
Instructions for contributing security updates for packages in Universe are here:
https://wiki.ubuntu.com/SecurityTeam/UpdateProcedures#Preparing_an_update
Basically, anybody can file a bug, attach a debdiff, subscribe the ubuntu-security-sponsors team and someone from the team will look at it to make sure it's ok, and then sponsor it to the archive.
Best Answer
Created a bug report based on @ændrük's comment.
As of 2015, the status has changed as
Confirmed → Fix Releasedbut the following comment in late-2017 noted that a pop-up menu allows to filter the web page by release, but not the RSS feed.To this date, the RSS feed has yet to provide separate feeds per release.