diff --git a/scripts/update-pkgs-2021.12.sh b/scripts/update-pkgs-EESSI-2021.12_2022-09-07.sh
similarity index 100%
rename from scripts/update-pkgs-2021.12.sh
rename to scripts/update-pkgs-EESSI-2021.12_2022-09-07.sh
diff --git a/scripts/update-pkgs-EESSI-2021.12_2023-01-31.sh b/scripts/update-pkgs-EESSI-2021.12_2023-01-31.sh
new file mode 100755
index 00000000..7d8e2f34
--- /dev/null
+++ b/scripts/update-pkgs-EESSI-2021.12_2023-01-31.sh
@@ -0,0 +1,76 @@
+#!/usr/bin/env bash
+
+set -e
+
+mytmpdir=$(mktemp -d)
+
+if [ -z "$EPREFIX" ]; then
+    # this assumes we're running in a Gentoo Prefix environment
+    EPREFIX=$(dirname $(dirname $SHELL))
+fi
+echo "EPREFIX=${EPREFIX}"
+
+# collect list of installed packages before updating packages
+list_installed_pkgs_pre_update=${mytmpdir}/installed-pkgs-pre-update.txt
+echo "Collecting list of installed packages to ${list_installed_pkgs_pre_update}..."
+qlist -IRv | sort | tee ${list_installed_pkgs_pre_update}
+
+# update checkout of gentoo repository to sufficiently recent commit
+# this is required because we pin to a specific commit when bootstrapping the compat layer
+# see gentoo_git_commit in ansible/playbooks/roles/compatibility_layer/defaults/main.yml;
+
+# https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=5507d83c30321cbb24626eb2f2c445368020d65e (2023-01-31)
+gentoo_commit='5507d83c30321cbb24626eb2f2c445368020d65e'
+echo "Updating $EPREFIX/var/db/repos/gentoo to recent commit (${gentoo_commit})..."
+cd $EPREFIX/var/db/repos/gentoo
+time git fetch origin
+echo "Checking out ${gentoo_commit} in ${PWD}..."
+time git checkout ${gentoo_commit}
+cd -
+
+# unmask glibc 2.34 so we can update to it (glibc <2.36 is masked via $EPREFIX/var/db/repos/gentoo/profiles/package.mask)
+echo '# unmask glibc 2.34 (glibc < 2.36 is masked via $EPREFIX/var/db/repos/gentoo/profiles/package.mask)' >> ${EPREFIX}/etc/portage/package.unmask
+echo '=sys-libs/glibc-2.34-r14' >> ${EPREFIX}/etc/portage/package.unmask
+# update glibc due to https://glsa.gentoo.org/glsa/202208-24
+emerge --update --oneshot --verbose '=sys-libs/glibc-2.34-r14'  # was sys-libs/glibc-2.33-r7
+
+# update binutils due to https://glsa.gentoo.org/glsa/202208-30
+emerge --update --oneshot --verbose '=sys-devel/binutils-2.38-r2'  # was sys-devel/binutils-2.37_p1-r1
+
+# update openssl due to https://glsa.gentoo.org/glsa/202210-02
+emerge --update --oneshot --verbose '=dev-libs/openssl-1.1.1q'  # was dev-libs/openssl-1.1.1l-r1
+
+# update libxml2 due to https://glsa.gentoo.org/glsa/202210-03
+emerge --update --oneshot --verbose '=dev-libs/libxml2-2.10.3-r1'  # was dev-libs/libxml2-2.9.12-r5
+
+# update gzip due to https://glsa.gentoo.org/glsa/202209-01
+emerge --update --oneshot --verbose '=app-arch/gzip-1.12-r4'  # was app-arch/gzip-1.11
+
+# update libksba due to https://glsa.gentoo.org/glsa/202212-07 + https://glsa.gentoo.org/glsa/202210-23
+emerge --update --oneshot --verbose '=dev-libs/libksba-1.6.3'  # was dev-libs/libksba-1.6.0
+
+# update libgcrypt due to https://glsa.gentoo.org/glsa/202210-13
+emerge --update --oneshot --verbose '=dev-libs/libgcrypt-1.9.4-r2'  # was dev-libs/libgcrypt-1.8.8
+
+# update expat due to https://glsa.gentoo.org/glsa/202209-24 + https://glsa.gentoo.org/glsa/202210-38
+emerge --update --oneshot --verbose '=dev-libs/expat-2.5.0'  # was dev-libs/expat-2.4.1
+
+# update sqlite due to https://glsa.gentoo.org/glsa/202210-40
+emerge --update --oneshot --verbose '=dev-db/sqlite-3.40.1'  # dev-db/sqlite-3.35.5
+
+# update curl due to https://glsa.gentoo.org/glsa/202212-01
+emerge --update --oneshot --verbose '=net-misc/curl-7.86.0-r3'  # was net-misc/curl-7.80.0
+
+# update zlib due to https://glsa.gentoo.org/glsa/202210-42
+emerge --update --oneshot --verbose '=sys-libs/zlib-1.2.13-r1'  # was sys-libs/zlib-1.2.11-r4
+
+# collect list of installed packages after updating packages
+list_installed_pkgs_post_update=${mytmpdir}/installed-pkgs-post-update.txt
+echo "Collecting list of installed packages to ${list_installed_pkgs_post_update}..."
+qlist -IRv | sort | tee ${list_installed_pkgs_post_update}
+
+echo
+echo "diff in installed packages:"
+diff -u ${list_installed_pkgs_pre_update} ${list_installed_pkgs_post_update}
+
+rm -rf ${mytmpdir}