Package: debirf
Severity: serious
File: /usr/share/debirf/modules/a0_add_security_repos
User: debian-de...@lists.debian.org
Usertags: bullseye-security

The above script references /updates instead of -security for the
bullseye release and later. This means that images generated for
bullseye will be missing fixes for security issues. Probably this issue
should also get fixed in Debian buster and stretch too.

   $ grep -A11 'debian)' src/modules/a0_add_security_repos 
       debian)
           case "$DEBIRF_SUITE" in
               sid|unstable)
                   echo "not adding security repository for sid/unstable"
                   ;;
               *)
                   cat <<EOF > 
"${DEBIRF_ROOT}/etc/apt/sources.list.d/security_repos.list"
   deb http://security.debian.org/ ${DEBIRF_SUITE}/updates main contrib non-free
   EOF
                   ;;
           esac
           ;;


-- System Information:
Debian Release: bullseye/sid
  APT prefers testing-debug
  APT policy: (900, 'testing-debug'), (900, 'testing'), (800, 
'unstable-debug'), (800, 'unstable'), (790, 'buildd-unstable'), (700, 
'experimental-debug'), (700, 'experimental'), (690, 'buildd-experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 5.7.0-3-amd64 (SMP w/4 CPU threads)
Locale: LANG=en_AU.utf8, LC_CTYPE=en_AU.utf8 (charmap=UTF-8), LANGUAGE=en_AU:en
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages debirf depends on:
ii  apt                2.1.10
ii  cpio               2.13+dfsg-2
ii  debootstrap        1.0.123
ii  fakechroot         2.19-3.3
ii  fakeroot           1.24-1
ii  klibc-utils        2.0.8-1
ii  pseudo [fakeroot]  1.9.0+git20200626+067950b-2
ii  xz-utils           5.2.4-1+b1

Versions of packages debirf recommends:
ii  grub-common  2.04-9
ii  lsb-release  11.1.0
pn  xorriso      <none>

Versions of packages debirf suggests:
ii  syslinux-common  3:6.04~git20190206.bf6db5b4+dfsg1-3

-- 
bye,
pabs

https://wiki.debian.org/PaulWise

Attachment: signature.asc
Description: This is a digitally signed message part

Reply via email to