Package: debirf Severity: serious File: /usr/share/debirf/modules/a0_add_security_repos User: debian-de...@lists.debian.org Usertags: bullseye-security
The above script references /updates instead of -security for the bullseye release and later. This means that images generated for bullseye will be missing fixes for security issues. Probably this issue should also get fixed in Debian buster and stretch too. $ grep -A11 'debian)' src/modules/a0_add_security_repos debian) case "$DEBIRF_SUITE" in sid|unstable) echo "not adding security repository for sid/unstable" ;; *) cat <<EOF > "${DEBIRF_ROOT}/etc/apt/sources.list.d/security_repos.list" deb http://security.debian.org/ ${DEBIRF_SUITE}/updates main contrib non-free EOF ;; esac ;; -- System Information: Debian Release: bullseye/sid APT prefers testing-debug APT policy: (900, 'testing-debug'), (900, 'testing'), (800, 'unstable-debug'), (800, 'unstable'), (790, 'buildd-unstable'), (700, 'experimental-debug'), (700, 'experimental'), (690, 'buildd-experimental') Architecture: amd64 (x86_64) Kernel: Linux 5.7.0-3-amd64 (SMP w/4 CPU threads) Locale: LANG=en_AU.utf8, LC_CTYPE=en_AU.utf8 (charmap=UTF-8), LANGUAGE=en_AU:en Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) LSM: AppArmor: enabled Versions of packages debirf depends on: ii apt 2.1.10 ii cpio 2.13+dfsg-2 ii debootstrap 1.0.123 ii fakechroot 2.19-3.3 ii fakeroot 1.24-1 ii klibc-utils 2.0.8-1 ii pseudo [fakeroot] 1.9.0+git20200626+067950b-2 ii xz-utils 5.2.4-1+b1 Versions of packages debirf recommends: ii grub-common 2.04-9 ii lsb-release 11.1.0 pn xorriso <none> Versions of packages debirf suggests: ii syslinux-common 3:6.04~git20190206.bf6db5b4+dfsg1-3 -- bye, pabs https://wiki.debian.org/PaulWise
signature.asc
Description: This is a digitally signed message part