Bug#986063: live-build wrongly setups security repository for Bullseye: bullseye/updates instead of bullseye-security

[Thomas Goirand <zigo@debian.org>]

Package: live-build
Version: 1:20190311
Severity: grave

Hi,

In functions/sourcelist.sh line 88, one can read:

echo "deb ${PARENT_MIRROR_SECURITY} ${PARENT_DISTRIBUTION}/updates ${LB_PARENT_ARCHIVE_AREAS}" >> "${PARENT_LIST_FILE}"
echo "deb-src ${PARENT_MIRROR_SECURITY} ${PARENT_DISTRIBUTION}/updates ${LB_PARENT_ARCHIVE_AREAS}" >> "${PARENT_LIST_FILE}"

So, effectively, this makes it bullseye/updates when it really should be
bullseye-security. So these lines must be replaced by:

echo "deb ${PARENT_MIRROR_SECURITY} ${PARENT_DISTRIBUTION}-security ${LB_PARENT_ARCHIVE_AREAS}" >> "${PARENT_LIST_FILE}"
echo "deb-src ${PARENT_MIRROR_SECURITY} ${PARENT_DISTRIBUTION}-security ${LB_PARENT_ARCHIVE_AREAS}" >> "${PARENT_LIST_FILE}"

This makes live-build not useable for me, as I do setup the security
repositories, and "lb build" just fails on me because of this problem.

Probably, what should be done is something like this:

if [ ${PARENT_DISTRIBUTION} = "buster" ] || [ ${PARENT_DISTRIBUTION} = "stretch" ] ; then
	SEC_REPO="/updates"
else
	SEC_REPO="-security"
fi

to keep a bit of backward compatibility. I'll let the current maintainers of
live-build decide...

Cheers,

Thomas Goirand (zigo)