Package: live-build Version: 4.0.4-1 Severity: Important Tags: security patch
Security and update mirror sources are not included in apt source configurations by default if the user specifies jessie as the target distribution. These were set to false by default for Jessie back in an alpha build of v3.x, and presumably should have been changed in v4.x. Patch attached based on v5.x.
commit 4707b8e32a721e1769ddba8937c0da872d6c8f69 Author: jnqnfe <jnq...@gmail.com> Date: Sun Jan 25 03:51:45 2015 +0000 Update distribution defaults diff --git a/functions/defaults.sh b/functions/defaults.sh index ffec3b5..8b09191 100755 --- a/functions/defaults.sh +++ b/functions/defaults.sh @@ -629,7 +629,7 @@ Set_defaults () # Setting security updates option case "${LB_PARENT_DISTRIBUTION}" in - jessie|sid) + stretch|sid) LB_SECURITY="${LB_SECURITY:-false}" ;; @@ -640,7 +640,7 @@ Set_defaults () # Setting updates updates option case "${LB_PARENT_DISTRIBUTION}" in - jessie|sid) + stretch|sid) LB_UPDATES="${LB_UPDATES:-false}" ;;