Avoid unattended security upgrades from stable if running oldstable

diff --git a/templates/50unattended-upgrades.erb b/templates/50unattended-upgrades.erb
index 73ffa60dbdcf1ba956bd15a988c1b816397e3233..23c5c8945b82318d2ab4ffeb00af53b3de8397b5 100644 (file)
--- a/templates/50unattended-upgrades.erb
+++ b/templates/50unattended-upgrades.erb
@@ -11,8 +11,8 @@ Unattended-Upgrade::Allowed-Origins {
   "${distro_id}:squeeze-lts";
 <% else -%>
 Unattended-Upgrade::Origins-Pattern {
-  "o=Debian,l=Debian-Security";
-  "o=Debian,a=${distro_id}-lts";
+  "origin=Debian,archive=<%= scope.lookupvar('::apt::release') %>,label=Debian-Security";
+  "origin=Debian,archive=${distro_codename}-lts";
 <% end -%>
 };