Dear Maintainer,

I was alerted to this issue by an IRC user and was able to reproduce
it in a clean bookworm vm.

Steps to reproduce:
1 - install bookworm from 12.0.0 media, selecting the gnome desktop task
2 - log in and run Software from the Activites menu
3 - select Software Repositories from the upper right menu
4 - select any option in the "Download from:" menu, press close, and
press refresh

This results in an error dialog from gnome-software, with the relevant line
"E: The repository 'https://deb.debian.org/debian bookworm-security
Release' does not have a Release file."

The correct entry would be deb.debian.org/debian-security bookworm-security.

Marked as critical severity because it disables all updates from
debian-security.

sney

Control: reassign -1 software-properties-gtk 0.99.30-4
Control: retitle -1 software-properties-gtk: may overwrite debian-security with non-working entry
Control: affects -1 + gnome-software

The "Software & Updates" window opened by gnome-software's
"Software Repositories" menu item isn't actually part of gnome-software,
so I'm reassigning this to the package that seems to provide it.

    smcv

Hi!

Same issue in Hungary. I use software-properties-gtk with Xfce. After I
change mirror, it can't refresh (screenshot included), because the security
entry doesn't work:

root@home:~# grep ^[^#] /etc/apt/sources.list
deb http://ftp.hu.debian.org/debian/ bookworm main non-free-firmware
contrib non-free
deb http://ftp.hu.debian.org/debian/ bookworm-security main
non-free-firmware contrib non-free
deb http://ftp.hu.debian.org/debian/ bookworm-updates main
non-free-firmware contrib non-free
root@home:~# apt update
Találat:1 http://ftp.hu.debian.org/debian bookworm InRelease
Mellőz:2 http://ftp.hu.debian.org/debian bookworm-security InRelease
Találat:3 http://ftp.hu.debian.org/debian bookworm-updates InRelease
Hiba:4 http://ftp.hu.debian.org/debian bookworm-security Release
  404  Not Found [IP: 195.228.252.133 80]
Csomaglisták olvasása... Kész
E: A(z) „http://ftp.hu.debian.org/debian bookworm-security Release”
tárolónak nincs Release fájlja.
N: Az ilyen tárolóból való frissítés nem végezhető el biztonságosan, így
alapesetben ki van kapcsolva.
N: Lásd az apt-secure(8) kézikönyvoldalt a tárolólétrehozással és
felhasználói beállításokkal kapcsolatos részletekért.
root@home:~#

Yours,
kovaax

Can this be closed now ?

Hi everyone!

This turned out to be trickier to fix, the problem may not even be in
s-p but in some of the underlying libraries.
With this bug active, it looks like we may have to release trixie
without s-p, as it will miss the deadline today, and I need to spend
energy on PackageKit to support deb822 sources, so we can have *any*
graphical software sources editor in Debian at all.
Sorry :-(
If it turns out the fix is easier and we do it at a later time, I can
ask for a freeze exception, but getting that isn't guaranteed.

Cheers,
    Matthias

I'm not an expert, but I looked at the tracker, and noticed the Ubuntu
version of Software-Properties is a higher version than even on Sid,
and that Software-Properties-GTK is in the liveiso on ubuntus resolute
testing isos. Potentially bringing these updates backwards could fix
these security flaws? VSRE.