Use $CODENAME/updates for security pre-bullseye

or $CODENAME-security for bullseye onwards.

debian/changelog

@@ -4,6 +4,9 @@ debian-cd (3.1.36) UNRELEASED; urgency=medium
   * Start bookworm development, copy the bullseye dirs to bookworm as
     a start
 
+  * Use $CODENAME/updates for security pre-bullseye, or
+    $CODENAME-security for bullseye onwards.
+
  -- Steve McIntyre <93sam@debian.org>  Mon, 26 Jul 2021 01:02:03 +0100
 
 debian-cd (3.1.35) unstable; urgency=medium

tools/apt-selection

@@ -95,7 +95,12 @@ if [ ! -e "$APTTMP/$THIS_PKGSET/apt/sources.list" ]; then
 
 	# Security mirror ...
 	if [ -n "$SECURITY" ]; then
-		echo "$ADEB file:${SECURITY:-$MIRROR} $CODENAME/updates $sections" \
+		case $CODENAME in
+			stretch|buster) SEC=$CODENAME/updates;;
+			*)		SEC=$CODENAME-security;;
+		esac
+
+		echo "$ADEB file:${SECURITY:-$MIRROR} $SEC $sections" \
 		>> $APTTMP/$THIS_PKGSET/apt/sources.list
 	fi