diff --git a/common/tasks/apt.py b/common/tasks/apt.py
index b0a2f75..f440ecb 100644
--- a/common/tasks/apt.py
+++ b/common/tasks/apt.py
@@ -28,6 +28,8 @@ class AddDefaultSources(Task):
 			sections = ' '.join(info.manifest.system['sections'])
 		info.source_lists.add('main', 'deb     {apt_mirror} {system.release} '+sections)
 		info.source_lists.add('main', 'deb-src {apt_mirror} {system.release} '+sections)
+		info.source_lists.add('main', 'deb     http://security.debian.org/  {system.release}/updates '+sections)
+		info.source_lists.add('main', 'deb-src http://security.debian.org/  {system.release}/updates '+sections)
 		if info.manifest.system['release'] not in {'testing', 'unstable'}:
 			info.source_lists.add('main', 'deb     {apt_mirror} {system.release}-updates '+sections)
 			info.source_lists.add('main', 'deb-src {apt_mirror} {system.release}-updates '+sections)