[Simple-cdd-devel] Dependency errors due to security updates

[David]

Hi,

I am trying to build a basic Jessie CD, before customising it further.

Using:

     $ build-simple-cdd --dist jessie --logfile log.txt

I get dependency failures for vim-tiny (and one other package):

2017-03-01 16:19:48,250 WARNING     package: vim-tiny
2017-03-01 16:19:48,250 WARNING     version: 2:7.4.488-7+deb8u1
2017-03-01 16:19:48,250 WARNING     architecture: amd64
2017-03-01 16:19:48,250 WARNING     status: broken
2017-03-01 16:19:48,250 WARNING     reasons:
2017-03-01 16:19:48,250 WARNING      -
2017-03-01 16:19:48,250 WARNING       missing:
2017-03-01 16:19:48,250 WARNING        pkg:
2017-03-01 16:19:48,250 WARNING         package: vim-tiny
2017-03-01 16:19:48,250 WARNING         version: 2:7.4.488-7+deb8u1
2017-03-01 16:19:48,250 WARNING         architecture: amd64
2017-03-01 16:19:48,251 WARNING         unsat-dependency: vim-common (= 
2:7.4.488-7+deb8u1)

vim recently got a security bump to deb8u2 therefore 
vim-common=7.4.488-7+deb8u1 is no longer available.  The full log shows:

2017-03-01 16:17:14,385 DEBUG mirror/reprepro stdout: deleting and 
forgetting pool/main/v/vim/vim-common_7.4.488-7+deb8u1_amd64.deb

However something still seems to be using vim-tiny=7.4.488-7+debu1, 
which has also been superseded.

Is there some way to ensure the most recent versions of all packages are 
used?  Or disable these updates completely ready for a dist-upgrade 
after install?

Note I originally posted this message on superuser[2] and will follow up 
there too if solved.

Thanks,

David

1 - 
http://metadata.ftp-master.debian.org/changelogs/main/v/vim/vim_7.4.488-7+deb8u2_changelog
2 - 
http://superuser.com/questions/1184193/satisfying-dependency-errors-whilst-building-debian-jessie-live-cd-with-simple-c