It is. Once a Debian LTS release is EOL security maintainance moves away from security to LTS team and as such security.debian.org becomes obsolete with arm64 architecture: https://wiki.debian.org/LTS   Removing the line from sources.list will stop the warning to appear. This affects all Jessie arm64 installations since a few weeks so most probably we can call this a FAQ soon...   To be clear: Debian LTS support is only available for i386/amd64/armel/armhf architectures so ar