The system's apt configuration is using restricted and multiverse so the security sources list should as well.