> which is why you add security.debian.org to your list of deb sources in > apt. all the security patches from sid are backported to testing and > stable and placed in this deb source.
Are you sure? I thought they were backported to stable only. Though I've never run testing, so I haven't paid much attention. b.