The kernel package versions can be difficult to sort out, but anything more recent than the fix date/version will have the fix. It is usually applied to the current kernel version across all supported releases, although testing and unstable can lag behind.
What I do is pretty common, aptitude update && aptitude full-upgrade. When doing an in-release upgrade it's usually not necessary to do "upgrade" first, then "full-upgrade" (equivalent to dist-upgrade).
