apt-get upgrade problem sorted !!
Ive done it after 2 weeks and I dont know how many hours !!
As far as I understand it ....
loads files into /var/lib/dpkg/info about the packages and the md5 sums for
I got a corrupted download, the md5 sums were never going to match.
I hashed out debian.security..... in sources.list
I deleted the hashes for debian.security..... in sources.list
forcing a fresh /var/lib/dpkg/info download
apt-get upgrade --fix-missing
worked AOK, even though the line dropped twice