Security updates vs. Sarge and Sid??

[Lou Losee <llosee@hvc.rr.com>]

The posts that arrive from the Debian Security list show package updates
for Woody.  How does one ensure that these same updates are applied when
running a mixed system (testing & stable)?

For instance:
Recently a post for mysql-common indicated an  update was available.  If
I run apt-cache policy mysql-common I get the following output:

mysql-common:
  Installed: 4.0.13-3
  Candidate: 4.0.13-3
  Version Table:
     4.0.14-1 0
        500 http://ftp.de.debian.org unstable/main Packages
 *** 4.0.13-3 0
        990 http://ftp.de.debian.org testing/main Packages
        100 /var/lib/dpkg/status
     3.23.49-8.5 0
        500 http://security.debian.org stable/updates/main Packages
     3.23.49-8 0
        500 http://ftp.de.debian.org stable/main Packages

So, I have the latest version installed from testing.  Does that include
the changes from security.debian.org?

Lou