Just a few hours ago, the Drupal project has released version 4.5.3, a bugfix release which fixes a serious security bug. I have created and just uploaded a 4.5.3-1 package to unstable. Updated Debconf translations are the only additional changes over 4.5.2-3 which is the version in sarge. The corresponding advisory from upstream can be found here: http://drupal.org/files/sa-2005-001/advisory.txt. Cheers, -Hilko