[Martin Wodrich] >> IIRC security-support for sarge started befor its release. > > But only one month before the release. That depends on your definition of support. The testing security team was working hard to secure it a long time before sarge was released. <URL:http://secure-testing.alioth.debian.org/>