http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=323365 Why is this grave security bugfix not in Sarge security updates, more than a month later? I know there's a "good reason," but in my few years of using Debian I have always run unstable. What's the policy/urgency for getting grave security fixes into Stable?