> Yes I think you are save to consider Sarge a secure Debian fork > (anyway the unstable and especially the testing branches are more > likely to have unfixed bugs, by design (latest-and-greatest simply > has not had a lot of time of testing yet)) I think that unstable rather than testing has more unfixed bugs. Isn't it?