hi thank you very much. this clears things for me. :) summary: in debian stable every package with security holes is patched.
only the kernel images are not pachted. so the kernel image packages are the only packages with security holes in it. even if you run debian-stable. is this right? this sound quite strange to me. :o however it is always best to compile your own kernel imediately after installation. greeting kuene
