http://www.debian.org
There, fixed.
There, fixed.
http://www.debian.org/security/faq#unstable
And Testing doesn't get fixes for contrib and non-free:
I checked the security site listed in the Testing area in the Debian FAQ and don't see the recent SSH fix or the recent Linux kernel fix.
http://www.debian.org/security/
I do see them on the Ubuntu site:
I'm using arch (rolling distro) as my main OS. I do EVERYTHING on it.
The rolling release schedule is too much for me to manage there.. but for my daily-driven workstation, I find it to be a fantastic OS.