  Re: kernel security upgrades   one more summarization for me
(as one of my mentores told me, in French, there is a proverb
that goes "the night is the best advisor", and I had some good
ideas this night :).  If we do the following, we need to/we
break (numbers only for reference):  1. add new normal kernel
images:    update cd build to not include all of them (relevant
only at point    releases, as we don't build cd images for
stable weekly or so) 2. remove old normal kernel images:    this
breaks some installation medias at some archs the kernel install
3. have both old and new normal images available:    This "just"
confuses our users, and has a real danger of installing
kernels with security issues. 4. add new udebs:    if we want to
use them, update rootskel, base-installer, d-i build system 5.
remove old udebs:    breaks businesscard cds the hard way,
because they want to retrieve  Also, due to legal reasons, we
need to at least keep the kernel-source around of any image
where we distribute binaries