One of the problems with debian cd's is that the target is constantly moving. i.e. what is in stable today will be different to yesterday and tomorrow. you can either get a full iso from the above reference, in
One of the advantages with Debian is that the security team patch *all* stable software with the latest fixes for faults (but not new features). This means that what's on your CD today will need to be updated from the net if you need to have security issues covered.
The actual package list for "stable" stays the same for all eternity from the moment it is released.
Nick, are you thinking of "testing", "unstable" or heaven forfend "experimental"?
The current Debian Stable is called Woody. The next Debian Stable is called Sarge. Sarge is useable today, and there s a reasonable amount of churn on the contents, but this is generally all due to version updates, and not security. The security status of Sarge is left up to the package upstream developers, the Security Team officially do nothing to it (unofficially I'm sure they do a lot).
-jim
