If you are running the Sarge version than there are regular security updates. The last one has been for several php packages. You can monitor security updates from the front page of
www.debian.org
If you run Etch or Sid (testing/unstable) there are multiple updates every day as updated or new packages become available.