We have just finished successfully testing the Debian drupal5 5.18-1.1 package on the 2009.03 release, and have updated our package archive to include it.

Drupal 5.18-1.1 is considered a security release, in that respect appliances will upgrade automatically.