I think Suse would be suitable. AFAIK they have a updates-only policy (you might even be able to choose only to use security updates but I'm not sure - I used it only a short time) and use delta packages.
-Erik
--
hackerkey://v4sw5hw2ln3pr5ck0ma2u7LwXm4l7Gi2e2t4b7Ken4/7a16s0r1p-5.62/-6.56g5OR
