Hi, On Mon, 2021-12-06 at 11:39 -0800, Otto Kekäläinen wrote: > MariaDB 10.6.5 has been uploaded to Sid and will replace 10.5 as soon > as it has the initial bugs weeded out and is same or better overall > quality as 10.5.
I saw the 10.6 uploads, but I'm afraid that doesn't directly address the concern. With 10.5 still being the default in unstable, if we only release 10.5.13 via the point release then users of Debian's default MySQL/MariaDB package in unstable and testing do not benefit from the updates included in it, including the fixes for CVE-2021-35604. When we were faced with a similar situation for 10.3 last year, we decided to proceed anyway as 10.5 was about to become the default version and 10.3 was then removed from unstable shortly afterwards. Looking at the current status of the 10.6 packages in unstable, it doesn't seem like we're in the same situation - there are build failures on multiple architectures, for instance, and no packages in testing yet. As such, I'm trying to gauge the likely timescales involved, so that we can make the best decision for our users. Regards, Adam