> since mysql doesn't bother to fix this, maybe debian will, or at least debian could not put affected mysql servers into stable So Lenny should ship MySQL 4.1? Or not ship MySQL at all? That doesn't seem like an improvement over the current situation, as many, many users are using MySQL and removing MySQL from stable will not help them.