Came out Saturday, includes some security fixes.
This update will likely require a reboot:
Leaving private until someone can review the exact CVEs in the release email in the comments to determine security risk.
Currently, the Debian 10 servers should be 10.4 if they haven't been updated. See https://lists.debian.org/debian-announce/2020/msg00005.html
Per https://linuxize.com/post/how-to-check-your-debian-version/, "lsb-release -a" should tell you via salt ssh the version on all servers
Packages with pending changes that require a restart are listed in:
root@system:/root# cat /var/run/reboot-required.pkgs
libssl1.0.0 according to https://megamorf.gitlab.io/2019/06/10/check-if-reboot-is-required-after-installing-linux-updates.html
The only relevant CVE here is the SecureBoot one, which doesn't matter at Miraheze (due to our configuration). Making the task public now. I don't see other fixes important for us either, don't see the need for quickly upgrading (which requires reboots of cloud servers as well).
Assigning to @Paladox for reprioritising.
Closing as resolved and moving to T6564. db servers and cloud can be done directly to 10.7