TLDR Tech / InfoSec
mariadb-server: Upgrading to 10.11.18-0+deb12u1 enables systemd socket activation unconditionally
A Debian bug report indicates that the new [Install] stanza in MariaDB 10.11.18-0+deb12u1 causes dh-installsystemd to enable mariadb.socket by default, silently exposing port 3306 on all interfaces instead of localhost-only.
Read the full story