I suggest naming the branch as release/5.4.x (or branch/5.4.x or branch/5.4), so we can cut 5.4.x releases from it (e.g. in case more CVEs are to be fixed)
Of course, it is not a show-stopper now, and we can create the branch later. Having an explicit branch is helpful for creating PRs that target the branch. Vladimir
