imac:
Er... No... Not particularly difficult. But to be safe, after you've checked the sql patch files and after you've exported & imported the tables, you'd also want to double-check functioning of catalog and admin to make sure that nothing had been broken. All of which adds up to a little more than an easy half-an-hour's stroll in the park - which is where this particular line in the discussion began.
I do understand the frustation in not having a patch/bug fix in hand when you need it.
However the steps you describe above are the same steps one would have to do with ANY upgrade and/or bugfix, requiring a sql patch or not. It is well documented that one should THOROUGHLY test upgrades, db patches and bugfixes on a non-production server.
Regarding "you'd also want to 'double-check' functioning of catalog and admin to make sure that nothing had been broken", I do this following EACH and EVERY new installation, upgrade or patch (or rollback)? Doesn't everyone? Once you do it a couple of times you will understand how difficult it is not (but agreed it can be time consuming).
Analyzing the cost to upgrade or patch (or rollback) versus the risk of continuing to run older (or newer) software/code is just part of the cost of managing an ecomm shop (or when working with technolgy in general). So get used to budgeting that potential risk/time requirement into your performa statements, consulting estimates and support/maintenance contracts.
Linda has communicated that a release date announcement for v.1.36 will not happen. It will be out when it is out. And we have to respect that. So end of that discussion. ;-)
However if the bug fix code was indeed already fully tested and ready I would have thought it could have been made available separately, before v.1.36 release. My assumption is the patch testing for this far reaching issue is still not complete, thus the "delay" in v.1.36 and non-release of patch code. At least I have not heard anything to the contrary.