[Git][security-tracker-team/security-tracker][master] Add tracking of new mariadb issues
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Fri Oct 9 21:26:29 BST 2026
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
3e7abe11 by Salvatore Bonaccorso at 2026-10-09T22:26:09+02:00
Add tracking of new mariadb issues
- - - - -
2 changed files:
- data/CVE/list
- data/next-point-update.txt
Changes:
=====================================
data/CVE/list
=====================================
@@ -380,25 +380,41 @@ CVE-2026-107825 (OWASP Coraza WAF is a golang modsecurity compatible web applica
CVE-2026-107824 (x64dbg-MCP Server is a native Model Context Protocol (MCP) plugin for ...)
NOT-FOR-US: x64dbg-MCP Server
CVE-2026-107823 (MariaDB server is a community developed fork of MySQL server. From 10. ...)
- TODO: check
+ - mariadb 1:11.8.9+ds-1
+ NOTE: https://github.com/MariaDB/server/security/advisories/GHSA-g2q2-3936-cp37
+ NOTE: Fixed by: https://github.com/MariaDB/server/commit/8a642bc8103aadc6b2087d781ba8e1595616a2c4 (mariadb-13.1.1, mariadb-13.0.2, mariadb-12.3.3, mariadb-11.8.9, mariadb-11.4.13, mariadb-10.11.19, mariadb-10.6.28)
CVE-2026-107822 (MariaDB server is a community developed fork of MySQL server. From 10. ...)
- TODO: check
+ - mariadb 1:11.8.9+ds-1
+ NOTE: https://github.com/MariaDB/server/security/advisories/GHSA-2m85-2x26-36rf
+ NOTE: Fixed by: https://github.com/MariaDB/server/commit/67ea07dd3400004e4f7ae01bf977f4344bbe064b (mariadb-13.1.1, mariadb-13.0.2, mariadb-12.3.3, mariadb-11.8.9, mariadb-11.4.13, mariadb-10.11.19, mariadb-10.6.28)
CVE-2026-107821 (MariaDB server is a community developed fork of MySQL server. From 10. ...)
- TODO: check
+ - mariadb 1:11.8.9+ds-1
+ NOTE: https://github.com/MariaDB/server/security/advisories/GHSA-c4gx-34mg-95q5
+ NOTE: Fixed by: https://github.com/MariaDB/server/commit/3b1c2e58abab5571bec4ff52773ddc75b1738da9 (mariadb-13.1.1, mariadb-13.0.2, mariadb-12.3.3, mariadb-11.8.9, mariadb-11.4.13, mariadb-10.11.19, mariadb-10.6.28)
CVE-2026-107820 (x64dbg-MCP Server is a native Model Context Protocol (MCP) plugin for ...)
NOT-FOR-US: x64dbg-MCP Server
CVE-2026-107819 (MariaDB Connector/C is a C and C++ client library for connecting appli ...)
- TODO: check
+ - mariadb-connector-c <removed>
+ NOTE: https://github.com/MariaDB/server/security/advisories/GHSA-fmq9-qjxj-qpf7
CVE-2026-107818 (MariaDB server is a community developed fork of MySQL server. From 10. ...)
- TODO: check
+ - mariadb 1:11.8.9+ds-1
+ NOTE: https://github.com/MariaDB/server/security/advisories/GHSA-mhvc-vqcq-7vq5
+ NOTE: Fixed by: https://github.com/MariaDB/server/commit/e3d62d4e78fd4941cef3f5053e6a50d0b32d740e (mariadb-13.1.1, mariadb-13.0.2, mariadb-12.3.3, mariadb-11.8.9, mariadb-11.4.13, mariadb-10.11.19, mariadb-10.6.28)
CVE-2026-107817 (MariaDB server is a community developed fork of MySQL server. From 10. ...)
- TODO: check
+ - mariadb 1:11.8.9+ds-1
+ NOTE: https://github.com/MariaDB/server/security/advisories/GHSA-89ph-64cf-gqcc
+ NOTE: Fixed by: https://github.com/MariaDB/server/commit/851f52470d470a96a66e0b7e5599f3b6c2e45907 (mariadb-13.1.1, mariadb-13.0.2, mariadb-12.3.3, mariadb-11.8.9, mariadb-11.4.13, mariadb-10.11.19, mariadb-10.6.28)
CVE-2026-107816 (MariaDB server is a community developed fork of MySQL server. From 10. ...)
- TODO: check
+ - mariadb 1:11.8.9+ds-1
+ NOTE: https://github.com/MariaDB/server/security/advisories/GHSA-wfqg-88r5-55f6
+ NOTE: Fixed by: https://github.com/MariaDB/server/commit/0931994096b84ecc9ffc8eb3517c7e09e6e8631e (mariadb-13.1.1, mariadb-13.0.2, mariadb-12.3.3, mariadb-11.8.9, mariadb-11.4.13, mariadb-10.11.19, mariadb-10.6.28)
CVE-2026-107815 (MariaDB server is a community developed fork of MySQL server. From 10. ...)
- TODO: check
+ - mariadb 1:11.8.9+ds-1
+ NOTE: https://github.com/MariaDB/server/security/advisories/GHSA-4wgx-ffg9-jrwq
+ NOTE: Fixed by: https://github.com/MariaDB/server/commit/b369925f6855d3e1f0ebcf453492724b99fda6f8 (mariadb-13.1.1, mariadb-13.0.2, mariadb-12.3.3, mariadb-11.8.9, mariadb-11.4.13, mariadb-10.11.19, mariadb-10.6.28)
CVE-2026-107814 (MariaDB server is a community developed fork of MySQL server. From 10. ...)
- TODO: check
+ - mariadb <not-affected> (Only affects insecure use of $HOME in MariaDB provided rpm packages)
+ NOTE: https://github.com/MariaDB/server/security/advisories/GHSA-m5gf-432r-g5jw
CVE-2026-107813 (Nginx UI is a web user interface for the Nginx web server. From 2.0.0 ...)
NOT-FOR-US: Nginx UI
CVE-2026-107812 (Nginx UI is a web user interface for the Nginx web server. From 2.0.0 ...)
=====================================
data/next-point-update.txt
=====================================
@@ -86,6 +86,20 @@ CVE-2026-48165
[trixie] - mariadb 1:11.8.8-0+deb13u1
CVE-2026-48163
[trixie] - mariadb 1:11.8.8-0+deb13u1
+CVE-2026-107823
+ [trixie] - mariadb 1:11.8.8-0+deb13u1
+CVE-2026-107822
+ [trixie] - mariadb 1:11.8.8-0+deb13u1
+CVE-2026-107821
+ [trixie] - mariadb 1:11.8.8-0+deb13u1
+CVE-2026-107818
+ [trixie] - mariadb 1:11.8.8-0+deb13u1
+CVE-2026-107817
+ [trixie] - mariadb 1:11.8.8-0+deb13u1
+CVE-2026-107816
+ [trixie] - mariadb 1:11.8.8-0+deb13u1
+CVE-2026-107815
+ [trixie] - mariadb 1:11.8.8-0+deb13u1
CVE-2026-57062
[trixie] - gnupg2 2.4.7-21+deb13u2
CVE-2026-24882
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/3e7abe110bfceeeff01c1d4cced460e3df52b694
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/3e7abe110bfceeeff01c1d4cced460e3df52b694
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261009/12eeafec/attachment-0001.htm>
More information about the debian-security-tracker-commits
mailing list