[Git][security-tracker-team/security-tracker][master] Add CVE-2026-97380/mariadb

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
4573bcb2 by Salvatore Bonaccorso at 2026-10-17T09:24:14+02:00
Add CVE-2026-97380/mariadb

- - - - -


2 changed files:

- data/CVE/list
- data/next-point-update.txt


Changes:

=====================================
data/CVE/list
=====================================
@@ -183,7 +183,9 @@ CVE-2026-97851 (The storage status-change REST service allows location records s
 CVE-2026-97470 (The Tourfic \u2013 AI Powered Travel Booking, Hotel Booking & Car Rent ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-97380 (MariaDB server is a community developed fork of MySQL server. From 10. ...)
-	TODO: check
+	- mariadb 1:11.8.9+ds-1
+	NOTE: https://github.com/MariaDB/server/security/advisories/GHSA-625w-4hgq-qwmr
+	NOTE: Fixed by: https://github.com/MariaDB/server/commit/dbd60d0ad8daa2d01050346aa50b7b102490e456 (mariadb-13.1.1, mariadb-13.0.2, mariadb-12.3.3, mariadb-11.8.9, mariadb-11.4.13, mariadb-10.11.19, mariadb-10.6.28)
 CVE-2026-96870 (The SureDash \u2013 Community, Courses & Member Dashboard plugin for W ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-96768 (The GoSMTP Pro plugin for WordPress is vulnerable to Stored Cross-Site ...)


=====================================
data/next-point-update.txt
=====================================
@@ -260,6 +260,8 @@ CVE-2026-47023
 	[trixie] - mariadb 1:11.8.9+ds-0+deb13u1
 CVE-2026-60184
 	[trixie] - mariadb 1:11.8.9+ds-0+deb13u1
+CVE-2026-97380
+	[trixie] - mariadb 1:11.8.9+ds-0+deb13u1
 CVE-2026-9323
 	[trixie] - urwid 2.6.16-1+deb13u1
 CVE-2026-75895



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/4573bcb202f55df4b4de7fd28ede07868e26abe1

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/4573bcb202f55df4b4de7fd28ede07868e26abe1
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261017/859c9038/attachment.htm>