[Git][security-tracker-team/security-tracker][master] Add CVE-2026-85745/mariadb

Salvatore Bonaccorso (@carnil) carnil at debian.org
Sat Oct 17 09:28:47 BST 2026



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
fca16263 by Salvatore Bonaccorso at 2026-10-17T10:28:12+02:00
Add CVE-2026-85745/mariadb

- - - - -


2 changed files:

- data/CVE/list
- data/next-point-update.txt


Changes:

=====================================
data/CVE/list
=====================================
@@ -240,7 +240,10 @@ CVE-2026-85748 (MariaDB server is a community developed fork of MySQL server. Fr
 CVE-2026-85746 (MariaDB server is a community developed fork of MySQL server. From 10. ...)
 	TODO: check
 CVE-2026-85745 (MariaDB server is a community developed fork of MySQL server. From 10. ...)
-	TODO: check
+	- mariadb 1:11.8.9+ds-1
+	NOTE: https://github.com/MariaDB/server/security/advisories/GHSA-p7v9-24h4-mch8
+	NOTE: https://jira.mariadb.org/browse/MDEV-40328
+	NOTE: Fixed by: https://github.com/MariaDB/server/commit/2bf355e361db85153fdfba7b8a0f0d114d6a26ce (mariadb-13.1.1, mariadb-13.0.2, mariadb-12.3.3, mariadb-11.8.9, mariadb-11.4.13, mariadb-10.11.19, mariadb-10.6.28)
 CVE-2026-85231 (A flaw was found in libtirpc. An authenticated remote attacker could e ...)
 	TODO: check
 CVE-2026-81452 (Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, con ...)


=====================================
data/next-point-update.txt
=====================================
@@ -262,6 +262,8 @@ CVE-2026-60184
 	[trixie] - mariadb 1:11.8.9+ds-0+deb13u1
 CVE-2026-97380
 	[trixie] - mariadb 1:11.8.9+ds-0+deb13u1
+CVE-2026-85745
+	[trixie] - mariadb 1:11.8.9+ds-0+deb13u1
 CVE-2026-9323
 	[trixie] - urwid 2.6.16-1+deb13u1
 CVE-2026-75895



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/fca162636454dc364d87d4c35333a7bb6519978a

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/fca162636454dc364d87d4c35333a7bb6519978a
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261017/6ccc6949/attachment.htm>


More information about the debian-security-tracker-commits mailing list