[Git][security-tracker-team/security-tracker][master] Add new mariadb-connector-java issues

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
94917a7f by Salvatore Bonaccorso at 2026-10-30T11:11:57+01:00
Add new mariadb-connector-java issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -91,17 +91,35 @@ CVE-2026-119283 (joserfc is a Python library that provides an implementation of
 CVE-2026-119282 (Nx is a monorepo solution for TypeScript and polyglot codebases. From  ...)
 	TODO: check
 CVE-2026-119281 (MariaDB Connector/J is used to connect applications developed in Java  ...)
-	TODO: check
+	- mariadb-connector-java <unfixed>
+	NOTE: https://github.com/mariadb-corporation/mariadb-connector-j/security/advisories/GHSA-grfq-r75j-rw9x
+	NOTE: https://jira.mariadb.org/browse/CONJ-1379
+	NOTE: Fixed by: https://github.com/mariadb-corporation/mariadb-connector-j/commit/af5e565eb171cfc66ea8e948ddc616abed0c4623 (3.5.11)
 CVE-2026-119280 (MariaDB Connector/J is used to connect applications developed in Java  ...)
-	TODO: check
+	- mariadb-connector-java <unfixed>
+	NOTE: https://github.com/mariadb-corporation/mariadb-connector-j/security/advisories/GHSA-4jq2-8v3c-97w8
+	NOTE: https://jira.mariadb.org/browse/CONJ-1357
+	NOTE: Fixed by: https://github.com/mariadb-corporation/mariadb-connector-j/commit/280efcfb4390055858fa2dd12b722d85a6a13ab8 (3.5.11)
 CVE-2026-119279 (MariaDB Connector/J is used to connect applications developed in Java  ...)
-	TODO: check
+	- mariadb-connector-java 3.5.10-1
+	NOTE: https://github.com/mariadb-corporation/mariadb-connector-j/security/advisories/GHSA-797x-p4mc-jwpm
+	NOTE: https://jira.mariadb.org/browse/CONJ-1338
+	NOTE: Fixed by: https://github.com/mariadb-corporation/mariadb-connector-j/commit/30d4a883377a9b7762e02ee2c60d54567032ab99 (3.5.10)
 CVE-2026-119278 (MariaDB Connector/J is used to connect applications developed in Java  ...)
-	TODO: check
+	- mariadb-connector-java 3.5.10-1
+	NOTE: https://github.com/mariadb-corporation/mariadb-connector-j/security/advisories/GHSA-r9vh-xh4r-j6gr
+	NOTE: https://jira.mariadb.org/browse/CONJ-1380
+	NOTE: Track first version in the 3.5.y series as the fixed version
+	TODO: check, details + correctness
 CVE-2026-119277 (MariaDB Connector/J is used to connect applications developed in Java  ...)
-	TODO: check
+	- mariadb-connector-java <unfixed>
+	NOTE: https://github.com/mariadb-corporation/mariadb-connector-j/security/advisories/GHSA-wfxr-v78w-p49r
+	NOTE: https://jira.mariadb.org/browse/CONJ-1381
+	NOTE: Fixed by: https://github.com/mariadb-corporation/mariadb-connector-j/commit/52538206298db39062ad67939f1446b767cacde4 (3.5.11)
 CVE-2026-119276 (MariaDB Connector/J is used to connect applications developed in Java  ...)
-	TODO: check
+	- mariadb-connector-java <unfixed>
+	NOTE: https://github.com/mariadb-corporation/mariadb-connector-j/security/advisories/GHSA-h599-m3w5-9m7x
+	NOTE: Fixed by: https://github.com/mariadb-corporation/mariadb-connector-j/commit/b9e1ee8d9b4d820d70719504cdfd5c97f1aede5f (3.5.11)
 CVE-2026-119272 (Out of bounds read in FileSystem in Google Chrome prior to 156.0.8078. ...)
 	- chromium <unfixed>
 CVE-2026-119271 (Use after free in Skia in Google Chrome prior to 156.0.8078.79 allowed ...)
@@ -129,7 +147,10 @@ CVE-2026-119261 (Improper input validation in Skia in Google Chrome prior to 156
 CVE-2026-119260 (Use after free in Frames in Google Chrome prior to 156.0.8078.79 allow ...)
 	- chromium <unfixed>
 CVE-2026-119210 (MariaDB Connector/J is used to connect applications developed in Java  ...)
-	TODO: check
+	- mariadb-connector-java <unfixed>
+	NOTE: https://github.com/mariadb-corporation/mariadb-connector-j/security/advisories/GHSA-fhx5-2xqw-2cgm
+	NOTE: https://jira.mariadb.org/browse/CONJ-1387
+	NOTE: Fixed by: https://github.com/mariadb-corporation/mariadb-connector-j/commit/a4891f877f1c885a573194771c1ed0aacec0ce1d (3.5.11)
 CVE-2026-119209 (pypdf is a free and open-source pure-python PDF library. Prior to 6.21 ...)
 	- pypdf <unfixed>
 	- pypdf2 <removed>



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/94917a7f1601d00266196d5fbac78d723b3758e7

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/94917a7f1601d00266196d5fbac78d723b3758e7
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261030/3deb18d8/attachment.htm>