[Maria-discuss] Possible CVE from upstream