Add CVE-2019-2974 for MariaDB as well

MariaDB is similarly to Oracle slightly intransparent in their updates.
Trying to catch up with the Oracle Critical Patch Updates and
correlations to MariaDB releases showed that CVE-2019-2974 newly
appeared in the respective release notes.

There might be more such CVEs.

Hopefully the tracking is correct as well.