Track MariaDB as well for CVE-2020-2574

All MariaDB updates are actually very intransparent. Upstream apparently
consider CVE-2020-2574 as well various other MariaDB versions
(apparently but any other CVE from the Oracle CPU from January?) and
fixed in 5.5.67, 10.1.44, 10.2.31, 10.3.22 and 10.4.12.

Add tracking for src:mariadb-10.3 and src:mariadb-10.1 repsectively.