Oracle has released its scheduled product updates (Critical Patch Update) aimed at addressing critical issues and vulnerabilities. The June update has resolved 245 vulnerabilities.
Some issues:
- 1 vulnerability in server MySQL, which can be exploited remotely without authentication. The issue is related to connection handling and has a severity level of 7.5 out of 10. The vulnerability has been addressed in MySQL Community Server releases 9.7.1 and 8.4.10.
- 10 vulnerabilities in VirtualBox, three of which are rated as critical (7.5 out of 10).
Details regarding the nature of the vulnerabilities are not disclosed; it is only mentioned that they are caused by issues in the implementation of VMM, common directories, and the VMSVGA device. The problems have been fixed in VirtualBox release 7.2.10. - Three vulnerabilities in Solaris. One of the issues (CVE-2026-46978) has been assigned a critical severity level (10 out of 10). This vulnerability exists in the Remote Administration Daemon and can be used to gain remote administrator rights by sending a specially crafted request over HTTPS. Less severe vulnerabilities affect the file system (severity 7.1 out of 10) and standard libraries (4.4 out of 10). The vulnerabilities have been addressed in the Solaris 11.4 SRU93 update.
- No issues have been reported in Java SE, and corrective releases for Java SE have not been issued.
Source: opennet.ru
