Back Linuxsecurity

Debian OpenJDK Information Disclosure Denial of Service Vuln DSA-6431

Linuxsecurity •LinuxSecurity Advisories • August 11, 2026

Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges ×

For the stable distribution (trixie), these problems have been fixed in version 25.0.4+7-1~deb13u1. We recommend that you upgrade your openjdk-25 packages. For the detailed security status of openjdk-25 please refer to its security tracker page at: Further information Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at:

Get the latest Linux and open source security news straight to your inbox.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Debian OpenJDK Vulnerabilities Prompt Urgent Security Updates Debian has issued security advisories for two critical vulnerabilities in OpenJDK affecting versions 21 and 25. The first advisory, DSA-6425, addresses a denial-of-service (DoS) risk in OpenJDK 21, which has been patched in version 21.0.12+8-1~deb13u1. The second advisory, DSA-6431, reveals an information disclosure vulnerability in OpenJDK 25, fixed in version 25.0.4+7-1~deb13u1. Both vulnerabilities could allow attackers to exploit systems running the affected versions, emphasizing the need for immediate updates. Users are strongly advised to upgrade their OpenJDK packages to mitigate potential risks. The advisories highlight the importance of auditing Linux privileges to prevent system-wide damage. 4 sources 61

Extracted Entities

Debian OpenJDK Information Disclosure Denial of Service Vuln DSA-6431

The full story

Extracted Entities

Attack Types (2)

Companies (1)

Platforms (2)