Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 441
Alerts This Week
Warning Icon 1 441

Slackware: 2025-192-02 critical: httpd denial of service fix

slackware
Calendar Grey July 11, 2025
Dist Slackware Esm H88
The newest nginx deployments for Debian address critical flaws such as cross-site scripting and unauthorized access.
New httpd packages are available for Slackware 15.0 and -current to fix security issues

Summary

Here are the details from the Slackware 15.0 ChangeLog: patches/packages/httpd-2.4.64-i586-1_slack15.0.txz: Upgraded. This release contains security fixes and improvements. The update resolves a range of issues, including HTTP response splitting, server-side request forgery (SSRF), and denial of service vulnerabilities. For more information, see: https://www.cve.org/CVERecord?id=CVE-2025-53020 https://www.cve.org/CVERecord?id=CVE-2025-49812 https://www.cve.org/CVERecord?id=CVE-2025-49630 https://www.cve.org/CVERecord?id=CVE-2025-23048 https://www.cve.org/CVERecord?id=CVE-2024-47252 https://www.cve.org/CVERecord?id=CVE-2024-43394 https://www.cve.org/CVERecord?id=CVE-2024-43204 https://www.cve.org/CVERecord?id=CVE-2024-42516 (* Security fix *)

Topics%20covered

Topics Covered

security advisory denial of service critical httpd slackware server-side request forgery

Where Find New Packages

Thanks to the friendly folks at the OSU Open Source Lab (http://osuosl.org) for donating FTP and rsync hosting to the Slackware project! :-)
Also see the "Get Slack" section on http://www.slackware.com/ for additional mirror sites near you.
Updated package for Slackware 15.0: ftp://ftp.slackware.com/pub/slackware/slackware-15.0/patches/packages/httpd-2.4.64-i586-1_slack15.0.txz
Updated package for Slackware x86_64 15.0: ftp://ftp.slackware.com/pub/slackware/slackware64-15.0/patches/packages/httpd-2.4.64-x86_64-1_slack15.0.txz
Updated package for Slackware -current: ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/n/httpd-2.4.64-i686-1.txz
Updated package for Slackware x86_64 -current: ftp://ftp.slackware.com/pub/slackware/slackware64-current/slackware64/n/httpd-2.4.64-x86_64-1.txz

MD5 Signatures

Slackware 15.0 package: 76d4a30d00c4ed2588d0b7e396e5b6bf httpd-2.4.64-i586-1_slack15.0.txz
Slackware x86_64 15.0 package: 825d93600c8eb8d7b5168450c5a74c62 httpd-2.4.64-x86_64-1_slack15.0.txz
Slackware -current package: a365617e717c4c348e9ee70cac225a69 n/httpd-2.4.64-i686-1.txz
Slackware x86_64 -current package: a4bbc0fee2370b16c3e46fe4fb2f9b20 n/httpd-2.4.64-x86_64-1.txz

Severity
critical
Lowest
Low
Medium
High
Critical

Topics%20covered

Topics Covered

security advisory denial of service critical httpd slackware server-side request forgery

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Installation Instructions

Installation instructions: Upgrade the package as root: # upgradepkg httpd-2.4.64-i586-1_slack15.0.txz Then, restart Apache httpd: # /etc/rc.d/rc.httpd stop # /etc/rc.d/rc.httpd start