Slackware 15.0 Security Updates Address Critical Vulnerabilities

Slackware 15.0 released urgent updates for two significant vulnerabilities on June 3, 2026. The first addresses a stack-based buffer overflow in the net-tools package (CVE-2026-154) affecting network interface handling. The second update resolves a denial-of-service vulnerability (CVE-2026-49975) in the httpd package, specifically targeting HTTP/2, which could lead to resource exhaustion. Both vulnerabilities necessitate immediate attention from system administrators to mitigate potential exploitation. Users are advised to upgrade their packages promptly to ensure system security. The updates are available for both x86 and x86_64 architectures.

Key Points: • Urgent updates released for Slackware 15.0 addressing critical vulnerabilities. • CVE-2026-154 involves a stack-based buffer overflow in net-tools. • CVE-2026-49975 relates to a denial-of-service vulnerability in httpd affecting HTTP/2.