Back Linuxsecurity

Fedora 43 Traffic Server Medium DoS Memory Safety Vuln 2026

Linuxsecurity •LinuxSecurity Advisories • August 21, 2026

Find practical guidance for preventing, investigating, and responding to Linux security problems. Review Linux Privileges ×

Traffic Server is a high-performance building block for cloud services.

It's more than just a caching proxy server; it also has support for

plugins to build large scale web applications. Key features:

Caching - Improve your response time, while reducing server load and

bandwidth needs by caching and reusing frequently-requested web pages,

images, and web service calls.

Proxying - Easily add keep-alive, filter or anonymize content

requests, or add load balancing by adding a proxy layer.

Fast - Scales well on modern SMP hardware, handling 10s of thousands

of requests per second.

Extensible - APIs to write your own plug-ins to do anything from

modifying HTTP headers to handling ESI requests to writing your own

Proven - Handling over 400TB a day at Yahoo! both as forward and

reverse proxies, Apache Traffic Server is battle hardened.

Update to upstream 10.2.0.

* Tue Aug 11 2026 Jered Floyd - 10.2.0-1 - Update to upstream 10.2.0

[ 1 ] Bug #2454298 - F45FailsToInstall: trafficserver [ 2 ] Bug #2504972 - trafficserver: FTBFS in Fedora rawhide/f45 [ 3 ] Bug #2508547 - CVE-2026-58185 trafficserver: use-after-free in the intercept plugin [fedora-all] [ 4 ] Bug #2508549 - CVE-2026-58183 trafficserver: prefetch plugin can crash on attacker-influenced input [fedora-all] [ 5 ] Bug #2508551 - CVE-2026-58179 trafficserver: regex_remap plugin overflows the stack from attacker input [fedora-all] [ 6 ] Bug #2508552 - CVE-2026-58157 trafficserver: improper server-session reuse can expose data across client connections [fedora-all] [ 7 ] Bug #2...

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-de4e0fac25' at the command line. For more information, refer to the dnf documentation available at

Get the latest Linux and open source security news straight to your inbox.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Security Updates for Fedora Traffic Server Address Multiple Vulnerabilities On August 11, 2026, Fedora released critical security updates for Traffic Server 10.2.0 addressing several vulnerabilities identified as CVE-2026-58157, CVE-2026-58179, CVE-2026-58183, and CVE-2026-58185. These vulnerabilities include a use-after-free issue in the intercept plugin, a crash vulnerability in the prefetch plugin, a stack overflow in the regex_remap plugin, and improper server-session reuse that could expose data across client connections. All of these vulnerabilities could potentially be exploited by attackers to disrupt services or access sensitive data. The updates are applicable to users of Fedora 43 and are crucial for maintaining the security of systems running Traffic Server. Administrators are advised to apply the updates using the 'dnf' update program as soon as possible. The vulnerabilities were published on July 29, 2026, and are now being actively addressed. 2 sources 72

Extracted Entities

Fedora 43 Traffic Server Medium DoS Memory Safety Vuln 2026

The full story

Extracted Entities

Attack Types (1)

CVEs (4)

CWE Weaknesses (3)

Platforms (1)