Back Linuxsecurity

Fedora 43 Trafficserver Critical DoS Issue Fix 2026

Linuxsecurity •LinuxSecurity Advisories • July 27, 2026

Share: View original

Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges ×

Traffic Server is a high-performance building block for cloud services.

It's more than just a caching proxy server; it also has support for

plugins to build large scale web applications. Key features:

Caching - Improve your response time, while reducing server load and

bandwidth needs by caching and reusing frequently-requested web pages,

images, and web service calls.

Proxying - Easily add keep-alive, filter or anonymize content

requests, or add load balancing by adding a proxy layer.

Fast - Scales well on modern SMP hardware, handling 10s of thousands

of requests per second.

Extensible - APIs to write your own plug-ins to do anything from

modifying HTTP headers to handling ESI requests to writing your own

Proven - Handling over 400TB a day at Yahoo! both as forward and

reverse proxies, Apache Traffic Server is battle hardened.

Resolves CVE-2026-59173 - DoS vulnerability in HTTP/2 via stalled flow-control Additional Changes with Apache Traffic Server 9.2.14 #12910 - Fix connection-level window mismatch causing 408/504 timeouts #13266 - Add Claude Code project guide for the 9.2.x branch #13267 - [9.2.x] Backport format scripts fixes #13377 - 9.2.x: http2: Track scheduled events Additional Changes with Apache Traffic Server 10.1.3 #12192 - Return a 400 on chunk parse errors #12733 - Fix retry logic for TSHttpTxnServerAddrSet (issue #12611) #12854 - Fix LoadedPlugins::remove crash during static destruction #12855 - Fix header_rewrite run-plugin relative path resolution #12857 - Fix autest compatibility with Fedora 43 / Python 3.14 #12943 - Address incompatibility with BoringSSL #12959 - Fix crash in HttpSM::tunnel_handler on unhandled VC events #12972 - Fix cache retry assert on ServerAddrSet #12990 - Update to Proxy Verifier v3.0.0 #13008 - cmake: limit GENERAL_NAM...

* Wed Jul 15 2026 Jered Floyd - 10.1.3-1 - Update to upstream 10.1.3 * Fri Jun 12 2026 Yaakov Selkowitz - 10.1.2-2 - Rebuilt for openssl 4.0

[ 1 ] Bug #2501029 - trafficserver-10.1.3 is available

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-ddaabe38ab' at the command line. For more information, refer to the dnf documentation available at

Get the latest Linux and open source security news straight to your inbox.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical DoS Vulnerability in Apache Traffic Server Fixed in Fedora 43 and 44 Fedora has released updates to address a critical denial-of-service (DoS) vulnerability, CVE-2026-59173, affecting Apache Traffic Server. The flaw, which allows for DoS attacks via stalled flow-control in HTTP/2, was published on July 18, 2026. Affected systems include Fedora 43 and 44, with updates available for both versions. The vulnerability could lead to significant service disruptions for users relying on Traffic Server for cloud services. Administrators are urged to audit Linux privileges to limit potential compromises. The updates also include various bug fixes and enhancements to improve performance and stability. Users can apply the updates using the 'dnf' package manager. 4 sources 71

Extracted Entities

Fedora 43 Trafficserver Critical DoS Issue Fix 2026

The full story

Extracted Entities

Attack Types (1)

Companies (1)

CVEs (1)

Platforms (2)