Critical DoS Vulnerability in Apache Traffic Server Fixed in Fedora 43 and 44

Fedora has released updates to address a critical denial-of-service (DoS) vulnerability, CVE-2026-59173, affecting Apache Traffic Server. The flaw, which allows for DoS attacks via stalled flow-control in HTTP/2, was published on July 18, 2026. Affected systems include Fedora 43 and 44, with updates available for both versions. The vulnerability could lead to significant service disruptions for users relying on Traffic Server for cloud services. Administrators are urged to audit Linux privileges to limit potential compromises. The updates also include various bug fixes and enhancements to improve performance and stability. Users can apply the updates using the 'dnf' package manager.

Key Points: • CVE-2026-59173 is a critical DoS vulnerability in Apache Traffic Server affecting Fedora 43 and 44. • The vulnerability allows for DoS attacks via stalled flow-control in HTTP/2, impacting service availability. • Administrators are advised to update their systems promptly to mitigate risks associated with this flaw.