Alerts This Week
Warning Icon 1 631
Alerts This Week
Warning Icon 1 631

Fedora 42 trafficserver Key Request Smuggling Crash Resolution Update

fedora
Calendar Grey April 12, 2026
Dist Fedora Esm H88
Critical updates for Apache Traffic Server resolve request smuggling and crash issues affecting Fedora 42.
Resolves: CVE-2025-58136 - A simple legitimate POST request causes a crash CVE-2025-65114 - Malformed chunked message body allows request smuggling Changes with Apache Traffic Serv...

Summary

Traffic Server is a high-performance building block for cloud services.

It's more than just a caching proxy server; it also has support for

plugins to build large scale web applications. Key features:

Caching - Improve your response time, while reducing server load and

bandwidth needs by caching and reusing frequently-requested web pages,

images, and web service calls.

Proxying - Easily add keep-alive, filter or anonymize content

requests, or add load balancing by adding a proxy layer.

Fast - Scales well on modern SMP hardware, handling 10s of thousands

of requests per second.

Extensible - APIs to write your own plug-ins to do anything from

modifying HTTP headers to handling ESI requests to writing your own

cache algorithm.

Proven - Handling over 400TB a day at Yahoo! both as forward and

reverse proxies, Apache Traffic Server is battle hardened.

Update Information:

Resolves: CVE-2025-58136 - A simple legitimate POST request causes a crash CVE-2025-65114 - Malformed chunked message body allows request smuggling Changes with Apache Traffic Server 10.1.2 #12864 - Fix ppa log field #13037 - Fix prev_is_cr flag handling in chunked encoding parser #13040 - HttpSM - make sure we have a valid buffer to write on.

Change Log

* Thu Apr 2 2026 Jered Floyd - 10.1.2-1 - Update to upstream 10.1.2 * Tue Feb 10 2026 Jered Floyd - 10.1.1-2 - Ignore warnings (temporarily) for Fedora rawhide/GCC 16 in libswoc

References


[ 1 ] Bug #2453244 - trafficserver-10.1.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=2453244

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-a157bd84c4' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
important
Lowest
Low
Medium
High
Critical

Name: trafficserver
Product: Fedora 42
Version: 10.1.2
Release: 1.fc42
Summary: Fast, scalable and extensible HTTP/1.1 and HTTP/2 caching proxy server

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here