Back Linuxsecurity

Fedora 44 libwebsockets High Risk DoS Patch 2026

Linuxsecurity •LinuxSecurity Advisories • July 27, 2026

Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges ×

This is the libwebsockets C library for lightweight websocket clients and

* Sat Jul 18 2026 Peter Robinson - 4.5.8-1 - Update to 4.5.8 * Thu Jul 16 2026 Fedora Release Engineering - 4.5.7-4 - Rebuilt for * Fri Jun 12 2026 Yaakov Selkowitz - 4.5.7-3 - Rebuilt for openssl 4.0 * Thu Apr 30 2026 Dmitry Belyavskiy - 4.5.7-2 - Migrated to OpenSSL 4.0: use ASN1_STRING accessors instead of direct struct access * Wed Mar 18 2026 Peter Robinson - 4.5.7-1 - Update to 4.5.7

[ 1 ] Bug #2452084 - libwebsockets-4.5.8 is available [ 2 ] Bug #2487519 - CVE-2026-10650 libwebsockets: libwebsockets: Denial of Service via SSH Protocol Handler resource consumption [fedora-all]

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-9921e0e415' at the command line. For more information, refer to the dnf documentation available at

Get the latest Linux and open source security news straight to your inbox.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

High Risk Denial of Service Vulnerability in Fedora 44 libwebsockets A critical Denial of Service (DoS) vulnerability has been identified in the libwebsockets library used in Fedora 44. The vulnerability, tracked as CVE-2026-10650, allows attackers to exploit the SSH Protocol Handler, leading to resource consumption issues. This could potentially disrupt services for users of Fedora 44 and earlier versions. The vulnerability was published on June 2, 2026, and affects systems utilizing libwebsockets version 4.5.7 and earlier. Users are advised to upgrade to version 4.5.8 to mitigate the risk. The patch is available through the 'dnf' update program. The issue has been classified as high risk due to its potential impact on system availability. Security professionals are urged to audit Linux privileges to limit possible exploitation. The current status indicates that the patch has been released and is available for installation. 2 sources 69

Extracted Entities

Fedora 44 libwebsockets High Risk DoS Patch 2026

The full story

Extracted Entities

Attack Types (1)

CVEs (1)

CWE Weaknesses (1)

Platforms (1)