Back Linuxsecurity

Fedora 44 Putty Important Fix for Double Free Vulnerability 2026

Linuxsecurity •LinuxSecurity Advisories • June 10, 2026

* Mon May 25 2026 Jaroslav Škarvada - 0.84-1 - New version Resolves: rhbz#2480724

[ 1 ] Bug #2480724 - putty-0.84 is available [ 2 ] Bug #2481658 - CVE-2026-48850 putty: double free vulnerability in RSA KEX code [fedora-all] [ 3 ] Bug #2481659 - CVE-2026-48851 putty: TELNET session data is marked with trust sigils after authenticating to a proxy [fedora-all] [ 4 ] Bug #2481662 - CVE-2026-48852 putty: assertion failure in ECDSA signature verification [fedora-all]

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-1ab61e6e20' at the command line. For more information, refer to the dnf documentation available at

Get the latest Linux and open source security news straight to your inbox.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Fedora Releases Important Security Fixes for Putty Vulnerabilities On May 25, 2026, Fedora released updates for Putty addressing multiple security vulnerabilities, including CVE-2026-48850, a double free vulnerability in RSA KEX code, CVE-2026-48851, which affects TELNET session data, and CVE-2026-48852, an assertion failure in ECDSA signature verification. These vulnerabilities could potentially allow attackers to exploit the affected systems. The updates are available for Fedora 43 and 44, and users are advised to upgrade using the 'dnf' update program. The vulnerabilities were reported in Bugzilla under various identifiers, confirming their existence and the need for immediate action. The updates are critical for maintaining the security of systems using the Putty application. Users are encouraged to apply the patches promptly to mitigate risks. 2 sources 61

Extracted Entities

Fedora 44 Putty Important Fix for Double Free Vulnerability 2026

The full story

Extracted Entities

CVEs (3)

CWE Weaknesses (1)

Vulnerabilities (1)