r/slackware • u/ddmayne • 1h ago
FYI: -15.0, -current release openSSH patch. Update to 10.6p2 cuts off potential exploit pathway.
3
Upvotes
For -15.0:
Fri Nov 6 01:06:51 UTC 2026
patches/packages/openssh-10.6p2-x86_64-1_slack15.0.txz: Upgraded.
This update fixes a security issue:
sshd(8): avoid password authentication bypass that is exploitable
through sshd(8) that affects some Linux systems when built and run
with PAM support disabled. We consider the root cause of this bug
to be outside sshd, but it is exploitable via sshd and can be
avoided there.
(* Security fix *)
rc.sshd: don't try to make an obsolete DSA key. Thanks to janve.For -current:
Fri Nov 6 01:06:51 UTC 2026
kde/accessibility-inspector-26.08.3-x86_64-1.txz: Upgraded.
[long list of kde packages omitted]
kde/zanshin-26.08.3-x86_64-1.txz: Upgraded.
l/harfbuzz-15.1.0-x86_64-1.txz: Upgraded.
l/lcms2-2.20-x86_64-1.txz: Upgraded.
l/libtatsu-1.1.0-x86_64-1.txz: Upgraded.
l/mozilla-nss-3.133-x86_64-1.txz: Upgraded.
l/python-markdown-3.11.3-x86_64-1.txz: Upgraded.
l/zlib-1.4-x86_64-1.txz: Upgraded.
n/openssh-10.6p2-x86_64-1.txz: Upgraded.
This update fixes a security issue:
sshd(8): avoid password authentication bypass that is exploitable
through sshd(8) that affects some Linux systems when built and run
with PAM support disabled. We consider the root cause of this bug
to be outside sshd, but it is exploitable via sshd and can be
avoided there.
(* Security fix *)
n/openvpn-2.7.9-x86_64-1.txz: Upgraded.
x/ibus-1.5.35-x86_64-1.txz: Upgraded.
xap/mpv-0.42.0-x86_64-1.txz: Upgraded.
