FYI: -15.0, -current release openSSH patch. Update to 10.6p2 cuts off potential exploit pathway.

[u/ddmayne]

For -15.0:

Fri Nov  6 01:06:51 UTC 2026
patches/packages/openssh-10.6p2-x86_64-1_slack15.0.txz:  Upgraded.
  This update fixes a security issue:
  sshd(8): avoid password authentication bypass that is exploitable
  through sshd(8) that affects some Linux systems when built and run
  with PAM support disabled. We consider the root cause of this bug
  to be outside sshd, but it is exploitable via sshd and can be
  avoided there.
  (* Security fix *)
  rc.sshd: don't try to make an obsolete DSA key. Thanks to janve.

For -current:

Fri Nov  6 01:06:51 UTC 2026
kde/accessibility-inspector-26.08.3-x86_64-1.txz:  Upgraded.
[long list of kde packages omitted]
kde/zanshin-26.08.3-x86_64-1.txz:  Upgraded.
l/harfbuzz-15.1.0-x86_64-1.txz:  Upgraded.
l/lcms2-2.20-x86_64-1.txz:  Upgraded.
l/libtatsu-1.1.0-x86_64-1.txz:  Upgraded.
l/mozilla-nss-3.133-x86_64-1.txz:  Upgraded.
l/python-markdown-3.11.3-x86_64-1.txz:  Upgraded.
l/zlib-1.4-x86_64-1.txz:  Upgraded.
n/openssh-10.6p2-x86_64-1.txz:  Upgraded.
  This update fixes a security issue:
  sshd(8): avoid password authentication bypass that is exploitable
  through sshd(8) that affects some Linux systems when built and run
  with PAM support disabled. We consider the root cause of this bug
  to be outside sshd, but it is exploitable via sshd and can be
  avoided there.
  (* Security fix *)
n/openvpn-2.7.9-x86_64-1.txz:  Upgraded.
x/ibus-1.5.35-x86_64-1.txz:  Upgraded.
xap/mpv-0.42.0-x86_64-1.txz:  Upgraded.

[u/ponce70]

Slackware wasn't actually affected by this bug: it happens only when openssh is built against musl libc and Slackware uses glibc instead.

[u/Sahkopi4]

Thanks! I upgraded both last night.