# chmod u-s /usr/X11R6/bin/xlockA patch will be forthcoming, and the problem will not affect the (upcoming) OpenBSD 2.7 release.
To check what package you are using, use
# pkg_info sslUSA26The patched library says:
Non-commercial USA users who installed the ssl package before December 3
should upgrade their sslUSA26 package using:
# pkg_delete sslUSA26 # pkg_add -v sslUSA26.tar.gzUsing the new sslUSA26.tar.gz files which have been placed on the FTP mirrors.