Mailing the story:
Debian alert: ssh channel bug
Joost Pol <joost@pine.nl> reports that OpenSSH versions 2.0 through 3.0.2
have an off-by-one bug in the channel allocation code. This vulnerability
can be exploited by authenticated users to gain root privilege or by a
malicious server exploiting a client with this bug.