Debian: DSA-046-1 Moderate: OpenSSH Authentication Bypass Advisory

Przemyslaw Frasunek <venglin@FREEBSD.LUBLIN.PL> reported that ntp
daemons such as that released with Debian GNU/Linux are vulnerable to a
buffer overflow that can lead to a remote root exploit. A previous
advisory (DSA-045-1) partially addressed this issue, but introduced a
potential denial of service attack. This has been corrected for Debian
2.2 (potato) in ntp version 4.0.99g-2potato2.

We recommend you upgrade your ntp package immediately.

wget url
will fetch the file for you
dpkg -i file.deb
will install the referenced file.

You may use an automated update by adding the resources from the
footer to the proper configuration.


Debian GNU/Linux 2.2 alias potato
------------------------------------

Potato was released for the alpha, arm, i386, m68k, powerpc and sparc
architectures.

Source archives:

MD5 checksum: 33eced8dfeecefed9ecd7a5425dce07f

MD5 checksum: b704b4528c96b6b22ff2809cd551c221

MD5 checksum: 6f3132fb4f6a3ee411554d09270f562a

Architecture-independent files:

...