Upstream fixed this with the patch at https://bugzilla.mindrot.org/attachment.cgi?id=2811 . I've confirmed that the patch applies to the current package in Debian. Please consider applying it as a backport until the next upstream release of OpenSSH. Thanks, Josh Triplett