Following up on this: the upstream patch available at https://github.com/openssh/openssh-portable/commit/d2d6bf864e52af8491a60dd507f85b74361f5da3.patch still applies to the current Debian package (after removing the two hunks changing CVS $tokens$ removed first). Please consider backporting this change to the Debian OpenSSH package, as it fixes issues with other packages such as git-hub. Thanks, Josh Triplett