I confirm that the patch [1] to the upstream bug report [2] solves the issue for us. I proceeded as follows: * Download the OpenSSH original sources (.orig.tar.gz) and the debian scripts (.debian.tar.xz) from "Download Source Package" on the right hand side of the Debian package page [3] * `tar -xzf openssh_7.4p1.orig.tar.gz` * `cd openssh-7.4p1` * `tar -xJf ../openssh_7.4p1-10+deb9u3.debian.tar.xz` * Download the upstream patch [1] into debian/patches/ * Modify debian/patches/series, adding the downloaded patch to the end * Follow the package building guide [4] - Enter the command `dpkg-buildpackage -us -uc` - Follow the instructions to install missing dependencies * `cd ..` (parent directory of the original sources directory) * `dpkg -i openssh-client_7.4p1-10+deb9u3_amd64.deb openssh-server_7.4p1-10+deb9u3_amd64.deb openssh-sftp-server_7.4p1-10+deb9u3_amd64.deb` [1]: https://github.com/openssh/openssh-portable/commit/ ddd3d34e5c7979ca6f4a3a98a7d219a4ed3d98c2 [2]: https://bugzilla.mindrot.org/show_bug.cgi?id=2655 [3]: https://packages.debian.org/stretch/openssh-server [4]: https://www.debian.org/doc/manuals/maint-guide/build.en.html
Attachment:
signature.asc
Description: This is a digitally signed message part.