Patch available. http://www.sxw.org.uk/computing/patches/openssh.html See bug 115553 wich is closed but not fixed.
Thanks for the patch release notification, assigning to maintainers.
*** Bug 280022 has been marked as a duplicate of this bug. ***
fun, the updated patch breaks non gssapi builds, so that needed fixing first added to 5.2_p1-r3