Comment 17 for bug 162253

Ubuntu is a packager, not a developer. The right way to get this to happen is for someone (who would have to be more motivated than I am) to talk to the Debian SSH maintainers, or even the openssh developers themselves. Options include forking (bad), making a completely new package out of the patched ssh and getting that into debian in parallel with the regular ssh, making such a package and serving it elsewhere, or convincing debian to accept the patch. I don't think this is the venue for further discussion, as it's clear ubuntu will not do anything directly.

--jh--