Comment 7 for bug 286337

VTKnightMare: Your so called auditors are idiots. Ubuntu's openssh packages were patched for this issue over a year ago. http://www.ubuntu.com/usn/usn-597-1

Playing version string games is not a reason for a backport. The reasons for not backporting stand.