Adrian:

So the bottom line is that OpenSSH has vulnerabilities too.

Oh, I'm quite sure it does, but most of them are limited impact and they are generally different to the ones afflicting the non-free ssh server. -- MJR