openssh: Patch CVE-2016-8858

[aneeshusa]

Motivation for this change

http://seclists.org/oss-sec/2016/q4/185

Building + testing this now; should finish shortly;

Things done

• Tested using sandboxing
  (nix.useSandbox on NixOS,
  or option build-use-sandbox in nix.conf
  on non-NixOS)
• Built on platform(s)
  • NixOS
  • OS X
  • Linux
• Tested compilation of all pkgs that depend on this change using nix-shell -p nox --run "nox-review wip"
• Tested execution of all binary files (usually in ./result/bin/)
• Fits CONTRIBUTING.md.

---

Also add myself as a maintainer.

[aneeshusa]

Built and tested as working (started ssh sessions) with all currently working combinations of linkOpenssl, withKerberos, and withGssapiPatches. (hpnSupport is broken.) Exemptions:

• withGssapiPatches requires withKerberos, so didn't test GSSAPI w/o Kerberos
• linkOpenssl and withGssapiPatches don't work together (before or after this patch)

[NeQuissimus]

@grahamc