Apple reintroduced a header/library mismatch in OpenSSL with their "Security Update 2003-03-03". I don't really think that this should be fixed in OpenSSH. This is clearly a case of the vendor being in the wrong. I filed an Apple bug report: #3192390.
Mass change of RESOLVED bugs to CLOSED