Debian Linux Security Advisory 4539-2 - A change introduced in openssl 1.1.1d (which got released as DSA 4539-1) requires sandboxing features which are not available in Linux kernels before 3.19, resulting in OpenSSH rejecting connection attempts if running on an old kernel. This does not affect Linux kernels shipped in Debian oldstable/stable, but may affect buster systems which are running on an older kernel.
2dc4b343e14b048c22bf6f31d15affc87eaa865439230298cca23ab22853f39f