OpenSSH uses Bugzilla:

* https://www.openssh.org/report.html