Has anybody upgraded the version of openSSH (v4.7p1, openSSL v0.9.7d) that ships as part of 5733SC1 on v5r4?

For a variety of reasons, we can't upgrade our O/S on our iSeries, and we have a PCI audit that is complaining of various "vulnerabilities" in our existing openSSH/openSSL...