Josh's Blog

A flaw was discovered in a third-party vendor patch to the OpenSSL library which affected random number generator seeding (CVE-2008-0166). This patch has never been used by Red Hat, and this issue does not affect any Fedora, Red Hat, or upstream supplied OpenSSL packages.

Any cryptographic keys or encrypted data generated on a system using a distribution which was affected may be predictable and should be replaced. Affected vendors will be publishing advisories and advice on how to do this.