Debian OpenSSL Predictable PRNG ToysThe Bug On May 13th, 2008 the Debian project announced that Luciano Bello found an interesting vulnerability in the OpenSSL package they were distributing. The bug in question was caused by the removal of the following line of code from md_rand.c MD_Update(&m,buf,j); [ .. ] MD_Update(&m,buf,j); /* purify complains */ These lines were removed because they caused the Valgrind and Purify tools to pro
