Comment by direwolf20

The Debian maintained patched by "fixing" two very similar looking "bugs" on different but identical lines of code:

One that mixed uninitialised data to the entropy pool.

And another one that mixed initialised data to the entropy pool with the exact same function call. Which was, in fact, almost all of the entropy.