Details are available at help net security.

It looks like you’ll be okay if you’re already running the 2.6.22.7 kernel. Mandriva users can run MandrivaUpdate or urpmi to automatically update.

Vnunet is reporting that an antique update to the randomness engine has left Ubuntu and Debian users vulnerable for more than two years. The bug allows an attacker to predict the generated cryptographic keys.

Fortunately, a patch is available here: http://secunia.com/advisories/30231/