Ubuntu Security Notice USN-113-1 – Javier Fernandez-Sanguino Pena discovered that this library used the file /tmp/entropy as a fallback entropy source if a proper source was not set in the environment variable EGD_PATH. This can potentially lead to weakened cryptographic operations if an attacker provides a /tmp/entropy file with known content.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/38407/USN-113-1.txt
Source: https://packetstormsecurity.com/files/38407/Ubuntu-Security-Notice-113-1.html