OpenSSL Debian seeding problem – what a mess – installing the update itself is trivial, but the sysadmin time is in having to chase down and remove and regenerate weak keys generated by multiple packages, which in turn can have propagated to multiple machines, generated any time over the last year and a bit on a Debian or Ubuntu system. Ouch. Most helpful resource for doing that is the SSLKeys page on the Debian wiki.