So they have a patch to fix it, but can't apply it because that would void the FIPS certification status, and they won't apply it because they are disabling the

So they have a patch to fix it, but can't apply it because that would void the FIPS certification status, and they won't apply it because they are disabling the use of Dual_EC_DRBG anyway.