AIUI this is addressed in the current OpenSSL tree (but no released version) by adding a high resolution timestamp into the pool.

What's the status of your urandom patch @reaperhulk? I quite like the idea of it, presumably we'd need to patch it to also call CryptGenRandom on Windows though?