Skip to content

2015.01.3

Compare
Choose a tag to compare
@andrerom andrerom released this 19 May 15:57
· 457 commits to 2019.03 since this release
Fix EZP-24140: Potential vulnerability in eZ Publish password recovery

Use openssl_random_pseudo_bytes() if available, otherwise fall back to mt_rand(). Use microtime() for entropy.

(cherry picked from commit 5908d5ee65fec61ce0e321d586530461a210bf2a)