Re: Random number generation security problem
| From: | Christian Weiske | Date: | Sun, 21 Sep 2008 16:14:49 +0000 |
| Subject: | Re: Random number generation security problem | ||
| References: | 1 2 | Groups: | php.pear.dev |
| Request: | Send a blank email to pear-dev+get-50792@lists.php.net to get a copy of this message | ||
Hi again,
> > See
> >
> > http://www.suspekt.org/2008/08/17/mt_srand-and-not-so-random-numbers/
> I grepped through pear cvs and the following files seed the random
> number generator:
> Since php 4.2.0 we don't need to seed anymore since that's
> automatically done. Removing mt_srand() and srand() calls should
> suffice in most/all cases.
>
> Now we need bug reports for those packages.
I created bug reports for all concerned packages:
http://pear.php.net/bugs/bug.php?id=14671
http://pear.php.net/bugs/bug.php?id=14672
http://pear.php.net/bugs/bug.php?id=14673
http://pear.php.net/bugs/bug.php?id=14674
http://pear.php.net/bugs/bug.php?id=14675
http://pear.php.net/bugs/bug.php?id=14676
http://pear.php.net/bugs/bug.php?id=14677
http://pear.php.net/bugs/bug.php?id=14678
http://pear.php.net/bugs/bug.php?id=14679
http://pear.php.net/bugs/bug.php?id=14680
http://pear.php.net/bugs/bug.php?id=14681
--
Regards/Mit freundlichen Grüßen
Christian Weiske
-= Geeking around in the name of science since 1982 =-
Attachment: [application/pgp-signature] signature.asc
Attachment: [application/pgp-signature] signature.asc