CVE-2010-1128

CVE-2010-1128 affects PHP before 5.2.13, where the Linear Congruential Generator provides less entropy than expected, easing context-dependent attackers’ guessing of values (e.g., session cookies generated via uniqid). The MiracleLinux advisory confirms this CVE is addressed in PHP 5.2.13 or newe...