Apply security update to paragonie/random_compat

See: paragonie/random_compat#96

This vulnerability is actually two years old, but has recently been
added to the sensio security checker database. EngineBlock was not
affected because the insecure openssl function is only used when all
other providers (like mcrypt) are not installed.

Backport from d960d82.