A php5 security update has been released for Debian GNU/Linux 7 Extended LTS to address two issues.

ELA-216-1 php5 security update

Package php5
Related CVE CVE-2020-7059 CVE-2020-7060

Two issues have been found in php5, a server-side, HTML-embedded scripting language. Both issues are related to crafted data that could lead to reading after an allocated buffer and result in information disclosure or crash.

We recommend that you upgrade your php5 packages.

Further information about Extended LTS security advisories can be found at: https://deb.freexian.com/extended-lts/