A php5 security update has been released for Debian GNU/Linux 7 Extended LTS. Several security bugs have been identified and fixed in php5, a server-side, HTML-embedded scripting language. The affected components include the exif module and handling of filenames with \0 embedded.