A new Debian Linux update has been published: ELA-293-1 php5 security update
A php5 security update has been released for Debian GNU/Linux 8 Extended LTS to address an issue where an attacker can forge a cookie.Read more @ Linux Compatible