Updated PHP5 packages has been released for both Debian GNU/Linux 7 Extended LTS and 8 LTS:
DLA 1813-1: php5 security updatePHP5 Security Updates for Debian 7/8
ELA-128-1 php5 security update