The php package has been updated to version 5.6.14, which fixes two security issues in phar and several other bugs. See the upstream ChangeLog for more details.
{ "section": "core" }
"https://advisories.mageia.org/MGASA-2015-0395.json"