Quote from the release announcement: The PHP development team announces the immediate availability of PHP 5.6.20. Several security related issues were fixed in this release. All PHP 5.6 users are encouraged to upgrade to this version.
A commit references this bug: Author: junovitch Date: Sun Apr 3 14:19:01 UTC 2016 New revision: 412474 URL: https://svnweb.freebsd.org/changeset/ports/412474 Log: Document multiple vulnerabilities from the 31 Mar 16 PHP releases PR: 208465 Reported by Christian Schwarz <me@cschwarz.com> Security: https://vuxml.FreeBSD.org/freebsd/482d40cb-f9a3-11e5-92ce-002590263bf5.html Changes: head/security/vuxml/vuln.xml
A commit references this bug: Author: junovitch Date: Sun Apr 3 14:20:06 UTC 2016 New revision: 412476 URL: https://svnweb.freebsd.org/changeset/ports/412476 Log: lang/php56: update 5.6.19 -> 5.6.20 converters/php56-mbstring: chase update; drop PORTREVISION Changelog: http://www.php.net/ChangeLog-5.php#5.6.20 PR: 208465 Reported by: Christian Schwarz <me@cschwarz.com> Approved by: ports-secteam (with hat) Security: https://vuxml.FreeBSD.org/freebsd/482d40cb-f9a3-11e5-92ce-002590263bf5.html MFH: 2016Q2 Changes: head/converters/php56-mbstring/Makefile head/lang/php56/Makefile head/lang/php56/distinfo
A commit references this bug: Author: junovitch Date: Sun Apr 3 14:22:35 UTC 2016 New revision: 412479 URL: https://svnweb.freebsd.org/changeset/ports/412479 Log: MFH: r412476 lang/php56: update 5.6.19 -> 5.6.20 converters/php56-mbstring: chase update; drop PORTREVISION Changelog: http://www.php.net/ChangeLog-5.php#5.6.20 PR: 208465 Reported by: Christian Schwarz <me@cschwarz.com> Approved by: ports-secteam (with hat) Security: https://vuxml.FreeBSD.org/freebsd/482d40cb-f9a3-11e5-92ce-002590263bf5.html Changes: _U branches/2016Q2/ branches/2016Q2/converters/php56-mbstring/Makefile branches/2016Q2/lang/php56/Makefile branches/2016Q2/lang/php56/distinfo
Christian, Thank you for the report. All the PHP ports have been updated to their latest versions (5.5.34, 5.6.20, and 7.0.5).