Updated php packages fix security vulnerabilities:
In php-intl, geticuvalue_internal out-of-bounds read (CVE-2016-5093).
Integer Overflow in phphtmlentities (CVE-2016-5094).
Integer underflow / arbitrary null write in fread/gzread (CVE-2016-5096).
The php package has been updated to version 5.6.22, which fixes these security issues and other bugs. See the upstream ChangeLog for more details.