Bump more PHPs (for CVEs)