curl -fsSL https://packages.sury.org/php/README.txt | bash

This adds Ondřej Surý's PPA to your system so you can upgrade the packages.

Just make sure to have the ca-certificates fixes already...