Several people who work on PHP have said it's not enough, that only the patch will do, but, they're staying silent otherwise