Comment by SSLy

if the attacks are live then PHP should release the fix NOW.