If the original is as hard to exploit as some of the experts have been saying, it's entirely possible that the fix for yesterday's PHP bug might cause more active exploits than the original bug, because the fix is on the order of, what, 12k lines of code? A patch of that size, touching so many parts of the codebase is quite likely to introduce a ton of bugs on its own