As Kenneth Porter pointed out last week there isn't any update to these php security issues. https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=141132 Debian and Gentoo both reacted immediately. This is madness I tell you. The only change seems to be that we'll have to shutdown every webserver and switch distributions. This really isn't nice xmas present from Fedora development.