According to http://lwn.net/Articles/159103/ , it's looking like Debian is the last major distro without a fix for this. Could perhaps the recent Ubuntu updates ( http://lwn.net/Alerts/165505/ ), which were for PHP 4.3.8, be of use to Sarge?
All the best, Nick.
