This is not a fix per se, just one way to mitigate the issue until older PHP versions are updated and/or one uses this CVE as the final motivation to update those really old PHP sites ... :-)