It would be best to package your PHP additions as an extension if you could, but I imagine you'd have done that already if it would work.

PHP on Ubuntu comes with the Suhosin patch installed, so there is at least one third-party PHP patch that has some significant distribution.