The remote host is missing updates announced in advisory GLSA 200509-19.

All PHP users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose dev-php/php All mod_php users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose dev-php/mod_php All php-cgi users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose dev-php/php-cgi http://www.securityspace.com/smysecure/catid.html?in=GLSA%20200509-19 http://bugs.gentoo.org/show_bug.cgi?id=102373 http://www.gentoo.org/security/en/glsa/glsa-200508-13.xml http://www.gentoo.org/security/en/glsa/glsa-200508-17.xml

PHP makes use of an affected PCRE library and ships with an affected XML-RPC library and is therefore potentially vulnerable to remote execution of arbitrary code.