The remote host is missing updates announced in advisory GLSA 200603-22.

All PHP 5.x users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose '>=dev-lang/php-5.1.2' All PHP 4.x users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose '>=dev-lang/php-4.4.2' http://www.securityspace.com/smysecure/catid.html?in=GLSA%20200603-22 http://bugs.gentoo.org/show_bug.cgi?id=125878 http://www.hardened-php.net/advisory_022006.112.html http://www.hardened-php.net/advisory_012006.113.html

Multiple vulnerabilities in PHP allow remote attackers to inject arbitrary HTTP headers, perform cross site scripting or in some cases execute arbitrary code.