The remote host is missing updates announced in advisory GLSA 200412-14.

All PHP users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose '>=dev-php/php-4.3.10' All mod_php users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose '>=dev-php/mod_php-4.3.10' All php-cgi users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose '>=dev-php/php-cgi-4.3.10' http://www.securityspace.com/smysecure/catid.html?in=GLSA%20200412-14 http://bugs.gentoo.org/show_bug.cgi?id=74547 http://www.php.net/release_4_3_10.php http://www.hardened-php.net/advisories/012004.txt http://www.securityfocus.com/archive/1/384663/2004-12-15/2004-12-21/0

Several vulnerabilities were found and fixed in PHP, ranging from an information leak and a safe_mode restriction bypass to a potential remote execution of arbitrary code.