Given this: http://tech.slashdot.org/story/10/03/08/1258200/Serious-Apache-Exploit-Discovered?from=twitter I suspect that the version in ports is affected by this vulnerability. Why is the latest version not 2.2.15 yet? Why is the auditdb not at least flagging apache22?