The report says: Affected package: apache-2.0.54_2 (matched by apache<2.1.6_1) Type of problem: apache -- http request smuggling. Reference: <http://www.FreeBSD.org/ports/portaudit/651996e0-fe07-11d9-8329-000e0c2e438a.html> but reading the report it claims that apache > 2.0.54_1 is okay.