They also should upgrade Apache as there's a known vulnerability with pre-2.2.20 versions that leaves Apache open to an easy DoS attack.