When I have an insecure kernel WHM will tell me that I can update to a current one. This gives me a link to buildapache and I am then able to select or deselect certain options with the new build. For some reason though, since I don't have an insecure kernel now I can't find a link to this. (All I want to do is rebuild php with ttf support, but I think it will be an option in here.)
