I have a PCI compliance notice sitting here telling me to upgrade to Apache 2.2.17. Thing is, Ubuntu is quite happy sitting on 2.2.16 (Ubuntu).

I understand that the Ubuntu folks' reasoning in rolling security updates back to 2.2.16, but I need to get an automated scan to shut up.

How do I do this?