Apache 2.2.4 has been released Looks like this happened on January 10th, but I completely missed it. Looking through the changelog I don't see any security holes, but there are a LOT of bug fixes, but principally in modules - not a lot to do with the core.