See this link: http://secunia.com/advisories/35797 and this one: http://httpd.apache.org/security/vulnerabilities_22.html Upgrade to 2.2.12, pls.
I meant 2.2.12dev.
fixed in our apr, bug 274193, bug 272260 and bug 268643.