Two new CVE reports for version 2.4.51. A new version 2.4.52 has been released to address these issue's ?
Paul could you compile a new version of Apache ?
My personal opinion is that these are almost no risk for OS/2 - we don't have mod_lua, so that rules out CVE-2021-44790; and CVE-2021-44224 is only for a specific use case (forward proxy configurations).
Having said that, I posted a link to 2.4.52 in the apache2 ml last night.