Апдейт обозван Apache 1.3.37 version и фиксит вот такую штуку:
mod_rewrite: Fix an off-by-one security problem in the ldap scheme handling. For some RewriteRules this could lead to a pointer being written out of bounds. Reported by Mark Dowd of McAfee Avert Labs.