Please follow https://www.cisa.gov/uscert/ncas/current-activity/2021/12/22/apache-releases-security-update-http-server.