Today Apache 2.2.23 was released, it is a security and bugfix release. Here is changelog: http://www.apache.org/dist/httpd/CHANGES_2.2.23 The new version is already available in custombuild.
Hello,
You might need to limit number of connections with iptables from a single IP to avoid such a HTTP Flood attacks.
As far as I know you can also do that with the antiloris patch.and how you do that?