Tarballs/zipballs are at http://apr.apache.org/dev/dist/.
Various fixes in there, including hash randomisation, so give it a good bashing. Please give your +1/-1: [ ] Release apr 1.4.6 as GA PS. Please don't shoot to RM. First timer here... :-) -- Bojan