The Apache HTTP Server is a popular Web server.A denial of service flaw was found in the Apache mod_proxy module when itwas used as a reverse proxy. A remote attacker could use this flaw to forcea proxy process to consume large amounts of CPU time. (CVE-2009-1890)A denial of service flaw was found in the Apache mod_deflate module. Thismodule continued to compress large files until compression was complete,even if the network connection that requested the content was closed beforecompression completed. This would cause mod_deflate to consume largeamounts of CPU if mod_deflate was enabled for a large file. (CVE-2009-1891)All httpd users should upgrade to these updated packages, which containbackported patches to correct these issues. After installing the updatedpackages, the httpd daemon must be restarted for the update to take effect.