The Apache Portable Runtime (APR) is a portability library used by theApache HTTP Server and other projects. apr-util is a library which providesadditional utility interfaces for APR; including support for XML parsing,LDAP, database interfaces, URI parsing, and more.It was found that certain input could cause the apr-util library toallocate more memory than intended in the apr_brigade_split_line()function. An attacker able to provide input in small chunks to anapplication using the apr-util library (such as httpd) could possibly usethis flaw to trigger high memory consumption. (CVE-2010-1623)All apr-util users should upgrade to these updated packages, which containa backported patch to correct this issue. Applications using the apr-utillibrary, such as httpd, must be restarted for this update to take effect.