Apache's new security update for HTTP Server fixes two flaws