Update to APR 1.3.8 / APR-util 1.3.9. This is a security update.

Security: CVE-2009-2412
Approved by: so (simon), pgollucci (in principle - I think...)