httpd 2.4.35 update

[Chris Kottaridis]

Is httpd in Fedora 28 going to be upgraded to 2.4.35 any time soon?

Have the in-house security compliance team pushing for it.

Thanks
Chris K

[Terry Polzin]

Fedora 29 was GOLD last week.

On Tue, Nov 6, 2018 at 3:52 PM Chris Kottaridis <chriskot(a)quietwind.net&gt;
wrote:

>  Is httpd in Fedora 28 going to be upgraded to 2.4.35 any time soon?
>
>  Have the in-house security compliance team pushing for it.
>
>  Thanks
>  Chris K
>  _______________________________________________
>  users mailing list -- users(a)lists.fedoraproject.org
>  To unsubscribe send an email to users-leave(a)lists.fedoraproject.org
>  Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
>  List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
>  List Archives:
>  https://lists.fedoraproject.org/archives/list/[e-mail]
>

[YOUNG, MICHAEL A.]

On Tue, 6 Nov 2018, Chris Kottaridis wrote:

>  Is httpd in Fedora 28 going to be upgraded to 2.4.35 any time soon?
>
>  Have the in-house security compliance team pushing for it. 
The only security issue fixed in 2.4.35 seems to be CVE-2018-11763 in 
HTTP/2 which Fedora provides in the separate mod_http2 package. The 
security issue was fixed in mod_http2-1.11.1-1.fc28 so I don't think you 
actually have a problem.

 	Michael Young