Will there be an Apache 2.4.27 release for Windows?

[flevius]

I'm failing a security scan because of this error which is remediated in 2.4.27 but not 2.4.26:

CVE-2017-9789: Apache httpd 2.4 Read after free in mod_http2

Any plans for a 2.4.27 release?

Thanks,

Dave

[Altrea]

Hi Dave,

if you are aware about security scans than you should not use XAMPP.
XAMPP is a local test and development environment and as such it is not needed to react on each security vulnerability.
Is this security vulnerability a problem for a local test and development environment at all? A security assessment is worthless if an experienced it expert will not set these results into the right context. XAMPP is not optimized against security at all.

There will be a new XAMPP version, but when its done and which components it includes, i don't know. There is no public accessible release plan.
You can see at sourceforge when the last XAMPP versions was released to get an idea about how long it might take for the next XAMPP release.

best wishes,
Altrea