As per http://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x/README , the proposal (Full disclosure: I'm colm@apache.org - the proposer), was that we would start distributing security patches via;

    http://www.apache.org/dist/httpd/patches/

The main point is to reduce the overhead and burden of creating full releases. Releases take a large amount of community involvement and time, and are becoming impractical. The 1.3.x branch does not even build on many modern platforms - for example the configure script is incompatible with dash and there is a getline() function which conflicts with a glibc neologism.

Hope that helps.

Last years was indeed excellent, I particularly liked Jaya Baloo's presentation on Lawful Interception and on the whole was very impressed by the inaugural Hivercon. It's small enough so that you can be seated right next to Richard Thieme for Lunch, and big enough so that you can learn some valuable information. Highly recommened, oh and also it's in Dublin, nice and close for some of us ;)