CVE-2018-1333 is a mod_md issue and in Fedora we ship mod_md separately from github releases.
CVE-2018-1333 is fixed by http://svn.apache.org/viewvc?view=revision&revision=1828879 (confirmed with email@example.com)
This change is mirrored to github here: https://github.com/icing/mod_h2/commit/83a2e3866918ce6567a683eb4c660688d047ee81
That github commit is present in tag for mod_md 1.10.18. We already updated to 1.10.18 in Fedora, so Fedora users have the fix already. https://bodhi.fedoraproject.org/updates/FEDORA-2018-54fed84dcd