Not getting security CVE updates on Cent Os 5 for Apache question.

x-port from /r/linuxquestions...

Running CentOs 5.11 Apache 2.2.3 Currently missing CVE-2015-3183

I've ran yum update httpd but it doesn't kick back any available updates, so I would assume it's up to date.

When I ran rpm -q --changelog | grep -i CVE , I don't see ANY 2015 CVEs installed.

Was just made aware of this missing one by a security PCI audit our organization has every month.

Any insight on what might be the issue?

Thanks!