For a recent PCI audit remediation project I had to assemble a list of recent CVEs that were resolved via backports in httpd-2.2.3-22 on RHEL5. Here’s the list:
https://rhn.redhat.com/errata/RHSA-2008-0008.html
CVE-2008-0005
CVE-2007-6422
CVE-2007-6421
CVE-2007-6388
CVE-2007-5000
CVE-2007-4465
https://rhn.redhat.com/errata/RHSA-2008-0967.html
CVE-2008-2364
https://rhn.redhat.com/errata/RHSA-2007-0746.html
CVE-2007-3847
https://rhn.redhat.com/errata/RHSA-2007-0556.html
CVE-2006-5752
CVE-2007-3304
CVE-2007-1863
http://kbase.redhat.com/faq/docs/DOC-9182
CVE-2006-3747
https://rhn.redhat.com/errata/RHSA-2006-0159.html
CVE-2005-3357
CVE-2005-3352
