Description of problem:
Security updates have been released for RHEL, but not applied to CentOS Stream. According to web page CentOS Stream is still a supported distribution, so can you please let us know, why updates are not applied automatically? More than year ago same problem, currently 6 CVE's are still not updated in CentOS Stream.

Version-Release number of selected component (if applicable):
httpd-2.4.37-54.module_el8.8.0+1256+e1598b50.x86_64

Additional info:
My old bug with similiar problem:
https://bugzilla.redhat.com/show_bug.cgi?id=2042795

These changes are still waiting to be updated:

* Št apr 27 2023 Luboš Uhliarik <luhliari> - 2.4.37-56.6
- Resolves: #2190133 - mod_rewrite regression with CVE-2023-25690

* So mar 18 2023 Luboš Uhliarik <luhliari> - 2.4.37-56.4
- Resolves: #2177748 - CVE-2023-25690 httpd:2.4/httpd: HTTP request splitting
  with mod_rewrite and mod_proxy

* Ut jan 31 2023 Luboš Uhliarik <luhliari> - 2.4.37-56
- Resolves: #2162499 - CVE-2006-20001 httpd: mod_dav: out-of-bounds read/write
  of zero byte
- Resolves: #2162485 - CVE-2022-37436 httpd: mod_proxy: HTTP response splitting
- Resolves: #2162509 - CVE-2022-36760 httpd: mod_proxy_ajp: Possible request
  smuggling

* Št jan 26 2023 Luboš Uhliarik <luhliari> - 2.4.37-55
- Resolves: #2155961 - prevent sscg creating /dhparams.pem