Apache 2.2.15 possible security risk?

Solution 1:

The version numbers mentioned in the question seem to suggest that you are referring to Centos 6.

Centos 6 is EOL since November 30th, 2020, so the backported fixes that you refer to are now purely theoretical.

It is however correct that, while still supported, the distribution was delivering security updates to their packaged version rather than new versions.