Is Package ChangeLog Info included with packages?

I was looking to confirm CVE back-ports for httpd 2.2.15-39 for RHEL 6.6 and was wandering if that info was also included with the package itself, as it is on the RHN package changelog page.

Aka: https://access.redhat.com/downloads/content/rhel---6/x86_64/168/httpd/2.2.15-39.el6/x86_64/fd431d51/package

I looked at /usr/share/docs/httpd-2.2.15/CHANGES file, but all the noted CVE info is specifically for 2.2.15 and no higher.

I was just wondering.

Thanks,

Chris