# ALSA-2022:1861: Security update for 42 packages

ALSA-2022:1861, released May 10, 2022, fixes 1 CVE across 42 products. None of them is reported as exploited. Patch Radar priority: Routine.

- Web page: https://patchblox.com/security/fix/linux/alsa-2022-1861
- Platform: Linux
- Released: May 10, 2022
- Priority: Routine (Closes CVE-2020-13956)
- CVEs: 1, exploited: 0, on CISA KEV: 0
- Vendor advisory: https://osv.dev/vulnerability/ALSA-2022:1861

## Applies to

| Product | Release | Fixed in |
|---|---|---|
| [aopalliance](https://patchblox.com/security/data/product/linux/aopalliance.md) | almalinux 8 | 1.0-17.module_el8.6.0+2752+f1f3449e |
| [apache-commons-cli](https://patchblox.com/security/data/product/linux/apache-commons-cli.md) | almalinux 8 | 1.4-4.module_el8.6.0+2752+f1f3449e |
| [apache-commons-codec](https://patchblox.com/security/data/product/linux/apache-commons-codec.md) | almalinux 8 | 1.11-3.module_el8.6.0+2752+f1f3449e |
| [apache-commons-io](https://patchblox.com/security/data/product/linux/apache-commons-io.md) | almalinux 8 | 1:2.6-3.module_el8.6.0+2752+f1f3449e |
| [apache-commons-lang3](https://patchblox.com/security/data/product/linux/apache-commons-lang3.md) | almalinux 8 | 3.7-3.module_el8.6.0+2752+f1f3449e |
| [apache-commons-logging](https://patchblox.com/security/data/product/linux/apache-commons-logging.md) | almalinux 8 | 1.2-13.module_el8.6.0+2752+f1f3449e |
| [atinject](https://patchblox.com/security/data/product/linux/atinject.md) | almalinux 8 | 1-28.20100611svn86.module_el8.6.0+2752+f1f3449e |
| [cdi-api](https://patchblox.com/security/data/product/linux/cdi-api.md) | almalinux 8 | 1.2-8.module_el8.6.0+2752+f1f3449e |
| [geronimo-annotation](https://patchblox.com/security/data/product/linux/geronimo-annotation.md) | almalinux 8 | 1.0-23.module_el8.6.0+2752+f1f3449e |
| [glassfish-el-api](https://patchblox.com/security/data/product/linux/glassfish-el-api.md) | almalinux 8 | 3.0.1-0.7.b08.module_el8.6.0+2752+f1f3449e |
| [google-guice](https://patchblox.com/security/data/product/linux/google-guice.md) | almalinux 8 | 4.1-11.module_el8.6.0+2752+f1f3449e |
| [guava20](https://patchblox.com/security/data/product/linux/guava20.md) | almalinux 8 | 20.0-8.module_el8.6.0+2752+f1f3449e |
| [hawtjni-runtime](https://patchblox.com/security/data/product/linux/hawtjni-runtime.md) | almalinux 8 | 1.16-2.module_el8.6.0+2752+f1f3449e |
| [httpcomponents-client](https://patchblox.com/security/data/product/linux/httpcomponents-client.md) | almalinux 8 | 4.5.5-5.module_el8.6.0+2752+f1f3449e |
| [httpcomponents-core](https://patchblox.com/security/data/product/linux/httpcomponents-core.md) | almalinux 8 | 4.4.10-3.module_el8.6.0+2752+f1f3449e |
| [jansi](https://patchblox.com/security/data/product/linux/jansi.md) | almalinux 8 | 1.17.1-1.module_el8.6.0+2752+f1f3449e |
| [jansi-native](https://patchblox.com/security/data/product/linux/jansi-native.md) | almalinux 8 | 1.7-7.module_el8.6.0+2752+f1f3449e |
| [jboss-interceptors-1.2-api](https://patchblox.com/security/data/product/linux/jboss-interceptors-1.2-api.md) | almalinux 8 | 1.0.0-8.module_el8.6.0+2752+f1f3449e |
| [jcl-over-slf4j](https://patchblox.com/security/data/product/linux/jcl-over-slf4j.md) | almalinux 8 | 1.7.25-4.module_el8.6.0+2752+f1f3449e |
| [jsoup](https://patchblox.com/security/data/product/linux/jsoup.md) | almalinux 8 | 1.11.3-3.module_el8.6.0+2752+f1f3449e |
| [maven](https://patchblox.com/security/data/product/linux/maven.md) | almalinux 8 | 1:3.5.4-5.module_el8.6.0+2752+f1f3449e |
| [maven-lib](https://patchblox.com/security/data/product/linux/maven-lib.md) | almalinux 8 | 1:3.5.4-5.module_el8.6.0+2752+f1f3449e |
| [maven-resolver-api](https://patchblox.com/security/data/product/linux/maven-resolver-api.md) | almalinux 8 | 1:1.1.1-2.module_el8.6.0+2752+f1f3449e |
| [maven-resolver-connector-basic](https://patchblox.com/security/data/product/linux/maven-resolver-connector-basic.md) | almalinux 8 | 1:1.1.1-2.module_el8.6.0+2752+f1f3449e |
| [maven-resolver-impl](https://patchblox.com/security/data/product/linux/maven-resolver-impl.md) | almalinux 8 | 1:1.1.1-2.module_el8.6.0+2752+f1f3449e |
| [maven-resolver-spi](https://patchblox.com/security/data/product/linux/maven-resolver-spi.md) | almalinux 8 | 1:1.1.1-2.module_el8.6.0+2752+f1f3449e |
| [maven-resolver-transport-wagon](https://patchblox.com/security/data/product/linux/maven-resolver-transport-wagon.md) | almalinux 8 | 1:1.1.1-2.module_el8.6.0+2752+f1f3449e |
| [maven-resolver-util](https://patchblox.com/security/data/product/linux/maven-resolver-util.md) | almalinux 8 | 1:1.1.1-2.module_el8.6.0+2752+f1f3449e |
| [maven-shared-utils](https://patchblox.com/security/data/product/linux/maven-shared-utils.md) | almalinux 8 | 3.2.1-0.1.module_el8.6.0+2752+f1f3449e |
| [maven-wagon-file](https://patchblox.com/security/data/product/linux/maven-wagon-file.md) | almalinux 8 | 3.1.0-1.module_el8.6.0+2752+f1f3449e |
| [maven-wagon-http](https://patchblox.com/security/data/product/linux/maven-wagon-http.md) | almalinux 8 | 3.1.0-1.module_el8.6.0+2752+f1f3449e |
| [maven-wagon-http-shared](https://patchblox.com/security/data/product/linux/maven-wagon-http-shared.md) | almalinux 8 | 3.1.0-1.module_el8.6.0+2752+f1f3449e |
| [maven-wagon-provider-api](https://patchblox.com/security/data/product/linux/maven-wagon-provider-api.md) | almalinux 8 | 3.1.0-1.module_el8.6.0+2752+f1f3449e |
| [plexus-cipher](https://patchblox.com/security/data/product/linux/plexus-cipher.md) | almalinux 8 | 1.7-14.module_el8.6.0+2752+f1f3449e |
| [plexus-classworlds](https://patchblox.com/security/data/product/linux/plexus-classworlds.md) | almalinux 8 | 2.5.2-9.module_el8.6.0+2752+f1f3449e |
| [plexus-containers-component-annotations](https://patchblox.com/security/data/product/linux/plexus-containers-component-annotations.md) | almalinux 8 | 1.7.1-8.module_el8.6.0+2752+f1f3449e |
| [plexus-interpolation](https://patchblox.com/security/data/product/linux/plexus-interpolation.md) | almalinux 8 | 1.22-9.module_el8.6.0+2752+f1f3449e |
| [plexus-sec-dispatcher](https://patchblox.com/security/data/product/linux/plexus-sec-dispatcher.md) | almalinux 8 | 1.4-26.module_el8.6.0+2752+f1f3449e |
| [plexus-utils](https://patchblox.com/security/data/product/linux/plexus-utils.md) | almalinux 8 | 3.1.0-3.module_el8.6.0+2752+f1f3449e |
| [sisu-inject](https://patchblox.com/security/data/product/linux/sisu-inject.md) | almalinux 8 | 1:0.3.3-6.module_el8.6.0+2752+f1f3449e |
| [sisu-plexus](https://patchblox.com/security/data/product/linux/sisu-plexus.md) | almalinux 8 | 1:0.3.3-6.module_el8.6.0+2752+f1f3449e |
| [slf4j](https://patchblox.com/security/data/product/linux/slf4j.md) | almalinux 8 | 1.7.25-4.module_el8.6.0+2752+f1f3449e |

## CVEs this fix closes

| CVE | Priority | Title | CVSS | EPSS | Exploitation |
|---|---|---|---:|---:|---|
| [CVE-2020-13956](https://patchblox.com/security/data/cve/CVE-2020-13956.md) | Routine | httpcomponents-client: This update for httpcomponents-client, httpcomponents-core fixes the following issues:  httpcomponents-client:   - Up... | 5.3 | 0.0903 |  |

---

Data as of 2026-11-07T06:34:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo