# ALSA-2022:8067: Security update for 11 packages

ALSA-2022:8067, released November 15, 2022, fixes 10 CVEs across 11 products. None of them is reported as exploited. Patch Radar priority: High.

- Web page: https://patchblox.com/security/fix/linux/alsa-2022-8067
- Platform: Linux
- Released: Nov 15, 2022
- Priority: High (Closes CVE-2022-30522, high severity)
- CVEs: 10, exploited: 0, on CISA KEV: 0
- Vendor advisory: https://osv.dev/vulnerability/ALSA-2022:8067

## Applies to

| Product | Release | Fixed in |
|---|---|---|
| [httpd](https://patchblox.com/security/data/product/linux/httpd.md) | almalinux 9 | 2.4.53-7.el9 |
| [httpd-core](https://patchblox.com/security/data/product/linux/httpd-core.md) | almalinux 9 | 2.4.53-7.el9 |
| [httpd-devel](https://patchblox.com/security/data/product/linux/httpd-devel.md) | almalinux 9 | 2.4.53-7.el9 |
| [httpd-filesystem](https://patchblox.com/security/data/product/linux/httpd-filesystem.md) | almalinux 9 | 2.4.53-7.el9 |
| [httpd-manual](https://patchblox.com/security/data/product/linux/httpd-manual.md) | almalinux 9 | 2.4.53-7.el9 |
| [httpd-tools](https://patchblox.com/security/data/product/linux/httpd-tools.md) | almalinux 9 | 2.4.53-7.el9 |
| [mod_ldap](https://patchblox.com/security/data/product/linux/mod-ldap.md) | almalinux 9 | 2.4.53-7.el9 |
| [mod_lua](https://patchblox.com/security/data/product/linux/mod-lua.md) | almalinux 9 | 2.4.53-7.el9 |
| [mod_proxy_html](https://patchblox.com/security/data/product/linux/mod-proxy-html.md) | almalinux 9 | 1:2.4.53-7.el9 |
| [mod_session](https://patchblox.com/security/data/product/linux/mod-session.md) | almalinux 9 | 2.4.53-7.el9 |
| [mod_ssl](https://patchblox.com/security/data/product/linux/mod-ssl.md) | almalinux 9 | 1:2.4.53-7.el9 |

## CVEs this fix closes

| CVE | Priority | Title | CVSS | EPSS | Exploitation |
|---|---|---|---:|---:|---|
| [CVE-2022-30522](https://patchblox.com/security/data/cve/CVE-2022-30522.md) | High | libapache2-mod-proxy-uwsgi: If Apache HTTP Server 2.4.53 is configured to do transformations with mod_sed in contexts where the input to mod_sed... | 8.1 | 0.8989 |  |
| [CVE-2022-22719](https://patchblox.com/security/data/cve/CVE-2022-22719.md) | High | apache2: A carefully crafted request body can cause a read to a random memory area which could cause the process to crash | 8.1 | 0.6980 |  |
| [CVE-2022-23943](https://patchblox.com/security/data/cve/CVE-2022-23943.md) | High | apache2-data: Out-of-bounds Write vulnerability in mod_sed of Apache HTTP Server allows an attacker to overwrite heap memory with p... | 9.8 | 0.5040 |  |
| [CVE-2022-22721](https://patchblox.com/security/data/cve/CVE-2022-22721.md) | High | apache2-suexec-custom: If LimitXMLRequestBody is set to allow request bodies larger than 350MB (defaults to 1M) on 32 bit systems an integer... | 9.1 | 0.4186 |  |
| [CVE-2022-26377](https://patchblox.com/security/data/cve/CVE-2022-26377.md) | High | httpd-manual: The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server.  Security Fix(es... | 8.1 | 0.2108 |  |
| [CVE-2022-29404](https://patchblox.com/security/data/cve/CVE-2022-29404.md) | High | apache2: In Apache HTTP Server 2.4.53 and earlier, a malicious request to a lua script that calls r:parsebody(0) may cause a d... | 8.1 | 0.0655 |  |
| [CVE-2022-28615](https://patchblox.com/security/data/cve/CVE-2022-28615.md) | High | apache2-utils: Apache HTTP Server 2.4.53 and earlier may crash or disclose information due to a read beyond bounds in ap_strcmp_matc... | 9.1 | 0.0646 |  |
| [CVE-2022-30556](https://patchblox.com/security/data/cve/CVE-2022-30556.md) | High | httpd: The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server.  Security Fix(es... | 8.1 | 0.0541 |  |
| [CVE-2022-28614](https://patchblox.com/security/data/cve/CVE-2022-28614.md) | High | apache2: The ap_rwrite() function in Apache HTTP Server 2.4.53 and earlier may read unintended memory if an attacker can cause... | 8.1 | 0.0511 |  |
| [CVE-2022-31813](https://patchblox.com/security/data/cve/CVE-2022-31813.md) | High | libapache2-mod-proxy-uwsgi: Apache HTTP Server 2.4.53 and earlier may not send the X-Forwarded-* headers to the origin server based on client sid... | 9.8 | 0.0354 |  |

---

Data as of 2026-11-07T12:40:37Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo