Search for packages
Package details: pkg:alpm/archlinux/nginx-mainline@1.19.10-1
purl pkg:alpm/archlinux/nginx-mainline@1.19.10-1
Next non-vulnerable version 1.21.0-1
Latest non-vulnerable version 1.21.0-1
Risk 10.0
Vulnerabilities affecting this package (2)
Vulnerability Summary Fixed by
VCID-naz4-k1th-aaad
Aliases:
CVE-2021-3618
ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as multi-domain or wildcard certificates. A MiTM attacker having access to victim's traffic at the TCP/IP layer can redirect traffic from one subdomain to another, resulting in a valid TLS session. This breaks the authentication of TLS and cross-protocol attacks may be possible where the behavior of one protocol service may compromise the other at the application layer.
1.21.0-1
Affected by 0 other vulnerabilities.
VCID-xdng-3k7v-aaaj
Aliases:
CVE-2021-23017
1-byte memory overwrite in resolver
1.21.0-1
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2025-03-28T07:46:33.207643+00:00 Arch Linux Importer Affected by VCID-xdng-3k7v-aaaj https://security.archlinux.org/AVG-1987 36.0.0
2025-03-28T07:46:32.645013+00:00 Arch Linux Importer Affected by VCID-naz4-k1th-aaad https://security.archlinux.org/AVG-2103 36.0.0
2024-10-09T04:07:51.871302+00:00 Arch Linux Importer Affected by VCID-xdng-3k7v-aaaj https://security.archlinux.org/AVG-1987 34.0.2
2024-09-18T02:01:51.468445+00:00 Arch Linux Importer Affected by VCID-xdng-3k7v-aaaj https://security.archlinux.org/AVG-1987 34.0.1
2024-09-18T02:01:50.725953+00:00 Arch Linux Importer Affected by VCID-naz4-k1th-aaad https://security.archlinux.org/AVG-2103 34.0.1
2024-01-03T22:27:56.226110+00:00 Arch Linux Importer Affected by VCID-xdng-3k7v-aaaj https://security.archlinux.org/AVG-1987 34.0.0rc1
2024-01-03T22:27:55.584251+00:00 Arch Linux Importer Affected by VCID-naz4-k1th-aaad https://security.archlinux.org/AVG-2103 34.0.0rc1