CVE-2020-35885

Name of the Vulnerable Software and Affected Versions alpm-rs crate through 2020-08-20

Description An issue was discovered in the alpm-rs crate where StrcCtx performs improper memory deallocation. This can introduce memory safety issues such as double-free and use-after-free to client programs. Specifically, StrcCtx deallocate a memory region that it doesn't own when StrcCtx is created without using StrcCtx::new.

Recommendations For alpm-rs crate through 2020-08-20, ensure that StrcCtx is created using StrcCtx::new to avoid improper memory deallocation. As a temporary workaround, consider restricting the use of StrcCtx until a patch is available.