libdb Bug Fix and Enhancement Update
Summary
ALBA-2021:3594: libdb bug fix and enhancement update. Affects libdb versions < 5.3.28-42.el8_4. Fixed in 5.3.28-42.el8_4. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The libdb packages provide the Berkeley Database, an embedded database supporting both traditional and client/server applications. It is widely used in various software applications for data storage and retrieval.
Vulnerability Detail
This vulnerability, identified as ALBA-2021:3594, affects the libdb package in AlmaLinux 8. It is a bug fix and enhancement update that addresses an issue where the rpm command hangs and CPU usage reaches 100%. This issue can cause system instability and performance degradation.
How To Fix
Minimum fixed version
5.3.28-42.el8_4
This is the first release that contains the fix.
sudo dnf update libdb
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability.
Conclusion
The libdb Bug Fix and Enhancement Update addresses a vulnerability in the libdb package that can cause the rpm command to hang and result in high CPU usage. It is recommended to update the package to the fixed version to ensure system stability and performance.
See every vulnerability recorded for libdb →
FAQ
The vulnerability can cause the rpm command to hang and result in high CPU usage, leading to system instability and performance issues.
This vulnerability affects AlmaLinux 8.
You can use the Vulert Playground (https://vulert.com/scanner) to check if your system is affected by this vulnerability. Simply upload your package-lock.json file and it will provide real-time alerts for open-source vulnerabilities.
Yes, updating the libdb package to version 5.3.28-42.el8_4 or later will fix this vulnerability.
You can refer to the advisory on the AlmaLinux OSV Database (https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALBA-2021:3594.json) for more details.
References
Related vulnerabilities
Recent vulnerabilities recorded for libdb.