libuser 0.56 and 0.57 has a TOCTOU (time-of-check time-of-use) race condition when copying and removing directory trees.
{ "binaries": [ { "binary_version": "1:0.56.9.dfsg.1-1.2ubuntu2+esm1", "binary_name": "libuser" }, { "binary_version": "1:0.56.9.dfsg.1-1.2ubuntu2+esm1", "binary_name": "libuser1" }, { "binary_version": "1:0.56.9.dfsg.1-1.2ubuntu2+esm1", "binary_name": "libuser1-dev" }, { "binary_version": "1:0.56.9.dfsg.1-1.2ubuntu2+esm1", "binary_name": "python-libuser" } ] }
{ "binaries": [ { "binary_version": "1:0.64+git20241106~dfsg-3", "binary_name": "libuser" }, { "binary_version": "1:0.64+git20241106~dfsg-3", "binary_name": "libuser1" }, { "binary_version": "1:0.64+git20241106~dfsg-3", "binary_name": "libuser1-dev" }, { "binary_version": "1:0.64+git20241106~dfsg-3", "binary_name": "python3-libuser" } ] }
{ "binaries": [ { "binary_version": "1:0.64+git20241106~dfsg-2", "binary_name": "libuser" }, { "binary_version": "1:0.64+git20241106~dfsg-2", "binary_name": "libuser1" }, { "binary_version": "1:0.64+git20241106~dfsg-2", "binary_name": "libuser1-dev" }, { "binary_version": "1:0.64+git20241106~dfsg-2", "binary_name": "python3-libuser" } ] }