libuser 0.56 and 0.57 has a TOCTOU (time-of-check time-of-use) race condition when copying and removing directory trees.
{
"binaries": [
{
"binary_version": "1:0.56.9.dfsg.1-1.2ubuntu2+esm1",
"binary_name": "libuser"
},
{
"binary_version": "1:0.56.9.dfsg.1-1.2ubuntu2+esm1",
"binary_name": "libuser1"
},
{
"binary_version": "1:0.56.9.dfsg.1-1.2ubuntu2+esm1",
"binary_name": "libuser1-dev"
},
{
"binary_version": "1:0.56.9.dfsg.1-1.2ubuntu2+esm1",
"binary_name": "python-libuser"
}
]
}
{
"binaries": [
{
"binary_version": "1:0.64+git20241106~dfsg-3",
"binary_name": "libuser"
},
{
"binary_version": "1:0.64+git20241106~dfsg-3",
"binary_name": "libuser1"
},
{
"binary_version": "1:0.64+git20241106~dfsg-3",
"binary_name": "libuser1-dev"
},
{
"binary_version": "1:0.64+git20241106~dfsg-3",
"binary_name": "python3-libuser"
}
]
}
{
"binaries": [
{
"binary_version": "1:0.64+git20241106~dfsg-2",
"binary_name": "libuser"
},
{
"binary_version": "1:0.64+git20241106~dfsg-2",
"binary_name": "libuser1"
},
{
"binary_version": "1:0.64+git20241106~dfsg-2",
"binary_name": "libuser1-dev"
},
{
"binary_version": "1:0.64+git20241106~dfsg-2",
"binary_name": "python3-libuser"
}
]
}