libuser 0.56 and 0.57 has a TOCTOU (time-of-check time-of-use) race condition when copying and removing directory trees.
{ "binaries": [ { "binary_name": "libuser", "binary_version": "1:0.56.9.dfsg.1-1.2ubuntu2+esm1" }, { "binary_name": "libuser1", "binary_version": "1:0.56.9.dfsg.1-1.2ubuntu2+esm1" }, { "binary_name": "libuser1-dev", "binary_version": "1:0.56.9.dfsg.1-1.2ubuntu2+esm1" }, { "binary_name": "python-libuser", "binary_version": "1:0.56.9.dfsg.1-1.2ubuntu2+esm1" } ] }
{ "binaries": [ { "binary_name": "libuser", "binary_version": "1:0.64+git20241106~dfsg-2" }, { "binary_name": "libuser1", "binary_version": "1:0.64+git20241106~dfsg-2" }, { "binary_name": "libuser1-dev", "binary_version": "1:0.64+git20241106~dfsg-2" }, { "binary_name": "python3-libuser", "binary_version": "1:0.64+git20241106~dfsg-2" } ] }