libuser 0.56 and 0.57 has a TOCTOU (time-of-check time-of-use) race condition when copying and removing directory trees.
{
"binaries": [
{
"binary_name": "libuser",
"binary_version": "1:0.56.9.dfsg.1-1.2ubuntu2+esm1"
},
{
"binary_name": "libuser1",
"binary_version": "1:0.56.9.dfsg.1-1.2ubuntu2+esm1"
},
{
"binary_name": "libuser1-dev",
"binary_version": "1:0.56.9.dfsg.1-1.2ubuntu2+esm1"
},
{
"binary_name": "python-libuser",
"binary_version": "1:0.56.9.dfsg.1-1.2ubuntu2+esm1"
}
]
}
{
"binaries": [
{
"binary_name": "libuser",
"binary_version": "1:0.64+git20241106~dfsg-3"
},
{
"binary_name": "libuser1",
"binary_version": "1:0.64+git20241106~dfsg-3"
},
{
"binary_name": "libuser1-dev",
"binary_version": "1:0.64+git20241106~dfsg-3"
},
{
"binary_name": "python3-libuser",
"binary_version": "1:0.64+git20241106~dfsg-3"
}
]
}
{
"binaries": [
{
"binary_name": "libuser",
"binary_version": "1:0.64+git20241106~dfsg-2"
},
{
"binary_name": "libuser1",
"binary_version": "1:0.64+git20241106~dfsg-2"
},
{
"binary_name": "libuser1-dev",
"binary_version": "1:0.64+git20241106~dfsg-2"
},
{
"binary_name": "python3-libuser",
"binary_version": "1:0.64+git20241106~dfsg-2"
}
]
}