CVE-2012-5630: libuser 0.56 and 0.57 has a TOCTOU (time-of-check time-of-use) race condition when copying and removing dir...

Security readout for executives and security teams

This is an old libuser flaw where directory tree copy or removal decisions could become stale before use. In business terms, only systems running libuser 0.56 or 0.57 are in scope. The provided sources do not quantify impact, confirm active exploitation, or name a specific patch level. Exposure appears limited to hosts or images with libuser 0.56 or 0.57 installed, especially where libuser directory tree copy or removal behavior is invoked. The bundle does not identify broader affected products, operating system releases, or vulnerable configurations. Handle as a targeted legacy package cleanup item, not an emergency, unless inventory finds affected libuser versions on sensitive multi-user systems. The uncertainty comes from missing severity and exploit evidence, so prioritize confirmation of exposure first. Mitigation focus: Inventory systems and containers for libuser package versions 0.56 and 0.57.; Check Red Hat, Fedora, Debian, or distribution guidance for fixed package availability.; Prioritize remediation where affected systems allow untrusted local users or automation..

Prepared

Jun 6, 2026, 04:48 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.