Ubuntu Security Notice 5745-1 - Florian Weimer discovered that shadow was not properly copying and removing user directory trees, which could lead to a race condition. A local attacker could possibly use this issue to setup a symlink attack and alter or remove directories without authorization.
07c55f9f23b5b883d3fd5bc450595d804b4064627c04e912b1c521701dafd19b
Gentoo Linux Security Advisory 202210-26 - A TOCTOU race has been discovered in Shadow, which could result in the unauthorized modification of files. Versions less than 4.12.2 are affected.
a4242328798e98d20739aa9f6e2ef3c320a1892313776e0133711f4766d7a79f