library/glob.html in the Python 2 and 3 documentation before 2016 has potentially misleading information about whether sorting occurs, as demonstrated by irreproducible cancer-research results. NOTE: the effects of this documentation cross application domains, and thus it is likely that security-relevant code elsewhere is affected. This issue is not a Python implementation bug, and there are no reports that NMR researchers were specifically relying on library/glob.html. In other words, because the older documentation stated "finds all the pathnames matching a specified pattern according to the rules used by the Unix shell," one might have incorrectly inferred that the sorting that occurs in a Unix shell also occurred for glob.glob. There is a workaround in newer versions of Willoughby nmr-data_compilation-p2.py and nmr-data_compilation-p3.py, which call sort() directly.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Huawei Euleros 2_0_sp2 | — | Upgrade pythonUpgrade tkinterUpgrade python-libsUpgrade python-devel | Dec 4, 2019 | Oct 12, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade python-libsUpgrade pythonUpgrade tkinterUpgrade python-devel | Dec 18, 2019 | Oct 12, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade python-develUpgrade python-libsUpgrade pythonUpgrade tkinter | Nov 19, 2019 | Oct 12, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python3-libsUpgrade python3-testUpgrade python3-develUpgrade python3 | Jan 3, 2020 | Oct 12, 2019 |
| Ubuntu | — | Upgrade python2.7-minimalUpgrade python3.7-minimalUpgrade python3.7Upgrade python2.7Upgrade python3.5 (Ubuntu Pro)Upgrade python2.7 (Ubuntu Pro)Upgrade python2.7-minimal (Ubuntu Pro)Upgrade python3.6Upgrade python3.6-minimal (Ubuntu Pro)Upgrade python3.7 (Ubuntu Pro)Upgrade python3.8-minimalUpgrade python3.6-minimalUpgrade python3.4 (Ubuntu Pro)Upgrade python3.5Upgrade python3.8-minimal (Ubuntu Pro)Upgrade python3.8Upgrade python3.8 (Ubuntu Pro)Upgrade python3.5-minimal (Ubuntu Pro)Upgrade python3.7-minimal (Ubuntu Pro)Upgrade python3.6 (Ubuntu Pro)Upgrade python3.4-minimal (Ubuntu Pro)Upgrade python3.5-minimal | Aug 5, 2020 | Oct 12, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 12, 2019 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub