UBUNTU-CVE-2026-2297
- Source
- https://ubuntu.com/security/CVE-2026-2297
- Import Source
- https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-2297.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/UBUNTU-CVE-2026-2297
- Upstream
- Published
- 2026-03-04T23:16:00Z
- Modified
- 2026-05-20T16:11:37.560272635Z
- Severity
-
- 5.7 (Medium) CVSS_V4 - CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N CVSS Calculator
- Ubuntu - medium
- Summary
- [none]
- Details
-
The import hook in CPython that handles legacy *.pyc files (SourcelessFileLoader) is incorrectly handled in FileLoader (a base class) and so does not use io.open_code() to read the .pyc files. sys.audit handlers for this audit event therefore do not fire.
- References
-
- https://ubuntu.com/security/CVE-2026-2297
- https://www.cve.org/CVERecord?id=CVE-2026-2297
- https://github.com/python/cpython/commit/482d6f8bdba9da3725d272e8bb4a2d25fb6a603e
- https://github.com/python/cpython/commit/a51b1b512de1d56b3714b65628a2eae2b07e535e
- https://github.com/python/cpython/commit/e58e9802b9bec5cdbf48fc9bf1da5f4fda482e86
- https://github.com/python/cpython/issues/145506
- https://github.com/python/cpython/pull/145507
Affected packages
Ubuntu:22.04:LTS
python3.10
Package
- Name
- python3.10
- Purl
- pkg:deb/ubuntu/python3.10?arch=source&distro=jammy
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affected
Affected versions
3.*
3.10.0-2
3.10.0-3
3.10.0-4
3.10.0-5
3.10.0-5build1
3.10.1-1
3.10.1-2
3.10.2-1
3.10.2-5
3.10.2-7
3.10.3-1
3.10.4-3
3.10.4-3ubuntu0.1
3.10.6-1~22.04
3.10.6-1~22.04.1
3.10.6-1~22.04.2
3.10.6-1~22.04.2ubuntu1
3.10.6-1~22.04.2ubuntu1.1
3.10.12-1~22.04.2
3.10.12-1~22.04.3
3.10.12-1~22.04.4
3.10.12-1~22.04.5
3.10.12-1~22.04.6
3.10.12-1~22.04.7
3.10.12-1~22.04.8
3.10.12-1~22.04.9
3.10.12-1~22.04.10
3.10.12-1~22.04.11
3.10.12-1~22.04.12
3.10.12-1~22.04.13
3.10.12-1~22.04.14
3.10.12-1~22.04.15
Ecosystem specific
{
"binaries": [
{
"binary_version": "3.10.12-1~22.04.15",
"binary_name": "idle-python3.10"
},
{
"binary_version": "3.10.12-1~22.04.15",
"binary_name": "libpython3.10"
},
{
"binary_name": "libpython3.10-minimal",
"binary_version": "3.10.12-1~22.04.15"
},
{
"binary_version": "3.10.12-1~22.04.15",
"binary_name": "libpython3.10-stdlib"
},
{
"binary_version": "3.10.12-1~22.04.15",
"binary_name": "libpython3.10-testsuite"
},
{
"binary_version": "3.10.12-1~22.04.15",
"binary_name": "python3.10"
},
{
"binary_version": "3.10.12-1~22.04.15",
"binary_name": "python3.10-examples"
},
{
"binary_name": "python3.10-full",
"binary_version": "3.10.12-1~22.04.15"
},
{
"binary_name": "python3.10-minimal",
"binary_version": "3.10.12-1~22.04.15"
},
{
"binary_name": "python3.10-nopie",
"binary_version": "3.10.12-1~22.04.15"
},
{
"binary_name": "python3.10-venv",
"binary_version": "3.10.12-1~22.04.15"
}
]
}Ubuntu:24.04:LTS
python3.12
Package
- Name
- python3.12
- Purl
- pkg:deb/ubuntu/python3.12?arch=source&distro=noble
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affected
Affected versions
3.*
3.12.0-1
3.12.0-5
3.12.0-6
3.12.0-7
3.12.1-2
3.12.2-1
3.12.2-4build3
3.12.2-4build4
3.12.2-5ubuntu3
3.12.3-1
3.12.3-1ubuntu0.1
3.12.3-1ubuntu0.2
3.12.3-1ubuntu0.3
3.12.3-1ubuntu0.4
3.12.3-1ubuntu0.5
3.12.3-1ubuntu0.6
3.12.3-1ubuntu0.7
3.12.3-1ubuntu0.8
3.12.3-1ubuntu0.9
3.12.3-1ubuntu0.10
3.12.3-1ubuntu0.11
3.12.3-1ubuntu0.12
3.12.3-1ubuntu0.13
Ecosystem specific
{
"binaries": [
{
"binary_name": "idle-python3.12",
"binary_version": "3.12.3-1ubuntu0.13"
},
{
"binary_name": "libpython3.12-minimal",
"binary_version": "3.12.3-1ubuntu0.13"
},
{
"binary_version": "3.12.3-1ubuntu0.13",
"binary_name": "libpython3.12-stdlib"
},
{
"binary_name": "libpython3.12-testsuite",
"binary_version": "3.12.3-1ubuntu0.13"
},
{
"binary_name": "libpython3.12t64",
"binary_version": "3.12.3-1ubuntu0.13"
},
{
"binary_name": "python3.12",
"binary_version": "3.12.3-1ubuntu0.13"
},
{
"binary_name": "python3.12-examples",
"binary_version": "3.12.3-1ubuntu0.13"
},
{
"binary_version": "3.12.3-1ubuntu0.13",
"binary_name": "python3.12-full"
},
{
"binary_name": "python3.12-minimal",
"binary_version": "3.12.3-1ubuntu0.13"
},
{
"binary_name": "python3.12-nopie",
"binary_version": "3.12.3-1ubuntu0.13"
},
{
"binary_name": "python3.12-venv",
"binary_version": "3.12.3-1ubuntu0.13"
}
]
}Ubuntu:25.10
python3.13
Package
- Name
- python3.13
- Purl
- pkg:deb/ubuntu/python3.13?arch=source&distro=questing
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affected
Affected versions
3.*
3.13.3-1
3.13.3-2
3.13.3-4
3.13.4-1
3.13.5-1
3.13.5-2
3.13.6-1
3.13.7-1
3.13.7-1ubuntu0.1
3.13.7-1ubuntu0.2
3.13.7-1ubuntu0.3
3.13.7-1ubuntu0.4
Ecosystem specific
{
"binaries": [
{
"binary_name": "idle-python3.13",
"binary_version": "3.13.7-1ubuntu0.4"
},
{
"binary_name": "libpython3.13",
"binary_version": "3.13.7-1ubuntu0.4"
},
{
"binary_version": "3.13.7-1ubuntu0.4",
"binary_name": "libpython3.13-minimal"
},
{
"binary_version": "3.13.7-1ubuntu0.4",
"binary_name": "libpython3.13-stdlib"
},
{
"binary_name": "libpython3.13-testsuite",
"binary_version": "3.13.7-1ubuntu0.4"
},
{
"binary_name": "python3.13",
"binary_version": "3.13.7-1ubuntu0.4"
},
{
"binary_name": "python3.13-examples",
"binary_version": "3.13.7-1ubuntu0.4"
},
{
"binary_name": "python3.13-full",
"binary_version": "3.13.7-1ubuntu0.4"
},
{
"binary_name": "python3.13-gdbm",
"binary_version": "3.13.7-1ubuntu0.4"
},
{
"binary_name": "python3.13-minimal",
"binary_version": "3.13.7-1ubuntu0.4"
},
{
"binary_name": "python3.13-nopie",
"binary_version": "3.13.7-1ubuntu0.4"
},
{
"binary_name": "python3.13-tk",
"binary_version": "3.13.7-1ubuntu0.4"
},
{
"binary_version": "3.13.7-1ubuntu0.4",
"binary_name": "python3.13-venv"
}
]
}python3.14
Package
- Name
- python3.14
- Purl
- pkg:deb/ubuntu/python3.14?arch=source&distro=questing
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affected
Affected versions
3.*
3.14.0~a7-0ubuntu1
3.14.0~b1-1
3.14.0~b3-1
3.14.0~rc1-1
3.14.0~rc2-1
3.14.0~rc3-1
3.14.0-1
3.14.0-1ubuntu0.1
3.14.0-1ubuntu0.2
3.14.0-1ubuntu0.3
Ecosystem specific
{
"binaries": [
{
"binary_version": "3.14.0-1ubuntu0.3",
"binary_name": "idle-python3.14"
},
{
"binary_name": "libpython3.14",
"binary_version": "3.14.0-1ubuntu0.3"
},
{
"binary_name": "libpython3.14-minimal",
"binary_version": "3.14.0-1ubuntu0.3"
},
{
"binary_version": "3.14.0-1ubuntu0.3",
"binary_name": "libpython3.14-stdlib"
},
{
"binary_version": "3.14.0-1ubuntu0.3",
"binary_name": "libpython3.14-testsuite"
},
{
"binary_name": "python3.14",
"binary_version": "3.14.0-1ubuntu0.3"
},
{
"binary_name": "python3.14-examples",
"binary_version": "3.14.0-1ubuntu0.3"
},
{
"binary_name": "python3.14-full",
"binary_version": "3.14.0-1ubuntu0.3"
},
{
"binary_name": "python3.14-gdbm",
"binary_version": "3.14.0-1ubuntu0.3"
},
{
"binary_version": "3.14.0-1ubuntu0.3",
"binary_name": "python3.14-minimal"
},
{
"binary_name": "python3.14-nopie",
"binary_version": "3.14.0-1ubuntu0.3"
},
{
"binary_name": "python3.14-tk",
"binary_version": "3.14.0-1ubuntu0.3"
},
{
"binary_name": "python3.14-venv",
"binary_version": "3.14.0-1ubuntu0.3"
}
]
}Ubuntu:26.04:LTS
python3.14
Package
- Name
- python3.14
- Purl
- pkg:deb/ubuntu/python3.14?arch=source&distro=resolute
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affected
Affected versions
3.*
3.14.0-1
3.14.0-2
3.14.0-4
3.14.2-1
3.14.3-1
3.14.3-2
3.14.3-3
3.14.3-5
3.14.4-1
Ecosystem specific
{
"binaries": [
{
"binary_name": "idle-python3.14",
"binary_version": "3.14.4-1"
},
{
"binary_name": "libpython3.14",
"binary_version": "3.14.4-1"
},
{
"binary_name": "libpython3.14-minimal",
"binary_version": "3.14.4-1"
},
{
"binary_name": "libpython3.14-stdlib",
"binary_version": "3.14.4-1"
},
{
"binary_name": "libpython3.14-testsuite",
"binary_version": "3.14.4-1"
},
{
"binary_name": "python3.14",
"binary_version": "3.14.4-1"
},
{
"binary_name": "python3.14-examples",
"binary_version": "3.14.4-1"
},
{
"binary_name": "python3.14-full",
"binary_version": "3.14.4-1"
},
{
"binary_name": "python3.14-gdbm",
"binary_version": "3.14.4-1"
},
{
"binary_version": "3.14.4-1",
"binary_name": "python3.14-minimal"
},
{
"binary_version": "3.14.4-1",
"binary_name": "python3.14-nopie"
},
{
"binary_version": "3.14.4-1",
"binary_name": "python3.14-tk"
},
{
"binary_version": "3.14.4-1",
"binary_name": "python3.14-venv"
}
]
}Ubuntu:Pro:18.04:LTS
python3.8
Package
- Name
- python3.8
- Purl
- pkg:deb/ubuntu/python3.8?arch=source&distro=esm-apps%2Fbionic
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affected
Affected versions
3.*
3.8.0-3~18.04
3.8.0-3~18.04.1
3.8.0-3ubuntu1~18.04.2
3.8.0-3ubuntu1~18.04.2+esm1
3.8.0-3ubuntu1~18.04.2+esm2
3.8.0-3ubuntu1~18.04.2+esm3
3.8.0-3ubuntu1~18.04.2+esm4
3.8.0-3ubuntu1~18.04.2+esm5
3.8.0-3ubuntu1~18.04.2+esm6
3.8.0-3ubuntu1~18.04.2+esm7
3.8.0-3ubuntu1~18.04.2+esm8
3.8.0-3ubuntu1~18.04.2+esm9
3.8.0-3ubuntu1~18.04.2+esm10
Ecosystem specific
{
"binaries": [
{
"binary_version": "3.8.0-3ubuntu1~18.04.2+esm10",
"binary_name": "idle-python3.8"
},
{
"binary_name": "libpython3.8",
"binary_version": "3.8.0-3ubuntu1~18.04.2+esm10"
},
{
"binary_name": "libpython3.8-minimal",
"binary_version": "3.8.0-3ubuntu1~18.04.2+esm10"
},
{
"binary_name": "libpython3.8-stdlib",
"binary_version": "3.8.0-3ubuntu1~18.04.2+esm10"
},
{
"binary_version": "3.8.0-3ubuntu1~18.04.2+esm10",
"binary_name": "libpython3.8-testsuite"
},
{
"binary_name": "python3.8",
"binary_version": "3.8.0-3ubuntu1~18.04.2+esm10"
},
{
"binary_version": "3.8.0-3ubuntu1~18.04.2+esm10",
"binary_name": "python3.8-examples"
},
{
"binary_name": "python3.8-minimal",
"binary_version": "3.8.0-3ubuntu1~18.04.2+esm10"
},
{
"binary_name": "python3.8-venv",
"binary_version": "3.8.0-3ubuntu1~18.04.2+esm10"
}
]
}Ubuntu:Pro:20.04:LTS
python3.8
Package
- Name
- python3.8
- Purl
- pkg:deb/ubuntu/python3.8?arch=source&distro=esm-infra%2Ffocal
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affected
Affected versions
3.*
3.8.0-1
3.8.0-2
3.8.0-3
3.8.0-4
3.8.0-5
3.8.1-2ubuntu3
3.8.2~rc1-1ubuntu1
3.8.2-1
3.8.2-1ubuntu1
3.8.2-1ubuntu1.1
3.8.2-1ubuntu1.2
3.8.5-1~20.04
3.8.5-1~20.04.2
3.8.5-1~20.04.3
3.8.10-0ubuntu1~20.04
3.8.10-0ubuntu1~20.04.1
3.8.10-0ubuntu1~20.04.2
3.8.10-0ubuntu1~20.04.4
3.8.10-0ubuntu1~20.04.5
3.8.10-0ubuntu1~20.04.6
3.8.10-0ubuntu1~20.04.7
3.8.10-0ubuntu1~20.04.8
3.8.10-0ubuntu1~20.04.9
3.8.10-0ubuntu1~20.04.10
3.8.10-0ubuntu1~20.04.11
3.8.10-0ubuntu1~20.04.12
3.8.10-0ubuntu1~20.04.13
3.8.10-0ubuntu1~20.04.14
3.8.10-0ubuntu1~20.04.15
3.8.10-0ubuntu1~20.04.16
3.8.10-0ubuntu1~20.04.17
3.8.10-0ubuntu1~20.04.18
3.8.10-0ubuntu1~20.04.18+esm1
3.8.10-0ubuntu1~20.04.18+esm2
3.8.10-0ubuntu1~20.04.18+esm3
3.8.10-0ubuntu1~20.04.18+esm4
3.8.10-0ubuntu1~20.04.18+esm5
3.8.10-0ubuntu1~20.04.18+esm6
Ecosystem specific
{
"binaries": [
{
"binary_name": "idle-python3.8",
"binary_version": "3.8.10-0ubuntu1~20.04.18+esm6"
},
{
"binary_name": "libpython3.8",
"binary_version": "3.8.10-0ubuntu1~20.04.18+esm6"
},
{
"binary_name": "libpython3.8-minimal",
"binary_version": "3.8.10-0ubuntu1~20.04.18+esm6"
},
{
"binary_version": "3.8.10-0ubuntu1~20.04.18+esm6",
"binary_name": "libpython3.8-stdlib"
},
{
"binary_version": "3.8.10-0ubuntu1~20.04.18+esm6",
"binary_name": "libpython3.8-testsuite"
},
{
"binary_name": "python3.8",
"binary_version": "3.8.10-0ubuntu1~20.04.18+esm6"
},
{
"binary_name": "python3.8-examples",
"binary_version": "3.8.10-0ubuntu1~20.04.18+esm6"
},
{
"binary_name": "python3.8-full",
"binary_version": "3.8.10-0ubuntu1~20.04.18+esm6"
},
{
"binary_name": "python3.8-minimal",
"binary_version": "3.8.10-0ubuntu1~20.04.18+esm6"
},
{
"binary_name": "python3.8-venv",
"binary_version": "3.8.10-0ubuntu1~20.04.18+esm6"
}
]
}python3.9
Package
- Name
- python3.9
- Purl
- pkg:deb/ubuntu/python3.9?arch=source&distro=esm-apps%2Ffocal
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affected
Affected versions
3.*
3.9.0~rc1-1~20.04
3.9.0-5~20.04
3.9.5-3~20.04.1
3.9.5-3ubuntu0~20.04.1
3.9.5-3ubuntu0~20.04.1+esm1
3.9.5-3ubuntu0~20.04.1+esm2
3.9.5-3ubuntu0~20.04.1+esm3
3.9.5-3ubuntu0~20.04.1+esm4
3.9.5-3ubuntu0~20.04.1+esm5
3.9.5-3ubuntu0~20.04.1+esm6
3.9.5-3ubuntu0~20.04.1+esm7
3.9.5-3ubuntu0~20.04.1+esm8
3.9.5-3ubuntu0~20.04.1+esm9
3.9.5-3ubuntu0~20.04.1+esm10
Ecosystem specific
{
"binaries": [
{
"binary_version": "3.9.5-3ubuntu0~20.04.1+esm10",
"binary_name": "idle-python3.9"
},
{
"binary_name": "libpython3.9",
"binary_version": "3.9.5-3ubuntu0~20.04.1+esm10"
},
{
"binary_version": "3.9.5-3ubuntu0~20.04.1+esm10",
"binary_name": "libpython3.9-minimal"
},
{
"binary_version": "3.9.5-3ubuntu0~20.04.1+esm10",
"binary_name": "libpython3.9-stdlib"
},
{
"binary_name": "libpython3.9-testsuite",
"binary_version": "3.9.5-3ubuntu0~20.04.1+esm10"
},
{
"binary_version": "3.9.5-3ubuntu0~20.04.1+esm10",
"binary_name": "python3.9"
},
{
"binary_version": "3.9.5-3ubuntu0~20.04.1+esm10",
"binary_name": "python3.9-examples"
},
{
"binary_name": "python3.9-full",
"binary_version": "3.9.5-3ubuntu0~20.04.1+esm10"
},
{
"binary_version": "3.9.5-3ubuntu0~20.04.1+esm10",
"binary_name": "python3.9-minimal"
},
{
"binary_version": "3.9.5-3ubuntu0~20.04.1+esm10",
"binary_name": "python3.9-venv"
}
]
}Ubuntu:Pro:22.04:LTS
python3.11
Package
- Name
- python3.11
- Purl
- pkg:deb/ubuntu/python3.11?arch=source&distro=esm-apps%2Fjammy
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affected
Affected versions
3.*
3.11.0~rc1-1~22.04
3.11.0~rc1-1~22.04.1~esm1
3.11.0~rc1-1~22.04.1~esm2
3.11.0~rc1-1~22.04.1~esm3
3.11.0~rc1-1~22.04.1~esm4
3.11.0~rc1-1~22.04.1~esm5
3.11.0~rc1-1~22.04.1~esm6
3.11.0~rc1-1~22.04.1~esm7
3.11.0~rc1-1~22.04.1~esm8
3.11.0~rc1-1~22.04.1~esm9
Ecosystem specific
{
"binaries": [
{
"binary_name": "idle-python3.11",
"binary_version": "3.11.0~rc1-1~22.04.1~esm9"
},
{
"binary_name": "libpython3.11",
"binary_version": "3.11.0~rc1-1~22.04.1~esm9"
},
{
"binary_name": "libpython3.11-minimal",
"binary_version": "3.11.0~rc1-1~22.04.1~esm9"
},
{
"binary_name": "libpython3.11-stdlib",
"binary_version": "3.11.0~rc1-1~22.04.1~esm9"
},
{
"binary_name": "libpython3.11-testsuite",
"binary_version": "3.11.0~rc1-1~22.04.1~esm9"
},
{
"binary_name": "python3.11",
"binary_version": "3.11.0~rc1-1~22.04.1~esm9"
},
{
"binary_version": "3.11.0~rc1-1~22.04.1~esm9",
"binary_name": "python3.11-examples"
},
{
"binary_name": "python3.11-full",
"binary_version": "3.11.0~rc1-1~22.04.1~esm9"
},
{
"binary_name": "python3.11-minimal",
"binary_version": "3.11.0~rc1-1~22.04.1~esm9"
},
{
"binary_name": "python3.11-nopie",
"binary_version": "3.11.0~rc1-1~22.04.1~esm9"
},
{
"binary_version": "3.11.0~rc1-1~22.04.1~esm9",
"binary_name": "python3.11-venv"
}
]
}