← Back to context

Comment by uniqueuid

5 days ago

The latest 2.7 seems to have a lot of CVEs (did not verify that manually though)

https://www.cvedetails.com/version-list/10210/18230/10/Pytho...

IIRC some commercial distros maintain patches for 2.7 but then you're paying for being 15 years behind the future.

2 comments

uniqueuid

Reply
gusgus01  5 days ago

Yeah, it's been 5 years (almost 6) since python 2.7 stopped receiving security updates, but it does still run on modern OS's.

Looking at the list, I'm actually kind of surprised there aren't more CVEs for python 2.7, but if you're only running it locally or on an intranet I could see letting it ride.