Python 2 Support Past End of Life

The Python 2 programming language reached End of Life (EOL) in 2020, which means it is no longer being updated, not even for critical security vulnerabilities.ActiveState provides ongoing support and security updates for Python 2, helping you:

• Maintain legacy Python 2 applications, so your team can focus on high-value projects.
• Secure Python 2 in non-production environments, e.g. dev/testing, to prevent supply chain attacks.
• Migrate to Python 3 faster, with lower cost and risk.

Security Update: We have recently assessed a critical vulnerability (CVE) that impacts Python 2.7:

CVE-2021-3711 affects OpenSSL and allows a malicious attacker who is able present SM2 content for decryption to cause a buffer overflow, possibly changing application behavior or causing the application to crash.

See our Python 2 vulnerability (CVE) updates here.

Python 2 codebases will become less reliable and more vulnerable as security issues emerge over time.

• No more official support from the Python core team.
• Popular packages have sunset their Python 2 support.
• Python 2 in non-production environments are vulnerable to supply chain attacks.
• Vendors are phasing out support for Python 2 distributions (Linux vendors, Docker, cloud providers).