Endless Lifecycle Support for Python

Keep Python 2.7 and EOL Python 3.x versions secure, without migrating

Supported versions:

2.7 3.6

CVE patches for Python 2.7 and Python 3.3 through 3.13 versions past end of life. Delivered through your existing package manager. No forced migration to newer Python versions.

Ask Us a Question View Documentation

TuxCare has successfully resolved more than 14,000 CVEs in open-source products to date (and counting), ensuring robust security and compliance for enterprise systems.

Challenges with Backporting

Backporting unsupported Python versions takes deep expertise and experience. Clients who require this bridge need multiple layers of support, including continuous patching for current and future CVEs. TuxCare, a global leader in Linux and open‑source patching, delivers that protection so your applications run securely on modern enterprise platforms.

Capturing your technical needs today

TuxCare offers similar code bridge capabilities for PHP and other applications requiring extended support beyond the
manufacturers' lifecycles. Application teams need time to develop their next-gen code and communicate confidence with
their clients while having the ability to extend the life of their solution and maintain the highest security.

ELS from TuxCare buys you the time needed while providing the required updates to keep your
client secure during your application transformation.

Extend your timeline for development without rushing clients to upgrade prematurely.

Create a solid migration of code without jeopardizing client stability.

Continue to receive CVE updates well beyond the manufacturer's EOL date.

Partnering with TuxCare

Whether you need to keep critical applications on Python 2.7 or early Python 3 (3.3‑3.9) today or map your path
to the latest Python releases, TuxCare is the partner of choice. We provide the security bridge that lets you run legacy code
with confidence while you plan—and fund—future upgrades, all without disrupting your customer base.

Ask a Question

Securely Moving Forward

Why should you change your code when a new version of a language is released if it runs fine as-is? Python Endless
Lifecycle Support from TuxCare breathes new life into code written for out-of-support Python versions with rapid security
updates, vulnerability fixes, and more.

Why TuxCare?

TuxCare makes enterprise Linux more secure, stable, and reliable at our core. We take care of Linux and other open-source frameworks so that organizations can comfortably and affordably use open-source software to support environments requiring high levels of cybersecurity, stability, and availability.

Learn more about what TuxCare’s Endless Lifecycle Support for Python can do for your organization.

Ask a Question

Why TuxCare?

15 years of proven excellence in open-source patching have created highly
automated processes and systems, providing:

Extensive Coverage of Open-Source Technologies

We provide long-term security across your entire stack, supporting a wide and continually expanding set of open-source projects, libraries, and runtimes – all from a single, trusted partner.

Efficiencies in Build Chains and Testing

We utilize advanced automation across CVE discovery, backporting, building, and release workflows to accelerate delivery and ensure the highest possible quality of security patches.

Identification and Patching of Transitive Dependencies

We go beyond surface-level scanning to uncover and fix hidden vulnerabilities deep in your dependency trees, securing the entire software supply chain with precision and scale.

Fast and Consistent Delivery of Patches with Supporting SLAs

Automated pipelines and mature workflows ensure rapid, reliable patch delivery backed by SLAs – giving you confidence in your risk management and compliance posture.

We’ve Been Powering Enterprise-Grade Patching At
Unprecedented Scale – and We're Just Getting Started

2,700+
Enterprise Clients

70,000+Packages Curated

420,000+
Patches Delivered

14,000+
Vulnerabilities Fixed

11,000+
Kernels Supported

70+
Linux Distro Versions Supported

Frequently Asked Questions

ELS for Python delivers security fixes for Python interpreter versions that have reached end of life upstream. TuxCare ships patched builds called alt-python, which install alongside the system Python under /opt/alt/, so you can keep running apps on Python 2.7 or an older 3.x release while TuxCare continues to fix security issues in the interpreter.

Python 2.7 and 3.6 through 3.14, depending on the operating system. Every version is available on EL 7, 8, 9 and 10, on Ubuntu 18.04, 20.04 and 22.04, and on Debian 12 and 13, with slightly narrower sets on Ubuntu 16.04 and 24.04, Debian 10 and 11. Alpine 3.23 and 3.24 get Python 3.6 through 3.9. The full matrix is on docs.tuxcare.com.

Yes. Python 3.10 reached its upstream end of life in October 2026, following Python 3.9 in October 2025 and 3.8 in October 2024. After that point, CPython stops shipping security fixes for the line. ELS for Python keeps patching those versions, along with 2.7, 3.6 and 3.7, so apps pinned to them stay secure and compliant.

Yes. Every alt-python package ships its own bundled pip, setuptools and wheel, and those are covered by ELS and patched together with the interpreter. That matters because packaging tools carry their own CVEs, and scanners flag them just as readily as the interpreter itself.

That's exactly how alt-python is designed. Each version installs into its own directory under /opt/alt/, so a legacy app can stay on 3.6 while newer services run 3.12 on the same host. Nothing replaces or overwrites the operating system's default Python.

TuxCare targets 14 days from public disclosure for critical and high vulnerabilities (CVSS 7.0 and above), 60 days for medium and 90 days for low. Reported issues get an initial response within three days, and TuxCare publishes VEX for runtimes as part of its CSAF advisory feed, which compatible scanners can use to see what's actually fixed.

The interpreter is only half the picture. TuxCare also maintains patched versions of widely used Python libraries, including requests, urllib3, cryptography, Jinja2, Flask and FastAPI, delivered through a TuxCare-managed PyPI-compatible index. Pairing the runtime with library coverage addresses findings in requirements.txt as well as in the interpreter.

Talk to a TuxCare Expert

Tell us your challenges and our experts will help you find the best approach
to address them with the TuxCare product line.

Ask a Question

Long-Term Security After Standard Support Ends

TuxCare ELS continues to deliver enduring security for your distro, language, or software development framework for as many years as your organization requires

CentOS Stream

 Endless Lifecycle Support for CentOS Stream 8

End of life: June 2024

You can rely on Endless Lifecycle Support for CentOS Stream 8 to continue receiving security updates for as long as you need – so that you have enough time to migrate to another Linux distribution securely.

Learn More

RHEL 7

Endless Lifecycle Support for RHEL 7

End of life: June 2024

Secure your RHEL 7 infrastructure beyond the end of life with ELS – an affordable, precision-engineered support solution that delivers ongoing security patches for as long as you need.

Learn More

Oracle Linux 7

Endless Lifecycle Support for Oracle Linux 7

End of life: December 2024

Give your team plenty of time to upgrade to Oracle Linux 8 or 9 with ELS for Oracle Linux 7, which continues to deliver security patches for as long as you need at a much more affordable cost than an Oracle Premier Support plan.

Learn More

.NET 6.0

Endless Lifecycle Support for .NET

End of life: November 2024

Keep using .NET 6 while continuing to receive security updates on both Windows and Linux, for as many years as you need, so your .NET applications remain secure, stable, and compatible until you’re ready to upgrade.

Learn More

Angular

Endless Lifecycle Support for Angular

End of life: Varies for different versions

Need more time for a safe and smooth upgrade to the latest Angular version? With ELS from TuxCare, you can maintain the security, stability, and compatibility of your existing Angular applications for as many years as you need.

Learn More

AngularJS

Endless Lifecycle Support for AngularJS

End of life: December 2021

Not ready to upgrade your end-of-life AngularJS applications just yet? TuxCare ELS lets you keep them secure, stable, and fully compatible for as long as you need — giving you the breathing room to upgrade when it works for you.

Learn More

Apache Tomcat

Endless Lifecycle Support for Apache Tomcat

End of life: March 2024

Ensure your Apache Tomcat deployment stays protected without security risks or compatibility concerns. With ELS, you can continue using end-of-life Apache Tomcat versions with confidence for as long as you need.

Learn More

CentOS 6

Endless Lifecycle Support for CentOS 6

End of life: December 2020

TuxCare’s Endless Lifecycle Support gives you the same official security patches you used to get with CentOS 6, and we’ll continue to provide you with ongoing security support for as many years as you need.

Learn More

CentOS 7

Endless Lifecycle Support for CentOS 7

End of life: June 2024

CentOS 7 is going end of life in June 2024, but you can enjoy ongoing security updates for as long as you need with our Extended Lifecycle Support – buying time to plan your migration, while keeping your workload safe.

Learn More

RHEL 7

Endless Lifecycle Support for RHEL 7

End of life: June 2024

Secure your RHEL 7 infrastructure beyond the end of life with ELS – an affordable, precision-engineered support solution that delivers ongoing security patches for as long as you need.

Learn More

RHEL 7

Endless Lifecycle Support for RHEL 7

End of life: June 2024

Secure your RHEL 7 infrastructure beyond the end of life with ELS – an affordable, precision-engineered support solution that delivers ongoing security patches for as long as you need.

Learn More

Endless Lifecycle Support for Language Ecosystems

End of life: Learn More

OpenJDK

Endless Lifecycle Support for OpenJDK

End of life:

Keep your Java workloads secure on an out-of-support OpenJDK version – skipping the grind of full QA retest cycles and upgrade-induced breaking changes.

Learn More

Oracle Linux 6

Endless Lifecycle Support for Oracle Linux 6

End of life: March 2021

TuxCare will deliver Extended Lifecycle Support for Oracle Linux 6 for as many years as you need, saving you significantly on costs compared to Oracle Linux Premier Support while providing the same vulnerability coverage.

Learn More

PHP

Endless Lifecycle Support for PHP

End of life:

Buy yourself and your organization time to develop new production code while receiving ongoing security patches for out-of-support PHP versions with Endless Lifecycle Support to maintain the safety of your systems.

Learn More

Ubuntu 16.04

Endless Lifecycle Support for Ubuntu 16.04

End of life: April 2021

Save on costs compared to Ubuntu Pro for Ubuntu 16.04 when you choose TuxCare Endless Lifecycle Support for ongoing security maintenance, which will keep you protected for as many years as you need beyond the end-of-life date.

Learn More

Ubuntu 18.04

Endless Lifecycle Support for Ubuntu 18.04

End of life: June 2023

Choose TuxCare for Ubuntu 18.04 endless support and save significantly over an Ubuntu Pro subscription from Canonical, with security updates for your Ubuntu workloads lasting as long as you need.

Learn More

Ubuntu 20.04

Endless Lifecycle Support for Ubuntu 20.04

End of life: End of Life: May 2025

Continue safely working with Ubuntu 20.04 for as many years as you’d like, with TuxCare delivering ongoing security updates to protect your systems for as long as your organization needs.

Learn More

RHEL 7

Endless Lifecycle Support for RHEL 7

End of life: June 2024

Secure your RHEL 7 infrastructure beyond the end of life with ELS – an affordable, precision-engineered support solution that delivers ongoing security patches for as long as you need.

Learn More