ArcMap Python Security Concerns

711
9
09-09-2021 01:37 PM
Labels (1)
AliceWilson
New Contributor II

We have several who still use ArcMap Desktop - we have all upgraded to 10.8.1. Our IT Dept. recently reached out to us as they discovered the security issues with the python version that comes in the arcmap build/install of 2.7.18 this is what shows up. How are you to continue to use ArcMap with a security risk that there doesn't seems to be a fix for.

105878

EOL/Obsolete Software: Python 2.7.x Detected

5

24

The system is at high risk of being exposed to security vulnerabilities. Since the vendor no longer provides updates; obsolete software is more vulnerable to viruses and other attacks.

9 Replies
JoeBorgione
MVP Esteemed Contributor

How are you to continue to use ArcMap with a security risk that there doesn't seems to be a fix for.

That's a great question!  The short answer is something along the lines of; you don't. The security risk is always going to be a problem, and if you think about, it's been there for years.  

Python 2.x is old school as opposed to the later 3.x releases and has limited shelf life at best.  My agency abandoned ArcMap/ArcCatalog a couple years ago.  I don't miss it at all.

That should just about do it....
0 Kudos
curtvprice
MVP Esteemed Contributor

 I don't miss it at all.

I think we are wired differently. I still miss workstation. RESELECT with KEYFILE, PROGRAM SECTION EVEN.

AML Forever. 😉

JoeBorgione
MVP Esteemed Contributor

I used weave Perl into AMLs.  Pretty cool, back then.

But ArcGIS Pro and Python 3.x is my story now, and I'm stickin' to it!

 

That should just about do it....
DanPatterson
MVP Esteemed Contributor

python 2.7 continues to be patched with security updates... if they are feasible.

That warning is just that.  The software is End of Life (but that hasn't stopped some of us from still being in this Community 😉 )

Having said that, dump arcmap, there is no reason to keep it going since people have had since 2015 to adapt to the newer technology. 

python 2.7 is 10+ years old. Python is at version 3.10, although Pro toddles along at 3.7.

AML... and Avenue, now that was worth keeping


... sort of retired...
curtvprice
MVP Esteemed Contributor

I have a button I wear at the UC sometime: "My AML from 1996 still works."

JoeBorgione
MVP Esteemed Contributor

@DanPatterson -

python 2.7 continues to be patched with security updates...

Even if 2.7 got patched, would that not require a new install of the patched version?  And how does anyone know when it's been patched?  And what has been patched patched?

Having said that, dump arcmap, there is no reason to keep it going since people have had since 2015 to adapt to the newer technology. 

Couldn't agree more!

That should just about do it....
0 Kudos
DanPatterson
MVP Esteemed Contributor

manual install... patching date would be noted on the floppy disk


... sort of retired...
0 Kudos
JoeBorgione
MVP Esteemed Contributor

You’re killing me, Patterson!

The OP is wondering ‘Who are these guys and why can’t I get straight answer out of them?’

That should just about do it....
JoeBorgione
MVP Esteemed Contributor

C39D3AA3-0988-46F4-9BC1-DE108893BC98.jpeg

That should just about do it....