ArcMap Python Security Concerns

[AliceWilson]

We have several who still use ArcMap Desktop - we have all upgraded to 10.8.1. Our IT Dept. recently reached out to us as they discovered the security issues with the python version that comes in the arcmap build/install of 2.7.18 this is what shows up. How are you to continue to use ArcMap with a security risk that there doesn't seems to be a fix for.

105878

EOL/Obsolete Software: Python 2.7.x Detected

5

24

The system is at high risk of being exposed to security vulnerabilities. Since the vendor no longer provides updates; obsolete software is more vulnerable to viruses and other attacks.

[JoeBorgione]

How are you to continue to use ArcMap with a security risk that there doesn't seems to be a fix for.

That's a great question!  The short answer is something along the lines of; you don't. The security risk is always going to be a problem, and if you think about, it's been there for years.  

Python 2.x is old school as opposed to the later 3.x releases and has limited shelf life at best.  My agency abandoned ArcMap/ArcCatalog a couple years ago.  I don't miss it at all.

[curtvprice]

>  I don't miss it at all.

I think we are wired differently. I still miss workstation. RESELECT with KEYFILE, PROGRAM SECTION EVEN.

AML Forever. 😉

[JoeBorgione]

I used weave Perl into AMLs.  Pretty cool, back then.

But ArcGIS Pro and Python 3.x is my story now, and I'm stickin' to it!

[DanPatterson]

python 2.7 continues to be patched with security updates... if they are feasible.

That warning is just that.  The software is End of Life (but that hasn't stopped some of us from still being in this Community 😉 )

Having said that, dump arcmap, there is no reason to keep it going since people have had since 2015 to adapt to the newer technology. 

python 2.7 is 10+ years old. Python is at version 3.10, although Pro toddles along at 3.7.

AML... and Avenue, now that was worth keeping

[curtvprice]

I have a button I wear at the UC sometime: "My AML from 1996 still works."

[JoeBorgione]

@DanPatterson -

python 2.7 continues to be patched with security updates...

Even if 2.7 got patched, would that not require a new install of the patched version?  And how does anyone know when it's been patched?  And what has been patched patched?

Having said that, dump arcmap, there is no reason to keep it going since people have had since 2015 to adapt to the newer technology. 

Couldn't agree more!

[DanPatterson]

manual install... patching date would be noted on the floppy disk

[JoeBorgione]

You’re killing me, Patterson!

The OP is wondering ‘Who are these guys and why can’t I get straight answer out of them?’

[JoeBorgione]