search icon

How can we help you?

cross

close

Please type your search query, then press Enter or click the search button.

icon image
hamburger menu

Products

arrow down icon
Submit support request
DocumentationELS for Runtimes & LibrariesPython
sidebar hamburger menu

Python

Endless Lifecycle Support (ELS) for Python from TuxCare provides security fixes for Python versions that have reached their end-of-life. This allows you to continue running your server vulnerability-free.

Supported OS and Python versions

Supported architecture: 64-bit.

Operating SystemsPackage TypeOS Version
EL 7 (CentOS, CloudLinux, Oracle Linux, etc.)RPM7.x
EL 8 (CentOS, CentOS Stream, CloudLinux, Oracle Linux, etc.)RPM8.x
EL 9 (AlmaLinux, CentOS, CloudLinux, Oracle Linux, etc.)RPM9.x
EL 10 (AlmaLinux, CloudLinux, Oracle Linux, etc.)RPM10.x
UbuntuDEB16.04, 18.04, 20.04, 22.04, 24.04
DebianDEB10, 11, 12, 13

For supported Python versions, see cve.tuxcare.com.

  • Other distros and architectures upon request.

Installation Instructions for Linux

Get user credentials

  1. Obtain the required license to get access to the service.
  2. Contact sales@tuxcare.com to receive instructions for generating your unique access link (tokenized URL). Anonymous access is restricted.

Install ALT-Python

The following steps are provided for both RPM-based (CentOS, CentOS Stream, CloudLinux, Oracle Linux, AlmaLinux, etc) and DEB-based (Debian, Ubuntu) systems. Please select the appropriate tab for your distribution.

  1. Download the installer script:

    wget https://repo.alt.tuxcare.com/alt-python-els/install-els-alt-python-rpm-repo.sh

  2. Run the installer script with your key. The installation script registers the server to CLN with the key, and adds our PGP key and repository to the server.

    sh install-els-alt-python-rpm-repo.sh --license-key XXX-XXXXXXXXXXXX

  3. Verify that the installation was successful.

    To ensure the installation has been completed successfully, run the following command. It should return info about a package. If information about the package is available, it means that installation was successful. After which, updates will be available for installation from the repository using the usual command:

    yum upgrade

  4. To display detailed information about the installed package, run the following command:

    yum info alt-python36

    An example output:

    Available Packages
  Name         : alt-python36
  Version      : 3.6.15
  Release      : 4.el9
  Architecture : x86_64
  Size         : 26 k
  Source       : alt-python36-3.6.15-4.el9.src.rpm
  Repository   : alt-python
  Summary      : Version 3 of the Python programming language aka Python 3000
  URL          : https://www.python.org/
  License      : Python
  Description  : Python 3 is a new version of the language that is incompatible
               : with the 2.x line of releases. The language is mostly the same,
               : but many details, especially how built-in objects like
               : dictionaries and strings work, have changed considerably, and a
               : lot of deprecated features have finally been removed.

  5. Install Python package. For RPM-systems, it's necessary to enable the CodeReady Builder(CRB) repository, which contains the gdbm package.

    yum install alt-python36 --enablerepo crb

  6. alt-python versions are intended to be installed alongside the system's default python and allow multiple versions to coexist. To use a specific alt-python version, please run it directly from its installation directory, for example:

    $ /opt/alt/python36/bin/python3.6
Python 3.6.15 (default, Apr 10 2024, 00:00:00) 
[GCC 11.5.0 20240719 (Red Hat 11.5.0-5)] on linux
Type "help", "copyright", "credits" or "license" for more information.
>>> print("Hello, World!")
Hello, World!

OVAL data

This section contains information about available ELS for Python OVAL streams that can be used for partner application integration.

TuxCare Python ELS OVAL Streams

Currently, we provide OVAL data for the following OS versions:

How to use OVAL

OVAL can be used with the OpenSCAP tool.

  1. Install OpenSCAP

    yum install openscap openscap-utils scap-security-guide -y

  2. Download an OVAL stream. For example, EL 8:

    wget https://security.tuxcare.com/oval/els_alt_python/el8/oval.xml

  3. Run a scan:

    oscap oval eval --results result.xml --report report.xml oval.xml

Common Security Advisory Framework

Common Security Advisory Framework (CSAF) is a machine-readable format, standardized by OASIS. It's designed to enable consistent and automated sharing of security advisory information.

TuxCare publishes the following CSAF files at security.tuxcare.com:

  • CSAF Vulnerability Exploitability eXchange (VEX) files – indexed by CVE VEX documents are available in CSAF 2.0 format, including past CVEs.
  • CSAF Security Advisory files – advisories are published in CSAF 2.0 format and indexed by Security Advisory.

provider-matadata.json contains information for tools and users about where and how to retrieve CSAF advisories published by TuxCare. By OASIS requirements, it is available at two URLs (both serving the same file):

TuxCare CSAF data

Currently, we provide CSAF data for the following OS versions:

How to Use CSAF

The CSAF files are published in JSON format which is easy to parse and integrate with other tools - OASIS provides a list of reference tools that support CSAF.

Errata

Currently, we provide errata for the following OS versions:

RSS Feed

icon penEdit this page
Scroll up
2025. Cloud Linux Software Inc
×
Need help?
I'm a multilingual AI chatbot, trained to answer all your questions!