Hello Security Team, python2.7 was marked unsupported in bullseye.
We recently noted that pypy[v2] (included up to bullseye) and jython (all dists) include the python2 stdlib. Unlike pypy3, neither package currently track the associated CVEs.
Do we want to mark pypy and jython as EOL, or limited-support, in debian-security-support?
Incidentally are there other packages that mass-embed python2 stdlib that we should also consider (I checked data/embedded-code-copies)?
Cheers! Sylvain Beucler Debian LTS Team