On Sat, Oct 06, 2018 at 04:51:07PM +0200, Marius Bakke wrote: > From a60d655fd4dddb86e1c8134c675fb61af52b32af Mon Sep 17 00:00:00 2001 > From: Marius Bakke > Date: Sat, 6 Oct 2018 16:47:05 +0200 > Subject: [PATCH] gnu: python: Fix CVE-2018-14647. > > * gnu/packages/patches/python-CVE-2018-14647.patch: New file. > * gnu/local.mk (dist_patch_DATA): Register it. > * gnu/packages/python.scm (python-3/fixed): New variable. > (python-3.6)[replacement]: New field. > (python-minimal, python-debug, wrap-python3): Use PACKAGE/INHERIT instead of > standard inheritance. Thanks! I did some more basic tests with this one, using the extra hunk in your other mail. I think this change is okay.