Leo Famulari writes: > On Sat, Oct 06, 2018 at 04:51:07PM +0200, Marius Bakke wrote: >> From a60d655fd4dddb86e1c8134c675fb61af52b32af Mon Sep 17 00:00:00 2001 >> From: Marius Bakke >> Date: Sat, 6 Oct 2018 16:47:05 +0200 >> Subject: [PATCH] gnu: python: Fix CVE-2018-14647. >> >> * gnu/packages/patches/python-CVE-2018-14647.patch: New file. >> * gnu/local.mk (dist_patch_DATA): Register it. >> * gnu/packages/python.scm (python-3/fixed): New variable. >> (python-3.6)[replacement]: New field. >> (python-minimal, python-debug, wrap-python3): Use PACKAGE/INHERIT instead of >> standard inheritance. > > Thanks! I did some more basic tests with this one, using the extra hunk > in your other mail. I think this change is okay. As I wrote in another thread, I added this commit (with extra hunk) to my private branch a few days ago, along with the Python-2 security fixes, updated my GuixSD GNOME 3 system and user profile, and everything seems to be working well. I think they are both ready to push to master. Thank you, Marius! Mark