Hi, Léo Le Bouter via Bug reports for GNU Guix skribis: > * gnu/packages/base.scm (patch/fixed): New variable. > (patch)[replacement]: Graft. It’s (almost) useless to provide a graft of ‘patch’ because patch is usually a build-time only dependency. (Maybe we can tell it’s not vulnerable to the issues at hand because in that context it’s always given controlled input: the package patches.) What could be useful is to provide a second version of patch so that people running ‘guix install patch’ or similar get the newer version. HTH, Ludo’.