Subject: Re: bug#70440: [PATCH] Use -P switch when calling 'python-interpreter'

From: Eli Zaretskii <[email-masked]>
Date: Fri, 19 Apr 2024 22:01:44 +0300

> From: Augusto Stoffel <[email-masked]>
> Cc: [email-masked],  [email-masked]
> Date: Fri, 19 Apr 2024 20:30:27 +0200
> 
> On Fri, 19 Apr 2024 at 21:17, Eli Zaretskii wrote:
> 
> >> That's a misunderstanding.  My patch only affects the following
> >> commands:
> >> 
> >>   python-sort-imports
> >>   python-add-import
> >>   python-fix-imports
> >>   python-remove-import
> >>   python-import-symbol-at-point
> >
> > Affects in what way?  AFAIU, with your patch these commands will not
> > work if Python doesn't support -P.  Is that right?
> 
> Yes.

That's what IMO is unthinkable: we cannot possibly force the user's
hand that much, especially since this used to work before.  Users need
to learn about the problem and install a newer Python, and then the
security hole will be gone, at least as far as invoking Python from
Emacs is concerned.  The most we can do is urge the users to upgrade
in the NEWS entry where we announce this new feature.