On Thu, Dec 21, 2017 at 11:15:46AM +0100, Ludovic Courtès wrote: > Leo Famulari skribis: > > + ;; XXX Oops, a redefinition of the patches field, which means the > > + ;; patch for CVE-2016-4738 is not used. Fixed in the definition of > > + ;; libxslt-fixed below. > > (patches (search-patches "libxslt-generated-ids.patch")))) > > Oops, indeed! You can remove the unused ‘patches’ line while you’re at it. I commented it out and pushed as 0c9c9526bb3fb665997b3b054f8b57ffdb559043.