From f911d6929fd9eeb86bec8e1040d5d287c5ab59bf Mon Sep 17 00:00:00 2001
From: Martin Weinelt <hexa@darmstadt.ccc.de>
Date: Wed, 28 Oct 2026 13:03:18 +0100
Subject: [PATCH] python311: 3.11.17 -> 3.11.18

https://docs.python.org/release/3.11.18/whatsnew/changelog.html

Fixes: CVE-2026-114583, CVE-2026-115557
---
 pkgs/development/interpreters/python/cpython/default.nix | 4 ++--
 pkgs/development/interpreters/python/default.nix         | 4 ++--
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/pkgs/development/interpreters/python/cpython/default.nix b/pkgs/development/interpreters/python/cpython/default.nix
index 7acb84279f184..d063693af6026 100644
--- a/pkgs/development/interpreters/python/cpython/default.nix
+++ b/pkgs/development/interpreters/python/cpython/default.nix
@@ -395,11 +395,11 @@ stdenv.mkDerivation (finalAttrs: {
   ++ optionals (pythonAtLeast "3.13") [
     ./3.13/virtualenv-permissions.patch
   ]
-  ++ optionals (mimetypesSupport && (pythonOlder "3.12" || pythonAtLeast "3.16")) [
+  ++ optionals (mimetypesSupport && pythonAtLeast "3.16") [
     # Make the mimetypes module refer to the right file
     ./mimetypes.patch
   ]
-  ++ optionals (mimetypesSupport && pythonAtLeast "3.12" && pythonOlder "3.16") [
+  ++ optionals (mimetypesSupport && pythonOlder "3.16") [
     ./3.14/mimetypes.patch
   ]
   ++ optionals (hasDistutilsCxxPatch && pythonOlder "3.12") [
diff --git a/pkgs/development/interpreters/python/default.nix b/pkgs/development/interpreters/python/default.nix
index 21433585395e6..0583c54f97c5f 100644
--- a/pkgs/development/interpreters/python/default.nix
+++ b/pkgs/development/interpreters/python/default.nix
@@ -35,10 +35,10 @@
       sourceVersion = {
         major = "3";
         minor = "11";
-        patch = "17";
+        patch = "18";
         suffix = "";
       };
-      hash = "sha256-v7dK05764nzaUQ8TSrQI4A+ZksVoUc/Asc21ZG2hFZk==";
+      hash = "sha256-kSDgplOGj242mNNs3ZnlpYkD7JRp5EjyHZj3sW2PopA=";
       inherit passthruFun;
     };