Index: plugins/python-loader/ChangeLog
===================================================================
--- plugins/python-loader/ChangeLog	(revision 17108)
+++ plugins/python-loader/ChangeLog	(working copy)
@@ -1,3 +1,9 @@
+2009-01-29  Jon K Hellan  <hellan@acm.org>
+
+	* gnm-py-interpreter.c (gnm_py_interpreter_new): Fix security 
+	vulnerability bug #569648 by initializing argv to a garbage path
+	and filtering it out again once PySys_SetArgv has been called.
+
 2008-12-30  Jean Brefort  <jean.brefort@normalesup.org>
 
 	* python-loader.c: (gplp_func_file_probe): add a format string to
Index: plugins/python-loader/gnm-py-interpreter.c
===================================================================
--- plugins/python-loader/gnm-py-interpreter.c	(revision 17108)
+++ plugins/python-loader/gnm-py-interpreter.c	(working copy)
@@ -79,7 +79,7 @@
 		G_TYPE_NONE, 0);
 }
 
-static char *plugin_argv[] = {(char *) "gnumeric", NULL};
+static char *plugin_argv[] = {(char *) "/must>not&exist/gnumeric", NULL};
 
 GnmPyInterpreter *
 gnm_py_interpreter_new (GOPlugin *plugin)
@@ -101,6 +101,7 @@
 	interpreter->plugin = plugin;
 
 	PySys_SetArgv (G_N_ELEMENTS (plugin_argv) - 1, plugin_argv);
+	PyRun_SimpleString("import sys; sys.path = filter(lambda x: x != '/must>not&exist', sys.path)");
 	py_initgnumeric (interpreter);
 
 	return interpreter;
