Security vulnerability in str.format in Python

The author proposes a change that we as the user can implement between now the the time this issue is patched.

Having never worked on the core source code for a language like python, I would like to know what the Python 3.6 maintainers might do to patch this vulnerability? How would they fix it at the core level?