gnu: ruby-rubyzip: Re-instate all tests.
* gnu/packages/ruby.scm (ruby-rubyzip)
[arguments]: Do not patch ruby shebang in the patch-tests phase.
Remove the disable-problematic-tests phase. Add the
unpatch-some-source-shebangs phase.
gnu: icecat: Update to 102.10.0-guix0-preview1 [security fixes].
Includes fixes for CVE-2023-1945, CVE-2023-29531, CVE-2023-29532,
CVE-2023-29533, CVE-2023-29535, CVE-2023-29536, CVE-2023-29539,
CVE-2023-29541, CVE-2023-29542, CVE-2023-29545, CVE-2023-29548,
CVE-2023-29550, and MFSA-TMP-2023-0001.
* gnu/packages/gnuzilla.scm (%icecat-base-version, %icecat-build-id): Update.
(icecat-source): Update gnuzilla commit, base version, and hashes.
Remove the vestigial RENAME_CMD environment variable setting.
(icecat-102.9.0-source): New variable.
(icedove-source): Use it.
services: nginx: Add reopen action.
This is required to allow log file rotations using rottlog, etc.
* gnu/services/web.scm (nginx-shepherd-service): Add reopen shepherd action.
Signed-off-by: Maxim Cournoyer <maxim.cournoyer@gmail.com>
services: nginx: Make logging level configurable.
* gnu/services/web.scm (<nginx-configuration>)[log-level]: New field.
(assert-valid-log-level): New procedure.
(default-nginx-config): Make log-level configurable.
* doc/guix.texi (Web Services): Document it.
Signed-off-by: Maxim Cournoyer <maxim.cournoyer@gmail.com>
gnu: heimdal: Enable OpenLDAP support.
* gnu/packages/kerberos.scm (heimdal)
[native-inputs]: Add bison, flex and pkg-config.
[inputs]: Remove mit-krb5. Add libcap-ng and openldap.
Signed-off-by: Maxim Cournoyer <maxim.cournoyer@gmail.com>
Modified-by: Maxim Cournoyer <maxim.cournoyer@gmail.com>
gnu: heimdal: Apply patch to fix CVE-2022-45142.
Several recent Heimdal releases are affected by the serious vulnerability
CVE-2022-45142, which NIST scored as "7.5 HIGH". [1]
At the time of writing, the upstream developers had not yet cut any releases
post-7.8.0, which is why the patch is being applied here.
The patch was extracted from Helmut Grohne's public vulnerability
disclosure. [2]
[1] https://nvd.nist.gov/vuln/detail/CVE-2022-45142
[2] https://www.openwall.com/lists/oss-security/2023/02/08/1
* gnu/packages/patches/heimdal-CVE-2022-45142.patch: New patch.
* gnu/local.mk (dist_patch_DATA): Register it.
* gnu/packages/kerberos.scm (heimdal)[source]: Apply it.
Signed-off-by: Maxim Cournoyer <maxim.cournoyer@gmail.com>
gnu: heimdal: Update to 7.8.0 [fixes CVE-2022-44640].
* gnu/packages/kerberos.scm (heimdal): Update to 7.8.0.
[source]: Adjust date in snippet.
[native-inputs]: Add python. Remove perl.
Signed-off-by: Maxim Cournoyer <maxim.cournoyer@gmail.com>
Modified-by: Maxim Cournoyer <maxim.cournoyer@gmail.com>
gnu: mu: Update to 1.10.2.
* gnu/packages/mail.scm (mu): Update to 1.10.2.
[arguments]: Add build phase 'fix-build-system.
gnu: opendht: Update to 2.5.2.
* gnu/packages/networking.scm (opendht): Update to 2.5.2.
gnu: restinio: Update to 0.6.18-0.eda471e and enable tests.
* gnu/packages/networking.scm (restinio): Update to 0.6.18-0.eda471e.
[version]: Use git-version.
[arguments]: Enable tests, removing #:tests? argument.
status: Guard against a numerical overflow condition.
Fixes <https://issues.guix.gnu.org/62766>.
* guix/status.scm (update-build): Use 0 as progress when an exception occurs
while computing it.
gnu: Syncthing: Update to 1.23.4.
* gnu/packages/syncthing.scm (syncthing): Update to 1.23.4.
gnu: libconfig: Replace config script helpers.
* gnu/packages/textutils.scm (libconfig)[arguments]: Add phase to
replace config.guess, config.sub.
[native-inputs]: Add config.
gnu: ldc: Use default test check.
* gnu/packages/dlang.scm (ldc)[arguments]: Strip the inherited tests
configuration from ldc-bootstrap rather than setting it to #true.
gnu: qpdf: Fix cross-building.
* gnu/packages/pdf.scm (qpdf)[arguments]: When cross-building add
configure-flags to set /dev/random and /dev/urandom as existing.
gnu: ijs: Fix cross-building to riscv64-linux.
* gnu/packages/ghostscript.scm (ijs)[arguments]: When building for
riscv64-linux replace config.guess and config.sub.
[native-inputs]: When building for riscv64-linux add config.
gnu: cups-minimal: Fix cross-building to riscv64-linux.
* gnu/packages/cups.scm (cups-minimal)[arguments]: When building for
riscv64-linux replace the config.guess and config.sub files.
[native-inputs]: When building for riscv64-linux add config.
doc: Regarding SSL certs, clarify when we write about Guix System.
Rationale: Even though the section 'X.509 Certificates' is part of the
System Configuration chapter, readers might also come here from a
cross-reference when reading about Application Setup on a foreign
distro.
* doc/guix.texi (System Configuration)[X.509 Certificates]: Clarify.