gnu: python-afdko: Update to 3.9.4.
* gnu/packages/fontutils.scm (python-afdko): Update to 3.9.4.
[source]: Remove patch.
[arguments]: Disable a few extra tests in the check phase override.
Delete use-system-libxml2 phase. Update patch-problematic-requirements phase.
* gnu/packages/patches/python-afdko-suppress-copyright-test.patch: Delete
file.
* gnu/local.mk (dist_patch_DATA): De-register it.
gnu: python-fonttools-next: Update to 4.39.3.
* gnu/packages/python-xyz.scm (python-fonttools-next): Update to 4.39.3.
(python-fonttools-full) [arguments]: Skip the MtiTest suite in the check phase
override.
gnu: python-fontmath: Update to 0.9.3.
* gnu/packages/fontutils.scm (python-fontmath): Update to 0.9.3.
gnu: python-pyftpdlib: Update to 1.5.7.
* gnu/packages/python-xyz.scm (python-pyftpdlib): Update to 1.5.7.
gnu: icecat: Update to 102.10.0-guix0-preview1 [security fixes].
Includes fixes for CVE-2023-1945, CVE-2023-29531, CVE-2023-29532,
CVE-2023-29533, CVE-2023-29535, CVE-2023-29536, CVE-2023-29539,
CVE-2023-29541, CVE-2023-29542, CVE-2023-29545, CVE-2023-29548,
CVE-2023-29550, and MFSA-TMP-2023-0001.
* gnu/packages/gnuzilla.scm (%icecat-base-version, %icecat-build-id): Update.
(icecat-source): Update gnuzilla commit, base version, and hashes.
Remove the vestigial RENAME_CMD environment variable setting.
(icecat-102.9.0-source): New variable.
(icedove-source): Use it.
gnu: heimdal: Enable OpenLDAP support.
* gnu/packages/kerberos.scm (heimdal)
[native-inputs]: Add bison, flex and pkg-config.
[inputs]: Remove mit-krb5. Add libcap-ng and openldap.
Signed-off-by: Maxim Cournoyer <maxim.cournoyer@gmail.com>
Modified-by: Maxim Cournoyer <maxim.cournoyer@gmail.com>
gnu: heimdal: Apply patch to fix CVE-2022-45142.
Several recent Heimdal releases are affected by the serious vulnerability
CVE-2022-45142, which NIST scored as "7.5 HIGH". [1]
At the time of writing, the upstream developers had not yet cut any releases
post-7.8.0, which is why the patch is being applied here.
The patch was extracted from Helmut Grohne's public vulnerability
disclosure. [2]
[1] https://nvd.nist.gov/vuln/detail/CVE-2022-45142
[2] https://www.openwall.com/lists/oss-security/2023/02/08/1
* gnu/packages/patches/heimdal-CVE-2022-45142.patch: New patch.
* gnu/local.mk (dist_patch_DATA): Register it.
* gnu/packages/kerberos.scm (heimdal)[source]: Apply it.
Signed-off-by: Maxim Cournoyer <maxim.cournoyer@gmail.com>
gnu: heimdal: Update to 7.8.0 [fixes CVE-2022-44640].
* gnu/packages/kerberos.scm (heimdal): Update to 7.8.0.
[source]: Adjust date in snippet.
[native-inputs]: Add python. Remove perl.
Signed-off-by: Maxim Cournoyer <maxim.cournoyer@gmail.com>
Modified-by: Maxim Cournoyer <maxim.cournoyer@gmail.com>
gnu: opendht: Update to 2.5.2.
* gnu/packages/networking.scm (opendht): Update to 2.5.2.
gnu: emacs-gptel: Update to 0.3.2.
* gnu/packages/emacs-xyz.scm (emacs-gptel): Update to 0.3.2.
gnu: gerbil: Use G-expressions.
* gnu/packages/scheme.scm (gerbil)[source, arguments]: Reindent.
[arguments]: Rewrite using G-expressions. Do not return #t from custom
phases. Use #:tests? instead of deleting the check phase.
Signed-off-by: Ludovic Courtès <ludo@gnu.org>
gnu: gerbil: Update to 0.17.0.
* gnu/package/scheme.scm (gerbil): Update to 0.17.0.
Signed-off-by: Ludovic Courtès <ludo@gnu.org>
gnu: Add emacs-gptel.
* gnu/packages/emacs-xyz.scm (emacs-gptel): New variable.
Signed-off-by: Nicolas Goaziou <mail@nicolasgoaziou.fr>
gnu: Add python-sentencepiece.
* gnu/packages/machine-learning.scm (python-sentencepiece): New variable.
Signed-off-by: Nicolas Goaziou <mail@nicolasgoaziou.fr>
gnu: Add sentencepiece.
* gnu/packages/machine-learning.scm (sentencepiece): New variable.
Signed-off-by: Nicolas Goaziou <mail@nicolasgoaziou.fr>
news: Add entry for the linux-libre-lts 6.1 update.
* etc/news.scm: Add entry.
news: Add 'de' translation.
* etc/news.scm: Add German translation of 'guix shell -CW' entry.
news: Add entry for 'guix shell --container --nesting'.
* etc/news.scm: Add entry.
gnu: go-1.18: Fix packaging logic.
* gnu/packages/golang.scm (go-1.18)[arguments]: Only replace the custom
'patch-gcc:lib phase on certain architectures.