gnu: isc-dhcp: Update to 4.3.3-P1 [fixes CVE-2015-8605].
* gnu/packages/admin.scm (isc-dhcp): Update to 4.3.3-P1.
gnu: sudo: Add fix for CVE-2015-5602.
* gnu/packages/patches/sudo-CVE-2015-5602.patch: New file.
* gnu-system.am (dist_patch_DATA): Add it.
* gnu/packages/admin.scm (sudo)[source]: Add patch.
gnu: sudo: Use /var/run/sudo instead of /run/sudo.
* gnu/packages/admin.scm (sudo)[arguments]: Pass
--with-rundir=/var/run/sudo since /var/run is cleaned up at boot time on
GuixSD whereas /run is not.
gnu: isc-dhcp: Disable parallel build.
* gnu/packages/admin.scm (isc-dhcp)[arguments]: Disable parallel build.
gnu: isc-dhcp: Update to 4.3.3; update bundled bind to 9.9.8-P2.
Fixes CVE-2015-8000 and CVE-2015-8461.
* gnu/packages/admin.scm (isc-dhcp): Update to 4.3.3.
[inputs]: Add 'bind-source-tarball'.
[arguments]: Use modify-phases. Add 'replace-bundled-bind' phase.
In 'post-configure' phase, avoid hard-coding version numbers of
bundled bind.
gnu: Add cpulimit.
* gnu/packages/admin.scm (cpulimit): New variable.
gnu: sudo: Build sequentially.
Possibly fixes <http://bugs.gnu.org/21918>.
* gnu/packages/admin.scm (sudo)[arguments]: Add #:parallel-build? #f.
gnu: sudo: Upgrade to 1.8.15 [fixes CVE-2015-5602].
* gnu/packages/admin.scm (sudo)[arguments]: Add CPPFLAGS to
#:configure-flags. In 'pre-configure' phase, modify
'sudo_usage.h.in'. Add pattern to remove '-o 0 -g 0' installation
flag in 'Makefile.in', and remove pattern for '-O 0 -G 0'. Remove
modifications of 'configure'.
gnu: wpa-supplicant: Add fixes for CVE-2015-{5310,5314,5315,5316}.
* gnu/packages/patches/wpa-supplicant-CVE-2015-5310.patch,
gnu/packages/patches/wpa-supplicant-CVE-2015-5314.patch,
gnu/packages/patches/wpa-supplicant-CVE-2015-5315.patch,
gnu/packages/patches/wpa-supplicant-CVE-2015-5316.patch: New files.
* gnu-system.am (dist_patch_DATA): Add them.
* gnu/packages/admin.scm (wpa-supplicant-minimal)[source]: Add patches.
gnu: tcpdump: Update to 4.7.4.
* gnu/packages/admin.scm (tcpdump): Update to 4.7.4.
gnu: libpcap: Update to 1.7.4.
* gnu/packages/admin.scm (libpcap): Update to 1.7.4.
Merge branch 'master' into core-updates
gnu: wpa-supplicant: Update to 2.5.
* gnu/packages/patches/wpa-supplicant-2015-2-fix.patch,
gnu/packages/patches/wpa-supplicant-2015-3-fix.patch,
gnu/packages/patches/wpa-supplicant-2015-4-fix-pt1.patch,
gnu/packages/patches/wpa-supplicant-2015-4-fix-pt2.patch,
gnu/packages/patches/wpa-supplicant-2015-4-fix-pt3.patch,
gnu/packages/patches/wpa-supplicant-2015-4-fix-pt4.patch,
gnu/packages/patches/wpa-supplicant-2015-4-fix-pt5.patch,
gnu/packages/patches/wpa-supplicant-2015-5-fix.patch,
gnu/packages/patches/wpa-supplicant-CVE-2015-1863.patch: Delete files.
* gnu-system.am (dist_patch_DATA): Remove them.
* gnu/packages/admin.scm (wpa-supplicant-minimal): Update to 2.5.
Remove patches.
Merge branch 'core-updates'
Merge branch 'master' into core-updates
gnu: wpa-supplicant-light: Rename to wpa-supplicant-minimal.
* gnu/packages/admin.scm (wpa-supplicant-light): Rename to ...
(wpa-supplicant-minimal): ...this.
(wpa-supplicant): Use it.
* gnu/system/install.scm (installation-os): Use it.
Build tarballs with deterministic file ordering.
* guix/packages.scm (patch-and-repack)[build],
gnu/system/install.scm (self-contained-tarball)[build],
gnu/packages/make-bootstrap.scm (tarball-package),
gnu/packages/admin.scm (isc-dhcp),
gnu/packages/video.scm (avidemux): Pass "--sort=name" to 'tar'.
gnu: shadow: Update to 4.2.1.
* gnu/packages/admin.scm (shadow): Update to 4.2.1.
[source]: Use the release tarball.
gnu: dmd: Apply 'make-forkexec-constructor' patch.
Proposed by Andy Wingo <wingo@igalia.com>.
* gnu/packages/admin.scm (dmd): Add 'base-version' and 'patch-level'
variables.
[source]: Use 'base-version' instead of 'version'. Add 'patches' field.