gnu: fail2ban: Apply patch to fix sshd jail filter.
Recent OpenSSH uses an 'sshd-session' instead of 'sshd' binary name.
* gnu/packages/patches/fail2ban-fix-sshd-filter.patch: New file.
* gnu/local.mk (dist_patch_DATA): Register it.
* gnu/packages/admin.scm (fail2ban): Apply it.
Change-Id: I1f46e6768f4e04e97a8fcec189de45c2f1c26e1e
gnu: opusfile: Fix CVE-2022-47021 [security-fix].
* gnu/packages/patches/opusfile-CVE-2022-47021.patch: New patch.
* gnu/local.mk (dist_patch_DATA): Register it.
* gnu/packages/xiph.scm (opusfile): Apply it.
Change-Id: I32ce75de721778165da3627df34cad99e6d79630
Signed-off-by: Gabriel Wicki <gabriel@erlikon.ch>
gnu: kvmfr-linux-module: Update to B7.
* gnu/packages/video.scm (kvmfr-linux-module)[version]: Update to B7.
[source]: Remove patch.
* gnu/packages/patches/kvmfr-linux-module-fix-build.patch: Remove file.
* gnu/local.mk (dist_patch_DATA): Unregister file.
Change-Id: I5cb6dadd6640a34d0f667079e272a97d7abae0aa
gnu: audiofile: Update to 0.3.6 [security-fix].
* gnu/packages/audio.scm (audiofile): Update to 0.3.6.
Change-Id: I2dda621f60c27e02b1513e2d89a138136a1633ca
Signed-off-by: Ludovic Courtès <ludo@gnu.org>
gnu: esound: Fix build.
* gnu/packages/patches/esound-c99.patch: New patch.
* gnu/local.mk (dist_patch_DATA): Register it.
* gnu/packages/gstreamer.scm (esound): Apply it.
Change-Id: I6aa9ccda6e9948961b6e0011ebd813f43de1b18d
gnu: tensorflow-lite: Update to 2.14.0.
* gnu/packages/patches/tensorflow-lite-unbundle.patch: Remove it.
* gnu/local.mk: De-register patch.
* gnu/packages/machine-learning.scm (tensorflow-lite): Update to 2.14.0.
[source]: De-register patch.
[inputs]: Improve style. Add python-ml-dtypes. Replace
flatbuffers-23.1 by flatbuffers-23.5.
[arguments]<#:configure-flags>: Refresh them.
<#:phases>: Add phases 'unbundle and 'gemmlowp-fix. Refresh phases
'install-extra and 'copy-sources.
* gnu/packages/serialization.scm (flatbuffers-23.5): Update comment.
Change-Id: Ifeadfaa9173df4e0be08ce4f0dc13a4cd5297c0e
Signed-off-by: Andreas Enge <andreas@enge.fr>
gnu: Remove llvm-3.8.
* gnu/packages/llvm.scm (llvm-3.8): Delete variable.
* gnu/packages/patches/llvm-3.x.1-fix-build-with-gcc.patch: Delete file.
* gnu/local.mk (dist_patch_DATA): Unregister file.
Fixes: guix/guix#2101
Change-Id: I71cee0723420fb7f928c0d1c747a3bf4424fa344
gnu: Remove llvm-3.5.
* gnu/packages/llvm.scm (llvm-3.5): Delete variable.
* gnu/packages/patches/llvm-3.5-fix-clang-build-with-gcc5.patch:
Delete file.
* gnu/packages/llvm.scm (dist_patch_DATA): Unregister file.
Fixes: guix/guix#2100
Change-Id: I60dffaa5eb7f662994daefa84cd49dac5243c4c4
gnu: Remove unused patch.
This is a follow-up to commit 2c4acd05d4f2fe6c2241ea24640af92cd64b6dd9.
* gnu/packages/patches/clang-3.8-libc-search-path.patch: Delete file.
* gnu/local.mk (dist_patch_DATA): Unregister file.
Change-Id: I402f01f1fa442f71b3a0b8c67faa38ae76ac8d6e
gnu: Remove clang-3.7.
* gnu/packages/llvm.scm (clang-3.7): Delete variable.
* gnu/packages/patches/clang-3.5-libc-search-path.patch: Delete file.
* gnu/local.mk (dist_patch_DATA): Unregister file.
Change-Id: Iacf6b9a8f7a70526ffadfdbd1a587d81fae1967f
gnu: Remove clang-runtime-3.7.
* gnu/packages/llvm.scm (clang-runtime-3.7): Delete variable.
* gnu/packages/patches/clang-3.5-libsanitizer-ustat-fix.patch,
gnu/packages/patches/clang-runtime-3.7-fix-build-with-python3.patch,
gnu/packages/patches/clang-runtime-3.8-libsanitizer-mode-field.patch,
gnu/packages/patches/clang-runtime-asan-build-fixes.patch: Remove files.
* gnu/local.mk (dist_patch_DATA): Unregister files.
Change-Id: I848b09d29585217b0cc3d2f9ac1867e8ee5e853c
gnu: Remove abseil-cpp-20200923.3.
* gnu/packages/cpp.scm (abseil-cpp-20200923.3): Delete variable.
* gnu/packages/patches/abseil-cpp-20200923.3-adjust-sysinfo.patch,
gnu/packages/patches/abseil-cpp-20200923.3-duration-test.patch: Remove
files.
* gnu/local.mk (dist_patch_DATA): Unregister patches.
Change-Id: I52970fe693c0127850d7e7588836141b22ef0213
gnu: emacs-elpy: Update to 1.35.0-3.0b381f5.
* gnu/packages/emacs-xyz.scm (emacs-elpy): Update to 1.35.0-3.0b381f5.
[source]: Delete patches.
* gnu/packages/patches/emacs-elpy-dup-test-name.patch: Delete file.
* gnu/local.mk (dist_patch_DATA): De-register it.
Change-Id: Ida97fd5ad3fa58b6315bef93fd6dc9b8d7e19118
gnu: zynaddsubfx: Switch to Zyn-Fusion interface.
* gnu/packages/patches/zynaddsubfx-3.0.6-system-rtosc.patch: New file.
* gnu/packages/music.scm (zynaddsubfx)[source]: Add it.
[arguments]<#:configure-flags>: New argument.
<#:phases>: Add 'patch-paths phase.
[inputs]: Add mruby-zest and rtosc; remove ntk.
* gnu/local.mk: Add the patch file.
Change-Id: I8522f92707f45915f87d15fd14b0f5d7dc5db224
Signed-off-by: Gabriel Wicki <gabriel@erlikon.ch>
gnu: Add rtosc.
* gnu/packages/audio.scm (rtosc): New variable.
* gnu/packages/patches/rtosc-0.3.1-fix-invalid-comparison-operator.patch: New
file.
* gnu/local.mk: Register it.
Change-Id: I771b67a2bedc5ea513d6504c6f47db2d9382330c
Signed-off-by: Gabriel Wicki <gabriel@erlikon.ch>
gnu: Add stk.
* gnu/packages/music.scm (stk): New variable.
* gnu/packages/patches/stk-5.0.1-fix-typo.patch: New file.
* gnu/local.mk: Register the patch file.
Change-Id: I77d0ae447554eb10cfca3d5825b7f466036fb3e8
gnu: libfaketime: Fix 64-bit time_t on 32-bit platforms.
Fixes guix/guix#2633.
* gnu/packages/patches/libfaketime-32bit.patch : New patch.
* gnu/packages/check.scm (libfaketime)[#:phases]: Remove 'switch-libc-call phase and add
phase applying the patch. In 'pre-check don't skip any tests.
Change-Id: I86410d0cc8ef270c967ba880b10d4ae14181d783
Signed-off-by: Ludovic Courtès <ludo@gnu.org>
gnu: icecat: Update to 140.3.0-gnu1 [security fixes].
For Firefox/IceCat, this fixes at least CVE-2025-6427, CVE-2025-6428,
CVE-2025-6431, CVE-2025-6432, CVE-2025-6433, CVE-2025-6434, CVE-2025-6435 and
CVE-2025-6436.
For Thunderbird/Icedove, this fixes too many CVEs to be named here. Consult
<https://www.mozilla.org/en-US/security/known-vulnerabilities/thunderbird> to
read the details.
* gnu/packages/image.scm (libpng-apng-for-librewolf): Rename to...
(libpng-apng-next): ... this.
* gnu/packages/librewolf.scm (librewolf) [inputs]: Adjust accordingly.
* gnu/packages/gnuzilla.scm (icecat-minimal): Update to 140.3.0.
[#:configure-flags]: Add --disable-fhs. Remove --enable-official-branding.
[#:phases] {apply-guix-specific-patches}: Apply
icecat-fhs-configure-option.patch.
{remove-cargo-frozen-flag}: Remove --frozen from rust.mk.
{install}: Also install a policies.json file to disable the Sync feature.
{install-desktop-entry}: Adjust and streamline.
{install-icons}: Use the 'unofficial' branding directory.
[inputs]: Replace libpng-apng with libpng-apng-next. Replace icu4c with
icu4c-77.
[native-search-paths]: Replace ICECAT_SYSTEM_DIR with MOZILLA_SYSTEM_DIR.
(icecat-source): Remove obsolete cleanups. Switch tarball compression to
zstd.
(make-l10n-package): No longer set GUIX_PYTHONPATH.
[#:phases] {build}: Register the "tb_common" mach site.
[native-inputs]: Replace python-wrapper with python. Add python-aiohttp,
python-async-timeout and python-dateutil.
(mozilla-115-compare-locales, mozilla-115-locale, mozilla-115-locales)
(update-mozilla-115-locales, all-mozilla-115-locales, %icecat-115-base-version)
(%icecat-115-version, %icecat-115-build-id
(icecat-115-source): Delete variables.
(mozilla-l10n): Update to correct changeset.
(format-locales): New procedure.
(%icecat-locales): Update.
(%icecat-base-version): Set to the version of mozjs.
(%icecat-build-id): Bump.
(%icedove-build-id): Bump.
(%icedove-version): Set to 140.3.0.
(thunderbird-comm-source): Update accordingly.
[patches]: New field.
(comm-source->locales+changeset): Delete variable.
(%icedove-locales): Regenerate.
(thunderbird-comm-l10n): Adjust URI, and switch to a git-fetch, to be able to
use pre-releases (the official release tarballs lag behind those of Firefox).
(icedove-source): Compress resulting tarball via zstd. Adjust patching based
on changed file names and content. Make "comm" files writable. Patch
MOZ_APP_NAME in "devtools/startup/DevToolsStartup.sys.mjs". Adjust
services.settings.server value to avoid a warning.
Adjust l10n copying, given we're now using a checkout again.
(icedove-minimal) [#:phases] {configure}: Do not set PYTHON. Add
'ac_add_options --enable-rust-simd' flag.
{do-not-verify-vendored-rust-dependencies}: New phase.
{patch-cargo-checksums}: Sync with IceCat, add "comm" directory.
{remove-cargo-frozen-flag}: Sync phase with that of IceCat.
[inputs]: Sort. Add ffmpeg. Remove gtk+-2. Replace nss with nss-rapid.
Replace icu4c with icu4c-77.
[native-inputs]: Replace clang-15 with clang-20, llvm-15 with llvm-20. Replace
rust-cbindgen-0.24 with rust-cbindgen.
* gnu/packages/patches/icedove-observer-fix.patch: New file.
* gnu/local.mk (dist_patch_DATA): Register it.
* gnu/packages/patches/icecat-compare-paths.patch: Update.
* gnu/packages/patches/icecat-use-system-wide-dir.patch: Rework, with the goal
to of upstreaming it.
Change-Id: Ib420388b9e7c7b59baa74920951afbda99cfe5a2