gnu: wpa-supplicant: Fix "KRACK" key reinstallation attacks [security fixes].
Fixes CVE-2017-{13078,13079,13080,13081,13082,13087,13088}.
See these announcements for more information:
https://w1.fi/security/2017-1/wpa-packet-number-reuse-with-replayed-messages.txt
https://www.krackattacks.com/
* gnu/packages/patches/wpa-supplicant-CVE-2017-13082.patch,
gnu/packages/patches/wpa-supplicant-fix-key-reuse.patch,
gnu/packages/patches/wpa-supplicant-fix-nonce-reuse.patch
gnu/packages/patches/wpa-supplicant-fix-zeroed-keys.patch,
gnu/packages/patches/wpa-supplicant-krack-followups.patch: New files.
* gnu/packages/admin.scm (wpa-supplicant-minimal)[source]: Use them.
* gnu/local.mk (dist_patch_DATA): Add them.
gnu: emacs-org, emacs-org-contrib: Update to 20171016.
* gnu/packages/emacs.scm (emacs-org, emacs-org-contrib): Update to
20171016.
gnu: emacs-tiny: Update to 0.2.1.
* gnu/packages/emacs.scm (emacs-tiny): Update to 0.2.1.
gnu: emacs-adaptive-wrap: Update to 0.5.1.
* gnu/packages/emacs.scm (emacs-adaptive-wrap): Update to 0.5.1.
gnu: emacs-queue: Update to 0.2.
* gnu/packages/emacs.scm (emacs-queue): Update to 0.2.
gnu: emacs-ahungry-theme: Update to 1.6.0.
* gnu/packages/emacs.scm (emacs-ahungry-theme): Update to 1.6.0.
gnu: libextractor: Update to 1.6.
* gnu/packages/gnunet.scm (libextractor): Update to 1.6.
gnu: Add emacs-org-contrib.
* gnu/packages/emacs.scm (emacs-org-contrib): New variable.
gnu: tmux: Update to 2.6.
* gnu/packages/tmux.scm (tmux): Update to 2.6.
gnu: youtube-dl: Update to 2017.10.15.1.
* gnu/packages/video.scm (youtube-dl): Update to 2017.10.15.1.
gnu: baobab: Update to 3.26.1.
* gnu/packages/gnome.scm (baobab): Update to 3.26.1.
gnu: Add cinnamon-desktop.
* gnu/packages/cinnamon.scm: New file.
* gnu/local.mk (GNU_SYSTEM_MODULES): Add it.
Signed-off-by: Christopher Baines <mail@cbaines.net>
emacs-build-system: Change how patch-el-files substitutes commands.
Previously the regex would match from /bin/ to a closing quote. However, this
is greedy, so will match up until the last ". This causes problems when there
are several quotes on the same line, for example:
org-effectiveness.el:
196: (call-process "/bin/bash" nil t nil "-c" strplot)
Therefore, change . to \S so that it doesn't include whitespace
characters. Changing to a lazy quantifier would be an option, if that were
supported.
* guix/build/emacs-build-system.scm (patch-el-files): Change the regular
expression used.
emacs-build-system: Handle missing programs when patching.
Previously the string-append here would error, which isn't useful as it
doesn't tell you which command couldn't be found. To make the error
actionable, catch it earlier, and explicitly error.
* guix/build/emacs-build-system.scm (patch-el-files): Handle (which cmd)
returning #f.
gnu: propeller-development-suite: Use stable release.
* gnu/packages/embedded.scm (propeller-binutils): Take sources from
release_1_0 branch.
[arguments]: Remove "patch-/bin/sh-in-tests" phase; add "chdir" phase; disable
Werror flag.
(propeller-gcc-4): Use sources from release_1_0 branch.
[arguments]: Add "chdir" phase.
[home-page]: Change to official home page.
(proplib): Use sources from release_1_0 branch.
[arguments]: Add "chdir" phase; remove outdated patch from "fix-Makefile"
phase; do not build and install tiny library.
[home-page]: Change to official home page.
(propeller-load): Use sources from release_1_0 branch.
[arguments]: Add "chdir" phase.
[home-page]: Change to official home page.
gnu: maxima: Update to 5.41.0.
* gnu/packages/maths.scm (maxima): Update to 5.41.0.
gnu: ruby-ffi: Move to libffi.scm.
* gnu/packages/ruby.scm (ruby-ffi): Move from here ...
* gnu/packages/libffi.scm: ... to here.
gnu: python-cffi: Move to libffi.scm
* gnu/packages/python.scm (python-cffi): Move from here ...
* gnu/packages/libffi.scm: ... to here.
* gnu/packages/crypto.scm, gnu/packages/password-utils.scm: Adjust
module imports.
gnu: python-cffi: Update to 1.11.2.
* gnu/packages/python.scm (python-cffi): Update to 1.11.2.
[home-page]: Use 'https'.