gnu: jbig2dec: Fix CVE-2017-{7885,7975,7976}.

* gnu/packages/patches/jbig2dec-CVE-2017-7885.patch,
gnu/packages/patches/jbig2dec-CVE-2017-7975.patch,
gnu/packages/patches/jbig2dec-CVE-2017-7976.patch: New files.
* gnu/local.mk (dist_patch_DATA): Add them.
* gnu/packages/image.scm (jbig2dec)[source]: Use them.

gnu: pcsc-lite: Update to 1.8.21.

* gnu/packages/security-token.scm (pcsc-lite): Update to 1.8.21.

gnu: icedtea@3: Add aarch32-drop.

* gnu/packages/java.scm (icedtea-8)[native-inputs]: Add aarch32-drop.

gnu: icedtea@3: Update to 3.4.0 [security fixes].

Fixes CVE-2017-{3509,3511,3512,3514,3526,3533,3539,3544}.

* gnu/packages/java.scm (icedtea-8): Update to 3.4.0.

gnu: imagemagick: Update to 6.9.8-6.

* gnu/packages/imagemagick.scm (imagemagick): Update to 6.9.8-6.

download: Prune the ImageMagick mirror list.

These sites' TLS certificates are invalid.

* guix/download.scm (%mirrors) <imagemagick>: Remove
mirrors-{au,ru,uk}.go-parts.com.

gnu: guix: Add 'guile2.0-guix'.

* gnu/packages/package-management.scm (guile2.0-guix): New variable.

gnu: libssh, guile-ssh: Add a "debug" output.

* gnu/packages/ssh.scm (libssh)[outputs]: New field.
(guile-ssh)[outputs]: New field.

pack: Use 'guile2.0-json' when building with Guile 2.0.

Fixes <http://bugs.gnu.org/27005>.
Reported by Pjotr Prins <pjotr.public12@thebird.nl>.

Fixes a regression introduced in commit
2252f087d4bd450ab41a71379320467887edfc0f.

* guix/scripts/pack.scm (docker-image)[json]: New variable.
[build]: Use it.

gnu: icedtea@2: Update to 2.6.10 [security fixes].

Fixes CVE-2017-{3509,3511,3512,3514,3526,3533,3539,3544}.

* gnu/packages/java.scm (icedtea-7): Update to 2.6.10.

gnu: Add loksh.

* gnu/packages/shells.scm (loksh): New variable.

Signed-off-by: Marius Bakke <mbakke@fastmail.com>

gnu: dropbear: Update to 2017.75 [fixes CVE-2017-{9078,9079}].

* gnu/packages/ssh.scm (dropbear): Update to 2017.75.

gnu: calibre: Don't create uninstaller.

* gnu/packages/ebook.scm (calibre)[arguments]<#:phases>. Add 'patch-source' phase.

Co-authored-by: Marius Bakke <mbakke@fastmail.com>

gnu: calibre: Add exhaustive license list.

* gnu/packages/ebook.scm (calibre): Add exhaustive license list.
(chmlib)[license]: Use license: prefix.

Co-authored-by: Marius Bakke <mbakke@fastmail.com>

gnu: calibre: Add missing dependencies.

* gnu/packages/ebook.scm (calibre)[inputs]: Add poppler, python2-dnspython,
and python2-pygments.
[arguments]: Remove old TODO comments. libwmf and psutil are no longer used.

Signed-off-by: Marius Bakke <mbakke@fastmail.com>

gnu: calibre: Unbundle chardet.

* gnu/packages/ebook.scm (calibre)[source]: Delete bundled chardet.
[inputs]: Add python2-chardet.

Signed-off-by: Marius Bakke <mbakke@fastmail.com>

gnu: calibre: Unbundle liberation fonts.

*gnu/packages/ebook.scm (calibre)[source]: Delete liberation .ttf files.
[native-inputs]: Add font-liberation.
[arguments]: Calibre still references the bundled fonts, so we install the
packaged fonts to the directory the bundled fonts would have been.

Signed-off-by: Marius Bakke <mbakke@fastmail.com>

gnu: calibre: Unbundle python2-markdown.

* gnu/packages/ebook.scm (calibre)[snippet]: Replace python references to
bundled markdown with packaged. Remove markdown from source.
[inputs]: Add python2-markdown as a dependency.

Signed-off-by: Marius Bakke <mbakke@fastmail.com>

gnu: calibre: Import unbundle feedparser patch from debian.

* gnu/packages/ebook.scm (calibre)[source]: Reference new patch file.
[inputs]: Add python2-feedparser as an input.
* gnu/packages/patches/calibre-use-packaged-feedparser.patch: New file.
* gnu/local.mk (dist_patch_DATA): Add it.

Signed-off-by: Marius Bakke <mbakke@fastmail.com>

gnu: calibre: Import dont-load-icons patch from debian.

* gnu/packages/patches/calibre-dont-load-remote-icons.patch: New file.
* gnu/packages/ebooks.scm (calibre)[source]: Add reference to patch file.
* gnu/local.mk (dist_path_DATA): Add it.

Signed-off-by: Marius Bakke <mbakke@fastmail.com>