gnu: flac: Fix CVE-2017-6888.

* gnu/packages/xiph.scm (flac)[replacement]: New field.
(flac/fixed): New variable.
* gnu/packages/patches/flac-CVE-2017-6888.patch: New file.
* gnu/local.mk (dist_patch_DATA): Register it.

gnu: linux-libre: Update to 5.0.6.

* gnu/packages/linux.scm (%linux-libre-version): Update to 5.0.6.
(%linux-libre-hash): Update hash.

gnu: linux-libre@4.19: Update to 4.19.33.

* gnu/packages/linux.scm (%linux-libre-4.19-version): Update to 4.19.33.
(%linux-libre-4.19-hash): Update hash.

gnu: linux-libre@4.14: Update to 4.14.110.

* gnu/packages/linux.scm (%linux-libre-4.14-version): Update to 4.14.110.
(%linux-libre-4.14-hash): Update hash.

gnu: linux-libre@4.9: Update to 4.9.167.

* gnu/packages/linux.scm (linux-libre-4.9): Update to 4.9.167.

gnu: linux-libre@4.4: Update to 4.4.178.

* gnu/packages/linux.scm (linux-libre-4.4): Update to 4.4.178.

gnu: flashrom: Update to 1.0.1.

* gnu/packages/flashing-tools.scm (flashrom): Update to 1.0.1.
[arguments]: Remove CFLAGS work-around.

gnu: entr: Update to 4.2.

* gnu/packages/entr.scm (entr): Update to 4.2.

gnu: ledger: Update to 3.1.3.

The patch applies but has been unnecessary since 3.1.2.

* gnu/packages/finance.scm (ledger): Update to 3.1.3.
[source]: Remove obsolete patch.
* gnu/packages/patches/ledger-fix-uninitialized.patch: Delete file.
* gnu/local.mk (dist_patch_DATA): Remove it.

gnu: emacs-matrix-client: Add missing require.

* gnu/packages/emacs-xyz.scm (emacs-matrix-client): Add a missing require to
  prevent a runtime error.

gnu: php: Update to 7.3.4.

* gnu/packages/php.scm (php): Update to 7.3.4.

gnu: certbot, python-acme: Update to 0.33.0.

* gnu/packages/tls.scm (certbot, python-acme): Update to 0.33.0.

gnu: MPD: Update to 0.21.7.

* gnu/packages/mpd.scm (mpd): Update to 0.21.7.

gnu: asymptote: Fix direntry in info file.

* gnu/packages/plotutils.scm (asymptote): Fix direntry in info file.

gnu: Update copyright line.

* gnu/packages/plotutils.scm: Update copyright line.

gnu: asymptote: Fix info file location.

* gnu/packages/plotutils.scm (asymptote): Fix info file location so it appears
  in the top-level directory.

scripts: More commands default to verbosity level 1.

* guix/scripts/environment.scm (%default-options): Change 'verbosity' to 1.
* guix/scripts/pack.scm (%default-options): Likewise.
* guix/scripts/system.scm (guix-system): Likewise, except for the
'build' command.

gexp: Remove workarounds for <https://bugs.gnu.org/15602>.

* gnu/services/base.scm (hydra-key-authorization)[aaa]: Remove.
[default-acl]: Don't import it.
* guix/scripts/pack.scm (store-database)[build]: Don't import
(gnu build install).

gexp: 'compiled-modules' loads modules before compiling them.

This works around <https://bugs.gnu.org/15602> in the context of
modules specified with 'with-imported-modules'.

* guix/gexp.scm (gexp->derivation): Add #:pre-load-modules? parameter
and pass it to 'compiled-modules'.
(compiled-modules): Add #:pre-load-modules? parameter and honor it.
* guix/packages.scm (patch-and-repack): Pass #:pre-load-modules? to
'gexp->derivation'.

gnu: Move nss & co. to nss.scm.

* gnu/packages/gnuzilla.scm (nspr, nss): Move to...
* gnu/packages/nss.scm: ... here.  New file.
* gnu/packages/chromium.scm, gnu/packages/disk.scm,
gnu/packages/freedesktop.scm, gnu/packages/gnome.scm,
gnu/packages/gnunet.scm, gnu/packages/java.scm,
gnu/packages/libreoffice.scm, gnu/packages/linux.scm,
gnu/packages/mate.scm, gnu/packages/openldap.scm,
gnu/packages/package-management.scm, gnu/packages/password-utils.scm,
gnu/packages/polkit.scm, gnu/packages/qt.scm,
gnu/packages/sssd.scm, gnu/packages/storage.scm,
gnu/packages/vpn.scm, gnu/packages/web.scm, gnu/packages/xml.scm: Adjust
accordingly.
* gnu/local.mk (GNU_SYSTEM_MODULES): Add nss.scm.