gnu: python-afdko: Update to 3.9.4.
* gnu/packages/fontutils.scm (python-afdko): Update to 3.9.4.
[source]: Remove patch.
[arguments]: Disable a few extra tests in the check phase override.
Delete use-system-libxml2 phase. Update patch-problematic-requirements phase.
* gnu/packages/patches/python-afdko-suppress-copyright-test.patch: Delete
file.
* gnu/local.mk (dist_patch_DATA): De-register it.
gnu: python-fonttools-next: Update to 4.39.3.
* gnu/packages/python-xyz.scm (python-fonttools-next): Update to 4.39.3.
(python-fonttools-full) [arguments]: Skip the MtiTest suite in the check phase
override.
gnu: python-fontmath: Update to 0.9.3.
* gnu/packages/fontutils.scm (python-fontmath): Update to 0.9.3.
gnu: python-pyftpdlib: Update to 1.5.7.
* gnu/packages/python-xyz.scm (python-pyftpdlib): Update to 1.5.7.
gnu: ruby-rubyzip: Re-instate all tests.
* gnu/packages/ruby.scm (ruby-rubyzip)
[arguments]: Do not patch ruby shebang in the patch-tests phase.
Remove the disable-problematic-tests phase. Add the
unpatch-some-source-shebangs phase.
gnu: icecat: Update to 102.10.0-guix0-preview1 [security fixes].
Includes fixes for CVE-2023-1945, CVE-2023-29531, CVE-2023-29532,
CVE-2023-29533, CVE-2023-29535, CVE-2023-29536, CVE-2023-29539,
CVE-2023-29541, CVE-2023-29542, CVE-2023-29545, CVE-2023-29548,
CVE-2023-29550, and MFSA-TMP-2023-0001.
* gnu/packages/gnuzilla.scm (%icecat-base-version, %icecat-build-id): Update.
(icecat-source): Update gnuzilla commit, base version, and hashes.
Remove the vestigial RENAME_CMD environment variable setting.
(icecat-102.9.0-source): New variable.
(icedove-source): Use it.
services: nginx: Add reopen action.
This is required to allow log file rotations using rottlog, etc.
* gnu/services/web.scm (nginx-shepherd-service): Add reopen shepherd action.
Signed-off-by: Maxim Cournoyer <maxim.cournoyer@gmail.com>
services: nginx: Make logging level configurable.
* gnu/services/web.scm (<nginx-configuration>)[log-level]: New field.
(assert-valid-log-level): New procedure.
(default-nginx-config): Make log-level configurable.
* doc/guix.texi (Web Services): Document it.
Signed-off-by: Maxim Cournoyer <maxim.cournoyer@gmail.com>
gnu: heimdal: Enable OpenLDAP support.
* gnu/packages/kerberos.scm (heimdal)
[native-inputs]: Add bison, flex and pkg-config.
[inputs]: Remove mit-krb5. Add libcap-ng and openldap.
Signed-off-by: Maxim Cournoyer <maxim.cournoyer@gmail.com>
Modified-by: Maxim Cournoyer <maxim.cournoyer@gmail.com>
gnu: heimdal: Apply patch to fix CVE-2022-45142.
Several recent Heimdal releases are affected by the serious vulnerability
CVE-2022-45142, which NIST scored as "7.5 HIGH". [1]
At the time of writing, the upstream developers had not yet cut any releases
post-7.8.0, which is why the patch is being applied here.
The patch was extracted from Helmut Grohne's public vulnerability
disclosure. [2]
[1] https://nvd.nist.gov/vuln/detail/CVE-2022-45142
[2] https://www.openwall.com/lists/oss-security/2023/02/08/1
* gnu/packages/patches/heimdal-CVE-2022-45142.patch: New patch.
* gnu/local.mk (dist_patch_DATA): Register it.
* gnu/packages/kerberos.scm (heimdal)[source]: Apply it.
Signed-off-by: Maxim Cournoyer <maxim.cournoyer@gmail.com>
gnu: heimdal: Update to 7.8.0 [fixes CVE-2022-44640].
* gnu/packages/kerberos.scm (heimdal): Update to 7.8.0.
[source]: Adjust date in snippet.
[native-inputs]: Add python. Remove perl.
Signed-off-by: Maxim Cournoyer <maxim.cournoyer@gmail.com>
Modified-by: Maxim Cournoyer <maxim.cournoyer@gmail.com>
gnu: mu: Update to 1.10.2.
* gnu/packages/mail.scm (mu): Update to 1.10.2.
[arguments]: Add build phase 'fix-build-system.
gnu: opendht: Update to 2.5.2.
* gnu/packages/networking.scm (opendht): Update to 2.5.2.
gnu: restinio: Update to 0.6.18-0.eda471e and enable tests.
* gnu/packages/networking.scm (restinio): Update to 0.6.18-0.eda471e.
[version]: Use git-version.
[arguments]: Enable tests, removing #:tests? argument.
status: Guard against a numerical overflow condition.
Fixes <https://issues.guix.gnu.org/62766>.
* guix/status.scm (update-build): Use 0 as progress when an exception occurs
while computing it.
gnu: Syncthing: Update to 1.23.4.
* gnu/packages/syncthing.scm (syncthing): Update to 1.23.4.
gnu: libconfig: Replace config script helpers.
* gnu/packages/textutils.scm (libconfig)[arguments]: Add phase to
replace config.guess, config.sub.
[native-inputs]: Add config.
gnu: ldc: Use default test check.
* gnu/packages/dlang.scm (ldc)[arguments]: Strip the inherited tests
configuration from ldc-bootstrap rather than setting it to #true.