gnu: evince: Fix CVE-2017-1000083.
* gnu/packages/patches/evince-CVE-2017-1000083.patch: New file.
* gnu/local.mk (dist_patch_DATA): Add it.
* gnu/packages/gnome.scm (evince)[source]: Use it.
gnu: linux-libre: Update to 4.12.1.
* gnu/packages/linux.scm (%linux-libre-version): Update to 4.12.1.
(%linux-libre-hash): Update hash.
gnu: linux-libre@4.9: Update to 4.9.37.
* gnu/packages/linux.scm (linux-libre-4.9): Update to 4.9.37.
gnu: spice-protocol: Update to 0.12.13.
* gnu/packages/spice.scm (spice-protocol): Update to 0.12.13.
gnu: httpd: Update to 2.4.27 [fixes CVE-2017-{9788,9789}].
* gnu/packages/web.scm (httpd): Update to 2.4.27.
gnu: libressl: Provide a TLS-enabled implementation of netcat.
* gnu/packages/tls.scm (libressl)[arguments]: Pass '--enable-nc'
to #:configure-flags.
gnu: libressl: Update to 2.5.5.
* gnu/packages/tls.scm (libressl): Update to 2.5.5.
[source]: Use HTTPS URL.
gnu: lynx: Update to 2.8.9dev.15.
* gnu/packages/web-browsers.scm (lynx): Update to 2.8.9dev.15.
gnu: libaacs: Use HTTPS URL.
* gnu/packages/video.scm (libaacs)[source]: Use HTTPS URL.
gnu: libbdplus: Use HTTPS URL.
* gnu/packages/video.scm (libbdplus)[source]: Use HTTPS URL.
gnu: xclip: Use a descriptive source file name.
* gnu/packages/xdisorg.scm (xclip)[source]: Set the file-name.
gnu: guix: Update snapshot.
* gnu/packages/package-management.scm (guix): Update to b547349.
gnu: Add simplescreenrecorder.
* gnu/packages/video.scm (simplescreenrecorder): New variable.
Signed-off-by: Arun Isaac <arunisaac@systemreboot.net>
gnu: spice: Fix CVE-2017-7506.
* gnu/packages/patches/spice-CVE-2017-7506.patch: New file.
* gnu/local.mk (dist_patch_DATA): Add it.
* gnu/packages/spice.scm (spice)[source]: Use it.
gnu: usbredir: Use HTTPS home-page URL.
* gnu/packages/spice.scm (usbredir)[home-page]: Use HTTPS URL.
gnu: virt-viewer: Update to 5.0.
* gnu/packages/spice.scm (virt-viewer): Update to 5.0.
substitute: Work around Guile 2.2 'time-monotonic' bug.
Prior to this change, half of the cached narinfos would expire
immediately since they contained the number of nanoseconds instead of
the number of seconds as their date.
* guix/scripts/substitute.scm (time-monotonic) <guile-2.2>: Define, as a
workaround.
size: Add '--sort=KEY'.
* guix/scripts/size.scm (profile-closure<?, profile-self<?): New
procedures.
(display-profile): Add #:profile<? parameter and honor it.
(show-help, %options): Add '--sort'.
(%default-options): Add 'profile<?'.
(guix-size): Pass PROFILE<? to 'display-profile*'.
* doc/guix.texi (Invoking guix size): Document '--sort'.
environment: Rationalize calls to 'set-build-options'.
Before this change '--substitute-urls' would be ignored.
* guix/scripts/environment.scm (build-environment): Remove redundant
call to 'set-build-options-from-command-line*'.
(guix-environment): Move 'set-build-options-from-command-line' right
after 'with-store'.
gnu: hyperrogue: Update to 9.4n.
* gnu/packages/games.scm (hyperrogue): Update to 9.4n.