gnu: java-jnacl: Use invoke.

* gnu/packages/java.scm (java-jnacl)[arguments]: Use "invoke".

gnu: Add java-ecj-3.5.

* gnu/packages/java.scm (java-ecj-3.5): New variable.

gnu: Add java-ecj-3.

* gnu/packages/java.scm (java-ecj-3): New variable.

gnu: dovecot: Update to 2.3.0.1 [fixes CVE-2017-14461].

* gnu/packages/mail.scm (dovecot): Update to 2.3.0.1.
[source]: Remove upstreamed patch.
* gnu/packages/patches/dovecot-CVE-2017-15132.patch: Delete file.
* gnu/local.mk (dist_patch_DATA): Remove it.

gnu: html-xml-utils: Update to 7.6.

* gnu/packages/xml.scm (html-xml-utils): Update to 7.6.

gnu: libftdi: Update to 1.4.

* gnu/packages/libftdi.scm (libftdi): Update to 1.4.

gnu: git-remote-gcrypt: Update to 1.0.2.

* gnu/packages/version-control.scm (git-remote-gcrypt): Update to 1.0.2.

gnu: dropbear: Update to 2018.76.

* gnu/packages/ssh.scm (dropbear): Update to 2018.76.

gnu: Add sala.

* gnu/packages/password-utils.scm (sala): New variable.

Signed-off-by: Ludovic Courtès <ludo@gnu.org>

linux-modules: Use 'load-linux-module/fd'.

This should be more efficient than loading the whole thing in user space.

* gnu/build/linux-modules.scm (load-linux-module*): Use
'load-linux-module/fd' instead of 'load-linux-module'.  Remove 'slurp'.

gnu: guile-static-stripped: Add 'finit_module' wrapper.

* gnu/packages/patches/guile-linux-syscalls.patch: Add
'load-linux-module/fd' procedure.

gnu: guile-static-stripped: Remove dependency on bash-minimal.

Previously guile-static-stripped, which is embedded in the initrd, would
depend on 'bash-minimal' and 'glibc'; the closure size was 77 MiB.  Now
the closure size is down to 45.7 MiB.

Reported by Danny Milosavljevic <dannym@scratchpost.org> in
<https://lists.gnu.org/archive/html/guix-devel/2018-02/msg00505.html>.

* gnu/packages/make-bootstrap.scm (%guile-static): Remove the
'pre-configure' phase.
(%guile-static-stripped)[arguments]: Add #:allowed-references.

build-system/trivial: Add support for #:allowed-references.

* guix/build-system/trivial.scm (lower): Add #:allowed-references and
keep it in the 'arguments' field.
(trivial-build): Add #:allowed-references.  Add
'canonicalize-reference'.  Pass #:allowed-references to
'build-expression->derivation'.
(trivial-cross-build): Likewise.
* tests/packages.scm ("trivial with #:allowed-references"): New test.

gnu: ccl: Patch absolute file-name.

* gnu/packages/lisp.scm (ccl)[arguments]: In 'pre-build add substitution
for /bin/pwd.

gnu: keepassxc: Enable various plugins.

* gnu/packages/password-utils.scm (keepassxc)[arguments]: Add
configure-flags to enable favicons, browser integration and ssh-agent.
[inputs]: Add curl, libsodium.

gnu: keepassxc: Update to 2.3.0.

* gnu/packages/password-utils.scm (keepassxc): Update to 2.3.0.

gnu: wavpack: Fix CVE-2018-6767.

* gnu/packages/patches/wavpack-CVE-2018-6767.patch: New file.
* gnu/local.mk (dist_patch_DATA): Register it.
* gnu/packages/audio.scm (wavpack)[source](patches): Add it.

gnu: ldb: Update to 1.3.2.

* gnu/packages/samba.scm (ldb): Update to 1.3.2.

gnu: p11-kit: Update to 0.23.10.

* gnu/packages/tls.scm (p11-kit): Update to 0.23.10.

gnu: feh: Update to 2.24.

* gnu/packages/image-viewers.scm (feh): Update to 2.24.