gnu: mupdf: Fix CVE-2016-{7504,7505,7506,7563,7564,9017,9136} in bundled mujs.

* gnu/packages/patches/mupdf-CVE-2016-7504.patch,
gnu/packages/patches/mupdf-CVE-2016-7505.patch
gnu/packages/patches/mupdf-CVE-2016-7506.patch
gnu/packages/patches/mupdf-CVE-2016-7563.patch
gnu/packages/patches/mupdf-CVE-2016-7564.patch
gnu/packages/patches/mupdf-CVE-2016-9017.patch
gnu/packages/patches/mupdf-CVE-2016-9136.patch: New files.
* gnu/local.mk (dist_patch_DATA): Add them.
* gnu/packages/pdf.scm (mupdf)[source]: Use them.

system: Use grub from bootloader configuration.

* gnu/system/grub.scm (gnu): Export grub-configuration-grub.
* guix/scripts/system.scm (perform-action): Use it.
(define-module): Don't import (gnu packages grub).

Co-authored-by: Danny Milosavljevic <dannym@scratchpost.org>

gnu: Add plantuml.

* gnu/packages/uml.scm: New file.
* gnu/local.mk (GNU_SYSTEM_MODULES): Add it.

Signed-off-by: Roel Janssen <roel@gnu.org>

guix download: Add '--no-check-certificate' option.

* guix/download.scm (download-to-store): Add #:verify-certificate?
parameter and honor it.
* guix/scripts/download.scm (%default-options): Add
'verify-certificate?' key.
(show-help, %options): Add '--no-check-certificate'.
(guix-download): Pass #:verify-certificate to 'download-to-store'.
* doc/guix.texi (Invoking guix download): Document it.

download: Verify TLS certificates unless asked not to.

Fixes <http://bugs.gnu.org/24466>.
Reported by Leo Famulari <leo@famulari.name>.

* guix/build/download.scm (%x509-certificate-directory): New variable.
(make-credendials-with-ca-trust-files, peer-certificate)
(assert-valid-server-certificate, print-tls-certificate-error): New
procedures.  Add 'print-tls-certificate-error' as an exception printer
for 'tls-certificate-error'.
(tls-wrap): Add #:verify-certificate? parameter and honor it.
(open-connection-for-uri): Likewise.
(http-fetch): Likewise.
(url-fetch): Likewise.
* guix/download.scm (url-fetch)[builder]: Pass #:verify-certificate? #f.
* guix/scripts/lint.scm (probe-uri): Add case for 'tls-certificate-error'.
(validate-uri): Likewise.
* doc/guix.texi (Invoking guix download): Mention 'SSL_CERT_DIR'.

gnu: keepassx: Update to 2.0.3.

* gnu/packages/password-utils.scm (keepassx): Update to 2.0.3.
[inputs]: Add libxi.

gnu: owncloud-client: Update to 2.2.4.

* gnu/packages/owncloud.scm (owncloud-client): Update to 2.2.4.
[arguments]: Enable tests, disable two failing tests.
[inputs]: Remove python-wrapper, qt, ruby.  Add qtbase, qtwebkit.
Move perl ...
[native-inputs]: ... to here.  Add cmocka and qttools.

gnu: python-sqlalchemy-utils: Mention optional dependencies in description.

* gnu/packages/python.scm (python-sqlalchemy-utils,
python2-sqlalchemy-utils)[description]: Mention optional dependencies.

Signed-off-by: Leo Famulari <leo@famulari.name>

gnu: Add efibootmgr.

* gnu/packages/linux.scm (efibootmgr): New variable.

gnu: Add efivar.

* gnu/packages/linux.scm (efivar): New variable.

gnu: ruby-tzinfo-data: Update to 1.2016.9.

* gnu/packages/ruby.scm (ruby-tzinfo-data): Update to 1.2016.9.

gnu: ruby-sqlite3: Update to 1.3.12.

* gnu/packages/ruby.scm (ruby-sqlite3): Update to 1.3.12.

gnu: ruby-shoulda-context: Update to 1.2.2.

* gnu/packages/ruby.scm (ruby-shoulda-context): Update to 1.2.2.

gnu: ruby-domain-name: Update to 0.5.20161021.

* gnu/packages/ruby.scm (ruby-domain-name): Update to 0.5.20161021.

gnu: ruby-http-cookie: Update to 1.0.3.

* gnu/packages/ruby.scm (ruby-http-cookie): Update to 1.0.3.

gnu: ruby-sequel: Update to 4.40.0.

* gnu/packages/ruby.scm (ruby-sequel): Update to 4.40.0.

gnu: diamond: Update to 0.8.26.

* gnu/packages/bioinformatics.scm (diamond): Update to 0.8.26.

gnu: texmaker: Use modular qt and qtwebkit.

* gnu/packages/tex.scm (texmaker)[inputs]: Use modular qt and qtwebkit.

Signed-off-by: Ludovic Courtès <ludo@gnu.org>

gnu: Add qtwebkit.

* gnu/packages/qt.scm (qtwebkit): New variable.

Signed-off-by: Ludovic Courtès <ludo@gnu.org>

gnu: nano: Update to 2.7.1.

* gnu/packages/nano.scm (nano): Update to 2.7.1.
[home-page]: Use https.