gnu: openssl: Update replacement to 1.0.2n [fixes CVE-2017-{3737,3738}].

* gnu/packages/tls.scm (openssl)[replacement]: Use openssl-1.0.2n.
(openssl-1.0.2m): Replace with ...
(openssl-1.0.2n): ... this updated version.  Update comment.

gnu: Add mod-wsgi.

* gnu/packages/web.scm (mod-wsgi): New variable.

gnu: system: vm: Use loose cache for 9p file system.

This improves the performance of the shared store for operations involving
lots of files, e.g. searching through the store.

* gnu/system/vm.scm (mapping->file-system): Add cache=loose to options.

gnu: grammalecte: Fix 'license' field.

* gnu/packages/dictionaries.scm (grammalecte)[license]: Change name to
'gpl3+'.

man-db: Autoload (gdbm).

Fixes 'guix pull'.
Reported by ofosos on #guix.

* guix/man-db.scm: Use 'module-autoload!' instead of 'module-use!'.
so that (gdbm) is not loaded until we need it.

services: certbot: Fix certbot renewal job.

Quote the list of hosts, to avoid generating a broken job definition.

* gnu/services/certbot.scm (certbot-renewal-jobs): Quote the hosts when
  passing them in to the job gexp.

gnu: Add grammalecte.

* gnu/packages/dictionaries.scm (grammalecte): New variable.

gnu: gourmet: Fix runtime failure and enhance plugin.

Fixes <https://bugs.gnu.org/29227>.
Reported by Caleb Herbert <csh@bluehome.net>.

* gnu/packages/nutrition.scm (gourmet)[inputs]: Add python-lxml.
[arguments]: Custom install phase.

Signed-off-by: Ludovic Courtès <ludo@gnu.org>

gnu-maintenance: 'latest-ftp-release' ignores "unstable" directories.

* guix/gnu-maintenance.scm (latest-ftp-release): Filter out "unstable"
directories.

gnu: pinentry-tty: Add meta-data for 'guix refresh'.

* gnu/packages/gnupg.scm (pinentry-tty)[properties]: New field.

profiles: Use (guix man-db) to create the manual database.

Fixes <https://bugs.gnu.org/29654>.
Reported by Ruud van Asseldonk <dev+guix@veniogames.com>.

This also speeds up database creation compared to "man-db
--create" (less than half the time, on a warm cache, for 19k pages.)

* guix/man-db.scm: New file.
* Makefile.am (MODULES_NOT_COMPILED): Add it.
* guix/profiles.scm (manual-database): Rewrite to use (guix man-db).

services: cleanup: Remove "/run/udev/watch.old" directory.

* gnu/services.scm (cleanup-gexp): Remove "/run/udev/watch.old" directory.

gnu: global: Update to 6.6.1 [fixes CVE-2017-17531].

* gnu/packages/code.scm (global): Update to 6.6.1.

gnu: python-dulwich: Update to 0.18.6 [fixes CVE-2017-16228].

* gnu/packages/python.scm (python-dulwich, python2-dulwich): Update to 0.18.6.

gnu: krita: Enhance krita.

* gnu/packages/kde.scm (krita)[inputs]: Add libjpeg-turbo, ilmbase and openexr.
[native-inputs]: Add vc.
[arguments]: Set path to headers for ilmbase.

Signed-off-by: Kei Kebreau <kkebreau@posteo.net>

gnu: borg: Fix a data loss bug.

See <https://github.com/borgbackup/borg/issues/3444> for more information.

* gnu/packages/patches/borg-fix-archive-corruption-bug.patch: New file.
* gnu/local.mk (dist_patch_DATA): Add it.
* gnu/packages/backup.scm (borg)[source]: Use it.

guix: offload: Add "status" sub-command.

* guix/scripts/offload.scm (check-machine-status): New procedure.
(guix-offload): Call it when the argument is "status".
* doc/guix.texi (Daemon Offload Setup): Document it.

gnu: guix: Update snapshot to 02345c.

* gnu/packages/package-management.scm (guix): Update to 02345c.

gnu: lookingglass: Limit to Intel compatable systems.

* gnu/packages/virtualization.scm (lookingglass)[supported-systems]: New
field.

gnu: gx-saturator-lv2: Update to 0-3.605330f43.

* gnu/packages/music.scm (gx-saturator-lv2): Update to 0-3.605330f43.