gnu: icecat: Update to 115.17.0-guix1 [security fixes].

Includes fixes for CVE-2024-10458, CVE-2024-10459, and CVE-2024-10463.

* gnu/packages/gnuzilla.scm (%icecat-base-version, %icecat-build-id): Update.
(icecat-source): Update gnuzilla commit, base version, and hashes.

download: Remove defunct gnupg mirrors.

* guix/download.scm (%mirrors): Remove defunct gnupg mirrors.

Change-Id: Ib6ecad007712e4efe5437709a6d2a2a0bfce6e97

gnu: Add cl-wayflan.

* gnu/packages/lisp-xyz.scm (cl-wayflan, sbcl-wayflan): New variables.

Change-Id: I65982ad6f5c034f611292d4f660b15e4e42f8da0
Co-authored-by: Sharlatan Hellseher <sharlatanus@gmail.com>
Co-authored-by: Guillaume Le Vaillant <glv@posteo.net>

gnu: Add cl-input-event-codes.

* gnu/packages/lisp-xyz.scm (cl-input-event-codes, ecl-cl-input-event-codes,
  sbcl-cl-input-event-codes): New variables.

Change-Id: I47e65729f907e46d9deeb7dc0219ac9b1ba1a291
Co-authored-by: Sharlatan Hellseher <sharlatanus@gmail.com>
Signed-off-by: Guillaume Le Vaillant <glv@posteo.net>

gnu: Add cl-pango.

* gnu/packages/lisp-xyz.scm (cl-pango, ecl-cl-pango, sbcl-cl-pango): New
  variables.

Change-Id: I3615ef64197e8bee5cbb733bc427a54607bae4b2
Co-authored-by: Sharlatan Hellseher <sharlatanus@gmail.com>
Co-authored-by: Guillaume Le Vaillant <glv@posteo.net>

gnu: Add cl-xkb.

* gnu/packages/lisp-xyz.scm (cl-xkb, ecl-cl-xkb, sbcl-cl-xkb): New variables.

Change-Id: Iaced3e5e084cc320a076ffb81d10fd9dde6be4de
Co-authored-by: Sharlatan Hellseher <sharlatanus@gmail.com>
Signed-off-by: Guillaume Le Vaillant <glv@posteo.net>

gnu: Add cl-posix-shm.

* gnu/packages/lisp-xyz.scm (cl-posix-shm, sbcl-posix-shm): New variables.

Change-Id: I5ac9a3751977bf98d817acd8b98d1a2ad9d393f7
Co-authored-by: Sharlatan Hellseher <sharlatanus@gmail.com>
Signed-off-by: Guillaume Le Vaillant <glv@posteo.net>

gnu: Add cl-cacle.

* gnu/packages/lisp-xyz.scm (sbcl-cacle, cl-cacle, ecl-cacle): New variables.

Change-Id: I67e6702d132fed017d86be82665e44021c1b081f
Signed-off-by: Guillaume Le Vaillant <glv@posteo.net>

gnu: busybox: Fix build on non x86 platform.

* gnu/packages/patches/busybox-add-missing-sha-NI-guard.patch: New file.
* gnu/local.mk (dist_patch_DATA): Register it.
* gnu/packages/busybox.scm (busybox): Use it.

Change-Id: I1e6a24dd5b86871a3479ab6ecd247b31c746ec75

gnu: Add chow-tape-model.

* gnu/packages/audio.scm (chow-tape-model): New variable.

Reviewed-by: Ricardo Wurmus <rekado@elephly.net>
Change-Id: I62b6b234c4fe62594f93d4da7ecff53d48a58cd8

gnu: owl: Correct package.

This is a follow-up to commit 3566cabecc0337f64b8a3e2ef276a93d99f440c7
which contains a preliminary version of the commit.

* gnu/packages/scheme.scm (owl): Improve some fields.
[native-inputs]: Drop pandoc.

Change-Id: Iba99892b58ffa1c5267e3f7d80912fb1a964e2ed

gnu: postgresql: Deprecate unsupported versions.

Versions 10 and 11 are unsupported according to
https://www.postgresql.org/support/versioning/

postgresql-10 also has a CVE.

* doc/guix.texi: Change default value of postgresql-service-type's
postgresql field.
* gnu/packages/databases.scm (postresql-10, postgresql-11): Use
define-deprecated/public to warn users.
* gnu/services/databases.scm (postgresql-configuration): Change the
default value of postgresql-configuration-postgresql.
* gnu/tests/guix.scm (%guix-data-service-os): Change the default value
of postgresql.

Signed-off-by: Andreas Enge <andreas@enge.fr>
Change-Id: Ie8744c8e1f246e9b45ff5e29d4e98214de3ca66a

gnu: owl: Only build with pandoc on supported systems.

* gnu/packages/scheme.scm (owl)[native-inputs]: Only use pandoc as an
input on systems where pandoc is supported.

Change-Id: I9a7727789d303b07834a689ce917d7ac88172212

gnu: prrte: Record the absolute file name of ‘prted’.

Previously a command like:

  guix shell --pure openmpi@5 openssh intel-mpi-benchmarks \
    --with-input=openmpi@4=openmpi@5 slurm -- \
    salloc -N2 -- mpirun -np 2 --map-by node IMB-MPI1 PingPong

would silently fail due to ‘prted’ not being found in $PATH.

* gnu/packages/parallel.scm (prrte)[arguments]: Add
‘patch-prted-reference’ phase.

Change-Id: Iff30cb5a4dcc9e9cfe6638d518ee4f19561289a0
Signed-off-by: Andreas Enge <andreas@enge.fr>

gnu: libtar: Patch CVEs. [security fixes]

This fixes CVE-2021-33643, CVE-2021-33644, CVE-2021-33645,
CVE-2021-33646.

* gnu/packages/compression.scm (libtar)[source]<patches>: Add patches
here...
* gnu/local.mk (dist_patch_DATA): ...and here.
* gnu/packages/patches/libtar-CVE-2021-33643-CVE-2021-33644.patch,
gnu/packages/patches/libtar-CVE-2021-33645-CVE-2021-33646.patch: New files.

Signed-off-by: Andreas Enge <andreas@enge.fr>
Change-Id: I60a6b753fddc1a0d08f96010ef3d57ec66c2251b

gnu: Add owl.

* gnu/packages/scheme.scm (owl): New variable.

Change-Id: Ibb242bbcdedb92419b59e05635e8a32e85afc24e
Signed-off-by: Andreas Enge <andreas@enge.fr>

gnu: gawk: Add search-paths.

* gnu/packages/gawk.scm (gawk)[search-paths]: New field.

Change-Id: Idbf2709b793ebd58e1aae8d07698e1f3e816babd

gnu: trealla: Update to 2.58.0.

* gnu/packages/prolog.scm (trealla): Update to 2.58.0.

Change-Id: Ibd2a982389a07c07523fa3a787f06e2013adcdfc

gnu: Remove assimp-5.0.

This package is outdated, not used anymore in Guix and has a CVE.

* gnu/packages/graphics.scm (assimp-5.0): Delete variable.

Signed-off-by: Zheng Junjie <zhengjunjie@iscas.ac.cn>

gnu: sbcl-classimp: Update to 0.0.0-1.6c74f38.

* gnu/packages/lisp-xyz.scm
(sbcl-classimp): Update to 0.0.0-1.6c74f38.
[inputs]: Replace assimp-5.0 by assimp.
[arguments]<#:phases>: Adapt phase 'patch-assimp-lib-path.

(cl-classimp): Simplify.
(ecl-classimp): Simplify.

Signed-off-by: Zheng Junjie <zhengjunjie@iscas.ac.cn>