doc: Update package count.

* doc/guix.texi (Limitations): Update package count.

bootloader: extlinux: Fix device tree path.

* gnu/bootloader/extlinux.scm (extlinux-configuration-file): Use kernel
  directory to format device tree file path.

linux-libre: Adapt some arm options to match intel conf.

* gnu/packages/aux-files/linux-libre/4.14-arm.conf: GuixSD base-initrd expects
  ext4 and fat filesystem to be built-in. Adapt configuration
  accordingly. Also set devtmpfs_mount to yes.

gnu: fish: Update to 2.7.0.

* gnu/packages/shell.scm (fish): Update to 2.7.0.
[source]: Add alternative source.

gnu: knot: Update to 2.6.2.

* gnu/packages/dns.scm (knot): Update to 2.6.2.

gnu: subread: Update to 1.6.0.

* gnu/packages/bioinformatics.scm (subread): Update to 1.6.0.

gnu: emacs-org: Update to 9.1.3.

* gnu/packages/emacs.scm (emacs-org): Update to 20171116 a.k.a. Org 9.1.3.

services: dicod: Run in a container.

* gnu/services/dict.scm (dicod-shepherd-service): Add
'with-imported-modules' form and 'modules' field.  Use
'make-forkexec-constructor/container' instead of
'make-forkexec-constructor'.

shepherd: Include /etc/group in service containers.

* gnu/build/shepherd.scm (default-mounts)[passwd]: Rename to...
[accounts]: ... this.  Add /etc/group.

gnu: gnumeric: Update to 1.12.36.

* gnu/packages/gnome.scm (gnumeric): Update to 1.12.36.

gnu: goffice: Update to 0.10.36.

* gnu/packages/gnome.scm (goffice): Update to 0.10.36.

gnu: libzip: Update to 1.3.2.

* gnu/packages/compression.scm (libzip): Update to 1.3.2.

gnu: libzip: Use new libzip.org home page.

* gnu/packages/compression.scm (libzip)[home-page]: Update.

gnu: vlc: Update to 2.2.8 [fixes CVE-2017-9300, CVE-2017-10699].

* gnu/packages/video.scm (vlc): Update to 2.2.8.

gnu: emacs-magit-popup: Update for the new source.

'magit-popup' is not a part of 'magit' anymore.

* gnu/packages/emacs.scm (emacs-magit-popup): Update to 2.12.0.
[source]: Update origin URL and file-name.
[home-page]: Update to the new home.
[native-inputs]: Add 'texinfo' to build the info manual.
[arguments]: Add 'make-info' phase.

gnu: emacs-hl-todo: Update to 1.8.0.

* gnu/packages/emacs.scm (emacs-hl-todo): Update to 1.8.0.

doc: Split the "Substitutes" section into subsections.

* doc/guix.texi (Substitutes): Move information into sections, and create one
  new subsection regarding substitution failure.
  (Top): In the detailed listing, add entries for the new subsections.
  (Official Substitute Server): Move info about hydra here.  Add information
  that explains when substitutes are enabled by default.
  (Substitute Server Authorization): Move information about how to enable or
  disable substitutes here.
  (Substitute Authentication): Move information about how Guix authenticates
  substitutes here.
  (Proxy Settings): Move information about how to download substitutes via
  proxy here.
  (Substitution Failure): New section.  Add information about how Guix handles
  substitution failure.  Be extra clear about behavior concerning --fallback.
  (On Trusting Binaries): Move information about trusting binaries here.
  (Invoking guix-daemon): Remove an incorrect statement about when substitutes
  are enabled by default.
  (Common Build Options): Add cross-references for the --fallback option.

Co-authored-by: George Clemmer <myglc2@gmail.com>

gnu: procmail: Fix CVE-2017-16844.

* gnu/packages/patches/procmail-CVE-2017-16844.patch: New file.
* gnu/local.mk (dist_patch_DATA): Add it.
* gnu/packages/mail.scm (procmail)[source]: Use it.

gnu: linux-libre: Update to 4.14.1.

* gnu/packages/linux.scm (%linux-libre-version): Update to 4.14.1.
(%linux-libre-hash): Update hash.

gnu: linux-libre@4.9: Update to 4.9.64.

* gnu/packages/linux.scm (linux-libre-4.9): Update to 4.9.64.