gnu: linux-libre@4.1: Update to 4.1.49.

* gnu/packages/linux.scm (linux-libre-4.1): Update to 4.1.49.

gnu: Add cava.

* gnu/packages/audio.scm (cava): New public variable.

gnu: linux-libre: Add retpoline support on x86 [mitigates spectre].

* gnu/packages/linux.scm (make-linux-libre): On x86 systems, build
with GCC-7.

gnu: gcc@7: Update to 7.3.0.

* gnu/packages/gcc.scm (gcc-7): Update to 7.3.0.

gnu: dovecot: Fix CVE-2017-15132.

* gnu/packages/patches/dovecot-CVE-2017-15132.patch: New file.
* gnu/local.mk (dist_patch_DATA): Add it.
* gnu/packages/mail.scm (dovecot)[source]: Use it.

gnu: cobol: Run cobol85 test-suite.

* gnu/packages/cobol.scm (gnucobol)[arguments]: Add phase to place
test-suite tarball in test directory. Change test target.
[native-inputs]: Add perl.
[inputs]: Download test-suite tarball.

gnu: libmusicbrainz: Clean spaces between right parenthesis.

* gnu/packages/music.scm (libmusicbrainz): Remove unnecessary spaces between
  right parenthesis.

services: postgresql: Use pg_ctl to start and stop postgres.

Fixes <https://bugs.gnu.org/29992>.

* gnu/services/databases.scm (postgresql-shepherd-service): Replace
make-forkexec-constructor and make-kill-destructor with pg_ctl.

gnu: gource: Fix the hashes of mutated GitHub archives.

* gnu/packages/version-control.scm (gource): Fix hash.

gnu: nftables: Update to 0.8.1.

* gnu/packages/linux.scm (nftables): Update to 0.8.1.

gnu: libnftnl: Update to 1.0.9.

* gnu/packages/linux.scm (libnftnl): Update to 1.0.9.

gnu: qt: Update to 5.9.4.

* gnu/packages/qt.scm (qt qtbase qtsvg qtimageformats qtx11extras
qtxmlpatterns qtdeclarative qtconnectivity qtwebsockets qtsensors
qtmultimedia qtwayland qtserialport qtserialbus qtwebchannel
qtlocation qttools qtscript qtquickcontrols qtquickcontrols2
qtgraphicaleffects qtgamepad qtscxml qtpurchasing qtcanvas3d
qtnetworkauth qtwebkit): Update to 5.9.4.

gnu: Update SELinux packages.

* gnu/packages/selinux.scm (libsepol): Update to 2.7, release 20170804.
[source]: Fetch from git.
(checkpolicy)[arguments]: Set LIBSEPOLA.
(libselinux)[arguments]: Likewise; remove build phase "patch-libsepol-path".
(python-sepolgen)[arguments]: Adjust directory name in "enter-dir".
(python-setools): Update to 4.1.1.
[source]: Fetch from git.
(policycoreutils)[source]: Remove patch.
[arguments]: Remove build phases "fix-glib-cflags",
"fix-linkage-with-libsepol", "fix-target-paths", and "wrap-python-tools".
[inputs]: Remove python-wrapper, python-sepolgen, python-setools, python-ipy,
libcap-ng, pcre, dbus, dbus-glib, and glib.
* gnu/packages/patches/policycoreutils-make-sepolicy-use-python3.patch: Delete file.
* gnu/local.mk (dist_patch_DATA): Remove it.

gnu: Add streamlink.

* gnu/packages/video.scm (streamlink): New public variable.

gnu: Add python-pycryptodome.

* gnu/packages/python-crypto.scm (python-pycryptodome): New public variable.

gnu: Add python-iso3166.

* gnu/packages/iso-codes.scm (python-iso3166): New public variable.

gnu: Add python-iso639.

* gnu/packages/iso-codes.scm (python-iso639): New public variable.

gnu: webkitgtk: Update to 2.18.6 [security fixes].

Fixes CVE-2017-{7153,7160,7161,7165,13884,13885,} and CVE-2018-{4088,4096}.

* gnu/packages/webkit.scm (webkitgtk): Update to 2.18.6.

gnu: bind: Update to 9.12.0.

* gnu/packages/dns.scm (isc-bind): Update to 9.12.0.

gnu: liburcu: Update to 0.10.1.

* gnu/packages/datastructures.scm (liburcu): Update to 0.10.1.