gnu: mupdf: Update to 1.8. * gnu/packages/pdf.scm (mupdf): Update to 1.8.
gnu: mupdf: Simplify package. * gnu/packages/pdf.scm (mupdf)[source]: Drop patch and part of snippet modifying permissions of files added by the patch. [arguments]: Use #:make-flags instead of modified build and install phases. Drop superfluous module inclusion. Use modify-phases syntax. * gnu/packages/patches/mupdf-buildsystem-fix.patch: Remove patch. * gnu-system.am (dist_patch_DATA): Unregister patch.
gnu: Add fluxbox. * gnu/packages/wm.scm (fluxbox): New variable. Co-authored-by: Eric Bavier <bavier@member.fsf.org>
gnu: webkitgtk: Update to 2.10.8 [fixes CVE-2016-1726]. * gnu/packages/webkit.scm (webkitgtk): Update to 2.10.8.
gnu: openexr: Disable broken test to fix build on i686. * gnu/packages/graphics.scm (openexr)[arguments]: New field.
doc: Add footnote about pointing ~/.config/guix/latest at user's checkout * doc/contributing.texi (Running Guix Before It Is Installed): New footnote.
gnu: libevent: Update to 2.0.22 [fixes CVE-2015-6525]. * gnu/packages/libevent.scm (libevent): Update to 2.0.22.
cve: Read entire CVE databases for the current year and the past year. The "Modified" database that we were reading is much smaller, but it only shows CVEs modified over the past week. * guix/cve.scm (%now, %current-year, %past-year): New variables. (yearly-feed-uri): New procedure. (%cve-feed-uri, %ttl): Remove. (%current-year-ttl, %past-year-ttl): New variables. (call-with-cve-port): Add 'uri' and 'ttl' parameters and honor them. Add 'setvbuf' call. (current-vulnerabilities)[read-vulnerabilities]: New procedure. Read from both %LAST-YEAR and %CURRENT-YEAR.
gnu: vorbis-tools: Patch buffer overflow [fixes CVE-2015-6749]. * gnu/packages/patches/vorbis-tools-CVE-2015-6749.patch: New file. * gnu-system.am (dist_patch_DATA): Add it. * gnu/packages/xiph.scm (vorbis-tools)[source]: Use it.
doc: Suggest `guix.scm' for upstream maintainers. * doc/guix.texi (Invoking guix package): Suggest `guix.scm'. Signed-off-by: Ludovic Courtès <ludo@gnu.org>
cve: Make CPE patch level part of the version string. * guix/cve.scm (%cpe-package-rx): Adjust to account for :PATCH-LEVEL. (cpe->package-name): Likewise.
gnu: Add powwow. * gnu/packages/games.scm (powwow): New variable.
gnu: Add bioawk. * gnu/packages/bioinformatics.scm (bioawk): New variable. Signed-off-by: Leo Famulari <leo@famulari.name>
gnu: linux-libre: Update to 4.4.5. * gnu/packages/linux.scm (linux-libre): Update to 4.4.5.
gnu: Add nload. * gnu/packages/networking.scm (nload): New variable. Signed-off-by: Leo Famulari <leo@famulari.name>
gnu: dropbear: Update to 2016.72 [fixes CVE-2016-3116]. * gnu/packages/ssh.scm (dropbear): Update to 2016.72.
gnu: openssh: Update to 7.2p2 [fixes CVE-2016-3115]. * gnu/packages/ssh.scm (openssh): Update to 7.2p2.
gnu: catch: Update to 1.3.5. * gnu/packages/check.scm (catch): Update to 1.3.5.
gnu: cppunit: Update to 1.13.2. * gnu/packages/check.scm (cppunit): Update to 1.13.2. [source]: Change to libreoffice's hosted release tarballs. [home-page]: Change to freedesktop.
gnu: lcov: Update to 1.12. * gnu/packages/code.scm (lcov): Update to 1.12.