Commit Graph

21320 Commits

Author SHA1 Message Date
Leo Famulari 10cb88f85c
gnu: jbig2dec: Fix CVE-2017-{7885,7975,7976}.
* gnu/packages/patches/jbig2dec-CVE-2017-7885.patch,
gnu/packages/patches/jbig2dec-CVE-2017-7975.patch,
gnu/packages/patches/jbig2dec-CVE-2017-7976.patch: New files.
* gnu/local.mk (dist_patch_DATA): Add them.
* gnu/packages/image.scm (jbig2dec)[source]: Use them.
2017-05-20 16:26:29 -04:00
Marius Bakke fefd4c197f
gnu: pcsc-lite: Update to 1.8.21.
* gnu/packages/security-token.scm (pcsc-lite): Update to 1.8.21.
2017-05-20 21:42:58 +02:00
Leo Famulari 12eecbf0bb
gnu: icedtea@3: Add aarch32-drop.
* gnu/packages/java.scm (icedtea-8)[native-inputs]: Add aarch32-drop.
2017-05-20 14:57:22 -04:00
Leo Famulari db531f734a
gnu: icedtea@3: Update to 3.4.0 [security fixes].
Fixes CVE-2017-{3509,3511,3512,3514,3526,3533,3539,3544}.

* gnu/packages/java.scm (icedtea-8): Update to 3.4.0.
2017-05-20 14:57:22 -04:00
Leo Famulari b17bd261b0
gnu: imagemagick: Update to 6.9.8-6.
* gnu/packages/imagemagick.scm (imagemagick): Update to 6.9.8-6.
2017-05-20 14:06:20 -04:00
Leo Famulari 40fd5600a2
download: Prune the ImageMagick mirror list.
These sites' TLS certificates are invalid.

* guix/download.scm (%mirrors) <imagemagick>: Remove
mirrors-{au,ru,uk}.go-parts.com.
2017-05-20 14:06:20 -04:00
Ludovic Courtès 82ce81ba06
gnu: guix: Add 'guile2.0-guix'.
* gnu/packages/package-management.scm (guile2.0-guix): New variable.
2017-05-20 20:00:53 +02:00
Ludovic Courtès 74460d1121
gnu: libssh, guile-ssh: Add a "debug" output.
* gnu/packages/ssh.scm (libssh)[outputs]: New field.
(guile-ssh)[outputs]: New field.
2017-05-20 19:49:36 +02:00
Ludovic Courtès 96afb480f8
pack: Use 'guile2.0-json' when building with Guile 2.0.
Fixes <http://bugs.gnu.org/27005>.
Reported by Pjotr Prins <pjotr.public12@thebird.nl>.

Fixes a regression introduced in commit
2252f087d4.

* guix/scripts/pack.scm (docker-image)[json]: New variable.
[build]: Use it.
2017-05-20 14:39:50 +02:00
Leo Famulari 7dccad95b6
gnu: icedtea@2: Update to 2.6.10 [security fixes].
Fixes CVE-2017-{3509,3511,3512,3514,3526,3533,3539,3544}.

* gnu/packages/java.scm (icedtea-7): Update to 2.6.10.
2017-05-20 14:39:50 +02:00
Leo Famulari 6a9defd747
gnu: dropbear: Update to 2017.75 [fixes CVE-2017-{9078,9079}].
* gnu/packages/ssh.scm (dropbear): Update to 2017.75.
2017-05-20 14:39:50 +02:00
Ludovic Courtès 429046e9dd
system: Use Guile 2.2 rather than 2.0 in %BASE-PACKAGES.
* gnu/system.scm (%base-packages): Change GUILE-2.0 to GUILE-2.2.
2017-05-20 14:39:49 +02:00
Ludovic Courtès d6bf931cb2
pack: Use 'guile2.0-json' when building with Guile 2.0.
Fixes <http://bugs.gnu.org/27005>.
Reported by Pjotr Prins <pjotr.public12@thebird.nl>.

Fixes a regression introduced in commit
2252f087d4.

* guix/scripts/pack.scm (docker-image)[json]: New variable.
[build]: Use it.
2017-05-20 14:30:01 +02:00
Marius Bakke 6520904b3e
vm: Add UEFI loader to disk images.
* gnu/build/vm.scm (install-efi): New procedure.
(initialize-hard-disk): Generate EFI blob when ESP is present.
* gnu/system/vm.scm (qemu-image): Append 40MiB EFI System Partition.

(cherry picked from commit ecf5d53769)
2017-05-20 10:57:00 +02:00
Marius Bakke 03119da211
vm: Support creating FAT partitions.
* gnu/build/vm.scm (create-ext-file-system, create-fat-file-system): New procedures.
(format-partition): Use them. Error for unknown file systems.
* gnu/system/vm.scm (qemu-image): Include DOSFSTOOLS.
* gnu/system/linux-initrd.scm (base-initrd): Always add nls_is8859-1.ko.
2017-05-20 10:20:35 +02:00
Marius Bakke fd5a30ab7b
vm: Support arbitrary partition flags.
* gnu/build/vm.scm (<partition>): Change BOOTABLE? to FLAGS.
(initialize-partition-table): Pass each flag to parted.
(initialize-hard-disk): Locate boot partition.
* gnu/system/vm.scm (qemu-image): Adjust partition flags.
2017-05-20 10:17:52 +02:00
Ludovic Courtès c383dc520f
gnu: guile-ssh: Fix potential double-free/use-after-free issue.
Fixes <http://bugs.gnu.org/26976>.
Reported by Mark H Weaver <mhw@netris.org>.

* gnu/packages/patches/guile-ssh-double-free.patch: New file.
* gnu/local.mk (dist_patch_DATA): Add it.
* gnu/packages/ssh.scm (guile-ssh)[source](patches): Add it.
2017-05-20 10:17:49 +02:00
Ludovic Courtès 4ee6584cbf
modules: Add more source-less modules.
* guix/modules.scm (%source-less-modules): New variable.
(source-module-dependencies): Use it.
2017-05-20 10:17:43 +02:00
Ludovic Courtès 4a628d57fc
publish: Fix narinfo rendering for already-compressed items.
Fixes <http://bugs.gnu.org/26975>.
Reported by Mark H Weaver <mhw@netris.org>.

* guix/scripts/publish.scm (bake-narinfo+nar): Pass #f as the 2nd
argument to 'stat' and properly handle #f.
* tests/publish.scm (wait-for-file): New procedure.
("with cache"): Remove 'wait-for-file' procedure.
("with cache, uncompressed"): New test.
2017-05-20 10:17:36 +02:00
Ludovic Courtès 36c99429a3
union: Gracefully handle dangling symlinks in the input.
Fixes <http://bugs.gnu.org/26949>.
Reported by Pjotr Prins <pjotr.public12@thebird.nl>.

* guix/build/union.scm (file-is-directory?): Return #f when FILE does
not exist or is a dangling symlink.
(file=?): Pass #f as a second argument to 'stat'; return #f when both
ST1 or ST2 is #f.
* tests/profiles.scm (test-equalm): New macro.
("union vs. dangling symlink"): New test.
2017-05-20 10:17:14 +02:00
Ludovic Courtès 51fe9cd38d
services: user-homes: Do not create home directories marked as no-create.
Fixes a bug whereby GuixSD would create the /nonexistent directory, from
user 'nobody', even though it has 'create-home-directory?' set to #f.

* gnu/build/activation.scm (activate-users+groups): Add comment for
\#:create-home?.
(activate-user-home)[ensure-user-home]: Skip when CREATE-HOME? is #f or
SYSTEM? is #t.
* gnu/tests/base.scm (run-basic-test)["no extra home directories"]: New
tests.
2017-05-20 10:17:10 +02:00
Marius Bakke f3f8938fe0
install: Enable SSH in installation image.
* gnu/system/install.scm (%installation-services): Add OPENSSH-SERVICE-TYPE.
* doc/guix.texi (Preparing for Installation)[Networking]: Document it.
2017-05-20 10:16:37 +02:00
Marius Bakke e13b55ae79
services: openssh: Don't depend on networking.
* gnu/services/ssh.scm (openssh-shepherd-service): Drop requirement.
2017-05-20 10:16:34 +02:00
Leo Famulari a6c642ef63
maint: The 'release' target builds a VM image.
* gnu/system/examples/vm-image.tmpl: New file.
* Makefile.am (GUIXSD_VM_SYSTEMS, GUIXSD_VM_IMAGE_BASE,
GUIXSD_VM_IMAGE_SIZE): New variables.
(release): Add logic to build a VM image.
(EXAMPLES): Add 'gnu/system/examples/vm-image.tmpl'.
* doc/guix.texi (Running GuixSD in a VM, Installing GuixSD in a VM): Mention the
pre-built VM image.
2017-05-20 10:16:23 +02:00
Ludovic Courtès 56a03975eb
gnu: aspell: 'dict-dir' set to ~/.guix-profile/lib/aspell or $ASPELL_DICT_DIR.
See <https://bugs.gnu.org/25836> for background.

* gnu/packages/patches/aspell-default-dict-dir.patch: New file.
* gnu/packages/aspell.scm (aspell)[source](patches): New field.
[native-search-paths]: New field.
* gnu/local.mk (dist_patch_DATA): Add it.
2017-05-20 10:16:14 +02:00
Alex Kost 37fd956771
build: Compile stackage only if 'guile-json' is available.
Fixes <http://bugs.gnu.org/26860>.
This is a followup to commit 3089b5d3f5.

* Makefile.am (MODULES): Move "guix/scripts/import/stackage.scm" within
'if HAVE_GUILE_JSON'.

Signed-off-by: Ludovic Courtès <ludo@gnu.org>
2017-05-20 10:16:02 +02:00
Leo Famulari c90fd5564c
gnu: qemu: Fix CVE-2017-7493.
* gnu/packages/patches/qemu-CVE-2017-7493.patch: New file.
* gnu/local.mk (dist_patch_DATA): Add it.
* gnu/packages/qemu.scm (qemu)[source]: Use it.
2017-05-20 10:15:53 +02:00
Maxim Cournoyer 6d1ae43dcb
profiles: Add elapsed time to manual-database hook to output message.
* guix/profiles.scm (manual-database): Add elapsed time to manual-database
hook to output message.

Signed-off-by: Ludovic Courtès <ludo@gnu.org>
2017-05-20 10:15:47 +02:00
Ricardo Wurmus d03b34cf19
gnu: glibc/hurd: Do not apply i686 patch.
This is a follow-up to commit c2e4f14ac8.

* gnu/packages/base.scm (glibc/hurd)[arguments]: Override pre-configure phase
with a copy that does not include the patch application.
2017-05-20 10:15:31 +02:00
Ricardo Wurmus 5d6e38a6c3
gnu: glibc/hurd: Use modify-phases syntax.
* gnu/packages/base.scm (glibc/hurd)[arguments]: Use modify-phases syntax.
2017-05-20 10:15:28 +02:00
Efraim Flashner ed5e3ab8ab
gnu: tor: Update to 0.3.0.7.
* gnu/packages/tor.scm (tor): Update to 0.3.0.7.
2017-05-20 10:15:00 +02:00
Leo Famulari d30ce4a7e2
gnu: icedtea@2: Update to 2.6.10 [security fixes].
Fixes CVE-2017-{3509,3511,3512,3514,3526,3533,3539,3544}.

* gnu/packages/java.scm (icedtea-7): Update to 2.6.10.
2017-05-19 21:40:26 -04:00
ng0 cc5a76a74c
gnu: Add loksh.
* gnu/packages/shells.scm (loksh): New variable.

Signed-off-by: Marius Bakke <mbakke@fastmail.com>
2017-05-20 02:42:04 +02:00
Leo Famulari 70f8242b13
gnu: dropbear: Update to 2017.75 [fixes CVE-2017-{9078,9079}].
* gnu/packages/ssh.scm (dropbear): Update to 2017.75.
2017-05-19 20:32:26 -04:00
Brendan Tildesley 1326166ebe
gnu: calibre: Don't create uninstaller.
* gnu/packages/ebook.scm (calibre)[arguments]<#:phases>. Add 'patch-source' phase.

Co-authored-by: Marius Bakke <mbakke@fastmail.com>
2017-05-19 23:49:21 +02:00
Brendan Tildesley affaf98f77
gnu: calibre: Add exhaustive license list.
* gnu/packages/ebook.scm (calibre): Add exhaustive license list.
(chmlib)[license]: Use license: prefix.

Co-authored-by: Marius Bakke <mbakke@fastmail.com>
2017-05-19 23:49:21 +02:00
Brendan Tildesley 9b7dcc2703
gnu: calibre: Add missing dependencies.
* gnu/packages/ebook.scm (calibre)[inputs]: Add poppler, python2-dnspython,
and python2-pygments.
[arguments]: Remove old TODO comments. libwmf and psutil are no longer used.

Signed-off-by: Marius Bakke <mbakke@fastmail.com>
2017-05-19 23:49:21 +02:00
Brendan Tildesley eeba7d3a07
gnu: calibre: Unbundle chardet.
* gnu/packages/ebook.scm (calibre)[source]: Delete bundled chardet.
[inputs]: Add python2-chardet.

Signed-off-by: Marius Bakke <mbakke@fastmail.com>
2017-05-19 23:49:21 +02:00
Brendan Tildesley b3399a0985
gnu: calibre: Unbundle liberation fonts.
*gnu/packages/ebook.scm (calibre)[source]: Delete liberation .ttf files.
[native-inputs]: Add font-liberation.
[arguments]: Calibre still references the bundled fonts, so we install the
packaged fonts to the directory the bundled fonts would have been.

Signed-off-by: Marius Bakke <mbakke@fastmail.com>
2017-05-19 23:49:21 +02:00
Brendan Tildesley 29ec085170
gnu: calibre: Unbundle python2-markdown.
* gnu/packages/ebook.scm (calibre)[snippet]: Replace python references to
bundled markdown with packaged. Remove markdown from source.
[inputs]: Add python2-markdown as a dependency.

Signed-off-by: Marius Bakke <mbakke@fastmail.com>
2017-05-19 23:49:21 +02:00
Brendan Tildesley d94a99ec66
gnu: calibre: Import unbundle feedparser patch from debian.
* gnu/packages/ebook.scm (calibre)[source]: Reference new patch file.
[inputs]: Add python2-feedparser as an input.
* gnu/packages/patches/calibre-use-packaged-feedparser.patch: New file.
* gnu/local.mk (dist_patch_DATA): Add it.

Signed-off-by: Marius Bakke <mbakke@fastmail.com>
2017-05-19 23:49:20 +02:00
Brendan Tildesley 7010d231db
gnu: calibre: Import dont-load-icons patch from debian.
* gnu/packages/patches/calibre-dont-load-remote-icons.patch: New file.
* gnu/packages/ebooks.scm (calibre)[source]: Add reference to patch file.
* gnu/local.mk (dist_path_DATA): Add it.

Signed-off-by: Marius Bakke <mbakke@fastmail.com>
2017-05-19 23:49:20 +02:00
Brendan Tildesley cd6171c1b4
gnu: calibre: Update to 2.85.1.
* gnu/packages/ebooks.scm (calibre): Update to 2.85.1.
* gnu/packages/patches/calibre-drop-unrar.patch: Delete incompatible patch
file. Recreate debian patch file from the latest calibre git revision.

Signed-off-by: Marius Bakke <mbakke@fastmail.com>
2017-05-19 23:49:20 +02:00
Ludovic Courtès b55dd31660
system: Use Guile 2.2 rather than 2.0 in %BASE-PACKAGES.
* gnu/system.scm (%base-packages): Change GUILE-2.0 to GUILE-2.2.
2017-05-19 23:38:52 +02:00
Marius Bakke 41fa164aa0
gnu: python-pyqt@4: Update to 4.12.
* gnu/packages/qt.scm (python-pyqt-4): Update to 4.12.
[source]: Adjust URI to file rename.
2017-05-19 21:33:43 +02:00
Marius Bakke 5ac3a671d8
gnu: python-pyqt: Update to 5.8.2.
* gnu/packages/qt.scm (python-pyqt): Update to 5.8.2.
2017-05-19 21:24:11 +02:00
Marius Bakke f6da41b54d
gnu: python-sip: Update to 4.19.2.
* gnu/packages/qt.scm (python-sip): Update to 4.19.2.
2017-05-19 21:24:11 +02:00
Marius Bakke 8ea98ee10c
doc: Update for UEFI systems.
* doc/guix.texi (USB Stick Installation): Mention UEFI.
(Preparing for Installation): Add notes about EFI System Partition, and
mounting partitions before init.
(Proceeding with the Installation): Mention the GRUB-EFI package.
(Using the Configuration System): Lightweight desktop is now a UEFI system.
(GRUB Configuration): Expand on package field. Add indexes.
* gnu/system/examples/lightweight-desktop.tmpl: Adjust to native EFI configuration.
2017-05-19 13:52:49 +02:00
Marius Bakke ecf5d53769
vm: Add UEFI loader to disk images.
* gnu/build/vm.scm (install-efi): New procedure.
(initialize-hard-disk): Generate EFI blob when ESP is present.
* gnu/system/vm.scm (qemu-image): Append 40MiB EFI System Partition.
2017-05-19 12:59:25 +02:00
Marius Bakke 4d415f0c3c
vm: Support creating FAT partitions.
* gnu/build/vm.scm (create-ext-file-system, create-fat-file-system): New procedures.
(format-partition): Use them. Error for unknown file systems.
* gnu/system/vm.scm (qemu-image): Include DOSFSTOOLS.
* gnu/system/linux-initrd.scm (base-initrd): Always add nls_is8859-1.ko.
2017-05-19 12:59:25 +02:00