* gnu/packages/patches/libxslt-CVE-2016-4738.patch: New file.
* gnu/local.mk (dist_patch_DATA): Add it.
* gnu/packages/xml.scm (libxslt)[replacement]: New field.
(libxslt/fixed): New variable.

* gnu/packages/databases.scm (postgresql): Update to 9.5.5.
[home-page]: Use https.

* gnu/packages/databases.scm (mariadb): Update to 10.1.19.

* doc/guix.texi (Kerberos Services): New node.
* gnu/services/kerberos.scm: New file.
* gnu/local.mk: Add it.

* gnu/packages/audio.scm (faust-2): New variable.

* gnu/packages/llvm.scm (llvm-with-rtti): New variable.

* gnu/packages/openstack.scm (python-tempest-lib): Update to 1.0.0.
[home-page]: Use HTTPS.

* gnu/packages/openstack.scm (python-os-testr, python2-os-testr): Update
to 0.8.0.
[home-page]: Use HTTPS.

* gnu/packages/python.scm (python-jsonschema)[inputs]: Remove
python-setuptools. Move python-vcversioner to ...
[native-inputs]: ... here.
* gnu/packages/python.scm (python2-jsonschema)[inputs]: Move
python2-functools32 to ...
[propagated-inputs]: ... here.
[native-inputs]: Add python2-setuptools.

* gnu/packages/version-control.scm (libgit2): Update to 0.24.3.

* gnu/packages/python.scm (python-cryptography, python2-cryptography):
Update to 1.5.3.
[native-inputs]: Add python-pytz. Change python-pytest to python-pytest-2.9.2.
(python-cryptography-vectors, python2-cryptography-vectors): Update to 1.5.3.

* gnu/packages/python.scm (python-pytest-2.9.2): New variable.

* gnu/packages/patches/mupdf-CVE-2016-7504.patch,
gnu/packages/patches/mupdf-CVE-2016-7505.patch
gnu/packages/patches/mupdf-CVE-2016-7506.patch
gnu/packages/patches/mupdf-CVE-2016-7563.patch
gnu/packages/patches/mupdf-CVE-2016-7564.patch
gnu/packages/patches/mupdf-CVE-2016-9017.patch
gnu/packages/patches/mupdf-CVE-2016-9136.patch: New files.
* gnu/local.mk (dist_patch_DATA): Add them.
* gnu/packages/pdf.scm (mupdf)[source]: Use them.

* gnu/system/grub.scm (gnu): Export grub-configuration-grub.
* guix/scripts/system.scm (perform-action): Use it.
(define-module): Don't import (gnu packages grub).

Co-authored-by: Danny Milosavljevic <dannym@scratchpost.org>

* gnu/packages/uml.scm: New file.
* gnu/local.mk (GNU_SYSTEM_MODULES): Add it.

Signed-off-by: Roel Janssen <roel@gnu.org>

* guix/download.scm (download-to-store): Add #:verify-certificate?
parameter and honor it.
* guix/scripts/download.scm (%default-options): Add
'verify-certificate?' key.
(show-help, %options): Add '--no-check-certificate'.
(guix-download): Pass #:verify-certificate to 'download-to-store'.
* doc/guix.texi (Invoking guix download): Document it.

Fixes <http://bugs.gnu.org/24466>.
Reported by Leo Famulari <leo@famulari.name>.

* guix/build/download.scm (%x509-certificate-directory): New variable.
(make-credendials-with-ca-trust-files, peer-certificate)
(assert-valid-server-certificate, print-tls-certificate-error): New
procedures.  Add 'print-tls-certificate-error' as an exception printer
for 'tls-certificate-error'.
(tls-wrap): Add #:verify-certificate? parameter and honor it.
(open-connection-for-uri): Likewise.
(http-fetch): Likewise.
(url-fetch): Likewise.
* guix/download.scm (url-fetch)[builder]: Pass #:verify-certificate? #f.
* guix/scripts/lint.scm (probe-uri): Add case for 'tls-certificate-error'.
(validate-uri): Likewise.
* doc/guix.texi (Invoking guix download): Mention 'SSL_CERT_DIR'.

* gnu/packages/password-utils.scm (keepassx): Update to 2.0.3.
[inputs]: Add libxi.

* gnu/packages/owncloud.scm (owncloud-client): Update to 2.2.4.
[arguments]: Enable tests, disable two failing tests.
[inputs]: Remove python-wrapper, qt, ruby.  Add qtbase, qtwebkit.
Move perl ...
[native-inputs]: ... to here.  Add cmocka and qttools.

* gnu/packages/python.scm (python-sqlalchemy-utils,
python2-sqlalchemy-utils)[description]: Mention optional dependencies.

Signed-off-by: Leo Famulari <leo@famulari.name>

* gnu/packages/linux.scm (efibootmgr): New variable.

* gnu/packages/linux.scm (efivar): New variable.

* gnu/packages/ruby.scm (ruby-tzinfo-data): Update to 1.2016.9.

* gnu/packages/ruby.scm (ruby-sqlite3): Update to 1.3.12.

* gnu/packages/ruby.scm (ruby-shoulda-context): Update to 1.2.2.

* gnu/packages/ruby.scm (ruby-domain-name): Update to 0.5.20161021.

* gnu/packages/ruby.scm (ruby-http-cookie): Update to 1.0.3.

* gnu/packages/ruby.scm (ruby-sequel): Update to 4.40.0.

* gnu/packages/bioinformatics.scm (diamond): Update to 0.8.26.

* gnu/packages/tex.scm (texmaker)[inputs]: Use modular qt and qtwebkit.

Signed-off-by: Ludovic Courtès <ludo@gnu.org>

* gnu/packages/qt.scm (qtwebkit): New variable.

Signed-off-by: Ludovic Courtès <ludo@gnu.org>

* gnu/packages/nano.scm (nano): Update to 2.7.1.
[home-page]: Use https.

* gnu/packages/web.scm (jansson): Update to 2.9.
[source]: Remove 'jansson-CVE-2016-4425.patch'.
* gnu/packages/patches/jansson-CVE-2016-4425.patch: Delete file.
* gnu/local.mk (dist_patch_DATA): Remove it.

This allows 'guix refresh' to do the right thing.

* gnu/packages/ghostscript.scm (ghostscript)[properties]: New field.

* gnu/packages/tls.scm (acme-client): Update to 0.1.14.

* gnu/packages/vim.scm (vim): Update to 8.0.0069.

* gnu/packages/qt.scm (qtmultimedia)[source]: Remove bundled library.

* gnu/packages/qt.scm (qtimagesformats)[source]: Remove bundled 3rd
party libraries.

* gnu/packages/python.scm (python-sqlalchemy-utils)[native-inputs]: Add
python-pytest.

Signed-off-by: Marius Bakke <mbakke@fastmail.com>