* gnu/packages/xdisorg.scm (xscreensaver)[arguments]: Do what the
comment tells us.

* gnu/packages/xdisorg.scm (xscreensaver): Update to 5.43.

* gnu/packages/admin.scm (acpica): Update to 20190703.

* gnu/packages/admin.scm (sedsed)[description]: Use @command{} instead
of command(n) and do some minor editing.

* gnu/packages/admin.scm (sedsed)[home-page]: Use HTTPS.

* gnu/packages/version-control.scm (cvs)[source]: Rename patch.
* gnu/packages/patches/cvs-2017-12836.patch: Rename to ...
* gnu/packages/patches/cvs-CVE-2018-12836.patch: ... this.
* gnu/local.mk (dist_patch_DATA): Register it.

* gnu/packages/photo.scm (libexif)[source]: Add patch.
* gnu/packages/patches/libexif-CVE-2018-20030.patch: New file.
* gnu/local.mk (dist_patch_DATA): Register it.

* gnu/packages/networking.scm (strongswan): Update to 5.8.0.

* gnu/packages/networking.scm (net-snmp)[properties]: New field.

* gnu/packages/admin.scm (testdisk)[source]: Use HTTPS.

* gnu/packages/admin.scm (testdisk): Update to 7.1.

* gnu/packages/admin.scm (sedsed): Update to 1.1.
[arguments]: Use (default) Python (3).

Drop unused .sedsed-real symlink and avoid sedsed → sedsed.py
→ .sedsed.py-real exec chain.

* gnu/packages/admin.scm (sedsed)[arguments]: Move ‘symlink’ phase
after ‘wrap’.

* gnu/packages/gnome.scm (mutter)[arguments]: Remove duplicate gtk+
from propagated-inputs.

* gnu/packages/pretty-print.scm (a2ps)[source]: Add patch.
* gnu/packages/patches/a2ps-CVE-2015-8107.patch: New file.
* gnu/local.mk (dist_patch_DATA): Register it.

CVE-2018-1988{1,2}, CVE-2019-613{0,1}, CVE-2019-7321].

* gnu/packages/pdf.scm (mupdf): Update to 1.15.0.
[source]: Update source snippet.

* gnu/packages/javascript.scm (mujs): Update to 1.0.6.
[source]: Download using url-fetch.
[arguments]: Update 'install-shared-library phase.
[home-page]: Update to new home-page.

* gnu/packages/game-development.scm (plib)[patches]: Add patches.
* gnu/packages/patches/plib-CVE-2011-4620.patch,
gnu/packages/patches/plib-CVE-2012-4552.patch: New files.
* gnu/local.mk (dist_patch_DATA): Register them.

* gnu/packages/gnupg.scm (python-gnupg): Update to 0.4.4.

* gnu/packages/gnupg.scm (gpgme)[properties]: New field. Add ftp-server,
ftp-directory.

* gnu/packages/gnupg.scm (npth)[properties]: New field. Add ftp-server,
ftp-directory.

* gnu/packages/gnupg.scm (gpa): Update to 0.10.0.

* gnu/packages/gnupg.scm (gpa)[properties]: New field, add ftp-server,
ftp-directory.

* gnu/packages/databases.scm (postgresql@9): Update to 9.6.14.

* gnu/packages/gnupg.scm (gnupg): Update to 2.2.17.

Includes fixes for CVE-2019-9811, CVE-2019-11709, CVE-2019-11711,
CVE-2019-11712, CVE-2019-11713, CVE-2019-11715, CVE-2019-11717,
CVE-2019-11719, CVE-2019-11729, and CVE-2019-11730.

* gnu/packages/gnuzilla.scm (%icecat-version): Update to 60.8.0-guix1.
(icecat-source)[upstream-firefox-source]: Update hash.
(icecat): Refresh some stale comments.

* gnu/packages/chromium.scm (ungoogled-chromium)[properties]: Set TIMEOUT to
40 hours.

* gnu/packages/linux.scm (iproute): Update to 5.2.0.

* gnu/packages/web.scm (python-internetarchive)[version]: Update to 1.8.5.
[source](modules, snippet): New fields.

* gnu/packages/wget.scm (wgetpaste): Update to 2.29.
[arguments]: Replace default paste service. Install license file.

* gnu/packages/emacs-xyz.scm (emacs-stumpwm-mode): Update to 0.0.1-1.8fbe071.

This follows up on commit 0971f8bd,
which led to ‘r-biocmanager: unbound variable’ errors.  See
<https://lists.gnu.org/archive/html/guix-devel/2019-07/msg00120.html>.

* gnu/packages/bioinformatics.scm (r-biocinstaller): Remove variable.

* gnu/packages/web.scm (anonip): New variable.

* gnu/packages/education.scm (snap): Update to 5.0.1.

* gnu/packages/music.scm (musescore): Update to 3.2.3.

* gnu/packages/gnunet.scm (libmicrohttpd): Update to 0.9.65.

This increases the closure size by a mere 1.8 MiB (0.8%).

* gnu/packages/bootloaders.scm (grub)[inputs]: Add fuse.

* gnu/packages/bootloaders.scm (grub): Update to 2.04.
[source]: Remove upstreamed patches.
[arguments]: Don't require Python.  Add a ‘disable-pixel-perfect-test’
phase to skip tests that fail with with our newer Unifont.
* gnu/packages/patches/grub-efi-fat-serial-number.patch: Adjust context.
* gnu/packages/patches/grub-binutils-compat.patch,
gnu/packages/patches/grub-check-error-efibootmgr.patch: Delete files.
* gnu/local.mk (dist_patch_DATA): Remove them.

* etc/guix-install.sh (chk_gpg_keyring): Call gpg with ‘--dry-run’.

* etc/guix-install.sh (chk_gpg_keyring): New function to handle the
public key check previously stuffed into chk_require.
(main): Call it.