Fixes <https://bugs.gnu.org/29570>.
Reported by Vagrant Cascadian <vagrant@debian.org>.

* build-aux/build-self.scm (matching-guile-2.2): New procedure.
(guile-for-build): Use it.

* gnu/packages/display-managers.scm (sddm): Update to 0.17.0
[arguments]: Clean up comments.

* gnu/packages/fontutils.scm (python2-ufolib): Update to 2.1.1

* gnu/packages/fontutils.scm (python2-defcon): Update to 0.3.5

* gnu/packages/connman.scm (cmst): Update to 2017.09.19.

* gnu/packages/cdrom.scm (libcue): Update to 2.2.0

* gnu/packages/haskell-check.scm (ghc-quickcheck-io): Update to 0.2.0

* gnu/packages/haskell-check.scm (ghc-tasty-rerun): Update to 1.1.8

* gnu/packages/haskell-check.scm (ghc-tasty-smallcheck)[home-page]: Use
HTTPS.

* gnu/packages/haskell-check.scm (ghc-tasty-smallcheck): Update to 0.8.1

* gnu/packages/haskell-check.scm (ghc-test-framework-hunit): Update to 0.3.0.2

* gnu/packages/haskell-check.scm (ghc-tasty-golden)[description]: Use @dfn.

* gnu/packages/haskell-check.scm (ghc-tasty-golden): Update to 2.3.1.1

* gnu/packages/databases.scm (perl-dbd-pg): Update to 3.7.0

* gnu/packages/databases.scm (perl-sql-abstract): Update to 1.84

* gnu/packages/databases.scm (perl-dbix-class-schema-loader): Update to
0.07047

* gnu/packages/databases.scm (perl-dbi): Update to 1.637

* doc/guix.texi (Invoking guix import): Match the URI actually used by the
updater.

Fixes CVE-2016-{9840,9841,9842,9843,10165} and CVE-2017-{10193,10198,10274,
10281,10285,10294,10345,10346,10347,10348,10349,10350,10355,10356,10357,10388}.

* gnu/packages/java.scm (icedtea-7): Update to 2.6.12.

* gnu/packages/linux.scm (%linux-libre-version): Update to 4.14.4.
(%linux-libre-hash): Update hash.

* gnu/packages/linux.scm (linux-libre-4.9): Update to 4.9.67.

* gnu/packages/linux.scm (linux-libre-4.4): Update to 4.4.104.

* gnu/packages/gnustep.scm (windowmaker)[arguments]: Add 'install-xsession'
phase. Add (guix build build-system), (guix build utils) and (ice-9 match) to
#:modules.

* gnu/packages/messaging.scm (qtox)[inputs]: Change ffmpeg-3.3 to ffmpeg.

Signed-off-by: Leo Famulari <leo@famulari.name>

* gnu/packages/engineering.scm (kicad)[arguments]:
<phases>: Remove install-lib-3d.
<configure-flags>: Add "-DCMAKE_INSTALL_LIBDIR".

* gnu/packages/gnunet.scm (gnurl): Update to 7.57.0.

Signed-off-by: Leo Famulari <leo@famulari.name>

* gnu/packages/bioinformatics.scm (bedtools): Update to 2.27.0.
[arguments]: Remove custom "install" phase; specify prefix.

* gnu/packages/syncthing.scm (syncthing): Update to 0.14.41.

* gnu/packages/syncthing.scm (go-github-com-audriusbutkevicius-pfilter): Update
to 0.0.0-1.56143fe.

* gnu/packages/syncthing.scm (go-github-com-syndtr-goleveldb): Update to
0.0.0-1.549b6d6.

* gnu/packages/music.scm (qtractor): Update to 0.8.5.

* gnu/packages/music.scm (zynaddsubfx): Update to 3.0.3.

* doc/guix.texi (Proceeding with the Installation): Replace the old-style
‘grub-configuration’ with the newer ‘bootloader-configuration’ syntax.
* gnu/system/examples/vm-image.tmpl: Likewise.
* gnu/system/install.scm (installation-os): Likewise.
* gnu/tests.scm (%simple-os): Likewise.
* gnu/tests/install.scm (%minimal-os, %minimal-os-on-vda, %separate-home-os)
(%separate-store-os, %raid-root-os, %encrypted-root-os, %btrfs-root-os):
Likewise.
* gnu/tests/nfs.scm (%base-os): Likewise.
* tests/guix-system.scm (OS_BASE, make_user_config): Likewise.
* tests/system.scm (%os, %os-with-mapped-device): Likewise.

* gnu/packages/admin.scm (acpica)[home-page]: Use HTTPS.

* gnu/packages/xdisorg.scm (xlockmore): Update to 5.55.

* gnup/packages/haskell-web.scm (ghc-http-conduit): Update to 2.2.4.

* gnup/packages/haskell-web.scm (ghc-http-client-tls): Update to 0.3.5.1.

* gnup/packages/haskell-web.scm (ghc-http-client): Update to 0.5.7.1.

* gnu/packages/haskell.scm (ghc-aws): Update to 0.18.
[inputs]: Replace ghc-cryptohash with ghc-cryptonite.

* gnu/packages/haskell-web.scm (ghc-http-types)[arguments]: Run tests.
[native-inputs]: Add ghc-doctest, ghc-hspec, ghc-quickcheck,
ghc-quickcheck-instances, and hspec-discover.