* gnu/packages/kde.scm (kdevelop): Update to 5.1.1.
[arguments]: Set QT_QPA_PLATFORM_PLUGIN_PATH during the wrap-executable
phase.
(kdevplatform): Update to 5.1.1.

* gnu/packages/bioinformatics.scm (gemma)[arguments]: Fix indentation.

* gnu/packages/bioinformatics.scm (gemma)[arguments]: On 32-bit
architectures add 'FORCE_32BIT' flag.

Both libsepol and pcre required by libselinux.pc.

* gnu/packages/selinux.scm (libselinux)[inputs]: Move libsepol and pcre...
[propagated-inputs]: ...here.

* gnu/packages/photo.scm (lensfun)[arguments]: On non-Intel machines,
don't build with architecture specific instructions.

* gnu/packages/games.scm (openttd): Update to 1.7.1.

* gnu/packages/crypto.scm (tomb): Upgrade to 2.4.
[inputs]: Remove swish-e.  Move "sude" input to...
[native-inputs]: ...here.  New field.

* gnu/packages/gnome.scm (network-manager): Update to 1.8.0.
[inputs]: Add curl, cyrus-sasl and eudev.

* gnu/packages/calcurse.scm (calcurse): Upgrade to 4.2.2.
[inputs]: Add tzdata for tests.
[arguments]: Add new 'check-setup' phase.

* gnu/packages/video.scm (ffmpeg)[inputs]: Add libva.

* gnu/packages/networking.scm (whois): Update to 5.2.16.

* gnu/packages/admin.scm (nmap): Update to 7.50.

* gnu/packages/curl.scm (curl)[replacement]: Update to 7.54.1.
(curl-7.54.0): Replace with ...
(curl-7.54.1): ... new variable.

* gnu/packages/patches/osip-CVE-2017-7853.patch: New file.
* gnu/local.mk (dist_patch_DATA): Add it.
* gnu/packages/telephony.scm (osip)[source]: Use it.

* gnu/packages/telephony.scm (osip): Update to 5.0.0.

* gnu/packages/photo.scm (darktable): Update to 2.2.5.

This adds fixes for CVE-2017-7757, CVE-2017-7758, and the remaining
5 patches for CVE-2017-5470.

* gnu/packages/gnuzilla.scm (icecat)[source]: Add selected fixes from the
upstream mozilla-esr52 repository, through ESR 52.2.

This documents that we include fixes for the following CVEs: CVE-2017-5472,
CVE-2017-7749, CVE-2017-7750, CVE-2017-7751, CVE-2017-7752, CVE-2017-7754,
CVE-2017-7756, CVE-2017-7764, CVE-2017-7765, CVE-2017-7778, and that we
include 15 out of 20 patches for CVE-2017-5470.

* gnu/packages/gnuzilla.scm (icecat)[source]: Rename existing patches to
indicate their CVE assignments.

Partly fixes <https://bugs.gnu.org/26976>.

* gnu/packages/patches/guile-ssh-channel-finalization.patch: New file.
* gnu/packages/ssh.scm (guile-ssh)[source](patches): Use it.
* gnu/local.mk (dist_patch_DATA): Add it.

* guix/scripts/package.scm (find-packages-by-description): Rewrite to
compute a score based on the number of regexps matched and the number of
matches for each regexp.  Sort according to this score and return it as
a second value.
(process-query) <'search>: Capture the two return values of
'find-packages-by-description'.  Pass #:extra-fields to
'package->recutils'.
* doc/guix.texi (Invoking guix package): Mention relevance, give an
example.

* guix/ui.scm (package->recutils): Add #:extra-fields and honor it.

* gnu/packages/enlightenment.scm (enlightenment): Add new 'fix-keyboard' phase.
(inputs): Add 'xkeyboard-config'.

Signed-off-by: Efraim Flashner <efraim@flashner.co.il>

The old URL redirects to https://abisource.com.

* gnu/packages/abiword.scm (abiword)[source]: Change URL.
[home-page]: Change URL.

* gnu/packages/ldc.scm (ldc-bootstrap): Update ldc to 0.17.4.

* gnu/build/marionette.scm (wait-for-file): New procedure.
* gnu/tests/base.scm (run-mcron-test)[test](wait-for-file): Remove.
Pass second argument in 'wait-for-file' calls.
* gnu/tests/ssh.scm (run-ssh-test)[test](wait-for-file): Remove.
Pass second argument in 'wait-for-file' calls.
* gnu/tests/messaging.scm (run-xmpp-test)[test](guest-wait-for-file):
Remove.
Use 'wait-for-file' instead, with second argument.

* gnu/services/cuirass.scm (cuirass-log-rotations): New procedure.
(cuirass-service-type): Use it to extend ROTTLOG-SERVICE-TYPE.

* gnu/services/admin.scm (rottlog-service-type)[compose, extend]: New
fields.
* doc/guix.texi (Log Rotation): Mention extension.

* gnu/services/admin.scm (<log-rotation>): New record type.
(syslog-rotation-config, simple-rotation-config): Remove.
(%default-rotations): Define as a list of <log-rotation> objects.
(log-rotation->config, log-rotations->/etc-entries): New procedures.
(<rottlog-configuration>)[periodic-rotations]: Remove.
[rotations]: New field.
(rottlog-etc): Use 'log-rotations->/etc-entries'.
* doc/guix.texi (Log Rotation): Update accordingly.

* gnu/packages/emacs.scm (emacs-markdown-mode): Update to 2.2.

Signed-off-by: Arun Isaac <arunisaac@systemreboot.net>

* gnu/packages/emacs.scm (emacs-iedit): Update to 0.9.9.9.

Signed-off-by: Arun Isaac <arunisaac@systemreboot.net>

* gnu/packages/emacs.scm (emacs-helm): Update to 2.7.1.

Signed-off-by: Arun Isaac <arunisaac@systemreboot.net>

* gnu/packages/emacs.scm (emacs-yaml-mode): Update to 0.0.13.

Signed-off-by: Arun Isaac <arunisaac@systemreboot.net>

* gnu/packages/emacs.scm (emacs-elfeed): Update to 2.1.1.

Signed-off-by: Arun Isaac <arunisaac@systemreboot.net>

* gnu/packages/python.scm (python2-rednose): New variable.

Signed-off-by: Marius Bakke <mbakke@fastmail.com>

* gnu/packages/python.scm (python-sphinx-rtd-theme): Update to 0.2.4.
[source]: Use 'pypi-uri'.

Signed-off-by: Marius Bakke <mbakke@fastmail.com>

Release notes:
<https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.31_release_notes>

* gnu/packages/certs.scm (nss-certs): Update to 3.31.
* gnu/packages/gnuzilla.scm (nss): Likewise.
[source]<patches>: Remove upstream 'nss-disable-long-b64-tests' patch.
[arguments]<#:phases>: Move armhf timeout substitution ...
* gnu/packages/patches/nss-increase-test-timeout.patch: ... here.
* gnu/packages/patches/nss-disable-long-b64-tests.patch: Delete file.
* gnu/local.mk (dist_patch_DATA): Remove it.

* gnu/packages/gnuzilla.scm (nspr): Update to 4.15.

* gnu/packages/freedesktop.scm (libinput, libinput-minimal): Update to 1.7.3.

This avoids the open/fstat/close syscalls upon a cache hit that we had
with the previous idiom:

  (call-with-input-file file read-derivation)

where caching happened in 'read-derivation' itself.

* guix/derivations.scm (%read-derivation): Rename to...
(read-derivation): ... this.
(read-derivation-from-file): New procedure.
(derivation-prerequisites, substitution-oracle)
(derivation-prerequisites-to-build):
(derivation-path->output-path, derivation-path->output-paths):
(derivation-path->base16-hash, map-derivation): Use
'read-derivation-from-file' instead of (call-with-input-file …
read-derivation).
* guix/grafts.scm (item->deriver): Likewise.
* guix/scripts/build.scm (log-url, options->things-to-build): Likewise.
* guix/scripts/graph.scm (file->derivation): Remove.
(derivation-dependencies, %derivation-node-type): Use
'read-derivation-from-file' instead.
* guix/scripts/offload.scm (guix-offload): Likewise.
* guix/scripts/perform-download.scm (guix-perform-download): Likewise.
* guix/scripts/publish.scm (load-derivation): Remove.
(narinfo-string): Use 'read-derivation-from-file'.

* guix/store.scm (add-to-store): Remove 'lstat' call.