Commit graph

143957 commits

Author SHA1 Message Date
John Kehayias
c824fb8ca7
gnu: libdrm: Update to 2.4.123.
* gnu/packages/xdisorg.scm (libdrm): Update to 2.4.123.

Change-Id: I28ace4f3f121a7177cfc78de8e50364753114e8c
2024-11-05 11:56:17 -05:00
Jakob Kirsch
4c56d0cccd
gnu: guix: Build reproducibly.
* gnu/packages/package-management.scm (guix)[arguments]<#:parallel-build?>:
Disable.

Modified-by: Hilton Chain <hako@ultrarare.space>
Change-Id: I316b5ea57b11256919488334a6cc519af1f6ed2f
2024-11-05 22:33:45 +08:00
Navid Afkhami
254f465b61
gnu: r-demultiplex2: Update to 1.0.1-1.92130a6.
* gnu/packages/bioinformatics.scm (r-demultiplex2): Update to 1.0.1-1.92130a6.

Change-Id: Ic08756e0347ab6997fec0129a06923aebb9c7836
Signed-off-by: Ricardo Wurmus <rekado@elephly.net>
2024-11-05 10:58:08 +01:00
Zheng Junjie
33665c52c4
gnu: frrouting: Update to 10.1.1.
* gnu/packages/networking.scm (frrouting): Update to 10.1.1.
[source]: Switch to git-fetch.
[inputs]: Add libelf and protobuf-c.
[native-inputs]: Add autoconf, automake, libtool, flex, and bison.
[arguments]<#:configure-flags>: Add --sysconfdir=/etc.

Change-Id: I54d589a314c20f19a1c0096e77dc75d9dd1b5c47
2024-11-04 23:57:36 +08:00
Nicolas Graves
85d00a60b5
gnu: libyang: Update to 3.4.2. [security fixes]
This fixes CVE-2021-28902, CVE-2021-28903, CVE-2021-28904,
CVE-2021-28905 and CVE-2021-28906.

* gnu/packages/networking.scm (libyang): Update to 3.4.2.
2024-11-04 23:51:17 +08:00
Nicolas Graves
b6e6960bd9
gnu: maradns: Update to 3.5.0036. [security fixes]
This fixes CVE-2023-31137.

* gnu/packages/dns.scm (maradns): Update to 3.5.0036.
[properties]: Add release-monitoring-url property.
2024-11-04 23:51:17 +08:00
Nicolas Graves
a2a72a3e14
gnu: maradns: Improve style.
* gnu/packages/dns.scm (maradns)[arguments]: Use gexps.
2024-11-04 23:51:17 +08:00
Nicolas Graves
249db21652
gnu: python-django-4.2: Update to 4.2.16. [security fixes]
This fixes CVE-2024-24680, CVE-2024-41989, CVE-2024-41990,
CVE-2024-41991, CVE-2024-42005, CVE-2024-45230, CVE-2024-45231,
CVE-2023-43665 and CVE-2023-46695.

* gnu/packages/django.scm (python-django-4.2): Update to 4.2.16.
[properties]: Add lint-hidden-cve property.
2024-11-04 23:51:17 +08:00
Nicolas Graves
c37b16a2ae
gnu: libzapojit: Update to 0.0.3-1.99d49ba. [security fixes]
This fixes CVE-2021-39360.

* gnu/packages/gnome.scm (libzapojit): Update to 0.0.3-1.99d49ba.
[source]: Switch to git-fetch.
[native-inputs]: Add autoconf, autoconf-archive, automake, glib:bin and
libtool.

Change-Id: Ie0bd89d8a068dfad31565ad3c318c94ac1385c7b
2024-11-04 23:51:13 +08:00
guix@mawumag.com
915f807ce6
gnu: kallisto: Update to 0.50.1
See discussion at <https://issues.guix.gnu.org/71146> for reasons to not
unbundle htslib and libbifrost.

* gnu/packages/bioinformatics.scm (kallisto): Update to 0.50.1.
[source]: Do not remove bundled libraries.
[arguments]: Remove phase 'do-not-use-bundled-htslib.
[inputs]: Remove htslib-1.9.

Change-Id: I6d3263fd49c7b07ce50185b722863b51816ff054
Signed-off-by: Ricardo Wurmus <rekado@elephly.net>
2024-11-04 15:51:56 +01:00
Nicolas Graves
e8044ab89b
gnu: liblouis: Update to 3.31.0. [security fixes]
This fixes CVE-2022-26981.

* gnu/packages/language.scm (liblouis): Update to 3.31.0.
[arguments]: Improve style using gexps.
[native-inputs]: Remove labels. Replace python-wrapper by python-minimal.

Change-Id: Ibfa143ec97816539ba9c2904cd390c9d6d54c9d5
2024-11-04 19:46:49 +08:00
Nicolas Graves
99bac834ea
gnu: squashfs-tools: Update to 4.6.1. [security fixes]
This fixes CVE-2021-40153 and CVE-2021-41072.

* gnu/packages/compression.scm (squashfs-tools): Update to 4.6.1.
[arguments]: Improve style.
<#:make-flags>: Add INSTALL_MANPAGES_DIR value.
<#:phases>: Remove phase 'install-documentation. Add phase
'patch-generated-source-shebangs.
[native-inputs]: Add coreutils-minimal, help2man, which.
[inputs]: Remove labels.

Change-Id: I095427f071ad0f8d1d2609cfc4dd3ed719ece812
2024-11-04 19:38:38 +08:00
Nicolas Graves
dde8ec55b7
gnu: shapelib: Update to 1.6.1. [security fixes]
This fixes CVE-2022-0699.

* gnu/packages/geo.scm (shapelib): Update to 1.6.1.
2024-11-04 19:22:09 +08:00
Nicolas Graves
dd31f1ab90
gnu: snapcast: Update to 0.29.0. [security fixes]
This fixes CVE-2023-36177.

* gnu/packages/audio.scm (snapcast): Update to 0.29.0.
2024-11-04 18:30:48 +08:00
Zheng Junjie
1e1e5dbf13
gnu: gifsicle: Use G-expressions.
* gnu/packages/image.scm (gifsicle)[arguments]: Use G-expressions.

Change-Id: I4bcf803e129e18c9d554d8544fc6c4896b61c9c3
2024-11-04 18:23:48 +08:00
Zheng Junjie
b0d5c6924c
gnu: gifsicle: Build from git source.
* gnu/packages/image.scm (gifsicle)[source]: Switch to git-fetch.
[native-inputs]: Add autoconf and automake.

Change-Id: I9b23e1d2f66aa328f56bad224b8db03b6261dd00
2024-11-04 18:21:24 +08:00
Nicolas Graves
fe6fdb1a85
gnu: gifsicle: Update to 1.95. [security fixes]
This fixes CVE-2023-44821 and CVE-2023-46009.

* gnu/packages/image.scm (gifsicle): Update to 1.95.
2024-11-04 18:11:10 +08:00
Nicolas Graves
7e934e6cfc
gnu: libmobi: Update to 0.12. [security fixes]
This fixes CVE-2022-1533, CVE-2022-1534, CVE-2022-1907, CVE-2022-1908,
CVE-2022-1987, CVE-2022-2279, CVE-2022-29788, CVE-2021-3751,
CVE-2021-3881, CVE-2021-3888 and CVE-2021-3889.

* gnu/packages/ebook.scm (libmobi): Update to 0.12.
2024-11-04 17:46:33 +08:00
Nicolas Graves
7bc82833a2
gnu: indent: Add patch for CVE-2024-0911. [security fixes]
* gnu/packages/patches/indent-CVE-2024-0911.patch: Add patch here...
* gnu/local.mk: ...here...
* gnu/packages/code.scm (indent)[source]<origin>: ...and here.
2024-11-04 17:36:29 +08:00
Nicolas Graves
d076ae1c7a
gnu: indent: Remove uneeded arguments.
* gnu/packages/code.scm (indent)
[arguments]: Remove field.
[native-inputs]: Remove automake.
2024-11-04 17:36:29 +08:00
Nicolas Graves
4915d321ca
gnu: xlsxio: Update to 0.2.35. [security fixes]
This fixes CVE-2023-34795.

* gnu/packages/xml.scm (xlsxio): Update to 0.2.35.
2024-11-04 17:36:29 +08:00
Zheng Junjie
0f5e477745
gnu: wireshark: Build from git source.
* gnu/packages/networking.scm (wireshark)[source]: Switch to git-fetch.
[arguments]<#:configure-flags>: Set -DVCSVERSION_OVERRIDE.

Change-Id: I82356c1faea9a6253108dc17334db2464ba38098
2024-11-04 17:36:29 +08:00
Nicolas Graves
6747fc5efc
gnu: wireshark: Update to 4.4.1. [security fixes]
This fixes CVE-2024-9780.

* gnu/packages/networking.scm (wireshark): Update to 4.4.1.
2024-11-04 17:36:29 +08:00
Zheng Junjie
bfd5788003
gnu: darkhttpd: Enable tests.
* gnu/packages/web.scm (darkhttpd)[arguments]: Set #:test-target "test"
[native-inputs]: Add which and python-minimal.

Change-Id: I9d9246109bba975d49f1e48f4c6d6e32d28a466c
2024-11-04 17:36:29 +08:00
Nicolas Graves
5d2aa55425
gnu: darkhttpd: Update to 1.16. [security fixes]
This fixes CVE-2024-23770 and CVE-2024-23771.

* gnu/packages/web.scm (darkhttpd): Update to 1.16.
[arguments]: Improve style.
2024-11-04 17:36:28 +08:00
Nicolas Graves
416e87e9c7
gnu: pypy: Update to 7.3.17. [security fixes]
This fixes CVE-2022-37454.

* gnu/packages/pypy.scm (pypy): Update to 7.3.17.
2024-11-04 17:36:28 +08:00
Nicolas Graves
6333849010
gnu: cjson: Update to 1.7.18. [security fixes]
This fixes CVE-2023-50471 and CVE-2023-50472.

* gnu/packages/javascript.scm (cjson): Update to 1.7.18.
2024-11-04 17:36:28 +08:00
Ricardo Wurmus
a019e11ed2
gnu: Add python-hotspotsc.
* gnu/packages/bioinformatics.scm (python-hotspotsc): New variable.

Change-Id: Ib3550837659f95d5a43e77137005db8cc03e6c3f
2024-11-04 10:29:36 +01:00
Ricardo Wurmus
69ac9b72ce
import/cran: Do not crash when license field is missing.
* guix/import/cran.scm (description->package): Do not process license as
string when it's missing.

Change-Id: I415fa6be17631f83c2aa7a213683fdf90a868e96
2024-11-04 10:26:23 +01:00
Vagrant Cascadian
8f49545fed
gnu: Grammar fixes in various package descriptions.
* gnu/packages/bioinformatics.scm (vembrane)[description]: Fix
grammar.
* gnu/packages/cran.scm (r-memisc)[description]: Fix grammar.
* gnu/packages/emacs-xyz.scm
(emacs-consult-xdg-recent-files)[description]: Fix grammar.
(emacs-org-margin)[description]: Fix grammar.
* gnu/packages/haskell-xyz.scm (ghc-hslua-core)[description]: Fix
grammar.
* gnu/packages/tex.scm (texlive-autoaligne)[description]: Fix grammar.
(texlive-biblatex-realauthor)[description]: Fix grammar.
(texlive-citeall)[description]: Fix grammar.
(texlive-formal-grammar)[description]: Fix grammar.
(texlive-musikui)[description]: Fix grammar.
(texlive-stanli)[description]: Fix grammar.
(texlive-theatre)[description]: Fix grammar.
(texlive-unitn-bimrep)[description]: Fix grammar.
(texlive-yquant)[description]: Fix grammar.
(texlive-expkv-bundle)[description]: Fix grammar.
(texlive-ketcindy)[description]: Fix grammar.
(texlive-srcredact)[description]: Fix grammar.
(texlive-luamesh)[description]: Fix grammar.
(texlive-maker)[description]: Fix grammar.
(texlive-puyotikz)[description]: Fix grammar.
(texlive-scratch)[description]: Fix grammar.
(texlive-scratch3)[description]: Fix grammar.
(texlive-strands)[description]: Fix grammar.
(texlive-tikz-imagelabels)[description]: Fix grammar.
(texlive-twemojis)[description]: Fix grammar.
(texlive-unicode-bidi)[description]: Fix grammar.
(texlive-pst-contourplot)[description]: Fix grammar.
(texlive-pst-rputover)[description]: Fix grammar.
(texlive-pst-vehicle)[description]: Fix grammar.
(texlive-truthtable)[description]: Fix grammar.
(texlive-esk)[description]: Fix grammar.
(texlive-luaimageembed)[description]: Fix grammar.
(texlive-bibletext)[description]: Fix grammar.
(texlive-easyfloats)[description]: Fix grammar.
(texlive-ehhline)[description]: Fix grammar.
(texlive-exercises)[description]: Fix grammar.
(texlive-extract)[description]: Fix grammar.
(texlive-graphpaper)[description]: Fix grammar.
(texlive-hereapplies)[description]: Fix grammar.
(texlive-hvextern)[description]: Fix grammar.
(texlive-hvqrurl)[description]: Fix grammar.
(texlive-intopdf)[description]: Fix grammar.
(texlive-jobname-suffix)[description]: Fix grammar.
(texlive-modernposter)[description]: Fix grammar.
(texlive-multiaudience)[description]: Fix grammar.
(texlive-overlays)[description]: Fix grammar.
(texlive-pdfpc)[description]: Fix grammar.
(texlive-pgfmath-xfp)[description]: Fix grammar.
(texlive-phonenumbers)[description]: Fix grammar.
(texlive-romanbarpagenumber)[description]: Fix grammar.
(texlive-texments)[description]: Fix grammar.
(texlive-xcntperchap)[description]: Fix grammar.
* gnu/packages/web.scm (libjuice)[description]: Fix grammar.
2024-11-03 23:00:16 -08:00
Vagrant Cascadian
547d971804
gnu: emacs-chruby-el, emacs-kubed: Fix typos in description.
* gnu/packages/emacs-xyz.scm (emacs-chruby-el)[description]: Fix typo.
(emacs-kubed)[description]: Fix typo.
2024-11-03 16:05:05 -08:00
Sharlatan Hellseher
24fc92e049
gnu: nicotine+: Update to 3.3.6.
* gnu/packages/nicotine.scm (nicotine+): Update to 3.3.6.

Change-Id: Ieb1a6610bb3526a7a5d8cf015751f385afb35945
2024-11-03 23:33:39 +00:00
Greg Hogan
ccf4a0fa2d
gnu: Add git-extras.
* gnu/packages/version-control.scm (git-extras): New variable.

Signed-off-by: Sharlatan Hellseher <sharlatanus@gmail.com>
Change-Id: I0246227b48a5550e0ee1aecf31f1b9c786f6bd9f
2024-11-03 23:33:39 +00:00
Paul A. Patience
d33626fb07
gnu: Add type-safe.
* gnu/packages/cpp.scm (type-safe): New variable.

Change-Id: I96a690b41af78e331744daacba1cf5ee77f8257a
Reviewed-by: Liliana Marie Prikler <liliana.prikler@gmail.com>
Reviewed-by: Skyler Ferris <skyvine@protonmail.com>
Signed-off-by: Sharlatan Hellseher <sharlatanus@gmail.com>
2024-11-03 23:33:39 +00:00
Paul A. Patience
84266a8f74
gnu: Add debug-assert.
* gnu/packages/cpp.scm (debug-assert): New variable.

Change-Id: I4cee49ea2f5b761ab72bb7b063c2ea8fd99b991c
Reviewed-by: Liliana Marie Prikler <liliana.prikler@gmail.com>
Reviewed-by: Skyler Ferris <skyvine@protonmail.com>
Signed-off-by: Sharlatan Hellseher <sharlatanus@gmail.com>
2024-11-03 23:33:39 +00:00
Juliana Sims
23961986cf
gnu: nicotine+: Use G-expressions.
* gnu/packages/nicotine.scm (nicotine+): Use G-expressions.

Change-Id: If51864440781825dddc7745a88c6efec02ed8e30
Signed-off-by: Sharlatan Hellseher <sharlatanus@gmail.com>
2024-11-03 23:33:38 +00:00
Juliana Sims
51387c0f42
gnu: nicotine+: Update to 3.3.0.
* gnu/packages/nicotine.scm (nicotine+): Update to 3.3.0.

Signed-off-by: Sharlatan Hellseher <sharlatanus@gmail.com>
Change-Id: I5f34b6de78842e1a90720393b5c84470aba0a8ca
2024-11-03 23:33:38 +00:00
Wilko Meyer
12455b3634
gnu: Add heatwave.
* gnu/packages/version-control.scm (python-heatwave): New variable.

Change-Id: I640aecb3a0d9c454333a3913c039c637d24d9f79
Signed-off-by: Sharlatan Hellseher <sharlatanus@gmail.com>
2024-11-03 23:33:38 +00:00
Wilko Meyer
e8d9a163be
gnu: Add python-monthdelta.
* gnu/packages/python-xyz.scm (python-monthdelta): New variable.

Change-Id: I0e651f41252ec50cd2d7063e37d428265b17d8c2
Signed-off-by: Sharlatan Hellseher <sharlatanus@gmail.com>
2024-11-03 23:33:38 +00:00
Christian Miller
8124b52007
gnu: Add kvirc.
* gnu/packages/irc.scm (kvirc): New variable.

Change-Id: I35c284aed0176232a31d01821cdb7be4e5646140
Signed-off-by: Sharlatan Hellseher <sharlatanus@gmail.com>
2024-11-03 23:33:38 +00:00
Luis Guilherme Coelho
2ef5e0cd89
gnu: Add newsraft.
* gnu/packages/syndication.scm (newsraft): New variable.

Change-Id: Iea8d28df6f41d668818fded83a9ca77b77291484
Co-authored-by: Sharlatan Hellseher <sharlatanus@gmail.com>
Signed-off-by: Sharlatan Hellseher <sharlatanus@gmail.com>
2024-11-03 23:33:38 +00:00
Reepca Russelstein
4e6df8040e
activation: Create directory with specified perms in ‘mkdir-p/perms’.
There is currently a window of time between when the desired directory is
created and when its permissions are changed.  During this time, its
permissions are restricted only by the umask.

Of course, in the "directory already exists" case, this doesn't matter, but if
the directory has been specifically deleted ahead of time so that it is
created afresh, this is an unnecessary window.

We can avoid this by passing the caller-provided BITS to 'mkdirat' when
attempting to create the last directory.

* gnu/build/activation.scm (mkdir-p/perms): Create target directory with BITS
  permissions.

Change-Id: I03d2c620872e86b6f591abe0f1c8317aa1245383
Signed-off-by: Ludovic Courtès <ludo@gnu.org>
2024-11-03 23:10:44 +01:00
Reepca Russelstein
6a8a6171a7
services: guix: Add access control to daemon socket.
* gnu/services/base.scm
  (guix-configuration-socket-directory-{permissions,group,user}): New fields.
  (guix-shepherd-service): Use them.
* doc/guix.texi (Base Services): Document them.

Change-Id: I8f4c2e20392ced47c09812e62903c87cc0f4a97a
Signed-off-by: Ludovic Courtès <ludo@gnu.org>
2024-11-03 23:05:06 +01:00
Rutherther
e5d64e87d4
system: %default-privileged-programs: Set ping capabilities
Ping and ping6 don't need setuid, they can work with
cap_net_raw capability only. This means that even if
ping or ping6 had a vulnerability that could be
used for execution as root, it can't anymore if
the program is not setuid.

* gnu/system.scm (%default-privileged-programs): Remove ping, ping6 setuid
programs, add ping, ping6 programs with cap_net_raw=ep capabilities

Change-Id: Ie409b477f548dbff3318eec33d0d2ca16a1b3209
Signed-off-by: Ludovic Courtès <ludo@gnu.org>
2024-11-03 22:54:00 +01:00
Ludovic Courtès
e7a445571d
services: cuirass: Run ‘remote-worker’ under its own user/group.
The ‘--user’ option was added to ‘cuirass remote-worker’ in Cuirass
commit 3a6abc17f904f38098d3ab08e9d82de2e821d348 (Nov. 2023).

* gnu/services/cuirass.scm (%cuirass-remote-worker-accounts): New
variable.
(cuirass-remote-worker-shepherd-service): Pass ‘--user’.
(cuirass-remote-worker-service-type): Add ACCOUNT-SERVICE-TYPE
extension.

Change-Id: I075ea02b6972adcad0a75e330073e85c4dacbbc5
2024-11-03 22:48:36 +01:00
Ludovic Courtès
cf46aa7192
doc: Promote “Teams” section.
Suggested by Simon Tournier <zimon.toutoune@gmail.com>.

* doc/contributing.texi (Teams): Move from subsection of “Submitting
Patches” to section of “Contributing”.

Reviewed-by: Maxim Cournoyer <maxim.cournoyer@gmail.com>
Change-Id: Id21be29380fc981e74a5025b1467eebde8566726
2024-11-03 22:48:09 +01:00
Ludovic Courtès
cf2dfdcb44
doc: Add “Making Decisions” section.
Suggested by Simon Tournier <zimon.toutoune@gmail.com>.

* doc/contributing.texi (Making Decisions): New section, with paragraphs
moved from…
(Commit Access): … here.  Cross-reference it.
(Teams): Likewise.

Reviewed-by: Maxim Cournoyer <maxim.cournoyer@gmail.com>
Change-Id: Ib276242e0ec7598a1b60dacdde8647bd3d3b85d3
2024-11-03 22:47:56 +01:00
Sharlatan Hellseher
54f82bcf22
teams: Add Sysadmin team.
* etc/teams.scm (sysadmin): New team; add Sharlatan to it.

Change-Id: Icf943af03420a7ae4f259953bb08591e9e79054d
2024-11-03 17:18:31 +00:00
Nicolas Graves
8964dfdb84
gnu: Remove faust-0.9.67.
* gnu/packages/audio.scm (faust-0.9.67): Delete variable.

Signed-off-by: Sharlatan Hellseher <sharlatanus@gmail.com>
2024-11-03 12:24:01 +00:00
Nicolas Graves
a0cb16ddd7
gnu: sorcer: Update to 1.1.3-2.94107b2.
* gnu/packages/music.scm (sorcer): Update to 1.1.3-2.94107b2.
[arguments]<#:phases>: Remove 'remove-architecture-specific-flags
phase. Adapt 'build-faust-sources to faust-2.
[native-inputs]: Replace faust-0.9.67 by faust-2. Add which.

Signed-off-by: Sharlatan Hellseher <sharlatanus@gmail.com>
2024-11-03 12:24:01 +00:00