diff --git a/gnu/packages/web.scm b/gnu/packages/web.scm index 1366637de6..879eb160ea 100644 --- a/gnu/packages/web.scm +++ b/gnu/packages/web.scm @@ -8022,7 +8022,7 @@ Unicode.") (commit "c6a9055e5a30be570e30da8d216c39662c3a3f99")) (package (name "quark") - (version "0.0.0") + (version (git-version "0.0.0" revision commit)) (source (origin (method git-fetch) (uri (git-reference @@ -8044,7 +8044,12 @@ Unicode.") (home-page "https://tools.suckless.org/quark/") (synopsis "Small and simple HTTP GET/HEAD-only web server for static content") - (description "An extremely small and simple HTTP GET/HEAD only web -server for static content. TLS is not natively supported and should be + (description "Quark is an extremely small and simple HTTP GET/HEAD only +web server for static content. TLS is not natively supported and should be provided by a TLS reverse proxy (e.g. tlstunnel, hitch or stunnel).") - (license license:isc)))) + (license license:isc) + + ;; XXX: Ignore this CVE to work around a name clash with the unrelated + ;; "cpe:2.3:a:comelz:quark" package. The proper fix is for (guix cve) + ;; to account for "vendor names". + (properties '((lint-hidden-cve . ("CVE-2019-15520")))))))