‘guix_ lint’ should suggest CPE name

index 7dd9005f09..52a19e0523 100644

 ;;; GNU Guix --- Functional package management for GNU

 ;;;

 ;;; This file is part of GNU Guix.

 ;;;

             vulnerability?

             vulnerability-id

             vulnerability-packages

             json->vulnerabilities

             current-vulnerabilities

   (* 3600 24 (date-month %now)))

 (define-record-type <vulnerability>

   vulnerability?

   (id         vulnerability-id)             ;string

 (define vulnerability->sexp

   (match-lambda

 (define sexp->vulnerability

   (match-lambda

 (define (cve-configuration->package-list config)

   "Parse CONFIG, a config sexp, and return a list of the form (P SEXP)

   "Return a <vulnerability> corresponding to ITEM, a <cve-item> record;

 return #f if ITEM does not list any configuration or if it does not list

 any \"a\" (application) configuration."

     (match (cve-item-configurations item)

       (()                                         ;no configurations

        #f)

       ((configs ...)

        (vulnerability id

                       (merge-package-lists

 (define (json->vulnerabilities json)

   "Parse JSON, an input port or a string, and return the list of

 vulnerabilities found therein."

   (filter-map cve-item->vulnerability (json->cve-items json)))

 (define (write-cache input cache)

   "Read vulnerabilities as gzipped JSON from INPUT, and write it as a compact

 sexp to CACHE."

       (define vulns

         (json->vulnerabilities input))

                ,(map vulnerability->sexp vulns))

              cache))))

          (sexp (read* port)))

     (close-port port)

     (match sexp

        (map sexp->vulnerability vulns)))))

 (define (current-vulnerabilities)

diff --git a/guix/lint.scm b/guix/lint.scm

index 445c06f8f4..6b65df34a3 100644

                (list (string-join (map vulnerability-id unpatched)

                                   ", "))))))))))

 (define (check-for-updates package)

   "Check if there is an update available for PACKAGE."

   (match (with-networking-fail-safe

      (description "Check the Common Vulnerabilities and Exposures\

  (CVE) database")

      (check       check-vulnerabilities))

    (lint-checker

      (name        'refresh)

      (description "Check the package for new upstream releases")