Bug#942670: security-tracker: Fetching additional NVD feed information needs to switch to JSON feeds

[Salvatore Bonaccorso <carnil@debian.org>]

Package: security-tracker
Severity: normal

As per 16th of october the NVD XML data feeds is disabled[1]. The
security-tracker uses this feed to daily get additional information on
CVEs (e.g. description).

The update-nvd and the used parser lib/python/nvd.py needs to be
switched to get and parse the JSON feeds[2].

 [1] https://nvd.nist.gov/General/News/XML-Vulnerability-Feed-Retirement
 [2] https://nvd.nist.gov/vuln/data-feeds#JSON_FEED

Regards,
Salvatore