Re: tracker CVE feed source

[Florian Weimer <fw@deneb.enyo.de>]

* Thijs Kinkhorst:

> - The feeds from NVD at http://nvd.nist.gov/download.cfm
>   They're on-demand so can be integrated into the pull-system that
>   the tracker currently has (twice daily cronjob pulls in information and
>   generates new list).
>   There's a small delay, but that's probably in the order of minutes.
>   It's an extra step between Mitre and us, which could break.

There's already some NVD processing code in the tracker, so this could
be incorporated in a straightforward way, I think.  Except that the
tracker hasn't got access to my alioth account.

(I'm working on technical-report-style documentation of the tracker
internals, BTW.)