#942670 security-tracker: Fetching additional NVD feed information needs to switch to JSON feeds

Package:
security-tracker
Source:
security-tracker
Submitter:
Salvatore Bonaccorso
Date:
2019-10-20 20:39:02 UTC
Severity:
normal
#942670#5
Date:
2019-10-19 20:29:34 UTC
From:
To:
As per 16th of october the NVD XML data feeds is disabled[1]. The
security-tracker uses this feed to daily get additional information on
CVEs (e.g. description).

The update-nvd and the used parser lib/python/nvd.py needs to be
switched to get and parse the JSON feeds[2].

 [1] https://nvd.nist.gov/General/News/XML-Vulnerability-Feed-Retirement
 [2] https://nvd.nist.gov/vuln/data-feeds#JSON_FEED

Regards,
Salvatore
#942670#10
Date:
2019-10-20 20:37:23 UTC
From:
To:
Partially implemented with
https://salsa.debian.org/security-tracker-team/security-tracker/merge_requests/45
but some previous functionality is not restored. So keeping the bug
open for now.

Regards,
Salvatore