Description

The purpose of this PR is to replace the Debian feed for vulnerability detector.

It is necessary to replace the OVAL feeds with the security tracker JSON feed for the following reasons:

• The OVAL feeds have incomplete information. When a CVE affects multiple packages, they only report one of them.
• The JSON feed contains all the information about the packages affected for each CVE.
• After parsing the OVAL packages, it is necessary to check the status of each one of them in the JSON feed. This extra step won't be necessary anymore.
• The JSON feed contains the information on all Debian supported versions (JESSIE, STRETCH, BUSTER) and it doesn't have any problem with packages names and versions as the OVAL does.

The OVAL feeds are still necesary to get the metadata of each CVE (description, references, etc.), but the infomation about affected packages was totally replaced by the JSON feed. Also, WHEEZY is deprecated since it is no longer supported by Debian.

Tests

• Compilation without warnings in every supported platform
  • Linux
• Source installation
• Package installation
• Source upgrade
• Package upgrade
• Review logs syntax and correct language
• QA templates contemplate the added capabilities