[AppStream] Adding CVE information to <releases>

[Richard Hughes]

On Sun, 15 Sep 2019 at 17:41, Matthias Klumpp <matthias at tenstral.net> wrote:
> > <issues>
> >   <issue type="cve"
> > url="https://nvd.nist.gov/vuln/detail/CVE-2016-00000">CVE-2016-00000</issue>
> > </issues>
> This ^ is the one I actually prefer, it is very in line with how the
> AppStream spec generally outlines information like this in other
> places.

Works for me, thanks! I've added the LVFS bits here:
https://github.com/fwupd/lvfs-website/pull/402

Richard.