This commit improves pkg-stats to fill in pkg.status['cve'] depending on the situation for CVEs affecting this package. They are then used in the HTML rendering. Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>