A quick note to report progress on this issue. I'm having a hard time working with CVS after such a long time, so I've setup a git repository for the oval generator:
https://github.com/sdelafond/debian-oval I started with Nicholas' parseJSON2Oval.py, and am making progress toward aggregating information from *both* the tracker and the {dsa,wml} files, in order to have the OVAL files expose all the information present in Debian. Cheers, --Seb