Flags in IIDB
 package->obsolute
   0 : latest package
   1 : obsolute package
   
 package->vulnerability
   0 : unknown or no vul. (default)
   1 : no vul. by OVAL/DSA
   3 : vul. by OVAL/DSA
  10 : re check
  11 : no vul. by Admin  
  13 : vul. by Admin 

   Transition
     0 no vul by OVAL/DSA           VALID
     0 -- OVAL/DSA vul Hit    -> 3  INVALID 
     0 -- OVAL/DSA no vul Hit -> 1  VALID
     0 -- OVAL/DSA ambiguous  -> 10 UNVERIFIED
    10 -- Admin ckeck, Vul    -> 13 INVALID
    10 -- Admin ckeck, no Vul -> 11 VALID

    3,13,1,11,10 ->  3,13,1,11,10




