Skip to content

Commit

Permalink
Updated user facing delivery items
Browse files Browse the repository at this point in the history
- included fix of a nit around key value semantics in json

Signed-off-by: Stefan Hagen <stefan@hagen.link>
  • Loading branch information
sthagen committed Mar 4, 2025
1 parent f1d5bf3 commit 4d909c6
Show file tree
Hide file tree
Showing 2 changed files with 2 additions and 2 deletions.
2 changes: 1 addition & 1 deletion csaf_2.1/prose/share/csaf-v2.1-draft.html
Original file line number Diff line number Diff line change
Expand Up @@ -12115,7 +12115,7 @@ <h3 id="9118-conformance-clause-18-csaf-20-to-csaf-21-converter-">
</li>
<li>
<p>
<code>/vulnerabilities[]/disclosure_date</code>: If a <code>release_date</code> was given, the CSAF 2.0 to CSAF 2.1 converter MUST convert the key as <code>disclosure_date</code>.
<code>/vulnerabilities[]/disclosure_date</code>: If a <code>release_date</code> was given, the CSAF 2.0 to CSAF 2.1 converter MUST convert its value as value into the <code>disclosure_date</code> element.
</p>
</li>
<li>
Expand Down
2 changes: 1 addition & 1 deletion csaf_2.1/prose/share/csaf-v2.1-draft.md
Original file line number Diff line number Diff line change
Expand Up @@ -9737,7 +9737,7 @@ Secondly, the program fulfills the following for all items of:
The tool SHOULD implement an option to use the latest available CWE version at the time of the conversion that still matches.
* `/vulnerabilities[]/disclosure_date`: If a `release_date` was given, the CSAF 2.0 to CSAF 2.1 converter MUST convert the key as `disclosure_date`.
* `/vulnerabilities[]/disclosure_date`: If a `release_date` was given, the CSAF 2.0 to CSAF 2.1 converter MUST convert its value as value into the `disclosure_date` element.
* `/vulnerabilities[]/metrics/ssvc_v1`: If a SSVC vector or decision points of an SSVC vector are given in an item of `notes` of the current
vulnerability using the `title` `SSVC` and the `category` `other`, the CSAF 2.0 to CSAF 2.1 converter MUST convert that data into the `ssvc_v1`
object within the current vulnerability.
Expand Down

0 comments on commit 4d909c6

Please # to comment.