CSAF 2.1 CSD02 Public Feedback Resolution and Editor Revision (for TC meeting 2026-04-29)

[tschmidtb51]

Content Changes

• addresses parts of Add comment resolution log for CSD02PR #1396
• fixes 9.1.5 + 9.1.18: clarify "output an information" in converter rules #1372 (Comment Resolution CSD02PR: #1372 #1404)
• fixes Editorial #1405 (Consistency for converters #1412, Editorial #1440, Editorial #1448)
• fixes Add RVISC governance requirements #1368 (Comment Resolution CSD02PR: #1368 #1427)
• fixes CVSS 4.0 #1432 (CVSS v4.0 #1438, Editorial #1448)
• fixes Missing dates in 6.1.37 list #1357 (Editorial #1440)

Editorial Changes

• fixes Grammar fix 6.3.18 Use of Qualitative Severity Rating #1365 (Comment Resolution CSD02PR: #1365 #1398)
• fixes 9.1.18: remove model_numbers, serial_numbers and skus conversion rules that always adds a * #1370 (Comment Resolution CSD02PR: #1370 #1401)
• fixes 9.1.18: minor markup ambiguity TLP:<ValidTLPLabel> #1371 (Comment Resolution CSD02PR: #1371 #1402)
• fixes 6.2.38: Clarify handling of unicode variants #1374 (Comment Resolution CSD02PR: #1374 #1406)
• fixes Clarification for license expressions 6.1.54 #1364 (Comment Resolution CSD02PR: #1364 #1407)
• fixes [CWE-A] link malformed #1367 (Comment Resolution CSD02PR: #1367 #1408)
• fixes Remove Notes and What is new #1316 (Maintenance #1409)
• fixes 9.1.18 Lose false friend "loose" #1373 (Comment Resolution CSD02PR: #1373 #1429)
• fixes [Editorial] Conformance changes #1411 (Editorials - Conformance #1436)
• fixes Nit: translation_json_schema.json id / title / description mismatch #1435 (Language Specific Translations #1437)
• fixes Minor: missing comma in 9.1.14 #1356 (Editorial #1440)
• fixes JSONPath #1311 (JSONPath #1442)
• Fixed # 1421 - simplified revision history section (Fixed #1421 - simplified revision history section #1451)

Maintenance Changes

• Maint: asterisk and dash cleansing # 1453

Tool Changes

• fixes makefile: set SHELL #1449 (Makefile #1450)

Test Files Changes

• fixes Add additional test cases for Mandatory Test 6.1.3 (Circular Definition of Product ID) #1369 (Comment Resolution CSD02PR: #1369 #1422, Tests #1447)

[tschmidtb51]

Motion set and seconded: https://groups.oasis-open.org/discussion/motion-for-1399

I hereby submit the following motion and request that if seconded and no objection received per this list before one week has passed on 2026-05-22 12:00 UTC to automatically carry.
The Chair usually states the result per mail to this list when the period has passed.

[sthagen]

Incoming change set in:

• "Maint: asterisk and dash cleansing" # 1453 has been included.

If we would have forgotten, we could have applied before the next editor revision easily ...

PS: inside csaf_2.1/prose/edit ... do 1.:

if [ "$(uname)" = 'Darwin' ]; then quux="''"; else quux=''; fi;
for f in src/*.md; do \
  sed -i ${quux} \
  "s/^\*\ /- /g; s/^\ \ \*\ /  - /g; s/^\ \ \ \ \*\ /    - /g; s/^\ \ \ \ \ \ \*\ /      - /g; " \
  $f; done
for f in $(grep "^-------" src/*.md | cut -f1 -d:); do \
  sed -i '' "s/^-------/---/g;" \
  $f; done

and finally 2. edit etc/markdownlint.json:

diff --git a/csaf_2.1/prose/edit/etc/markdownlint.json b/csaf_2.1/prose/edit/etc/markdownlint.json
index eeb14631..e504b8a3 100644
--- a/csaf_2.1/prose/edit/etc/markdownlint.json
+++ b/csaf_2.1/prose/edit/etc/markdownlint.json
@@ -14,7 +14,7 @@
     "style": "atx"
   },
   "hr-style": {
-    "style": "-------"
+    "style": "---"
   },
   "line-length": false,
   "link-fragments": false,
@@ -55,6 +55,6 @@
     "style": "asterisk"
   },
   "ul-style": {
-    "style": "asterisk"
+    "style": "dash"
   }
 }

[justmurphy]

lgtm

[justmurphy]

Motion passed 5/22 and merged on 5/27 during TC meeting: https://groups.oasis-open.org/discussion/motion-for-1399