-
Notifications
You must be signed in to change notification settings - Fork 42
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Merge pull request #879 from tschmidtb51/disclosure_date
Disclosure date
- Loading branch information
Showing
34 changed files
with
991 additions
and
30 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
44 changes: 44 additions & 0 deletions
44
csaf_2.1/prose/edit/src/tests-01-mndtr-45-inconsistent-disclosure-date.md
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,44 @@ | ||
| ### Inconsistent Disclosure Date | ||
|
|
||
| For each vulnerability, it MUST be tested that the `disclosure_date` is earlier or equal to the `date` of the newest item of the `revision_history` | ||
| if the document is labeled `TLP:CLEAR` and the document status is `final` or `interim`. | ||
| As the timestamps might use different timezones, the sorting MUST take timezones into account. | ||
|
|
||
| The relevant path for this test is: | ||
|
|
||
| ``` | ||
| /vulnerabilities[]/disclosure_date | ||
| ``` | ||
|
|
||
| *Example 1 (which fails the test):* | ||
|
|
||
| ``` | ||
| "document": { | ||
| // ... | ||
| "distribution": { | ||
| "tlp": { | ||
| "label": "CLEAR" | ||
| } | ||
| }, | ||
| // ... | ||
| "tracking": { | ||
| // ... | ||
| "revision_history": [ | ||
| { | ||
| "date": "2024-01-24T10:00:00.000Z", | ||
| "number": "1", | ||
| "summary": "Initial version." | ||
| } | ||
| ], | ||
| "status": "final", | ||
| // ... | ||
| } | ||
| }, | ||
| "vulnerabilities": [ | ||
| { | ||
| "disclosure_date": "2024-02-24T10:00:00.000Z" | ||
| } | ||
| ] | ||
| ``` | ||
|
|
||
| > The document is labeled `TLP:CLEAR` and in status `final` but the `disclosure_date` is newer than the date of newest item in the `revision_history`. |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
32 changes: 32 additions & 0 deletions
32
csaf_2.1/test/validator/data/mandatory/oasis_csaf_tc-csaf_2_1-2024-6-1-37-02.json
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,32 @@ | ||
| { | ||
| "$schema": "https://docs.oasis-open.org/csaf/csaf/v2.1/csaf_json_schema.json", | ||
| "document": { | ||
| "category": "csaf_base", | ||
| "csaf_version": "2.1", | ||
| "distribution": { | ||
| "tlp": { | ||
| "label": "CLEAR" | ||
| } | ||
| }, | ||
| "publisher": { | ||
| "category": "other", | ||
| "name": "OASIS CSAF TC", | ||
| "namespace": "https://csaf.io" | ||
| }, | ||
| "title": "Mandatory test: Date and Time (failing example 2)", | ||
| "tracking": { | ||
| "current_release_date": "2024-01-24T10:00:00.000", | ||
| "id": "OASIS_CSAF_TC-CSAF_2.1-2024-6-1-37-02", | ||
| "initial_release_date": "2024-01-24T10:00:00.000z", | ||
| "revision_history": [ | ||
| { | ||
| "date": "2024-01-24T10:00:00.000+00:10:21", | ||
| "number": "1", | ||
| "summary": "Initial version." | ||
| } | ||
| ], | ||
| "status": "final", | ||
| "version": "1" | ||
| } | ||
| } | ||
| } |
38 changes: 38 additions & 0 deletions
38
csaf_2.1/test/validator/data/mandatory/oasis_csaf_tc-csaf_2_1-2024-6-1-37-03.json
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,38 @@ | ||
| { | ||
| "$schema": "https://docs.oasis-open.org/csaf/csaf/v2.1/csaf_json_schema.json", | ||
| "document": { | ||
| "category": "csaf_base", | ||
| "csaf_version": "2.1", | ||
| "distribution": { | ||
| "tlp": { | ||
| "label": "CLEAR" | ||
| } | ||
| }, | ||
| "publisher": { | ||
| "category": "other", | ||
| "name": "OASIS CSAF TC", | ||
| "namespace": "https://csaf.io" | ||
| }, | ||
| "title": "Mandatory test: Date and Time (failing example 3)", | ||
| "tracking": { | ||
| "current_release_date": "2024-01-24T10:00:00.000Z", | ||
| "id": "OASIS_CSAF_TC-CSAF_2.1-2024-6-1-37-03", | ||
| "initial_release_date": "2024-01-24T10:00:00.000Z", | ||
| "revision_history": [ | ||
| { | ||
| "date": "2024-01-24T10:00:00.000Z", | ||
| "number": "1", | ||
| "summary": "Initial version." | ||
| } | ||
| ], | ||
| "status": "final", | ||
| "version": "1" | ||
| } | ||
| }, | ||
| "vulnerabilities": [ | ||
| { | ||
| "disclosure_date": "2017-01-01T02:59:60+04:00", | ||
| "discovery_date": "2014-13-31T00:00:00+01:00" | ||
| } | ||
| ] | ||
| } |
Oops, something went wrong.