Vulnerability References Reference – – Element vuln:Reference The vuln:Reference element MUST have exactly one vuln:URL and one vuln:Description child element and in that order. [CSAF-6.14.1-1] ∆ The element vuln:Reference contains a description of a related document specific to a vulnerability section of a CVRF document. Attribute Type The Attribute Type if not present is to be the enumeration value External and if present MUST be one of the values documented in section 2.2.7 . [CSAF-6.14.1-2] ∆ This attributes value denotes the type of the document reference relative to the CSAF CVRF document itself Non-normative comment: This may include a plaintext or HTML version of the advisory or related documentation, such as white papers or mitigation documentation. Vulnerability References Reference URL – – – Element vuln:URL The vuln:URL element MUST contain the fixed URL or location of the reference. ∆ Vulnerability References Reference Description – – – Element vuln:Description The vuln:Description MUST be [CSAF-6.14.1.2-1] ∆ Example : <References> <Reference Type="External"> <URL>http://foo.foo/bar/</URL> <Description xml:lang="fr">C'est un test de référence</Description> </Reference> </References> Vulnerability Acknowledgements – Element vuln:Acknowledgements The vuln:Acknowledgements element MUST contain one or more vuln:Acknowledgement elements, which in turn either contain(s) recognition of external parties or is empty. ∆ Non-normative comment: This Acknowledgments container is different from the one at the document because it is specifically related to the vulnerability in context. Following is a map of a valid Acknowledgements configuration including the parent node (Vulnerability) again with the node labeled {…} indicating further possible Acknowledgement subtrees: —
Vulnerability – References – Reference Element vuln:Reference The vuln:Reference element MUST have exactly one vuln:URL and one vuln:Description child element and in that order. ∆ [CSAF-6.14.1-1] The element vuln:Reference contains a description of a related document specific to a vulnerability section of a CVRF document. Attribute Type The Attribute Type if not present is to be the enumeration value External and if present MUST be one of the values documented in section 2.2.7 . ∆ [CSAF-6.14.1-2] This attributes value denotes the type of the document reference relative to the CSAF CVRF document itself Non-normative comment: This may include a plaintext or HTML version of the advisory or related documentation, such as white papers or mitigation documentation. Vulnerability – References – Reference – URL Element vuln:URL The vuln:URL element MUST contain the fixed URL or location of the reference. ∆ Vulnerability – References – Reference – Description Element vuln:Description The vuln:Description MUST be ∆ [CSAF-6.14.1.2-1] Example : <References> <Reference Type="External"> <URL>http://foo.foo/bar/</URL> <Description xml:lang="fr">C'est un test de référence</Description> </Reference> </References> Vulnerability – Acknowledgements Element vuln:Acknowledgements The vuln:Acknowledgements element MUST contain one or more vuln:Acknowledgement elements, which in turn either contain(s) recognition of external parties or is empty. ∆ Non-normative comment: This Acknowledgments container is different from the one at the document because it is specifically related to the vulnerability in context. Following is a map of a valid Acknowledgements configuration including the parent node (Vulnerability) — again with the node labeled {…} indicating further possible Acknowledgement subtrees: