search

csaf-tools / CVRF-CSAF-Converter

A CVRF CSAF Converter, taking care about OASIS specification.
https://www.telekom.com/security
MIT License
10 stars 4 forks source link

CVRF 1.1 support #110

Closed ir-dev closed 1 year ago

ir-dev commented 1 year ago

Are there any intentions or reasons against designing the tool also for the conversion of CVRF 1.1 files?

In my opinion, the differences between CVRF 1.1 and 1.2 are not that big, so one could consider both versions to get a full-fledged CVRF CSAF converter.

tschmidtb51 commented 1 year ago

Generally, no. It was just not in the scope of the project.

However, I would like to get #109 solved before looking into CVRF 1.1...

tschmidtb51 commented 1 year ago

However, if that is relevant for you - feel free to submit a PR...

ir-dev commented 1 year ago

However, if that is relevant for you - feel free to submit a PR...

Since new advisories are probably no longer issued in CVRF 1.1 and there is apparently only a small stock of old CVRF 1.1, it is not worthwhile for me, and probably not for most others either, to implement it.