Provided by: libcsaf-perl_0.25-1_all bug

NAME

       CSAF::Validator::MandatoryTests

SYNOPSIS

           use CSAF::Validator::MandatoryTests;

           my $v = CSAF::Validator::MandatoryTests->new( csaf => $csaf );

           $v->exec_test('6.1.5');
           $v->TEST_6_1_5;

DESCRIPTION

       Mandatory tests MUST NOT fail at a valid CSAF document.

           6.1.1 Missing Definition of Product ID
           6.1.2 Multiple Definition of Product ID
           6.1.3 Circular Definition of Product ID
           6.1.4 Missing Definition of Product Group ID
           6.1.5 Multiple Definition of Product Group ID
           6.1.6 Contradicting Product Status
           6.1.7 Multiple Scores with same Version per Product
           6.1.8 Invalid CVSS
           6.1.9 Invalid CVSS computation
           6.1.10 Inconsistent CVSS
           6.1.11 CWE
           6.1.12 Language
           6.1.13 PURL
           6.1.14 Sorted Revision History
           6.1.15 Translator
           6.1.16 Latest Document Version
           6.1.17 Document Status Draft
           6.1.18 Released Revision History
           6.1.19 Revision History Entries for Pre-release Versions
           6.1.20 Non-draft Document Version
           6.1.21 Missing Item in Revision History
           6.1.22 Multiple Definition in Revision History
           6.1.23 Multiple Use of Same CVE
           6.1.24 Multiple Definition in Involvements
           6.1.25 Multiple Use of Same Hash Algorithm
           6.1.26 Prohibited Document Category Name
           6.1.27 Profile Tests
               6.1.27.1 Document Notes
               6.1.27.2 Document References
               6.1.27.3 Vulnerabilities
               6.1.27.4 Product Tree
               6.1.27.5 Vulnerability Notes
               6.1.27.6 Product Status
               6.1.27.7 VEX Product Status
               6.1.27.8 Vulnerability ID
               6.1.27.9 Impact Statement
               6.1.27.10 Action Statement
               6.1.27.11 Vulnerabilities
           6.1.28 Translation
           6.1.29 Remediation without Product Reference
           6.1.30 Mixed Integer and Semantic Versioning
           6.1.31 Version Range in Product Version
           6.1.32 Flag without Product Reference
           6.1.33 Multiple Flags with VEX Justification Codes per Product

   METHODS
       CSAF::Validator::MandatoryTests inherits all methods from CSAF::Validator::Base and implements the
       following new ones.

       TEST_6_1_1
           Missing Definition of Product ID

       TEST_6_1_2
           Multiple Definition of Product ID

       TEST_6_1_3
           Circular Definition of Product ID

       TEST_6_1_4
           Missing Definition of Product Group ID

       TEST_6_1_5
           Multiple Definition of Product Group ID

       TEST_6_1_6
           Contradicting Product Status

       TEST_6_1_7
           Multiple Scores with same Version per Product

       TEST_6_1_8
           Invalid CVSS

       TEST_6_1_9
           Invalid CVSS computation

       TEST_6_1_10
           Inconsistent CVSS

       TEST_6_1_11
           CWE

       TEST_6_1_12
           Language

       TEST_6_1_13
           PURL

       TEST_6_1_14
           Sorted Revision History

       TEST_6_1_15
           Translator

       TEST_6_1_16
           Latest Document Version

       TEST_6_1_17
           Document Status Draft

       TEST_6_1_18
           Released Revision History

       TEST_6_1_19
           Revision History Entries for Pre-release Versions

       TEST_6_1_20
           Non-draft Document Version

       TEST_6_1_21
           Missing Item in Revision History

       TEST_6_1_22
           Multiple Definition in Revision History

       TEST_6_1_23
           Multiple Use of Same CVE

       TEST_6_1_24
           Multiple Definition in Involvements

       TEST_6_1_25
           Multiple Use of Same Hash Algorithm

       TEST_6_1_26
           Prohibited Document Category Name

       TEST_6_1_27_1
           Profile Test - Document Notes

       TEST_6_1_27_2
           Profile Test - Document References

       TEST_6_1_27_3
           Profile Test - Vulnerabilities

       TEST_6_1_27_4
           Profile Test - Product Tree

       TEST_6_1_27_5
           Profile Test - Vulnerability Notes

       TEST_6_1_27_6
           Profile Test - Product Status

       TEST_6_1_27_7
           Profile Test - VEX Product Status

       TEST_6_1_27_8
           Profile Test - Vulnerability ID

       TEST_6_1_27_9
           Profile Test - Impact Statement

       TEST_6_1_27_10
           Profile Test - Action Statement

       TEST_6_1_27_11
           Profile Test - Vulnerabilities

       TEST_6_1_28
           Translation

       TEST_6_1_29
           Remediation without Product Reference

       TEST_6_1_30
           Mixed Integer and Semantic Versioning

       TEST_6_1_31
           Version Range in Product Version

       TEST_6_1_32
           Flag without Product Reference

       TEST_6_1_33
           Multiple Flags with VEX Justification Codes per Product

SUPPORT

   Bugs / Feature Requests
       Please     report    any    bugs    or    feature    requests    through    the    issue    tracker    at
       <https://github.com/giterlizzi/perl-CSAF/issues>.  You will be notified automatically of any progress  on
       your issue.

   Source Code
       This  is open source software.  The code repository is available for public review and contribution under
       the terms of the license.

       <https://github.com/giterlizzi/perl-CSAF>

           git clone https://github.com/giterlizzi/perl-CSAF.git

AUTHOR

       •   Giuseppe Di Terlizzi <gdt@cpan.org>

LICENSE AND COPYRIGHT

       This software is copyright (c) 2023-2024 by Giuseppe Di Terlizzi.

       This is free software; you can redistribute it and/or modify it under  the  same  terms  as  the  Perl  5
       programming language system itself.

perl v5.40.1                                       2025-07-04               CSAF::Validator::MandatoryTests(3pm)