Debian Patches

Status for golang-github-gocsaf-csaf/3.6.0+dfsg-1

Patch Description Author Forwarded Bugs Origin Last update
0001-read-oasis-schemas-from-disk.patch Read the OASIS CSAF schemas from disk instead of embedding them The csaf, provider, aggregator and ROLIE feed JSON schemas carry no licence of
their own, and the CSAF 2.0 OASIS Standard notice that covers them says the
document "may not be modified in any way", which is not DFSG free
(https://lists.debian.org/debian-legal/2026/09/msg00019.html). They are
therefore removed from the source tarball, and this patch reads them from
/usr/share/csaf/schemas, or from CSAF_SCHEMA_DIR, so that
validation works in full as soon as they are installed. The three CVSS schemas
are BSD-3-clause and stay embedded.

diff --git a/csaf/validation.go b/csaf/validation.go
index 598d0fa..039f908 100644		 Juan Manuel Méndez Rey <juan.mendezr@proton.me> invalid 2026-10-26

All known versions for source package 'golang-github-gocsaf-csaf'

Links