Add CVSS 4.0

[tschmidtb51]

• addresses parts of Support CVSS 4.0 in CSAF 2.x #652
• add CVSS v4 to JSON schema
• add CVSS v4.0 to referenced schemas
• add strict version of schema
• adopt test scripts to include CVSS 4.0
• add CVSS 4.0 to informative references
• add CVSS 4.0 to construction principles
• add CVSS 4.0 to /vulnerabilities[]/scores[]
• add CVSS 4.0 to tests 6.1.7, 6.1.8, 6.1.9, 6.1.10, 6.3.1
• add new test 6.3.12 to recommend CVSS 4.0
• add test files for 6.1.7, 6.1.8, 6.1.9, 6.1.10, 6.2.19, 6.3.1, 6.3.12
• add CVSS 4.0 to Appendix C regarding size
• add CVRF-CSAF-conversion rule
• add valid example for 6.1.9 to trigger multipleOf issue

[sthagen]

All 67 files look good to me. Thanks for the detailed and consistent set of changes, much appreciated.

[tschmidtb51]

@sthagen It looks like I can't build the artifacts right now:

Traceback (most recent call last):
  File "./csaf_2.1/prose/edit/bin/volatile.py", line 575, in <module>
    sys.exit(main(sys.argv[1:]))
  File "./csaf_2.1/prose/edit/bin/volatile.py", line 456, in main
    sec_disp = 'sec-' + display_from[section].replace(FULL_STOP, '-')  # type: ignore
KeyError: 'missing-cvss-v4-0'

What am I missing?

[sthagen]

@tschmidtb51

@sthagen It looks like I can't build the artifacts right now:

Traceback (most recent call last):
  File "./csaf_2.1/prose/edit/bin/volatile.py", line 575, in <module>
    sys.exit(main(sys.argv[1:]))
  File "./csaf_2.1/prose/edit/bin/volatile.py", line 456, in main
    sec_disp = 'sec-' + display_from[section].replace(FULL_STOP, '-')  # type: ignore
KeyError: 'missing-cvss-v4-0'

What am I missing?

Either an error I creatively introduced or a dynamic instead of static lookup I forgot to enable.

I will take a look, and fix it. Thanks for reporting.