Correct default open serial_numbers and model_numbers

[tschmidtb51]

During the CSAF workshops, it was brought up that the current wording regarding Model numbers and Serial numbers is unfavorably:

If a part of a [model/serial] number of the component to identify is given, it SHOULD begin with the first character of the [model/serial] number and stop at any point. Characters which SHOULD NOT be matched MUST be replaced by either ? (for a single character) or * (for zero or more characters).
Two * MUST NOT follow each other.

However, this is bad if the format is changed later on, e.g. by appending a character. For example, there is not way to differentiate between 12345 and 123456. Both would match, if the value 12345 was given.

Therefore, we should change the text to not allow stopping at any point without appending the *.

[tschmidtb51]

Suggested text:

If a part of a [model/serial] number of the component to identify is given, it SHOULD begin with the first character of the [model/serial] number and end with the last character. Characters which SHOULD NOT be matched MUST be replaced by either ? (for a single character) or * (for zero or more characters).
Two * MUST NOT follow each other.

Conversion rule

• type /$defs/full_product_name_t/model_number: If a model number is given that does not end on a star, the CSAF 2.0 to CSAF 2.1 converter SHOULD add a * to the end and output a warning that a partial model number was detected and a star has been added. Such a warning MUST include the model number.

A tool MAY provide a non-default option to interpret all model numbers as complete and therefore does not add any stars.

[sthagen]

2024-12-18 TC meeting: Thomas Schmidt moved to approve the proposal, Sonny van Lingen seconded, no discussion, unambiguous consent. Motion carried