The CSAF file is always linked to one particular precise advisory as well as a given advisory may perhaps incorporate a number of solution Variation(s) and one or more parts, dependant upon the product type and update https://medium.com/@linkdaddy/what-is-a-source-file-226b0fd56812