File: //lib/python3/dist-packages/uaclient/api/u/pro/security/cves/__pycache__/v1.cpython-38.pyc
U
��Jh- � @ s� d dl Z d dlmZmZmZmZ d dlmZmZ d dl m
Z
d dl m Z d dl
mZmZ d dlmZ d dlmZ d d lmZmZmZmZmZmZmZm Z G d
d � d e�Z G d d
� d
e�Z G dd� de�Z G dd� de�Z G dd� de�Z!G dd� dee �Z"G dd� de�Z#e$d�dd�Z%e e"d�d d �Z&e ee'ef e'e"d �d d �Z(e ee"d!�d"d#�Z)e
d$d%e)e d&�Z*d'd(d)e"egg d*d+d,�Z+dS )-� N)�Any�Dict�List�Optional)�system�util)� APIEndpoint)�AdditionalInfo)�VulnerabilityParser�get_vulnerabilities)�get_apt_cache_datetime)�UAConfig)�
BoolDataValue�
DataObject�DatetimeDataValue�Field�FloatDataValue�StringDataValue� data_dict� data_listc @ sL e Zd Zededdd�ededdd�gZddd�ee ee d�dd �Zd
S ) � CVEsOptions� unfixableFzShow only unfixable CVES.��doc�fixablezShow only fixable CVES.�r r c C s || _ || _d S �Nr )�selfr r � r �E/usr/lib/python3/dist-packages/uaclient/api/u/pro/security/cves/v1.py�__init__) s zCVEsOptions.__init__N) �__name__�
__module__� __qualname__r r �fieldsr �boolr r r r r r s& �����r c @ sZ e Zd Zededdd�ededdd�ededdd�ed ed
d�gZeeeed �d d
�ZdS )�CVEAffectedPackage�nameFz The CVE namer � fix_versionz.The version that fixes the CVE for the package�
fix_statusz)The status of the CVE fix for the package�
fix_originz*The pocket where the fix is available from�r' r( r) r* c C s || _ || _|| _|| _d S r r+ )r r' r( r) r* r r r r N s zCVEAffectedPackage.__init__N�r! r" r# r r r$ �strr r r r r r& 3 s: ����� �r& c @ s@ e Zd Zededd�edee�dd�gZee e d�dd�Z
d S )
�AffectedPackage�current_versionz"The current version of the packager �cvesz The CVE that affects the package�r/ r0 c C s || _ || _d S r r1 )r r/ r0 r r r r e s zAffectedPackage.__init__N) r! r" r# r r r r& r$ r- r r r r r r r. W s ��� �r. c @ s8 e Zd Zededd�ededd�gZeed�dd�Zd S )
�
RelatedUSNr' z The USN namer �titlez
The USN title�r' r3 c C s || _ || _d S r r4 )r r' r3 r r r r z s zRelatedUSN.__init__Nr, r r r r r2 l s ���
r2 c @ s� e Zd Zededd�ededd�ededd�edee�d d
d�ed ed d d�ed
ed dd�gZdddddd�e e
j
e e e e e e
e e e e e e e e d�dd�ZdS )�CVEInfo� descriptionzThe CVE descriptionr � published_atzThe CVE published date�priorityz The ubuntu priority for the CVE�notesFzA list of notes for the CVE�
cvss_scorezThe CVE cvss score�
cvss_severityzThe CVE cvss severityN)r9 r: r; � related_usns�related_packages�r6 r7 r8 r9 r: r; r< r= c C s4 || _ || _|| _|| _|| _|| _|| _|| _d S r r> ) r r6 r7 r8 r9 r: r; r< r= r r r r � s zCVEInfo.__init__)r! r" r# r r r r r r$ r- �datetimer r �floatr2 r r r r r r5 sb �������*�
�r5 c @ sf e Zd Zedeed�dd�edeed�dd�gZdd�ee ef ee ef e
j
e e
j
d �d
d �Z dS ) �
CVEsResult�packages)Z value_clszcA dictionary where the keys are installed package names and the values are AffectedPackage objects.r r0 zMA dictionary where the keys are CVE names and the values are CVEInfo objects.N)�apt_updated_at�rB r0 � vulnerability_data_published_atrC c C s || _ || _|| _|| _d S r rD )r rB r0 rE rC r r r r � s zCVEsResult.__init__)
r! r" r# r r r. r5 r$ r r- r? r r r r r r rA � s$ ����
�rA c @ sZ e Zd ZdZeeef eeef d�dd�Zeeef eeef eeef d�dd�ZdS ) � CVEParserr0 )� affected_pkg�returnc C s |� | ji �S r )�get�vulnerability_type)r rG r r r �get_package_vulnerabilities� s z%CVEParser.get_package_vulnerabilities)�vulnerability_info�vulnerabilities_datarH c C s\ |� d�rXg }|� di �� di �}|d D ]$}|�||� |i �� dd�d�� q*||d< |S )Nr< Zsecurity_issuesZusnsr3 � r4 )rI �append)r rL rM r< Zusn_info� related_usnr r r � _post_process_vulnerability_info� s"
� ��� z*CVEParser._post_process_vulnerability_infoN) r! r" r# rJ r r- r rK rQ r r r r rF � s
�
�rF )rH c C s4 | � d�o| � d�}|jr"|r"dS |jr0|s0dS dS )Nr( r* FT)rI r r )�cve�optionsZ
is_fixabler r r �cve_status_match_options� s
rT )rS rH c C s t | t� �S r )�_cvesr
)rS r r r r0 s r0 )rS �vulnerabilitiesrE rH c
s� i }t � � t|�di ��� �D ]�\}}g }t|�dg �dd� d�D ]B}t|| �rB|�t|d |d |d |d d
�� � �|d � qB|r t|d |d �||< q � fd
d�t|�di ��� dd� d�D �}t ||t
� |�t � d�S )NrB r0 c S s | d S )Nr' r )rR r r r �<lambda> � z(_parse_vulnerabilities.<locals>.<lambda>)�keyr' r( r) r* r+ r/ r1 c sj i | ]b\}}|� kr|t |d t�|d �|d |d |d |d dd� |�dg �D �|�d g �d
��qS ) r6 r7 Zubuntu_priorityr9 r: r; c S s( g | ] }t |�d d�|�dd�d��qS )r' rN r3 r4 )r2 rI )�.0rP r r r �
<listcomp>6 s
�
�z5_parse_vulnerabilities.<locals>.<dictcomp>.<listcomp>r< r= r> )r5 r �parse_rfc3339_daterI )rZ Zcve_namerR �Z allowed_cvesr r �
<dictcomp>. s �
�
�z*_parse_vulnerabilities.<locals>.<dictcomp>rV c S s | d S )Nr r )�vr r r rW A rX rD )
�set�sortedrI �itemsrT rO r& �addr. rA r r\ r ) rS rV rE rB �pkg_nameZ package_infoZpkg_cvesrR r0 r r] r �_parse_vulnerabilities sN �
�
���
����re )rS �cfgrH c C sH | j r| jrd| _ d| _t�� j}tt� ||d�}|j}t| ||j d�S )z�
This endpoint shows the CVE vulnerabilites in the system.
By default, this API will show all CVEs that affect the system.
F)�parserrf �series)rS rV rE )
r r r Zget_release_inforh r rF Zvulnerabilities_infore rE )rS rf rh Zcve_vulnerabilities_resultZcve_vulnerabilitiesr r r rU P s
��rU Zv1ZCVEs)�versionr' �fnZ options_clsZ35Tzs
from uaclient.api.u.pro.security.cves.v1 import cves, CVEsOptions
options = CVEsOptions()
result = cves(options)
z pro api u.pro.security.cves.v1a�
{
"cves": {
"CVE-2023-5678": {
"cvss_score": 8.1,
"cvss_severity": "high",
"description": "description example",
"notes": [
"note example",
],
"priority": "medium",
"published_at": ".*"
}
},
"packages": {
"accountsservice": {
"current_version": "0.6.40-2ubuntu11.6",
"cves": [
{
"fix_origin": "esm-infra",
"fix_status": "fixed",
"fix_version": "0.6.40-2ubuntu11.6+esm1",
"name": "CVE-2023-5678"
}
]
},
"libaccountsservice0": {
"current_version": "0.6.40-2ubuntu11.6",
"cves": [
{
"fix_origin": "esm-infra",
"fix_status": "fixed",
"fix_version": "0.6.40-2ubuntu11.6+esm1",
"name": "CVE-2023-5678"
}
]
}
},
}
)Z
introduced_inZrequires_networkZexample_pythonZ result_classZignore_result_classes�
exceptionsZ example_cliZ example_json),r? �typingr r r r Zuaclientr r Zuaclient.api.apir Zuaclient.api.data_typesr Z+uaclient.api.u.pro.security.cves._common.v1r
r Z uaclient.aptr Zuaclient.configr
Zuaclient.data_typesr r r r r r r r r r& r. r2 r5 rA rF r% rT r0 r- re rU ZendpointZ_docr r r r �<module> sV ( $> # �
� B� ��