File: //lib/python3/dist-packages/uaclient/api/u/pro/security/cves/__pycache__/v1.cpython-310.pyc
o
��Jh- � @ s� d dl Z d dlmZmZmZmZ d dlmZmZ d dl m
Z
d dl m Z d dl
mZmZ d dlmZ d dlmZ d d lmZmZmZmZmZmZmZm Z G d
d � d e�Z G d d
� d
e�Z G dd� de�Z G dd� de�Z G dd� de�Z!G dd� dee �Z"G dd� de�Z#de$fdd�Z%de de"fd d �Z&de d ee'ef d e'de"fd d!�Z(de d"ede"fd#d$�Z)e
d%d&e)e d'�Z*d(d)d*e"egg d+d,d-�Z+dS ).� N)�Any�Dict�List�Optional)�system�util)� APIEndpoint)�AdditionalInfo)�VulnerabilityParser�get_vulnerabilities)�get_apt_cache_datetime)�UAConfig)�
BoolDataValue�
DataObject�DatetimeDataValue�Field�FloatDataValue�StringDataValue� data_dict� data_listc @ sN e Zd Zededdd�ededdd�gZddd�dee dee fdd �Zd
S ) � CVEsOptions� unfixableFzShow only unfixable CVES.��doc�fixablezShow only fixable CVES.�r r c C � || _ || _d S �Nr )�selfr r � r �E/usr/lib/python3/dist-packages/uaclient/api/u/pro/security/cves/v1.py�__init__) s
zCVEsOptions.__init__N) �__name__�
__module__� __qualname__r r �fieldsr �boolr! r r r r r s* ������r c @ s` e Zd Zededdd�ededdd�ededdd�ed ed
d�gZdededed efd d �Zd
S )�CVEAffectedPackage�nameFz The CVE namer � fix_versionz.The version that fixes the CVE for the package�
fix_statusz)The status of the CVE fix for the package�
fix_originz*The pocket where the fix is available fromc C � || _ || _|| _|| _d S r �r( r) r* r+ )r r( r) r* r+ r r r r! N s
zCVEAffectedPackage.__init__N�r" r# r$ r r r% �strr! r r r r r' 3 sD ���������r' c @ sB e Zd Zededd�edee�dd�gZdede e fdd�Z
dS ) �AffectedPackage�current_versionz"The current version of the packager �cvesz The CVE that affects the packagec C r r �r1 r2 )r r1 r2 r r r r! e s
zAffectedPackage.__init__N) r" r# r$ r r r r' r% r/ r r! r r r r r0 W s" ���
��r0 c @ s: e Zd Zededd�ededd�gZdedefdd�ZdS ) �
RelatedUSNr( z The USN namer �titlez
The USN titlec C r r �r( r5 )r r( r5 r r r r! z s
zRelatedUSN.__init__Nr. r r r r r4 l s ���
r4 c @ s� e Zd Zededd�ededd�ededd�edee�d d
d�ed ed d d�ed
ed dd�gZdddddd�de de
j
de de e e d e e
d
e e de e e de e e fdd�ZdS )�CVEInfo� descriptionzThe CVE descriptionr � published_atzThe CVE published date�priorityz The ubuntu priority for the CVE�notesFzA list of notes for the CVE�
cvss_scorezThe CVE cvss score�
cvss_severityzThe CVE cvss severityN)r; r< r= � related_usns�related_packagesr> r? c C s4 || _ || _|| _|| _|| _|| _|| _|| _d S r �r8 r9 r: r; r< r= r> r? ) r r8 r9 r: r; r< r= r> r? r r r r! � s
zCVEInfo.__init__)r" r# r$ r r r r r r% r/ �datetimer r �floatr4 r! r r r r r7 sr �������*����
���
�
�r7 c
@ sl e Zd Zedeed�dd�edeed�dd�gZdd�dee ef dee ef d e
j
d
e e
j
fd d �Z dS )
�
CVEsResult�packages)� value_clszcA dictionary where the keys are installed package names and the values are AffectedPackage objects.r r2 zMA dictionary where the keys are CVE names and the values are CVEInfo objects.N)�apt_updated_at� vulnerability_data_published_atrF c C r, r �rD r2 rG rF )r rD r2 rG rF r r r r! � s
zCVEsResult.__init__)
r" r# r$ r r r0 r7 r% r r/ rA r r! r r r r rC � s, ����
�
�� �rC c @ s` e Zd ZdZdeeef deeef fdd�Zdeeef deeef deeef fdd �Zd
S ) � CVEParserr2 � affected_pkg�returnc C s |� | ji �S r )�get�vulnerability_type)r rJ r r r �get_package_vulnerabilities� s z%CVEParser.get_package_vulnerabilities�vulnerability_info�vulnerabilities_datac C s\ |� d�r,g }|� di �� di �}|d D ]}|�||� |i �� dd�d�� q||d< |S )Nr> �security_issues�usnsr5 � r6 )rL �append)r rO rP r> �usn_info� related_usnr r r � _post_process_vulnerability_info� s
� ��� z*CVEParser._post_process_vulnerability_infoN) r" r# r$ rM r r/ r rN rW r r r r rI � s
�
�
�
�
�rI rK c C s4 | � d�o | � d�}|jr|rdS |jr|sdS dS )Nr) r+ FT)rL r r )�cve�options�
is_fixabler r r �cve_status_match_options� s
r[ rY c C s t | t� �S r )�_cvesr
)rY r r r r2 s r2 �vulnerabilitiesrG c
s� i }t � � t|�di ��� �D ]@\}}g }t|�dg �dd� d�D ]!}t|| �rB|�t|d |d |d |d d
�� � �|d � q!|rOt|d |d �||< q� fd
d�t|�di ��� dd� d�D �}t ||t
� |�t � d�S )NrD r2 c S � | d S )Nr( r )rX r r r �<lambda> � z(_parse_vulnerabilities.<locals>.<lambda>)�keyr( r) r* r+ r- r1 r3 c sj i | ]1\}}|� v r|t |d t�|d �|d |d |d |d dd� |�dg �D �|�d g �d
��qS ) r8 r9 �ubuntu_priorityr; r< r= c S s( g | ]}t |�d d�|�dd�d��qS )r( rS r5 r6 )r4 rL )�.0rV r r r �
<listcomp>6 s �
��z5_parse_vulnerabilities.<locals>.<dictcomp>.<listcomp>r> r? r@ )r7 r �parse_rfc3339_daterL )rc �cve_namerX �� allowed_cvesr r �
<dictcomp>. s �
�
�z*_parse_vulnerabilities.<locals>.<dictcomp>r] c S r^ )Nr r )�vr r r r_ A r` rH )
�set�sortedrL �itemsr[ rT r' �addr0 rC r re r ) rY r] rG rD �pkg_name� package_info�pkg_cvesrX r2 r rg r �_parse_vulnerabilities sP �
�
���
��
����rr �cfgc C sH | j r | jr d| _ d| _t�� j}tt� ||d�}|j}t| ||j d�S )z�
This endpoint shows the CVE vulnerabilites in the system.
By default, this API will show all CVEs that affect the system.
F)�parserrs �series)rY r] rG )
r r r �get_release_inforu r rI �vulnerabilities_inforr rG )rY rs ru �cve_vulnerabilities_result�cve_vulnerabilitiesr r r r\ P s
��r\ �v1�CVEs)�versionr( �fn� options_cls�35Tzs
from uaclient.api.u.pro.security.cves.v1 import cves, CVEsOptions
options = CVEsOptions()
result = cves(options)
z pro api u.pro.security.cves.v1a�
{
"cves": {
"CVE-2023-5678": {
"cvss_score": 8.1,
"cvss_severity": "high",
"description": "description example",
"notes": [
"note example",
],
"priority": "medium",
"published_at": ".*"
}
},
"packages": {
"accountsservice": {
"current_version": "0.6.40-2ubuntu11.6",
"cves": [
{
"fix_origin": "esm-infra",
"fix_status": "fixed",
"fix_version": "0.6.40-2ubuntu11.6+esm1",
"name": "CVE-2023-5678"
}
]
},
"libaccountsservice0": {
"current_version": "0.6.40-2ubuntu11.6",
"cves": [
{
"fix_origin": "esm-infra",
"fix_status": "fixed",
"fix_version": "0.6.40-2ubuntu11.6+esm1",
"name": "CVE-2023-5678"
}
]
}
},
}
)�
introduced_in�requires_network�example_python� result_class�ignore_result_classes�
exceptions� example_cli� example_json),rA �typingr r r r �uaclientr r �uaclient.api.apir �uaclient.api.data_typesr �+uaclient.api.u.pro.security.cves._common.v1r
r � uaclient.aptr �uaclient.configr
�uaclient.data_typesr r r r r r r r r r' r0 r4 r7 rC rI r& r[ r2 r/ rr r\ �endpoint�_docr r r r �<module> sj ( $> #
�
��
��
�A��
� �
�