← Back
Editing: v1.cpython-38.pyc
U ���h- � @ s� d dl Z d dlmZmZmZmZ d dlmZmZ d dl m Z d dl m Z d dl mZmZ d dlmZ d dlmZ d d lmZmZmZmZmZmZmZm Z G d d � d e�Z G d d � d e�Z G dd� de�Z G dd� de�Z G dd� de�Z!G dd� dee �Z"G dd� de�Z#e$d�dd�Z%e e"d�d d �Z&e ee'ef e'e"d �d d �Z(e ee"d!�d"d#�Z)e d$d%e)e d&�Z*d'd(d)e"egg d*d+d,�Z+dS )-� N)�Any�Dict�List�Optional)�system�util)� APIEndpoint)�AdditionalInfo)�VulnerabilityParser�get_vulnerabilities)�get_apt_cache_datetime)�UAConfig)� BoolDataValue� DataObject�DatetimeDataValue�Field�FloatDataValue�StringDataValue� data_dict� data_listc @ sL e Zd Zededdd�ededdd�gZddd�ee ee d�dd �Zd S ) � CVEsOptions� unfixableFzShow only unfixable CVES.��doc�fixablezShow only fixable CVES.�r r c C s || _ || _d S �Nr )�selfr r � r �E/usr/lib/python3/dist-packages/uaclient/api/u/pro/security/cves/v1.py�__init__) s zCVEsOptions.__init__N) �__name__� __module__� __qualname__r r �fieldsr �boolr r r r r r s& �����r c @ sZ e Zd Zededdd�ededdd�ededdd�ed ed d�gZeeeed �d d �ZdS )�CVEAffectedPackage�nameFz The CVE namer � fix_versionz.The version that fixes the CVE for the package� fix_statusz)The status of the CVE fix for the package� fix_originz*The pocket where the fix is available from�r' r( r) r* c C s || _ || _|| _|| _d S r r+ )r r' r( r) r* r r r r N s zCVEAffectedPackage.__init__N�r! r" r# r r r$ �strr r r r r r& 3 s: ����� �r& c @ s@ e Zd Zededd�edee�dd�gZee e d�dd�Z d S ) �AffectedPackage�current_versionz"The current version of the packager �cvesz The CVE that affects the package�r/ r0 c C s || _ || _d S r r1 )r r/ r0 r r r r e s zAffectedPackage.__init__N) r! r" r# r r r r& r$ r- r r r r r r r. W s ��� �r. c @ s8 e Zd Zededd�ededd�gZeed�dd�Zd S ) � RelatedUSNr' z The USN namer �titlez The USN title�r' r3 c C s || _ || _d S r r4 )r r' r3 r r r r z s zRelatedUSN.__init__Nr, r r r r r2 l s ��� r2 c @ s� e Zd Zededd�ededd�ededd�edee�d d d�ed ed d d�ed ed dd�gZdddddd�e e j e e e e e e e e e e e e e e d�dd�ZdS )�CVEInfo� descriptionzThe CVE descriptionr � published_atzThe CVE published date�priorityz The ubuntu priority for the CVE�notesFzA list of notes for the CVE� cvss_scorezThe CVE cvss score� cvss_severityzThe CVE cvss severityN)r9 r: r; � related_usns�related_packages�r6 r7 r8 r9 r: r; r< r= c C s4 || _ || _|| _|| _|| _|| _|| _|| _d S r r> ) r r6 r7 r8 r9 r: r; r< r= r r r r � s zCVEInfo.__init__)r! r" r# r r r r r r$ r- �datetimer r �floatr2 r r r r r r5 sb �������*� �r5 c @ sf e Zd Zedeed�dd�edeed�dd�gZdd�ee ef ee ef e j e e j d �d d �Z dS ) � CVEsResult�packages)Z value_clszcA dictionary where the keys are installed package names and the values are AffectedPackage objects.r r0 zMA dictionary where the keys are CVE names and the values are CVEInfo objects.N)�apt_updated_at�rB r0 � vulnerability_data_published_atrC c C s || _ || _|| _|| _d S r rD )r rB r0 rE rC r r r r � s zCVEsResult.__init__) r! r" r# r r r. r5 r$ r r- r? r r r r r r rA � s$ ���� �rA c @ sZ e Zd ZdZeeef eeef d�dd�Zeeef eeef eeef d�dd�ZdS ) � CVEParserr0 )� affected_pkg�returnc C s |� | ji �S r )�get�vulnerability_type)r rG r r r �get_package_vulnerabilities� s z%CVEParser.get_package_vulnerabilities)�vulnerability_info�vulnerabilities_datarH c C s\ |� d�rXg }|� di �� di �}|d D ]$}|�||� |i �� dd�d�� q*||d< |S )Nr< Zsecurity_issuesZusnsr3 � r4 )rI �append)r rL rM r< Zusn_info� related_usnr r r � _post_process_vulnerability_info� s" � ��� z*CVEParser._post_process_vulnerability_infoN) r! r" r# rJ r r- r rK rQ r r r r rF � s � �rF )rH c C s4 | � d�o| � d�}|jr"|r"dS |jr0|s0dS dS )Nr( r* FT)rI r r )�cve�optionsZ is_fixabler r r �cve_status_match_options� s rT )rS rH c C s t | t� �S r )�_cvesr )rS r r r r0 s r0 )rS �vulnerabilitiesrE rH c s� i }t � � t|�di ��� �D ]�\}}g }t|�dg �dd� d�D ]B}t|| �rB|�t|d |d |d |d d �� � �|d � qB|r t|d |d �||< q � fd d�t|�di ��� dd� d�D �}t ||t � |�t � d�S )NrB r0 c S s | d S )Nr' r )rR r r r �<lambda> � z(_parse_vulnerabilities.<locals>.<lambda>)�keyr' r( r) r* r+ r/ r1 c sj i | ]b\}}|� kr|t |d t�|d �|d |d |d |d dd� |�dg �D �|�d g �d ��qS ) r6 r7 Zubuntu_priorityr9 r: r; c S s( g | ] }t |�d d�|�dd�d��qS )r' rN r3 r4 )r2 rI )�.0rP r r r � <listcomp>6 s � �z5_parse_vulnerabilities.<locals>.<dictcomp>.<listcomp>r< r= r> )r5 r �parse_rfc3339_daterI )rZ Zcve_namerR �Z allowed_cvesr r � <dictcomp>. s � � �z*_parse_vulnerabilities.<locals>.<dictcomp>rV c S s | d S )Nr r )�vr r r rW A rX rD ) �set�sortedrI �itemsrT rO r& �addr. rA r r\ r ) rS rV rE rB �pkg_nameZ package_infoZpkg_cvesrR r0 r r] r �_parse_vulnerabilities sN � � ��� ����re )rS �cfgrH c C sH | j r| jrd| _ d| _t�� j}tt� ||d�}|j}t| ||j d�S )z� This endpoint shows the CVE vulnerabilities in the system. By default, this API will show all CVEs that affect the system. F)�parserrf �series)rS rV rE ) r r r Zget_release_inforh r rF Zvulnerabilities_infore rE )rS rf rh Zcve_vulnerabilities_resultZcve_vulnerabilitiesr r r rU P s ��rU Zv1ZCVEs)�versionr' �fnZ options_clsZ35Tzs from uaclient.api.u.pro.security.cves.v1 import cves, CVEsOptions options = CVEsOptions() result = cves(options) z pro api u.pro.security.cves.v1a� { "cves": { "CVE-2023-5678": { "cvss_score": 8.1, "cvss_severity": "high", "description": "description example", "notes": [ "note example", ], "priority": "medium", "published_at": ".*" } }, "packages": { "accountsservice": { "current_version": "0.6.40-2ubuntu11.6", "cves": [ { "fix_origin": "esm-infra", "fix_status": "fixed", "fix_version": "0.6.40-2ubuntu11.6+esm1", "name": "CVE-2023-5678" } ] }, "libaccountsservice0": { "current_version": "0.6.40-2ubuntu11.6", "cves": [ { "fix_origin": "esm-infra", "fix_status": "fixed", "fix_version": "0.6.40-2ubuntu11.6+esm1", "name": "CVE-2023-5678" } ] } }, } )Z introduced_inZrequires_networkZexample_pythonZ result_classZignore_result_classes� exceptionsZ example_cliZ example_json),r? �typingr r r r Zuaclientr r Zuaclient.api.apir Zuaclient.api.data_typesr Z+uaclient.api.u.pro.security.cves._common.v1r r Z uaclient.aptr Zuaclient.configr Zuaclient.data_typesr r r r r r r r r r& r. r2 r5 rA rF r% rT r0 r- re rU ZendpointZ_docr r r r �<module> sV ( $> # � � B� ��
Save File
Cancel